$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149725.roa File: AS149725.roa (raw, json) Hash identifier: Kphu/ORixsdxO0MLcCRtPMwW918sgikEDrKOaRcNP94= Subject key identifier: 6D:22:FA:F8:9F:0F:52:E2:06:E6:7A:45:B8:AA:10:35:0A:D0:EE:EB Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 33D0EC574F4C60035B8EF385318C293F3FEABD5C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149725.roa Signing time: Thu 06 Aug 2026 03:16:26 +0000 ROA not before: Thu 06 Aug 2026 03:11:26 +0000 ROA not after: Thu 05 Aug 2027 03:16:26 +0000 asID: 149725 IP address blocks: 103.156.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Sep 2026 00:58:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:d0:ec:57:4f:4c:60:03:5b:8e:f3:85:31:8c:29:3f:3f:ea:bd:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Aug 6 03:11:26 2026 GMT Not After : Aug 5 03:16:26 2027 GMT Subject: CN=6D22FAF89F0F52E206E67A45B8AA10350AD0EEEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c9:de:5c:9e:29:ce:18:0f:db:f5:f4:57:f1: f7:95:13:88:ae:28:c8:66:59:56:31:47:38:ed:a5: 90:44:77:62:26:45:04:02:c2:b1:87:69:4e:7b:13: e7:93:8a:c7:06:70:f8:e8:0c:2f:e2:2d:ac:61:eb: 24:80:4d:05:c1:34:75:40:0e:40:a6:14:c1:9c:2d: 91:da:74:38:a7:92:b6:a1:48:fc:8d:a1:1b:f6:50: ed:00:37:14:64:bb:ab:5d:85:47:fb:ae:79:cf:95: c1:7e:a6:ab:3b:d9:45:ca:a5:2e:c7:54:0c:4c:ab: 6d:47:ef:be:88:73:f1:a3:77:17:1d:d6:aa:37:56: b2:d3:b1:bb:b9:6b:73:c7:35:19:ad:87:03:4b:4e: 46:a7:93:95:3b:aa:24:9b:b7:2a:ec:32:f3:f4:f8: 9e:cb:00:1a:52:a2:7b:2c:e8:aa:57:93:cb:b0:e4: 6b:60:a0:a5:22:cc:cf:63:34:4e:e0:22:35:03:90: 0c:a5:b9:2b:c5:bd:96:ae:3c:9f:54:12:cb:34:d4: 7e:fe:10:4a:fb:db:f5:7d:b0:c3:84:5f:25:80:d1: b9:44:6f:65:91:eb:2a:6c:6e:4f:a7:c3:15:db:d8: 5d:86:36:61:5c:da:d5:59:b9:f5:b1:86:93:ef:fd: d6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:22:FA:F8:9F:0F:52:E2:06:E6:7A:45:B8:AA:10:35:0A:D0:EE:EB X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149725.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.249.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:af:f4:e2:82:fc:35:0e:b0:d4:03:86:0f:f0:f2:63:20:1e: 10:c4:75:94:cf:ec:dd:0c:57:cf:2d:31:cf:7d:12:fe:87:19: 9d:d4:89:d0:cd:8a:fe:08:64:0d:8f:d6:a0:93:bd:45:62:95: 6f:5e:1b:56:4c:ea:7c:34:6c:95:de:38:fa:54:b1:bb:80:53: d3:9b:c9:67:33:30:18:6c:65:8b:25:c3:4c:96:0b:c4:01:ec: c3:6d:13:58:80:97:1f:0c:57:5b:e2:2e:ea:9e:ed:2f:fd:dc: 99:45:0d:14:e8:03:05:9f:fc:14:33:b2:df:95:6d:3a:7e:c4: b7:6b:ba:0b:c6:9d:e6:e6:ec:cf:ce:84:70:b7:6e:7a:d6:d3: e7:c4:0b:9b:3f:5b:d3:46:b4:40:45:1b:b4:69:dc:92:3b:89: 17:5c:4a:c8:ed:9f:a1:a7:50:ef:6b:59:69:f8:1e:af:e6:2b: 77:69:b8:54:7d:b4:e3:63:f1:ed:98:2f:2d:1c:e8:c0:c0:e5: 5b:4d:2a:88:ed:96:2d:e2:ba:09:89:2c:70:b6:9b:3b:2c:47: cc:90:47:28:9d:87:d4:03:fd:78:e7:cf:f3:e9:f1:54:ae:7d: ec:5c:e0:4e:f1:7e:0e:79:7b:e0:09:29:17:6a:9b:f1:e6:3f: 0e:d0:62:3e -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUM9DsV09MYANbjvOFMYwpPz/qvVwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDgwNjAzMTEyNloX DTI3MDgwNTAzMTYyNlowMzExMC8GA1UEAxMoNkQyMkZBRjg5RjBGNTJFMjA2RTY3 QTQ1QjhBQTEwMzUwQUQwRUVFQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJbJ3lyeKc4YD9v19Ffx95UTiK4oyGZZVjFHOO2lkER3YiZFBALCsYdpTnsT 55OKxwZw+OgML+ItrGHrJIBNBcE0dUAOQKYUwZwtkdp0OKeStqFI/I2hG/ZQ7QA3 FGS7q12FR/uuec+VwX6mqzvZRcqlLsdUDEyrbUfvvohz8aN3Fx3WqjdWstOxu7lr c8c1Ga2HA0tORqeTlTuqJJu3Kuwy8/T4nssAGlKieyzoqleTy7Dka2CgpSLMz2M0 TuAiNQOQDKW5K8W9lq48n1QSyzTUfv4QSvvb9X2ww4RfJYDRuURvZZHrKmxuT6fD FdvYXYY2YVza1Vm59bGGk+/91v8CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRtIvr4 nw9S4gbmekW4qhA1CtDu6zAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ5NzI1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ5z5MA0GCSqGSIb3DQEBCwUAA4IBAQCdr/Tigvw1DrDUA4YP8PJjIB4Q xHWUz+zdDFfPLTHPfRL+hxmd1InQzYr+CGQNj9agk71FYpVvXhtWTOp8NGyV3jj6 VLG7gFPTm8lnMzAYbGWLJcNMlgvEAezDbRNYgJcfDFdb4i7qnu0v/dyZRQ0U6AMF n/wUM7LflW06fsS3a7oLxp3m5uzPzoRwt2561tPnxAubP1vTRrRARRu0adySO4kX XErI7Z+hp1Dva1lp+B6v5it3abhUfbTjY/HtmC8tHOjAwOVbTSqI7ZYt4roJiSxw tps7LEfMkEconYfUA/1458/z6fFUrn3sXOBO8X4OeXvgCSkXapvx5j8O0GI+ -----END CERTIFICATE-----Generated at Sat Sep 12 05:58:08 2026 by rpki-client