$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149903.roa File: AS149903.roa (raw, json) Hash identifier: K0Pr9NiENrx86eOGXD4yqMrMElYk3yRKGPrZRNKxrnE= Subject key identifier: 33:3A:DA:2A:45:E1:DC:7F:DC:26:3B:C5:25:57:67:40:B9:8E:76:B6 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4CBFB4293D53B9AC2656D95405C35684F1FCDE0C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149903.roa Signing time: Sat 02 May 2026 09:21:14 +0000 ROA not before: Sat 02 May 2026 09:16:14 +0000 ROA not after: Sat 01 May 2027 09:21:14 +0000 asID: 149903 IP address blocks: 103.190.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:bf:b4:29:3d:53:b9:ac:26:56:d9:54:05:c3:56:84:f1:fc:de:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:16:14 2026 GMT Not After : May 1 09:21:14 2027 GMT Subject: CN=333ADA2A45E1DC7FDC263BC525576740B98E76B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d5:36:99:03:f9:c4:a5:30:82:91:39:7b:00: 91:60:88:84:5e:e2:c5:76:c4:4f:3d:a2:1c:52:e7: 9f:9a:49:8b:9a:6e:b2:ab:4d:4d:76:6e:84:5c:e9: ad:7d:9d:2c:49:d6:22:2b:e9:39:bb:72:ef:df:40: c8:9f:fa:0b:2f:02:8e:b7:a7:64:7b:ef:08:cd:4f: 43:1a:a5:24:69:25:74:5e:22:5e:ef:c6:40:a2:c4: fd:f6:8a:75:82:6d:79:3c:35:27:7c:ce:ee:c8:19: b4:67:fc:2f:ba:d2:78:71:fb:0e:02:2d:2a:99:f2: 3d:5e:83:25:20:15:1a:df:a9:96:2f:d2:7f:0d:f5: a4:11:f7:16:98:3d:71:00:07:c9:2e:de:f9:f5:e3: b4:17:5b:1d:09:45:b8:19:0d:db:39:aa:a8:6b:ac: ae:ba:e4:92:00:44:a2:38:fd:67:1d:79:f8:97:d7: 0d:cb:f9:be:a5:76:77:a3:7e:57:c1:79:05:bd:6c: 98:bd:ed:7f:3e:c3:3f:38:ef:ac:67:6b:c6:7c:c7: a4:7d:7f:8b:74:ea:d6:13:fc:43:86:1d:99:5b:d1: cf:8b:5e:71:48:bf:c4:9b:fb:58:bc:30:16:61:83: 40:05:bf:d6:8d:47:33:76:f9:cf:74:d2:da:c3:4b: 82:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:3A:DA:2A:45:E1:DC:7F:DC:26:3B:C5:25:57:67:40:B9:8E:76:B6 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149903.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.190.108.0/23 Signature Algorithm: sha256WithRSAEncryption 4f:c7:85:36:c6:86:bc:02:80:2f:2f:fa:5d:9a:56:0b:f1:a4: 1c:53:92:bc:64:71:a7:e4:b0:28:64:7e:cd:42:13:70:ef:6e: 2b:97:92:48:83:04:f0:e0:0b:ef:b4:c8:6e:b5:96:d0:1c:9f: 26:72:57:27:cf:26:e9:36:6a:b7:46:be:51:9f:8e:9c:31:67: 09:4d:8c:f6:46:94:ad:b6:2b:92:e9:48:e7:3d:cf:dd:da:8b: c4:26:18:75:ec:72:d3:06:85:74:04:c4:6e:59:2c:38:92:00: ce:99:d2:22:c6:12:91:7b:0f:75:47:34:78:8f:61:83:12:08: 3c:ff:47:40:bb:d4:36:d7:38:19:da:08:fb:a7:9a:d0:12:e4: 39:c0:29:23:40:ef:50:7e:35:5d:7e:27:e9:60:6b:0a:b3:57: e0:78:15:9f:c5:83:70:98:98:b0:e2:64:c1:49:62:05:ca:ec: 73:40:03:35:6a:74:fc:25:89:78:07:26:ad:b8:a9:f1:96:98: 0a:78:f2:f3:06:80:f7:ff:56:31:af:b9:da:c8:3f:34:fe:eb: c6:8e:d2:fc:bd:91:78:29:7a:59:fd:f2:19:a1:46:73:99:a6: ee:fe:6d:2c:9d:93:7e:da:79:e7:37:fa:86:4c:5a:bd:f7:3b: a5:99:4b:34 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUTL+0KT1TuawmVtlUBcNWhPH83gwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTYxNFoX DTI3MDUwMTA5MjExNFowMzExMC8GA1UEAxMoMzMzQURBMkE0NUUxREM3RkRDMjYz QkM1MjU1NzY3NDBCOThFNzZCNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMfVNpkD+cSlMIKROXsAkWCIhF7ixXbETz2iHFLnn5pJi5pusqtNTXZuhFzp rX2dLEnWIivpObty799AyJ/6Cy8CjrenZHvvCM1PQxqlJGkldF4iXu/GQKLE/faK dYJteTw1J3zO7sgZtGf8L7rSeHH7DgItKpnyPV6DJSAVGt+pli/Sfw31pBH3Fpg9 cQAHyS7e+fXjtBdbHQlFuBkN2zmqqGusrrrkkgBEojj9Zx15+JfXDcv5vqV2d6N+ V8F5Bb1smL3tfz7DPzjvrGdrxnzHpH1/i3Tq1hP8Q4YdmVvRz4tecUi/xJv7WLww FmGDQAW/1o1HM3b5z3TS2sNLgpECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQzOtoq ReHcf9wmO8UlV2dAuY52tjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ5OTAzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ75sMA0GCSqGSIb3DQEBCwUAA4IBAQBPx4U2xoa8AoAvL/pdmlYL8aQc U5K8ZHGn5LAoZH7NQhNw724rl5JIgwTw4AvvtMhutZbQHJ8mclcnzybpNmq3Rr5R n46cMWcJTYz2RpSttiuS6UjnPc/d2ovEJhh17HLTBoV0BMRuWSw4kgDOmdIixhKR ew91RzR4j2GDEgg8/0dAu9Q21zgZ2gj7p5rQEuQ5wCkjQO9QfjVdfifpYGsKs1fg eBWfxYNwmJiw4mTBSWIFyuxzQAM1anT8JYl4ByatuKnxlpgKePLzBoD3/1Yxr7na yD80/uvGjtL8vZF4KXpZ/fIZoUZzmabu/m0snZN+2nnnN/qGTFq99zulmUs0 -----END CERTIFICATE-----Generated at Sun May 3 00:42:01 2026 by rpki-client