$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149681.roa File: AS149681.roa (raw, json) Hash identifier: aw8CXxBhujKfP6GncQv0P+Igq1YraVLnqIvYcUcgBUo= Subject key identifier: A9:71:12:2F:10:93:9D:86:9C:A0:FC:FA:E7:71:D2:4B:F0:16:4F:A3 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 39F127802B1A4925960756181673D4CBDA544B8F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149681.roa Signing time: Sat 02 May 2026 08:36:50 +0000 ROA not before: Sat 02 May 2026 08:31:50 +0000 ROA not after: Sat 01 May 2027 08:36:50 +0000 asID: 149681 IP address blocks: 103.185.40.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:f1:27:80:2b:1a:49:25:96:07:56:18:16:73:d4:cb:da:54:4b:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:31:50 2026 GMT Not After : May 1 08:36:50 2027 GMT Subject: CN=A971122F10939D869CA0FCFAE771D24BF0164FA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fe:9f:e4:59:94:f1:db:58:7f:f2:b3:f8:41: e9:71:5e:ad:2f:0b:61:13:a1:ca:b3:cb:09:0f:88: e1:e1:cd:5b:64:c8:f4:ba:7b:82:99:e1:31:b6:6a: a3:2e:be:23:f1:a3:42:11:72:92:dc:3a:67:14:b7: 1b:e7:62:1a:6b:1b:9e:90:b3:c8:18:56:eb:8d:40: 46:5f:9b:82:6b:59:72:e6:f3:b2:0d:f6:a0:95:93: 7b:71:58:9c:03:d4:05:2c:79:ba:2e:16:88:3f:35: 93:61:7c:bd:55:9c:db:ab:b4:f3:b5:cd:20:62:f1: a5:d5:79:92:18:07:d7:32:20:2e:43:a8:08:c9:a3: 08:c7:4d:4f:db:d7:49:be:c5:de:80:8d:68:83:13: d0:10:bb:2c:25:b0:09:ae:2e:aa:f9:15:17:1a:c9: a1:31:1c:34:ea:39:15:64:c1:69:3b:ad:2e:06:a7: 37:cd:ab:d5:ea:60:bc:0b:72:9f:da:7b:24:a5:79: a2:32:a7:05:6a:bd:90:22:b4:99:a2:2d:c1:8f:6a: af:26:eb:c9:40:88:85:09:ba:3e:d1:5e:f8:02:98: d1:af:1f:31:27:e3:ba:3e:f7:18:85:a4:23:f9:27: d1:23:13:6c:05:42:46:53:6d:90:78:1c:90:7b:6a: d8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:71:12:2F:10:93:9D:86:9C:A0:FC:FA:E7:71:D2:4B:F0:16:4F:A3 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149681.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.185.40.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:5f:2a:29:f6:16:ee:a6:78:3d:bb:fa:5f:2d:b6:c8:aa:0f: 04:ca:42:df:d5:f3:8d:91:94:d5:3b:50:8e:73:ba:64:24:73: 82:e0:02:14:81:04:5c:86:37:c9:44:62:43:33:7b:1c:2e:3b: 9a:45:ea:63:29:81:d4:4b:b1:ac:d5:b6:85:bd:9c:05:8f:ba: f8:36:b0:87:98:08:b0:28:73:15:cd:0c:c8:e4:2b:08:2a:00: 76:67:9b:20:92:86:80:95:50:4b:1d:3a:fb:12:9e:45:52:0a: 4c:73:a4:3a:a1:df:fe:de:b6:bd:c7:f9:10:8c:5f:a4:bb:5f: f6:40:88:af:f5:e5:f1:22:04:be:36:cd:53:10:4b:31:a5:e2: ec:c4:8c:2a:3b:c4:dc:94:9a:db:3a:4e:27:89:74:96:d5:1b: ce:ae:68:b1:c0:17:21:04:84:81:5d:cb:05:63:a6:45:75:48: 4c:de:2b:a0:41:f8:5f:0a:c9:ef:a4:ed:ab:97:ed:e5:b3:a8: 18:0d:c6:72:14:23:5c:77:8e:a5:cb:01:89:36:56:60:64:55: a3:06:9a:c7:e2:9b:c2:84:fa:de:ec:35:91:57:98:fb:3e:3e: 47:dd:42:07:d1:42:bc:93:af:94:94:ee:e1:f3:e2:b9:ab:32: 6f:73:36:84 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUOfEngCsaSSWWB1YYFnPUy9pUS48wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzE1MFoX DTI3MDUwMTA4MzY1MFowMzExMC8GA1UEAxMoQTk3MTEyMkYxMDkzOUQ4NjlDQTBG Q0ZBRTc3MUQyNEJGMDE2NEZBMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAND+n+RZlPHbWH/ys/hB6XFerS8LYROhyrPLCQ+I4eHNW2TI9Lp7gpnhMbZq oy6+I/GjQhFyktw6ZxS3G+diGmsbnpCzyBhW641ARl+bgmtZcubzsg32oJWTe3FY nAPUBSx5ui4WiD81k2F8vVWc26u087XNIGLxpdV5khgH1zIgLkOoCMmjCMdNT9vX Sb7F3oCNaIMT0BC7LCWwCa4uqvkVFxrJoTEcNOo5FWTBaTutLganN82r1epgvAty n9p7JKV5ojKnBWq9kCK0maItwY9qrybryUCIhQm6PtFe+AKY0a8fMSfjuj73GIWk I/kn0SMTbAVCRlNtkHgckHtq2IECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSpcRIv EJOdhpyg/PrncdJL8BZPozAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ5NjgxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ7koMA0GCSqGSIb3DQEBCwUAA4IBAQBMXyop9hbupng9u/pfLbbIqg8E ykLf1fONkZTVO1COc7pkJHOC4AIUgQRchjfJRGJDM3scLjuaRepjKYHUS7Gs1baF vZwFj7r4NrCHmAiwKHMVzQzI5CsIKgB2Z5sgkoaAlVBLHTr7Ep5FUgpMc6Q6od/+ 3ra9x/kQjF+ku1/2QIiv9eXxIgS+Ns1TEEsxpeLsxIwqO8TclJrbOk4niXSW1RvO rmixwBchBISBXcsFY6ZFdUhM3iugQfhfCsnvpO2rl+3ls6gYDcZyFCNcd46lywGJ NlZgZFWjBprH4pvChPre7DWRV5j7Pj5H3UIH0UK8k6+UlO7h8+K5qzJvczaE -----END CERTIFICATE-----Generated at Sun May 3 00:41:43 2026 by rpki-client