$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149661.roa File: AS149661.roa (raw, json) Hash identifier: rHqJiRJMFi87kxLMpWE5Dvp9WRjY3+rkZJk9kDyJQ78= Subject key identifier: 23:E3:70:9F:A8:DD:F7:93:9E:23:61:A4:65:D3:92:0D:47:6E:4C:21 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 74A44429D3D78CD831E6B4155306B9BB0A4052B3 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149661.roa Signing time: Sat 02 May 2026 09:24:31 +0000 ROA not before: Sat 02 May 2026 09:19:31 +0000 ROA not after: Sat 01 May 2027 09:24:31 +0000 asID: 149661 IP address blocks: 163.227.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:a4:44:29:d3:d7:8c:d8:31:e6:b4:15:53:06:b9:bb:0a:40:52:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:19:31 2026 GMT Not After : May 1 09:24:31 2027 GMT Subject: CN=23E3709FA8DDF7939E2361A465D3920D476E4C21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:48:7a:aa:56:dd:aa:fe:ad:3b:ef:9c:3a:f0: 0f:0c:71:d0:78:7f:4a:98:81:d7:db:07:1c:a5:e1: 73:34:3c:1a:6d:ac:21:12:0a:fa:28:be:e5:94:ad: b6:07:46:97:9c:c5:0c:4a:e4:68:57:d7:1e:bb:df: ea:93:e2:e4:b3:65:39:ff:49:71:07:dd:ad:b4:31: 9c:b1:72:66:72:ed:89:aa:28:c6:b4:23:ae:89:1e: 3c:93:92:81:71:25:24:59:90:3c:9c:01:2c:80:74: 8c:9c:bf:8e:4c:ac:38:da:7f:22:a8:cd:08:2f:3d: 9d:90:06:d2:6c:50:a1:a5:1a:4a:41:98:cb:b7:1d: 97:ab:d0:f1:c9:c8:fc:da:2f:a7:47:7b:00:12:c9: 26:48:36:e4:64:e2:25:e6:d5:a6:58:48:af:77:30: 95:b8:ac:4d:b4:9b:92:9f:a1:75:9f:86:0a:a4:45: b4:d2:a6:66:73:0c:b7:19:d1:60:61:6b:44:a5:46: 29:23:b1:d3:56:c5:c3:db:1e:47:6e:f6:13:c6:41: 32:9c:31:b0:e3:fa:99:86:d2:69:b1:25:15:a7:33: ed:35:84:4a:c4:d8:76:53:93:e3:dc:91:f9:cc:50: 84:63:da:04:19:bd:99:4f:1d:ce:69:bd:e3:7d:7b: 9c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E3:70:9F:A8:DD:F7:93:9E:23:61:A4:65:D3:92:0D:47:6E:4C:21 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149661.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.227.177.0/24 Signature Algorithm: sha256WithRSAEncryption 67:cb:84:5c:27:e2:81:d6:2d:01:a1:d6:da:b4:e8:d2:ed:56: f4:8b:b2:a0:78:a2:ab:01:d6:7a:e2:98:b9:5a:74:6b:89:91: 36:75:9b:77:8b:fd:36:ea:63:9d:7f:b2:00:d2:27:51:61:b5: d0:b8:73:6f:be:a6:9e:fe:64:bb:a0:63:90:b5:80:43:86:19: c5:f1:41:fb:2a:00:69:1d:03:c3:50:14:12:3c:05:d4:bf:04: 30:58:f2:be:43:61:9c:16:33:45:c3:90:98:af:64:99:9d:41: a0:93:2f:c3:4e:76:6b:aa:ac:b4:97:46:aa:02:53:15:d7:32: 0e:6e:f9:82:d0:8a:2f:97:bd:d6:49:f0:b8:94:cc:8f:f7:c6: 97:b3:e0:e3:3c:35:bd:9d:a7:00:04:25:7d:2d:5e:f5:ce:96: c2:ea:1d:48:19:2a:54:70:83:b7:32:1b:3f:98:a6:ef:4c:33: 86:7f:3b:97:e5:0f:67:16:77:f0:2f:2d:c3:9c:96:3b:28:c8: 89:76:a7:c8:1d:fc:0e:b8:10:fe:34:51:55:6c:75:bc:33:e1: cf:f0:6d:a8:1b:17:ca:cd:7b:7e:d3:d9:45:13:f0:0d:b0:12: 89:71:00:e0:ec:6b:e4:80:3f:67:61:87:de:e1:f0:7d:2f:4a: 25:2b:78:04 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUdKREKdPXjNgx5rQVUwa5uwpAUrMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTkzMVoX DTI3MDUwMTA5MjQzMVowMzExMC8GA1UEAxMoMjNFMzcwOUZBOERERjc5MzlFMjM2 MUE0NjVEMzkyMEQ0NzZFNEMyMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANdIeqpW3ar+rTvvnDrwDwxx0Hh/SpiB19sHHKXhczQ8Gm2sIRIK+ii+5ZSt tgdGl5zFDErkaFfXHrvf6pPi5LNlOf9JcQfdrbQxnLFyZnLtiaooxrQjrokePJOS gXElJFmQPJwBLIB0jJy/jkysONp/IqjNCC89nZAG0mxQoaUaSkGYy7cdl6vQ8cnI /Novp0d7ABLJJkg25GTiJebVplhIr3cwlbisTbSbkp+hdZ+GCqRFtNKmZnMMtxnR YGFrRKVGKSOx01bFw9seR272E8ZBMpwxsOP6mYbSabElFacz7TWESsTYdlOT49yR +cxQhGPaBBm9mU8dzmm94317nIsCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQj43Cf qN33k54jYaRl05INR25MITAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ5NjYxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAo+OxMA0GCSqGSIb3DQEBCwUAA4IBAQBny4RcJ+KB1i0BodbatOjS7Vb0 i7KgeKKrAdZ64pi5WnRriZE2dZt3i/026mOdf7IA0idRYbXQuHNvvqae/mS7oGOQ tYBDhhnF8UH7KgBpHQPDUBQSPAXUvwQwWPK+Q2GcFjNFw5CYr2SZnUGgky/DTnZr qqy0l0aqAlMV1zIObvmC0Iovl73WSfC4lMyP98aXs+DjPDW9nacABCV9LV71zpbC 6h1IGSpUcIO3Mhs/mKbvTDOGfzuX5Q9nFnfwLy3DnJY7KMiJdqfIHfwOuBD+NFFV bHW8M+HP8G2oGxfKzXt+09lFE/ANsBKJcQDg7GvkgD9nYYfe4fB9L0olK3gE -----END CERTIFICATE-----Generated at Sun May 3 00:42:17 2026 by rpki-client