$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149679.roa File: AS149679.roa (raw, json) Hash identifier: Ap/2GbIDHe9dmRECJ3JcguuPotBVg0S4/qBSYeKMXFo= Subject key identifier: 6F:0C:57:75:14:E6:15:AC:F6:D8:15:B6:63:71:5C:7D:96:B3:D8:A4 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 48EF0F723E1C8242A2B9778097C39637EBB631 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149679.roa Signing time: Sat 02 May 2026 09:20:49 +0000 ROA not before: Sat 02 May 2026 09:15:49 +0000 ROA not after: Sat 01 May 2027 09:20:49 +0000 asID: 149679 IP address blocks: 103.183.92.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:ef:0f:72:3e:1c:82:42:a2:b9:77:80:97:c3:96:37:eb:b6:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:15:49 2026 GMT Not After : May 1 09:20:49 2027 GMT Subject: CN=6F0C577514E615ACF6D815B663715C7D96B3D8A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ee:da:9c:40:82:a8:ec:42:e7:6b:c7:69:51: 28:0a:72:b0:a7:ef:cc:48:4f:56:9f:0a:2a:6a:e6: ff:ed:2e:72:84:42:29:95:ad:8e:0e:97:1c:e7:a9: b0:3a:9c:40:0e:9b:c3:48:61:1b:87:b2:4b:30:25: c6:69:a0:2a:db:83:63:a7:96:8d:11:71:25:db:0e: cc:eb:ba:fd:e6:fd:8c:77:6d:0c:ea:b7:b7:a2:94: 3d:86:7a:2f:50:e9:e5:19:ac:b1:45:89:99:5c:0d: 19:45:7c:5e:ef:a5:05:3c:ca:27:97:d3:b3:50:16: 6e:61:ff:49:f8:29:51:87:11:3f:7c:52:f6:e9:21: c7:5f:fe:5e:a6:96:88:44:3a:e6:b7:4f:c3:77:ed: 44:1d:7a:aa:73:40:9e:d4:75:bc:52:f5:53:98:b7: 59:82:4f:90:0f:5e:a0:4b:f7:e9:ac:e9:49:b1:18: 62:d2:24:54:85:e2:41:25:66:f1:7d:9b:cd:fc:29: d5:27:bd:b4:40:e6:40:d7:e0:ab:f3:51:07:48:cd: 35:4a:1f:59:ef:bc:fd:c9:9f:5d:e1:f1:65:50:de: cf:5d:c2:af:40:02:e6:a9:56:21:34:83:02:e6:c6: 41:f1:40:a5:e6:4a:d9:59:20:0a:5f:21:0b:a9:25: 1b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:0C:57:75:14:E6:15:AC:F6:D8:15:B6:63:71:5C:7D:96:B3:D8:A4 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149679.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.183.92.0/23 Signature Algorithm: sha256WithRSAEncryption 4b:61:ba:01:cc:3f:58:e8:af:ff:09:89:69:c3:12:1f:ae:81: ee:2d:8d:ad:41:4f:e1:3e:38:e1:5d:e1:4a:59:4c:57:df:a5: c8:be:be:a6:08:cb:77:cd:3b:0e:86:5b:12:d0:5b:d1:bc:be: 2d:3d:22:cb:28:fd:d0:af:0b:d4:94:d8:7a:f4:5e:51:43:9d: 3a:f7:67:74:72:b9:44:9b:cb:5a:f7:1f:97:49:1d:66:1a:45: a3:43:5c:3a:50:d6:4f:3b:ed:19:da:1c:df:02:84:3d:9c:a6: 14:83:c4:48:a4:6a:b6:cd:64:30:49:e3:5d:b0:0d:4f:5b:8d: b5:06:bb:e9:6e:fd:3f:12:8b:90:b6:5e:e2:98:8b:bd:be:06: 36:ef:b7:48:ee:0b:6c:f6:a1:bc:0c:a8:c2:80:3c:3e:a9:60: 77:5e:27:01:ec:3c:90:7c:6c:58:45:ef:d7:e7:8f:f2:89:82: f8:fe:50:2d:94:35:a9:d0:a2:97:b3:23:61:14:7b:11:8d:e3: 62:44:2b:64:d6:e1:40:4d:15:65:f8:9c:4f:c0:76:12:4b:ca: 18:84:de:9e:3c:54:89:d5:32:5f:63:26:68:17:c7:1e:95:97: dd:17:40:4d:13:72:46:0d:4b:43:32:7b:e5:cb:b7:13:c7:c3: 9a:ad:cb:6c -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgITSO8Pcj4cgkKiuXeAl8OWN+u2MTANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTE4NjIxNDAwMDAxMTAvBgNVBAUTKDQxOUE4NUNERjhB NDMwNTE2OTQ2ODY5RDFDNDkyMDM3RDZCQzZFOUUwHhcNMjYwNTAyMDkxNTQ5WhcN MjcwNTAxMDkyMDQ5WjAzMTEwLwYDVQQDEyg2RjBDNTc3NTE0RTYxNUFDRjZEODE1 QjY2MzcxNUM3RDk2QjNEOEE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvu7anECCqOxC52vHaVEoCnKwp+/MSE9Wnwoqaub/7S5yhEIpla2ODpcc56mw OpxADpvDSGEbh7JLMCXGaaAq24Njp5aNEXEl2w7M67r95v2Md20M6re3opQ9hnov UOnlGayxRYmZXA0ZRXxe76UFPMonl9OzUBZuYf9J+ClRhxE/fFL26SHHX/5eppaI RDrmt0/Dd+1EHXqqc0Ce1HW8UvVTmLdZgk+QD16gS/fprOlJsRhi0iRUheJBJWbx fZvN/CnVJ720QOZA1+Cr81EHSM01Sh9Z77z9yZ9d4fFlUN7PXcKvQALmqVYhNIMC 5sZB8UCl5krZWSAKXyELqSUb2wIDAQABo4IBzDCCAcgwHQYDVR0OBBYEFG8MV3UU 5hWs9tgVtmNxXH2Ws9ikMB8GA1UdIwQYMBaAFEGahc34pDBRaUaGnRxJIDfWvG6e MA4GA1UdDwEB/wQEAwIHgDBnBgNVHR8EYDBeMFygWqBYhlZyc3luYzovL3Jwa2kt cnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80MTlBODVDREY4QTQzMDUxNjk0 Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFGemZpa01GRnBSb2FkSEVrZ045 YThicDQuY2VyMFIGCCsGAQUFBwELBEYwRDBCBggrBgEFBQcwC4Y2cnN5bmM6Ly9y cGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvQVMxNDk2Nzkucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFnt1wwDQYJKoZIhvcNAQELBQADggEBAEthugHMP1jor/8JiWnDEh+uge4t ja1BT+E+OOFd4UpZTFffpci+vqYIy3fNOw6GWxLQW9G8vi09Isso/dCvC9SU2Hr0 XlFDnTr3Z3RyuUSby1r3H5dJHWYaRaNDXDpQ1k877RnaHN8ChD2cphSDxEikarbN ZDBJ412wDU9bjbUGu+lu/T8Si5C2XuKYi72+Bjbvt0juC2z2obwMqMKAPD6pYHde JwHsPJB8bFhF79fnj/KJgvj+UC2UNanQopezI2EUexGN42JEK2TW4UBNFWX4nE/A dhJLyhiE3p48VInVMl9jJmgXxx6Vl90XQE0TckYNS0Mye+XLtxPHw5qty2w= -----END CERTIFICATE-----Generated at Sun May 3 00:40:18 2026 by rpki-client