$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149723.roa File: AS149723.roa (raw, json) Hash identifier: 7+QHH6k8yClAqKOMlf00br3qWgjU86ZBBAt4YV2yE0A= Subject key identifier: CA:FE:36:9F:32:2F:B2:12:95:3B:6E:40:62:34:16:8E:DE:F7:11:A0 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7FCEFBA29D252CCD8BE0639FE32E5086310E3A4C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149723.roa Signing time: Sat 02 May 2026 21:05:07 +0000 ROA not before: Sat 02 May 2026 21:00:07 +0000 ROA not after: Sat 01 May 2027 21:05:07 +0000 asID: 149723 IP address blocks: 103.138.53.0/24 maxlen: 24 2001:df2:79c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:ce:fb:a2:9d:25:2c:cd:8b:e0:63:9f:e3:2e:50:86:31:0e:3a:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:00:07 2026 GMT Not After : May 1 21:05:07 2027 GMT Subject: CN=CAFE369F322FB212953B6E406234168EDEF711A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:21:2b:3b:51:b3:9b:e9:2b:8e:1b:d8:48:be: 23:53:03:c1:58:71:75:9d:42:e9:e5:f8:7d:99:d4: c1:85:81:6a:5e:3e:4e:a6:4f:1f:30:38:d6:49:57: e1:85:14:41:ae:2a:39:9d:70:c0:6c:47:b8:c1:0d: bf:22:e8:f6:e2:aa:ad:a3:71:b5:8b:0a:e2:5d:83: f3:6f:6f:f3:db:d2:10:0c:a0:8d:9a:11:0e:77:6d: ae:86:40:79:0b:2e:19:82:30:5b:45:21:4a:28:ad: 8c:33:bc:d6:5d:38:ed:5d:f5:0b:8e:f0:2f:a5:0b: a9:18:38:a1:5c:83:f0:6e:40:9b:d1:09:18:ea:19: da:d8:45:bf:e6:04:cb:bb:3c:cf:c2:41:26:12:b8: bf:4f:1c:ef:87:6f:02:66:ad:4d:be:12:bd:d3:b3: 85:74:f5:d6:fe:a0:2e:a2:ac:34:02:59:62:00:82: 21:6d:07:e0:59:f4:f2:63:d1:96:d1:84:eb:a3:76: 75:80:e7:98:87:4a:0c:83:c8:46:fa:40:6f:98:96: 1a:00:78:75:30:d8:21:b0:57:e3:e1:c8:ea:d4:91: 65:77:68:a5:87:b8:85:8a:96:0e:bc:94:db:a8:5e: ae:e0:2e:01:44:32:1e:ba:61:10:9a:8d:3a:71:4d: 17:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:FE:36:9F:32:2F:B2:12:95:3B:6E:40:62:34:16:8E:DE:F7:11:A0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149723.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.138.53.0/24 IPv6: 2001:df2:79c0::/48 Signature Algorithm: sha256WithRSAEncryption 98:b3:13:63:d7:75:34:d8:b8:1c:8f:56:20:cf:1f:73:8b:1c: e4:ba:00:dd:92:02:5c:5d:12:19:04:9d:b8:61:82:ad:62:e7: 82:a4:3e:ff:c3:e3:a9:73:97:5e:ad:7c:4e:f7:84:ff:84:16: c7:d9:5e:ce:8b:22:6f:bb:51:f9:4e:81:ba:fe:22:42:03:ba: 87:13:6d:06:f1:67:b0:91:f4:e7:d3:c1:2e:3a:20:52:37:37: ad:ac:55:7a:68:3d:f2:2e:3d:d2:3b:8c:7f:68:f9:62:c2:6e: 69:a9:96:6e:57:b5:c2:ef:14:b3:07:b8:f6:c7:84:52:1e:85: 64:72:b4:b2:33:ee:03:b1:b8:af:15:51:d3:61:7d:82:1f:36: 8f:30:29:ce:cf:c8:ee:3c:94:45:2c:45:e7:dc:7b:47:bc:13: 2b:4f:fe:ed:2c:36:d8:f5:4e:c3:7e:98:cd:6d:63:93:60:34: 7d:91:a9:c5:d6:76:e7:5f:86:08:ff:3e:25:87:17:67:f0:fa: f4:c3:bc:87:83:85:eb:c4:ad:58:29:48:42:64:39:4c:b1:44: 0e:ef:53:44:26:3a:b3:a1:1c:70:e5:49:ae:7f:67:cf:ef:d1: f9:06:a5:d0:1e:54:44:74:20:a7:d0:cc:aa:db:e6:e7:8d:7e: 84:5a:5b:9c -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUf877op0lLM2L4GOf4y5QhjEOOkwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMDAwN1oX DTI3MDUwMTIxMDUwN1owMzExMC8GA1UEAxMoQ0FGRTM2OUYzMjJGQjIxMjk1M0I2 RTQwNjIzNDE2OEVERUY3MTFBMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKUhKztRs5vpK44b2Ei+I1MDwVhxdZ1C6eX4fZnUwYWBal4+TqZPHzA41klX 4YUUQa4qOZ1wwGxHuMENvyLo9uKqraNxtYsK4l2D829v89vSEAygjZoRDndtroZA eQsuGYIwW0UhSiitjDO81l047V31C47wL6ULqRg4oVyD8G5Am9EJGOoZ2thFv+YE y7s8z8JBJhK4v08c74dvAmatTb4SvdOzhXT11v6gLqKsNAJZYgCCIW0H4Fn08mPR ltGE66N2dYDnmIdKDIPIRvpAb5iWGgB4dTDYIbBX4+HI6tSRZXdopYe4hYqWDryU 26heruAuAUQyHrphEJqNOnFNFzUCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBTK/jaf Mi+yEpU7bkBiNBaO3vcRoDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ5NzIzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAZ4o1MA8EAgACMAkDBwAgAQ3yecAwDQYJKoZIhvcNAQELBQADggEBAJiz E2PXdTTYuByPViDPH3OLHOS6AN2SAlxdEhkEnbhhgq1i54KkPv/D46lzl16tfE73 hP+EFsfZXs6LIm+7UflOgbr+IkIDuocTbQbxZ7CR9OfTwS46IFI3N62sVXpoPfIu PdI7jH9o+WLCbmmplm5XtcLvFLMHuPbHhFIehWRytLIz7gOxuK8VUdNhfYIfNo8w Kc7PyO48lEUsRefce0e8EytP/u0sNtj1TsN+mM1tY5NgNH2RqcXWdudfhgj/PiWH F2fw+vTDvIeDhevErVgpSEJkOUyxRA7vU0QmOrOhHHDlSa5/Z8/v0fkGpdAeVER0 IKfQzKrb5ueNfoRaW5w= -----END CERTIFICATE-----Generated at Sun May 3 00:42:00 2026 by rpki-client