$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149394.roa File: AS149394.roa (raw, json) Hash identifier: cg8GIeG+Q0VUDLrPwlbLlQusC/eqDNT6tsNvqe88ZfU= Subject key identifier: 64:6B:C8:E4:9A:E2:4B:C8:1A:2B:D2:05:FC:2E:77:42:4F:73:4C:25 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 430A399DEDB8EB213FA7CC4F146AF9585B5D1629 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149394.roa Signing time: Sat 02 May 2026 09:21:01 +0000 ROA not before: Sat 02 May 2026 09:16:01 +0000 ROA not after: Sat 01 May 2027 09:21:01 +0000 asID: 149394 IP address blocks: 103.182.52.0/24 maxlen: 24 103.182.53.0/24 maxlen: 24 2001:df1:f540::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:0a:39:9d:ed:b8:eb:21:3f:a7:cc:4f:14:6a:f9:58:5b:5d:16:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:16:01 2026 GMT Not After : May 1 09:21:01 2027 GMT Subject: CN=646BC8E49AE24BC81A2BD205FC2E77424F734C25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ec:90:bf:81:02:41:f3:ca:21:00:67:1f:96: 00:f8:e8:b2:21:71:b2:3f:eb:8b:9d:ca:61:35:c1: 9b:14:26:ee:e5:a4:b5:d4:39:fb:c4:a6:36:40:9a: ef:1b:77:cf:70:91:3f:40:31:80:83:c5:84:64:eb: 33:9a:10:26:39:1e:d9:7a:a1:e2:f9:91:bf:d2:ba: 8a:06:b5:92:3c:18:98:f5:97:9e:79:35:f6:9b:d3: 83:f7:1c:f9:06:43:c6:8a:ef:02:78:c3:5f:e1:a0: e1:1d:3e:0f:0c:a1:5c:6f:0c:8c:76:6d:49:a0:3b: e0:d3:61:9a:4a:7a:1e:0a:d9:7f:c1:31:3e:de:c0: c8:be:5e:ac:88:99:89:09:1b:f4:a9:08:da:68:18: e1:e2:37:eb:b8:84:cd:75:d7:e2:9c:e4:de:56:ba: c9:dd:29:97:68:50:02:9f:27:7c:a4:71:4e:2a:e4: 54:af:18:24:ac:e9:fb:d7:a6:27:7d:3d:44:62:9f: e2:f8:d6:ed:ad:24:2f:5d:5b:37:55:f4:df:83:45: 03:77:f2:2a:42:b8:a9:41:cd:42:06:44:0f:52:72: 7c:a7:95:de:31:34:4d:83:03:da:c8:01:31:97:2d: 1b:2d:13:bb:01:c1:64:a9:11:01:cd:ba:cb:30:30: 8c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:6B:C8:E4:9A:E2:4B:C8:1A:2B:D2:05:FC:2E:77:42:4F:73:4C:25 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149394.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.182.52.0/23 IPv6: 2001:df1:f540::/48 Signature Algorithm: sha256WithRSAEncryption 0c:6f:30:24:01:57:5a:7b:15:dd:ea:9a:01:b3:5b:a2:9a:45: 92:54:ed:a3:3c:b6:01:c6:8c:28:7d:f2:59:d7:2e:d8:e2:f5: b0:5d:56:64:09:59:75:d3:5e:87:6e:68:61:3d:8f:a1:52:d1: b2:83:ef:2c:11:6e:a3:35:5e:63:73:6d:c4:10:e9:6d:2a:ad: b3:39:a5:e2:07:d9:1e:be:ac:0d:6b:b3:fd:02:ba:bc:4a:f5: 03:f9:ad:04:d0:7b:11:fd:e0:6d:f6:93:be:de:3d:97:15:0e: 16:1c:87:3b:f1:d2:ba:bb:7b:64:62:83:fb:82:1d:0b:51:17: 55:cc:ed:2b:7c:b2:47:59:d9:cf:63:4d:90:cb:b4:76:a1:b5: 47:38:fd:56:54:be:34:9c:fe:f8:8b:76:10:14:82:b5:e8:34: 84:85:a5:1f:45:c2:ca:6c:7c:99:44:26:0f:a8:e5:ea:c0:fa: b9:5f:23:8d:0e:f1:d1:f1:49:b6:60:b1:de:72:de:71:f5:70: 8c:c3:40:b8:ec:ad:63:8b:c1:01:78:37:1d:61:b9:ca:bb:ea: dc:e6:30:f4:66:e7:cb:68:98:e6:d7:50:f4:84:24:fe:65:85: 5d:42:14:10:a9:ae:bc:f1:31:02:7f:b8:62:66:2c:47:e5:11: 75:f6:e4:00 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUQwo5ne246yE/p8xPFGr5WFtdFikwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTYwMVoX DTI3MDUwMTA5MjEwMVowMzExMC8GA1UEAxMoNjQ2QkM4RTQ5QUUyNEJDODFBMkJE MjA1RkMyRTc3NDI0RjczNEMyNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALzskL+BAkHzyiEAZx+WAPjosiFxsj/ri53KYTXBmxQm7uWktdQ5+8SmNkCa 7xt3z3CRP0AxgIPFhGTrM5oQJjke2Xqh4vmRv9K6iga1kjwYmPWXnnk19pvTg/cc +QZDxorvAnjDX+Gg4R0+DwyhXG8MjHZtSaA74NNhmkp6HgrZf8ExPt7AyL5erIiZ iQkb9KkI2mgY4eI367iEzXXX4pzk3la6yd0pl2hQAp8nfKRxTirkVK8YJKzp+9em J309RGKf4vjW7a0kL11bN1X034NFA3fyKkK4qUHNQgZED1JyfKeV3jE0TYMD2sgB MZctGy0TuwHBZKkRAc26yzAwjMMCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBRka8jk muJLyBor0gX8LndCT3NMJTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ5Mzk0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQBZ7Y0MA8EAgACMAkDBwAgAQ3x9UAwDQYJKoZIhvcNAQELBQADggEBAAxv MCQBV1p7Fd3qmgGzW6KaRZJU7aM8tgHGjCh98lnXLtji9bBdVmQJWXXTXoduaGE9 j6FS0bKD7ywRbqM1XmNzbcQQ6W0qrbM5peIH2R6+rA1rs/0CurxK9QP5rQTQexH9 4G32k77ePZcVDhYchzvx0rq7e2Rig/uCHQtRF1XM7St8skdZ2c9jTZDLtHahtUc4 /VZUvjSc/viLdhAUgrXoNISFpR9FwspsfJlEJg+o5erA+rlfI40O8dHxSbZgsd5y 3nH1cIzDQLjsrWOLwQF4Nx1hucq76tzmMPRm58tomObXUPSEJP5lhV1CFBCprrzx MQJ/uGJmLEflEXX25AA= -----END CERTIFICATE-----Generated at Sun May 3 00:40:35 2026 by rpki-client