$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149667.roa File: AS149667.roa (raw, json) Hash identifier: sWWPwOEurCo5wZN5ViVXf/NU5tcLSngBm2T3N7+jW8A= Subject key identifier: 33:10:06:7C:A2:EB:DE:71:0C:B0:53:30:D9:FD:73:DE:E8:39:77:80 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 54D5D822D18E0315EB7E8C7358BE0B64279914BC Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149667.roa Signing time: Sat 02 May 2026 21:32:48 +0000 ROA not before: Sat 02 May 2026 21:27:48 +0000 ROA not after: Sat 01 May 2027 21:32:48 +0000 asID: 149667 IP address blocks: 103.156.221.0/24 maxlen: 24 2401:da0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:d5:d8:22:d1:8e:03:15:eb:7e:8c:73:58:be:0b:64:27:99:14:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:27:48 2026 GMT Not After : May 1 21:32:48 2027 GMT Subject: CN=3310067CA2EBDE710CB05330D9FD73DEE8397780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:88:3d:b8:58:e4:55:df:54:90:97:ac:6a:2e: 57:79:2e:be:0d:0f:12:39:c9:2b:f1:6c:2e:ae:29: 87:68:21:07:91:43:d6:0d:42:f6:c3:88:fe:cc:7d: c2:7a:c9:d2:78:4d:38:39:dd:67:77:4b:c3:4e:8d: bb:2e:ad:e0:41:aa:ff:38:8b:95:d3:cd:13:50:93: 40:30:cf:62:07:06:79:e8:1d:68:84:88:61:35:ed: 7e:da:ef:70:55:8c:72:e9:35:c4:30:a3:9f:fe:22: 90:bb:93:03:d5:fa:78:80:d0:35:11:97:3b:3f:8c: e0:03:74:c7:37:a8:03:cb:0f:c1:ee:2a:a3:10:f9: 47:65:9b:0e:7f:11:af:29:61:91:ac:8c:46:82:9d: 5e:68:de:84:aa:70:3a:02:a1:42:0f:9b:3b:67:b7: 72:7c:c0:2c:32:5f:5e:8c:b2:85:4c:e1:1f:31:75: 33:d3:89:f2:ac:59:01:e6:f7:fc:2d:b7:e3:ee:5b: be:f9:22:c0:00:d6:8c:a8:08:ba:68:06:eb:9e:9d: 6b:4a:c1:3e:ae:5a:92:3e:09:3e:ca:52:69:ea:67: e4:a2:9f:fe:1d:8c:72:13:48:38:b0:94:bb:ed:04: 7a:2a:33:49:43:22:ee:14:23:a0:1e:ca:a8:57:3f: a1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:10:06:7C:A2:EB:DE:71:0C:B0:53:30:D9:FD:73:DE:E8:39:77:80 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149667.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.221.0/24 IPv6: 2401:da0::/32 Signature Algorithm: sha256WithRSAEncryption 99:8a:62:60:23:0a:75:6f:c5:31:4d:72:cd:c3:8a:5a:62:c6: 6e:92:fe:d9:34:92:2c:82:7d:db:ce:ba:5f:6c:8a:73:b3:07: 4a:df:40:62:47:41:cc:2e:0c:c3:f8:ea:78:f8:9f:fb:8e:52: e9:18:89:4d:f9:ac:7c:2c:cc:c3:cb:0d:31:df:70:bb:c6:bf: 13:83:62:94:c0:aa:24:4b:a1:44:49:f5:3d:1d:3d:e3:23:91: b8:42:08:a3:cb:02:95:52:44:3d:70:b5:ba:09:92:13:42:ce: 93:97:61:29:38:e4:d5:d4:32:1b:2c:d0:17:5a:bd:20:1a:89: 5a:25:48:12:a2:2d:08:25:87:b2:fb:b0:d9:7a:d6:92:1a:28: 95:29:87:5e:31:e2:aa:a6:84:ea:3b:ff:0d:bf:4a:5d:73:04: 3f:db:fe:48:ef:22:74:2a:d8:86:68:50:d4:80:14:ac:6e:2c: 84:d6:9d:fb:d9:22:2e:1e:92:52:a9:f7:52:ca:ac:34:ce:84: 24:23:3b:35:f9:b9:33:9e:2c:13:34:02:3c:23:a6:6b:8a:d4: 08:4d:51:b6:58:7b:ca:90:3b:e5:f9:61:a7:ed:47:e5:e1:09: 15:3f:b4:63:98:11:93:c2:da:70:e6:33:d0:d3:92:4d:b8:19: 26:6c:91:3e -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUVNXYItGOAxXrfoxzWL4LZCeZFLwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjc0OFoX DTI3MDUwMTIxMzI0OFowMzExMC8GA1UEAxMoMzMxMDA2N0NBMkVCREU3MTBDQjA1 MzMwRDlGRDczREVFODM5Nzc4MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALKIPbhY5FXfVJCXrGouV3kuvg0PEjnJK/FsLq4ph2ghB5FD1g1C9sOI/sx9 wnrJ0nhNODndZ3dLw06Nuy6t4EGq/ziLldPNE1CTQDDPYgcGeegdaISIYTXtftrv cFWMcuk1xDCjn/4ikLuTA9X6eIDQNRGXOz+M4AN0xzeoA8sPwe4qoxD5R2WbDn8R rylhkayMRoKdXmjehKpwOgKhQg+bO2e3cnzALDJfXoyyhUzhHzF1M9OJ8qxZAeb3 /C234+5bvvkiwADWjKgIumgG656da0rBPq5akj4JPspSaepn5KKf/h2MchNIOLCU u+0EeiozSUMi7hQjoB7KqFc/oUsCAwEAAaOCAdswggHXMB0GA1UdDgQWBBQzEAZ8 ouvecQywUzDZ/XPe6Dl3gDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ5NjY3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIA ATAGAwQAZ5zdMA0EAgACMAcDBQAkAQ2gMA0GCSqGSIb3DQEBCwUAA4IBAQCZimJg Iwp1b8UxTXLNw4paYsZukv7ZNJIsgn3bzrpfbIpzswdK30BiR0HMLgzD+Op4+J/7 jlLpGIlN+ax8LMzDyw0x33C7xr8Tg2KUwKokS6FESfU9HT3jI5G4QgijywKVUkQ9 cLW6CZITQs6Tl2EpOOTV1DIbLNAXWr0gGolaJUgSoi0IJYey+7DZetaSGiiVKYde MeKqpoTqO/8Nv0pdcwQ/2/5I7yJ0KtiGaFDUgBSsbiyE1p372SIuHpJSqfdSyqw0 zoQkIzs1+bkzniwTNAI8I6ZritQITVG2WHvKkDvl+WGn7Ufl4QkVP7RjmBGTwtpw 5jPQ05JNuBkmbJE+ -----END CERTIFICATE-----Generated at Sun May 3 00:40:37 2026 by rpki-client