$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149920.roa File: AS149920.roa (raw, json) Hash identifier: 5//ZMdYDERJMethszROhT5zTVzO2R6KnQuknLO/mKcs= Subject key identifier: 9C:10:3D:68:39:DD:01:95:B3:53:A8:94:81:84:95:F4:FB:AA:69:65 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7177B553FA0B671A7E352769E968AAA20EE055EF Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149920.roa Signing time: Sat 02 May 2026 09:19:49 +0000 ROA not before: Sat 02 May 2026 09:14:49 +0000 ROA not after: Sat 01 May 2027 09:19:49 +0000 asID: 149920 IP address blocks: 103.161.1.0/24 maxlen: 24 2001:df1:3940::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:77:b5:53:fa:0b:67:1a:7e:35:27:69:e9:68:aa:a2:0e:e0:55:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:14:49 2026 GMT Not After : May 1 09:19:49 2027 GMT Subject: CN=9C103D6839DD0195B353A894818495F4FBAA6965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:13:7e:8a:20:c5:f7:83:4a:80:87:43:85:93: 49:92:f2:b9:4d:84:0c:35:58:37:5c:76:92:6e:7b: cd:a9:80:c6:67:f0:02:2d:4f:94:b5:9b:16:c3:e1: 16:92:90:62:a3:05:19:48:80:3d:e0:a0:82:8f:31: 46:11:8e:6c:32:5e:e9:2e:57:39:59:82:56:6e:2d: 57:a8:61:94:ab:56:06:8e:b9:65:6d:57:b1:84:c1: 1c:32:8d:42:48:b6:1f:b1:0b:d8:63:3d:55:aa:30: 86:e2:4c:9c:ac:f3:72:8d:96:13:3c:d5:ce:36:99: f9:45:0e:17:27:ec:fc:0c:47:38:1a:68:21:50:b1: 26:17:df:c1:3e:fe:85:09:3a:9c:30:c0:4a:a0:a2: 3a:8d:ca:5c:e0:18:b3:10:2c:79:c1:29:7f:75:0c: 3d:87:ef:05:8b:4a:d1:ac:39:fe:f4:82:85:7f:af: a9:d5:f8:9c:27:1e:05:93:1a:55:1c:52:56:4e:fc: e8:9a:42:3e:1a:a2:d4:b9:01:86:c9:de:38:52:ff: 76:5b:28:db:a4:99:8c:1e:12:4c:bf:31:e1:a8:6b: 6c:f8:24:c9:d2:26:db:1a:ef:ac:7b:55:6f:67:9f: 83:52:03:20:31:42:4e:b5:10:03:38:b4:72:69:69: d8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:10:3D:68:39:DD:01:95:B3:53:A8:94:81:84:95:F4:FB:AA:69:65 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149920.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.1.0/24 IPv6: 2001:df1:3940::/48 Signature Algorithm: sha256WithRSAEncryption 3e:c4:2c:73:8f:0b:df:c6:0f:fa:90:1d:12:a9:44:66:88:5f: 81:eb:ec:01:f7:1b:6f:28:8c:37:75:28:e5:18:37:e6:51:ba: 01:00:1c:9a:2b:d0:e3:db:87:84:05:c1:9a:4b:1e:4a:d1:10: 24:6d:14:b3:ce:cc:d0:25:30:e8:1f:c2:79:29:1d:47:19:10: a5:86:06:fa:e2:e5:72:b8:20:21:6d:92:e8:06:6c:91:1b:a2: 89:63:6d:af:48:0e:c8:0c:ab:0d:58:37:6b:fe:70:e1:af:3d: 06:5c:0c:43:e1:45:d6:c2:a6:33:db:ec:4d:97:39:8e:2a:d9: 38:3c:16:0f:9b:f7:75:64:36:41:2a:5d:e7:ae:f3:c3:30:36: cd:bc:d3:f6:43:19:31:48:87:2c:e3:84:c1:51:96:da:ba:4c: 75:67:11:c9:02:50:24:9f:17:82:8a:73:87:b6:3b:5a:66:90: ae:43:9a:72:55:e8:21:e7:3f:6f:be:c3:29:e0:55:dc:c8:2d: df:9a:9f:38:a1:a5:f2:74:1e:a9:dc:c6:8e:73:8e:d9:a8:4f: 22:ef:d2:85:8f:79:69:c8:c2:ff:d3:f4:cb:db:d7:4c:a5:e1: 5e:a0:1f:6f:ed:a4:7a:01:ed:24:39:b0:bf:ef:07:06:a0:c6: 61:e7:85:39 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUcXe1U/oLZxp+NSdp6Wiqog7gVe8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTQ0OVoX DTI3MDUwMTA5MTk0OVowMzExMC8GA1UEAxMoOUMxMDNENjgzOUREMDE5NUIzNTNB ODk0ODE4NDk1RjRGQkFBNjk2NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOgTfoogxfeDSoCHQ4WTSZLyuU2EDDVYN1x2km57zamAxmfwAi1PlLWbFsPh FpKQYqMFGUiAPeCggo8xRhGObDJe6S5XOVmCVm4tV6hhlKtWBo65ZW1XsYTBHDKN Qki2H7EL2GM9VaowhuJMnKzzco2WEzzVzjaZ+UUOFyfs/AxHOBpoIVCxJhffwT7+ hQk6nDDASqCiOo3KXOAYsxAsecEpf3UMPYfvBYtK0aw5/vSChX+vqdX4nCceBZMa VRxSVk786JpCPhqi1LkBhsneOFL/dlso26SZjB4STL8x4ahrbPgkydIm2xrvrHtV b2efg1IDIDFCTrUQAzi0cmlp2KcCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBScED1o Od0BlbNTqJSBhJX0+6ppZTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ5OTIwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAZ6EBMA8EAgACMAkDBwAgAQ3xOUAwDQYJKoZIhvcNAQELBQADggEBAD7E LHOPC9/GD/qQHRKpRGaIX4Hr7AH3G28ojDd1KOUYN+ZRugEAHJor0OPbh4QFwZpL HkrRECRtFLPOzNAlMOgfwnkpHUcZEKWGBvri5XK4ICFtkugGbJEbooljba9IDsgM qw1YN2v+cOGvPQZcDEPhRdbCpjPb7E2XOY4q2Tg8Fg+b93VkNkEqXeeu88MwNs28 0/ZDGTFIhyzjhMFRltq6THVnEckCUCSfF4KKc4e2O1pmkK5DmnJV6CHnP2++wyng VdzILd+anzihpfJ0Hqncxo5zjtmoTyLv0oWPeWnIwv/T9Mvb10yl4V6gH2/tpHoB 7SQ5sL/vBwagxmHnhTk= -----END CERTIFICATE-----Generated at Sun May 3 01:44:15 2026 by rpki-client