$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149880.roa File: AS149880.roa (raw, json) Hash identifier: bEE2OAxoMM2kWc1iPnzHNL28jcZJ/4GsgikpcDGUeWc= Subject key identifier: 47:B8:15:C4:45:1A:A1:9D:4F:5A:55:B2:15:2B:16:E3:8D:13:CF:7B Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 496CE0ED9DB877F877F79845F971E1C747DB791F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149880.roa Signing time: Sat 02 May 2026 17:31:10 +0000 ROA not before: Sat 02 May 2026 17:26:10 +0000 ROA not after: Sat 01 May 2027 17:31:10 +0000 asID: 149880 IP address blocks: 103.189.0.0/23 maxlen: 24 2001:df2:eac0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:6c:e0:ed:9d:b8:77:f8:77:f7:98:45:f9:71:e1:c7:47:db:79:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 17:26:10 2026 GMT Not After : May 1 17:31:10 2027 GMT Subject: CN=47B815C4451AA19D4F5A55B2152B16E38D13CF7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d9:b2:d6:47:31:ba:3c:77:9b:7c:bf:47:82: 4e:d1:90:be:7d:2a:d5:78:e8:72:b0:11:81:77:4c: 1b:02:85:97:43:b3:ee:cb:f1:38:10:88:55:1e:b8: 9f:6f:9d:81:4a:af:73:77:96:bc:17:33:8e:a2:9e: 84:5b:eb:a0:f3:26:9c:cb:e6:1d:2f:89:51:13:94: ab:c6:2c:9a:49:0a:22:45:99:df:01:21:79:0e:ea: 30:d3:77:6e:9b:96:94:0e:0d:3a:8a:96:2f:d2:db: 51:68:06:af:dc:9e:81:af:74:fd:08:a0:76:0d:de: af:8c:68:0a:87:3e:8c:17:78:38:b9:5a:c4:a4:df: 4c:bb:a2:21:58:e4:20:c9:02:8f:5c:73:0c:c8:10: 1f:9a:f1:a0:21:82:0a:81:a0:7a:51:6e:13:4e:80: bd:d8:4c:ec:5b:6d:16:be:6b:5c:6d:43:2b:cb:23: f7:2c:e7:ce:c0:67:e6:72:d1:02:77:40:7c:38:de: fe:5b:74:f2:9a:6c:f7:c8:2f:f9:60:f8:a3:43:02: a3:e8:0f:5c:dc:24:ae:a4:22:4f:30:32:00:d0:9a: d3:ec:5c:64:67:a1:e4:9e:97:5d:85:f5:b3:a4:21: 51:42:4e:73:34:67:f0:fe:98:6e:09:be:67:ee:d7: 06:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:B8:15:C4:45:1A:A1:9D:4F:5A:55:B2:15:2B:16:E3:8D:13:CF:7B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149880.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.0.0/23 IPv6: 2001:df2:eac0::/48 Signature Algorithm: sha256WithRSAEncryption 0b:81:64:ca:cb:ce:5a:f7:d8:dc:07:90:48:81:53:e2:32:d7: 5d:05:02:a1:44:2b:6f:c1:01:5a:08:74:18:51:c9:47:95:f5: 19:af:1c:c2:ef:b7:42:00:25:3d:2b:e3:b6:ed:2a:5f:ea:1c: 6c:3b:16:cf:99:6b:d8:8c:f2:b6:16:f8:17:52:1e:ec:6c:26: dd:c9:9d:dd:b3:bf:e4:ad:39:00:d7:70:75:14:bf:49:b5:38: 14:80:68:e7:66:2a:6b:00:c7:ef:32:23:95:cd:c2:87:b1:49: 83:b0:cc:11:6a:e9:f0:1f:3c:58:1e:00:39:2e:3e:b5:f6:0f: 10:aa:a4:eb:db:95:85:c7:d5:b3:71:2b:ec:bc:7e:77:dc:5e: 9c:6d:70:70:5c:75:b4:78:db:ae:ce:69:88:20:06:5e:f0:d2: f0:c6:c9:8a:69:0e:bc:e8:8b:2d:12:d4:08:41:d3:a7:6c:45: e9:24:71:bb:3d:41:dd:eb:48:52:69:6c:85:e0:a7:db:38:15: e4:e4:d1:a3:ec:14:6c:31:e4:0e:ab:8f:08:53:a7:2f:17:d0: 69:0b:45:e4:9b:15:1f:5f:97:a5:78:2d:4f:dc:ca:5d:dc:8f: 49:74:9d:cf:dc:84:2d:99:74:c5:74:e8:bf:35:2e:5c:f9:6a: aa:83:76:cd -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUSWzg7Z24d/h395hF+XHhx0fbeR8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjE3MjYxMFoX DTI3MDUwMTE3MzExMFowMzExMC8GA1UEAxMoNDdCODE1QzQ0NTFBQTE5RDRGNUE1 NUIyMTUyQjE2RTM4RDEzQ0Y3QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKzZstZHMbo8d5t8v0eCTtGQvn0q1XjocrARgXdMGwKFl0Oz7svxOBCIVR64 n2+dgUqvc3eWvBczjqKehFvroPMmnMvmHS+JUROUq8YsmkkKIkWZ3wEheQ7qMNN3 bpuWlA4NOoqWL9LbUWgGr9yega90/Qigdg3er4xoCoc+jBd4OLlaxKTfTLuiIVjk IMkCj1xzDMgQH5rxoCGCCoGgelFuE06AvdhM7FttFr5rXG1DK8sj9yznzsBn5nLR AndAfDje/lt08pps98gv+WD4o0MCo+gPXNwkrqQiTzAyANCa0+xcZGeh5J6XXYX1 s6QhUUJOczRn8P6Ybgm+Z+7XBscCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBRHuBXE RRqhnU9aVbIVKxbjjRPPezAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ5ODgwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQBZ70AMA8EAgACMAkDBwAgAQ3y6sAwDQYJKoZIhvcNAQELBQADggEBAAuB ZMrLzlr32NwHkEiBU+Iy110FAqFEK2/BAVoIdBhRyUeV9RmvHMLvt0IAJT0r47bt Kl/qHGw7Fs+Za9iM8rYW+BdSHuxsJt3Jnd2zv+StOQDXcHUUv0m1OBSAaOdmKmsA x+8yI5XNwoexSYOwzBFq6fAfPFgeADkuPrX2DxCqpOvblYXH1bNxK+y8fnfcXpxt cHBcdbR4267OaYggBl7w0vDGyYppDrzoiy0S1AhB06dsRekkcbs9Qd3rSFJpbIXg p9s4FeTk0aPsFGwx5A6rjwhTpy8X0GkLReSbFR9fl6V4LU/cyl3cj0l0nc/chC2Z dMV06L81Llz5aqqDds0= -----END CERTIFICATE-----Generated at Sun May 3 00:41:58 2026 by rpki-client