$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149748.roa File: AS149748.roa (raw, json) Hash identifier: LHY5h4zZcAuR0fvTStc69VuMv4VrCbJr5YL9bWBbO4I= Subject key identifier: B3:E1:E6:F6:31:5A:70:D0:8F:A6:2F:4C:56:46:4E:BD:4D:79:90:68 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1CDA77236DCB7A2B08FA66BED7399111E873025F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149748.roa Signing time: Sat 02 May 2026 09:21:21 +0000 ROA not before: Sat 02 May 2026 09:16:21 +0000 ROA not after: Sat 01 May 2027 09:21:21 +0000 asID: 149748 IP address blocks: 103.189.104.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:da:77:23:6d:cb:7a:2b:08:fa:66:be:d7:39:91:11:e8:73:02:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:16:21 2026 GMT Not After : May 1 09:21:21 2027 GMT Subject: CN=B3E1E6F6315A70D08FA62F4C56464EBD4D799068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6f:57:51:f6:10:42:f1:c8:9a:42:ec:e5:97: 7a:39:b0:36:01:57:a3:07:c7:38:62:36:5d:cd:d0: 22:81:e3:59:48:6c:43:d9:ca:ef:bf:3f:a3:f3:d1: cb:86:aa:3a:41:d0:a9:c0:a1:2e:ac:82:7f:b3:39: a8:e5:2c:65:f6:15:f4:8c:13:7b:fa:98:62:71:90: 5a:d7:bd:f7:5b:7c:7d:05:e4:04:be:05:13:26:a5: 5d:b6:ab:9a:7c:11:37:92:e6:65:7a:68:d5:ae:68: 7d:42:e3:e8:d3:50:fe:42:4b:35:60:ea:2f:e3:00: f4:06:4f:57:fe:fd:fc:1b:06:5d:4c:ae:1f:8d:c3: a0:78:d4:35:55:38:6a:b3:d6:8d:42:09:83:1c:ee: 62:dc:fa:97:d7:e1:aa:16:76:d3:50:06:22:c8:f8: ab:09:d8:41:44:62:16:fe:40:c2:e4:1d:63:43:3c: 5d:1b:bc:cd:a9:06:12:de:d8:0e:92:d5:7f:7d:9f: 37:80:72:98:96:7b:ec:a9:b6:f3:0b:2f:4b:69:9e: 77:f7:96:01:cc:51:8b:f6:14:05:1d:31:39:02:38: 55:70:2b:ff:4c:c4:7e:a2:6a:7e:ad:98:69:7c:dc: 72:b8:43:0d:bf:ea:95:92:3f:90:9b:d5:cd:ba:35: be:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E1:E6:F6:31:5A:70:D0:8F:A6:2F:4C:56:46:4E:BD:4D:79:90:68 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149748.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.104.0/23 Signature Algorithm: sha256WithRSAEncryption 31:9c:a0:a6:0d:90:dc:cc:5f:3c:f4:c3:9c:fd:0c:79:6c:e0: aa:00:29:d8:fa:f6:ea:af:32:fb:9f:30:64:97:2c:c8:27:03: 06:51:05:33:4e:fc:28:d2:e3:ba:ba:0e:bb:32:e7:37:9d:22: 42:15:63:3f:9a:7d:b3:96:23:2d:cf:ac:40:b8:ff:85:a2:f0: 22:03:4d:3f:61:5b:1f:26:31:d2:9a:83:66:da:f6:83:f7:9d: f9:72:0e:9b:0e:97:ee:ff:a6:5e:ba:76:1a:48:5a:59:a6:a9: 9e:44:1e:44:4c:a9:e8:d1:f0:2a:f8:ab:4f:d3:e9:c2:c5:cf: 38:1a:74:7f:3b:41:ce:2f:a5:ed:8a:a5:28:94:04:02:76:2b: b7:69:28:c6:37:ea:df:6f:a7:2d:69:c3:34:01:8a:c0:17:7d: 3d:94:d7:bb:73:b2:27:04:ee:93:92:2e:4c:7b:bf:cf:a8:4b: c3:8a:fc:bd:0e:54:ab:89:de:03:e5:ec:f1:29:c2:6a:39:a4: 02:7a:b3:cd:ea:6c:79:93:e5:bc:90:99:af:b4:a8:f5:ea:7d: 5e:de:84:a3:bd:d4:11:af:3e:18:2f:86:75:b9:29:49:e1:81: 40:5d:87:cb:d5:e6:42:48:6f:6a:1d:48:60:1f:ec:cd:3a:06: da:b9:e3:89 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUHNp3I23LeisI+ma+1zmREehzAl8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTYyMVoX DTI3MDUwMTA5MjEyMVowMzExMC8GA1UEAxMoQjNFMUU2RjYzMTVBNzBEMDhGQTYy RjRDNTY0NjRFQkQ0RDc5OTA2ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKNvV1H2EELxyJpC7OWXejmwNgFXowfHOGI2Xc3QIoHjWUhsQ9nK778/o/PR y4aqOkHQqcChLqyCf7M5qOUsZfYV9IwTe/qYYnGQWte991t8fQXkBL4FEyalXbar mnwRN5LmZXpo1a5ofULj6NNQ/kJLNWDqL+MA9AZPV/79/BsGXUyuH43DoHjUNVU4 arPWjUIJgxzuYtz6l9fhqhZ201AGIsj4qwnYQURiFv5AwuQdY0M8XRu8zakGEt7Y DpLVf32fN4BymJZ77Km28wsvS2med/eWAcxRi/YUBR0xOQI4VXAr/0zEfqJqfq2Y aXzccrhDDb/qlZI/kJvVzbo1vqMCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSz4eb2 MVpw0I+mL0xWRk69TXmQaDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ5NzQ4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ71oMA0GCSqGSIb3DQEBCwUAA4IBAQAxnKCmDZDczF889MOc/Qx5bOCq ACnY+vbqrzL7nzBklyzIJwMGUQUzTvwo0uO6ug67Muc3nSJCFWM/mn2zliMtz6xA uP+FovAiA00/YVsfJjHSmoNm2vaD9535cg6bDpfu/6ZeunYaSFpZpqmeRB5ETKno 0fAq+KtP0+nCxc84GnR/O0HOL6XtiqUolAQCdiu3aSjGN+rfb6ctacM0AYrAF309 lNe7c7InBO6Tki5Me7/PqEvDivy9DlSrid4D5ezxKcJqOaQCerPN6mx5k+W8kJmv tKj16n1e3oSjvdQRrz4YL4Z1uSlJ4YFAXYfL1eZCSG9qHUhgH+zNOgbaueOJ -----END CERTIFICATE-----Generated at Sun May 3 00:40:38 2026 by rpki-client