$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149890.roa File: AS149890.roa (raw, json) Hash identifier: zdQmjBpz6khVWl5w2Ki1Sbm4SfPpxJMxvELibMVvTCQ= Subject key identifier: B6:11:CE:99:F1:F7:36:2C:F9:A6:81:C4:26:18:8E:D3:3C:73:B4:D0 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7089F971F6350BDC752C5D151EBFC83C52674211 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149890.roa Signing time: Sat 02 May 2026 09:21:25 +0000 ROA not before: Sat 02 May 2026 09:16:25 +0000 ROA not after: Sat 01 May 2027 09:21:25 +0000 asID: 149890 IP address blocks: 103.190.0.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:89:f9:71:f6:35:0b:dc:75:2c:5d:15:1e:bf:c8:3c:52:67:42:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:16:25 2026 GMT Not After : May 1 09:21:25 2027 GMT Subject: CN=B611CE99F1F7362CF9A681C426188ED33C73B4D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:44:c9:8e:3c:da:70:4f:e5:0e:09:bc:56:02: 13:29:54:77:41:ec:53:12:69:ba:29:a2:79:9d:82: d9:f2:aa:72:48:c7:d3:c0:bb:e9:cb:f4:a5:53:e2: c7:3a:0b:7a:74:20:d2:8a:98:48:7c:6b:8a:04:fe: 46:b8:e9:a2:2c:0f:ff:1f:8d:5b:fe:17:7c:5a:fb: bc:1f:e4:8e:fa:bf:7f:5c:4f:8b:28:d2:b6:06:6a: 93:dd:51:a7:a8:7e:16:eb:db:59:d6:43:a5:ca:65: ee:bb:d1:07:3d:f5:68:93:d2:d1:26:7f:c0:51:1a: 5b:5c:c3:81:96:03:e2:69:d4:09:f0:64:fe:f8:fe: b0:05:e2:59:eb:ee:16:51:47:ca:94:35:75:ae:a1: 4d:fa:f5:95:3d:0f:38:24:d7:82:97:12:05:c8:f4: 27:03:6e:d1:99:3f:0a:19:59:8a:8d:de:73:6c:da: 8a:f6:b5:07:e2:f6:81:7e:1e:2d:3c:e9:04:76:cc: 5f:bc:cc:f6:5e:c4:15:96:d2:2a:8f:0f:b6:18:f7: 9e:d2:c6:f3:19:d7:d8:99:b5:e6:db:1d:3d:4a:b0: df:b0:02:93:70:57:28:d5:26:b1:d5:ea:fe:a6:03: 49:68:97:fd:0a:62:32:28:fe:d3:78:0f:04:f3:ce: 56:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:11:CE:99:F1:F7:36:2C:F9:A6:81:C4:26:18:8E:D3:3C:73:B4:D0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149890.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.190.0.0/23 Signature Algorithm: sha256WithRSAEncryption 48:89:54:2e:73:f8:7c:93:2d:9c:9c:a0:4e:1f:1d:88:f1:f1: ed:0b:da:0d:49:be:d9:7c:cb:08:fd:e3:75:17:7e:0a:a2:df: df:b8:7f:a4:00:c9:b9:2e:f0:cd:48:d8:60:74:fd:b6:a6:f8: 38:03:00:59:24:13:44:e6:72:33:d0:58:c5:5a:ab:83:13:d9: b8:08:37:23:d1:c6:b5:02:7b:44:03:98:52:15:2d:77:26:33: 00:d5:0f:8f:5d:1f:57:6b:b5:fd:b6:4d:7f:9b:51:76:3b:ed: d7:ad:c4:9c:33:3b:31:fa:9b:df:4e:08:ef:70:1d:0c:bb:f8: 85:f9:b4:8d:d9:10:16:92:d7:0b:2d:b2:03:38:90:9e:a1:2b: 9c:73:7a:9d:d5:58:cf:46:a7:2b:25:c2:ec:48:5d:b5:cc:5c: e1:95:e8:ca:82:96:86:cf:5c:6e:c2:a0:aa:c7:11:06:b5:3e: 9a:0e:e4:92:44:9f:55:06:ed:99:7e:34:3a:9f:9a:45:7c:a3: 45:cf:5a:86:ad:ad:62:98:26:2c:00:40:7b:eb:dc:1e:47:b0: 31:aa:28:c7:25:eb:ab:c6:b2:67:f3:ad:de:f2:5e:e3:fe:ac: 5c:91:7c:1b:ba:f7:3c:26:a3:81:09:b2:3c:61:84:45:0d:80: 9a:1f:17:c7 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUcIn5cfY1C9x1LF0VHr/IPFJnQhEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTYyNVoX DTI3MDUwMTA5MjEyNVowMzExMC8GA1UEAxMoQjYxMUNFOTlGMUY3MzYyQ0Y5QTY4 MUM0MjYxODhFRDMzQzczQjREMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJNEyY482nBP5Q4JvFYCEylUd0HsUxJpuimieZ2C2fKqckjH08C76cv0pVPi xzoLenQg0oqYSHxrigT+RrjpoiwP/x+NW/4XfFr7vB/kjvq/f1xPiyjStgZqk91R p6h+FuvbWdZDpcpl7rvRBz31aJPS0SZ/wFEaW1zDgZYD4mnUCfBk/vj+sAXiWevu FlFHypQ1da6hTfr1lT0POCTXgpcSBcj0JwNu0Zk/ChlZio3ec2zaiva1B+L2gX4e LTzpBHbMX7zM9l7EFZbSKo8Pthj3ntLG8xnX2Jm15tsdPUqw37ACk3BXKNUmsdXq /qYDSWiX/QpiMij+03gPBPPOVvECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBS2Ec6Z 8fc2LPmmgcQmGI7TPHO00DAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ5ODkwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ74AMA0GCSqGSIb3DQEBCwUAA4IBAQBIiVQuc/h8ky2cnKBOHx2I8fHt C9oNSb7ZfMsI/eN1F34Kot/fuH+kAMm5LvDNSNhgdP22pvg4AwBZJBNE5nIz0FjF WquDE9m4CDcj0ca1AntEA5hSFS13JjMA1Q+PXR9Xa7X9tk1/m1F2O+3XrcScMzsx +pvfTgjvcB0Mu/iF+bSN2RAWktcLLbIDOJCeoSucc3qd1VjPRqcrJcLsSF21zFzh lejKgpaGz1xuwqCqxxEGtT6aDuSSRJ9VBu2ZfjQ6n5pFfKNFz1qGra1imCYsAEB7 69weR7AxqijHJeurxrJn863e8l7j/qxckXwbuvc8JqOBCbI8YYRFDYCaHxfH -----END CERTIFICATE-----Generated at Sun May 3 00:41:41 2026 by rpki-client