$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149413.roa File: AS149413.roa (raw, json) Hash identifier: ZhWuOwNc3Ny0y4tTLvatZZDjaRxhzxqsxwBt36Sth4M= Subject key identifier: 0C:30:D6:75:CE:B0:62:30:4F:D5:EE:DE:2C:27:FE:52:B7:72:E9:88 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5D1A9F36267A2147A4FF0ED38DD312F6AC6D5840 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149413.roa Signing time: Sat 02 May 2026 09:20:59 +0000 ROA not before: Sat 02 May 2026 09:15:59 +0000 ROA not after: Sat 01 May 2027 09:20:59 +0000 asID: 149413 IP address blocks: 103.182.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:1a:9f:36:26:7a:21:47:a4:ff:0e:d3:8d:d3:12:f6:ac:6d:58:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:15:59 2026 GMT Not After : May 1 09:20:59 2027 GMT Subject: CN=0C30D675CEB062304FD5EEDE2C27FE52B772E988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4c:28:63:39:09:d9:8e:38:25:3b:28:4f:3a: f8:57:7e:8a:b3:53:23:c2:0a:39:52:c0:37:54:c9: 17:38:d2:f3:dd:84:50:48:2a:50:05:0f:0a:44:1c: 0d:05:49:0e:75:89:07:80:b8:f7:32:ac:31:05:ba: b5:bf:10:8d:f0:72:e2:97:32:b2:86:ff:64:cc:ea: 20:98:e4:9f:2c:f1:17:59:52:d7:6e:a7:95:33:3c: a6:e2:b2:50:81:2c:03:66:7b:73:1d:64:2b:27:c2: bf:59:d6:4d:47:89:ff:f0:b2:96:41:31:42:28:f9: 1c:c7:88:db:27:87:54:82:55:3a:2b:48:66:6b:a3: 01:ee:04:2e:ea:25:8b:e8:f4:bb:d4:30:66:de:85: 2a:9c:70:e4:e3:10:4e:20:2e:a2:ca:84:ce:97:83: 64:b8:fa:b2:26:ff:36:44:5d:d6:29:09:72:b2:8c: bf:b4:c7:77:23:65:4c:3d:71:0c:0d:52:60:1b:ab: 96:0e:e3:93:b1:c8:fe:95:34:3a:ca:8c:90:84:d3: f9:50:83:88:6c:5e:69:cd:b6:d3:df:5c:8a:1f:fd: 7a:e4:cf:26:4e:15:af:2e:c5:bd:b4:3f:98:28:d4: a0:91:21:16:06:03:6d:80:34:69:cc:f6:80:c5:d0: 72:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:30:D6:75:CE:B0:62:30:4F:D5:EE:DE:2C:27:FE:52:B7:72:E9:88 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149413.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.182.249.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:24:e2:16:5d:0f:77:82:8a:2c:9e:70:40:00:70:db:c4:b2: c5:95:ee:92:94:c4:55:59:af:54:4d:7c:a7:b7:5d:20:7d:bb: d8:82:97:32:26:9b:c9:f3:03:9b:e6:ff:ca:a6:58:c5:d1:fb: 80:e8:36:f1:db:7a:11:06:83:8d:bb:71:a7:79:b0:a8:0d:06: 31:31:69:ee:c7:18:49:d4:52:ab:21:b5:91:1b:66:b2:e3:be: 20:36:d5:77:f4:5a:33:87:65:76:2e:5f:b8:42:ae:ce:38:0e: 74:85:10:7f:ad:86:73:d9:e0:a7:2b:9d:de:c8:c5:56:90:17: 03:d6:e4:ea:7f:84:81:32:ce:09:af:8b:99:f5:af:0b:c1:eb: 67:27:f0:09:4d:7f:5a:68:65:1a:8f:c2:21:90:ee:37:86:bc: 4b:e8:41:e1:7a:6d:30:f5:7e:56:d0:39:91:13:50:10:1b:2c: c6:4d:cc:3f:c2:a9:02:53:ab:1c:c0:90:64:2b:4c:18:18:e6: 78:1c:27:47:d8:c6:f6:b9:16:3f:23:d2:26:06:e6:4a:51:9a: 8b:07:20:35:76:8c:02:f8:14:f2:8f:81:b8:ea:c7:47:21:6b: 2b:e6:6c:5c:a6:5a:23:ff:fe:ab:55:0d:79:55:f1:3b:6a:6f: 1d:7d:14:27 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUXRqfNiZ6IUek/w7TjdMS9qxtWEAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTU1OVoX DTI3MDUwMTA5MjA1OVowMzExMC8GA1UEAxMoMEMzMEQ2NzVDRUIwNjIzMDRGRDVF RURFMkMyN0ZFNTJCNzcyRTk4ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJRMKGM5CdmOOCU7KE86+Fd+irNTI8IKOVLAN1TJFzjS892EUEgqUAUPCkQc DQVJDnWJB4C49zKsMQW6tb8QjfBy4pcysob/ZMzqIJjknyzxF1lS126nlTM8puKy UIEsA2Z7cx1kKyfCv1nWTUeJ//CylkExQij5HMeI2yeHVIJVOitIZmujAe4ELuol i+j0u9QwZt6FKpxw5OMQTiAuosqEzpeDZLj6sib/NkRd1ikJcrKMv7THdyNlTD1x DA1SYBurlg7jk7HI/pU0OsqMkITT+VCDiGxeac22099cih/9euTPJk4Vry7FvbQ/ mCjUoJEhFgYDbYA0acz2gMXQclUCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQMMNZ1 zrBiME/V7t4sJ/5St3LpiDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ5NDEzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ7b5MA0GCSqGSIb3DQEBCwUAA4IBAQCKJOIWXQ93goosnnBAAHDbxLLF le6SlMRVWa9UTXynt10gfbvYgpcyJpvJ8wOb5v/KpljF0fuA6Dbx23oRBoONu3Gn ebCoDQYxMWnuxxhJ1FKrIbWRG2ay474gNtV39Fozh2V2Ll+4Qq7OOA50hRB/rYZz 2eCnK53eyMVWkBcD1uTqf4SBMs4Jr4uZ9a8LwetnJ/AJTX9aaGUaj8IhkO43hrxL 6EHhem0w9X5W0DmRE1AQGyzGTcw/wqkCU6scwJBkK0wYGOZ4HCdH2Mb2uRY/I9Im BuZKUZqLByA1dowC+BTyj4G46sdHIWsr5mxcploj//6rVQ15VfE7am8dfRQn -----END CERTIFICATE-----Generated at Sun May 3 00:42:30 2026 by rpki-client