$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149754.roa File: AS149754.roa (raw, json) Hash identifier: MWZIv/Q69PTK/LNNLuwXXhMAsAL7r6NuOeCDVBPIcSQ= Subject key identifier: D7:92:FE:9F:DA:17:F1:A4:1E:87:79:67:C2:14:27:9C:7E:5B:07:69 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 36C6BD5F44A7B2F6A876C21F9D73616F89068241 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149754.roa Signing time: Sat 02 May 2026 21:25:33 +0000 ROA not before: Sat 02 May 2026 21:20:33 +0000 ROA not after: Sat 01 May 2027 21:25:33 +0000 asID: 149754 IP address blocks: 103.246.168.0/24 maxlen: 24 2001:df1:9fc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:c6:bd:5f:44:a7:b2:f6:a8:76:c2:1f:9d:73:61:6f:89:06:82:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:20:33 2026 GMT Not After : May 1 21:25:33 2027 GMT Subject: CN=D792FE9FDA17F1A41E877967C214279C7E5B0769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3f:e8:04:38:46:af:76:d0:1d:98:21:af:14: d3:07:7b:a3:75:83:5d:a8:55:79:17:5a:bd:1a:40: 86:d0:5f:48:90:c0:e5:ff:0e:5e:15:55:a6:54:11: 67:e3:04:51:b7:65:76:08:ca:11:7e:c9:ed:4b:dc: c1:57:9c:35:18:9c:54:e3:3f:fc:68:4b:ea:01:8c: d9:c1:c1:57:8a:28:bf:db:cf:9a:a9:cd:02:ca:e5: 79:8a:fc:37:d3:47:16:01:91:7d:68:30:9f:b5:35: d4:de:5d:29:28:a6:8c:35:b4:db:6c:7f:e4:76:6b: ea:89:88:f8:78:f1:ef:e9:e2:ab:c5:a4:f5:2f:c5: ab:21:d4:af:e7:3a:70:b4:86:6d:1e:55:42:1a:fd: 29:92:3f:00:67:01:80:1c:94:ed:84:0a:6b:23:6e: 75:5d:28:d2:71:99:22:08:ac:b4:7c:4b:66:91:07: e6:6e:55:03:3f:6d:39:92:7b:6c:5e:09:7e:16:23: 9c:0c:0c:0e:8d:a4:f2:cc:86:5a:91:6d:15:25:16: e4:da:55:18:2d:5e:95:12:2a:5e:70:8f:41:ed:8e: 4e:50:15:f0:b2:9e:f1:73:f7:b4:16:f7:7a:e5:99: 86:a7:2b:c0:ff:3a:fe:04:de:78:06:d1:58:d9:86: 03:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:92:FE:9F:DA:17:F1:A4:1E:87:79:67:C2:14:27:9C:7E:5B:07:69 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149754.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.246.168.0/24 IPv6: 2001:df1:9fc0::/48 Signature Algorithm: sha256WithRSAEncryption 93:83:71:d0:28:ea:0e:b7:59:7e:5c:4b:28:7a:0a:c8:bf:13: 8a:6a:4c:8f:33:63:dc:6c:cd:c6:ed:7a:a9:55:74:84:50:fa: 69:83:bc:2e:83:81:a1:30:16:f3:9c:8a:70:95:cf:7d:68:36: 7b:4e:5a:c2:28:fa:69:f3:d7:1d:44:a3:6f:28:45:3c:26:ea: 1c:e0:14:49:6c:39:c2:bf:49:12:6e:25:e8:e9:3d:98:67:a4: f7:07:fa:f3:4c:da:10:71:6b:1c:52:62:4e:38:e8:49:06:01: 50:64:ea:c4:85:ab:f7:d9:44:ee:8c:6a:9b:3c:84:a7:b4:18: 61:9e:3c:0a:5b:68:b3:33:c1:b8:15:2f:76:52:01:4b:f8:86: 21:57:67:d6:7f:a2:4c:ee:c8:de:67:5a:32:4e:bc:c5:0a:1e: db:bf:6b:e6:b0:13:df:12:7c:9e:78:2a:e0:de:29:75:5b:de: 05:1d:80:f2:93:ea:7a:b8:c2:f4:a6:4f:e0:5a:dc:53:30:08: 87:09:6f:48:0e:29:50:0b:ab:be:18:e4:8f:ac:f4:fe:07:6f: 24:0c:24:f2:2c:d6:18:5e:d1:77:e2:62:59:6e:9c:f0:4d:10: bf:6a:1a:3e:fd:43:13:4c:53:b8:a6:55:e3:64:c3:d3:7e:c0: d0:60:6b:11 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUNsa9X0SnsvaodsIfnXNhb4kGgkEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjAzM1oX DTI3MDUwMTIxMjUzM1owMzExMC8GA1UEAxMoRDc5MkZFOUZEQTE3RjFBNDFFODc3 OTY3QzIxNDI3OUM3RTVCMDc2OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALQ/6AQ4Rq920B2YIa8U0wd7o3WDXahVeRdavRpAhtBfSJDA5f8OXhVVplQR Z+MEUbdldgjKEX7J7UvcwVecNRicVOM//GhL6gGM2cHBV4oov9vPmqnNAsrleYr8 N9NHFgGRfWgwn7U11N5dKSimjDW022x/5HZr6omI+Hjx7+niq8Wk9S/FqyHUr+c6 cLSGbR5VQhr9KZI/AGcBgByU7YQKayNudV0o0nGZIgistHxLZpEH5m5VAz9tOZJ7 bF4JfhYjnAwMDo2k8syGWpFtFSUW5NpVGC1elRIqXnCPQe2OTlAV8LKe8XP3tBb3 euWZhqcrwP86/gTeeAbRWNmGA9ECAwEAAaOCAd0wggHZMB0GA1UdDgQWBBTXkv6f 2hfxpB6HeWfCFCecflsHaTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ5NzU0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAZ/aoMA8EAgACMAkDBwAgAQ3xn8AwDQYJKoZIhvcNAQELBQADggEBAJOD cdAo6g63WX5cSyh6Csi/E4pqTI8zY9xszcbteqlVdIRQ+mmDvC6DgaEwFvOcinCV z31oNntOWsIo+mnz1x1Eo28oRTwm6hzgFElsOcK/SRJuJejpPZhnpPcH+vNM2hBx axxSYk446EkGAVBk6sSFq/fZRO6Maps8hKe0GGGePApbaLMzwbgVL3ZSAUv4hiFX Z9Z/okzuyN5nWjJOvMUKHtu/a+awE98SfJ54KuDeKXVb3gUdgPKT6nq4wvSmT+Ba 3FMwCIcJb0gOKVALq74Y5I+s9P4HbyQMJPIs1hhe0XfiYllunPBNEL9qGj79QxNM U7imVeNkw9N+wNBgaxE= -----END CERTIFICATE-----Generated at Sun May 3 00:40:28 2026 by rpki-client