$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149931.roa File: AS149931.roa (raw, json) Hash identifier: S6W9IKr2kV8R4FMfEG6g/nj4JYUVLbTvA79Z3nj2SnY= Subject key identifier: 60:03:35:96:06:6F:44:3A:79:A1:67:79:B0:B9:4D:77:A6:80:7D:2A Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6C69F96ECECB498B43A04AB0E242D2009FE4587C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149931.roa Signing time: Sat 02 May 2026 09:21:46 +0000 ROA not before: Sat 02 May 2026 09:16:46 +0000 ROA not after: Sat 01 May 2027 09:21:46 +0000 asID: 149931 IP address blocks: 103.4.134.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:69:f9:6e:ce:cb:49:8b:43:a0:4a:b0:e2:42:d2:00:9f:e4:58:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:16:46 2026 GMT Not After : May 1 09:21:46 2027 GMT Subject: CN=60033596066F443A79A16779B0B94D77A6807D2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:0f:58:63:3a:02:24:f6:d7:c8:78:07:8b:4e: d8:4e:55:f1:d9:9e:07:d9:de:20:79:bc:32:e4:99: 1a:3d:91:92:1c:7c:36:c0:7b:b2:41:48:7c:36:d0: cc:73:03:59:81:85:d4:b3:b3:e5:af:59:9d:61:8d: b0:ff:1c:a5:a4:46:b9:ef:18:91:5a:37:b8:93:fa: bf:76:84:49:99:ce:09:49:88:ad:b8:a3:0d:49:fb: 59:db:c9:03:cc:6f:85:4c:61:f9:d1:f1:f9:76:51: b9:19:39:9b:41:04:95:b5:c7:70:99:f1:9f:c5:ba: f0:df:b9:9c:a4:c1:21:d9:9c:6c:78:2b:8d:5f:0b: f7:9d:fe:86:7d:d7:72:40:a0:4b:6f:81:18:27:24: 8d:69:3e:fb:76:a8:be:c4:d8:fc:f2:32:9e:c4:7a: af:36:e3:00:10:6b:24:4c:c0:0c:08:32:a6:45:ef: 70:c6:54:a6:ae:0b:95:49:da:e7:d7:0e:4d:f1:e1: fb:c1:71:21:c2:4d:74:e5:09:d6:fe:09:86:aa:17: 74:ae:9a:b1:79:cb:2d:15:13:40:95:19:c1:9d:0f: 18:57:9e:f5:17:c2:29:fc:e7:47:56:a3:de:e9:a0: 37:3a:d0:79:ca:84:56:3c:61:b9:21:6e:c7:18:22: b2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:03:35:96:06:6F:44:3A:79:A1:67:79:B0:B9:4D:77:A6:80:7D:2A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.4.134.0/23 Signature Algorithm: sha256WithRSAEncryption 80:e7:c6:68:e1:b2:7a:11:0d:cb:f4:11:c1:0e:fc:90:a2:15: c9:a7:ef:e2:3e:51:ff:6d:92:f5:7a:ec:a4:af:ff:53:5a:a1: e6:8a:ec:7a:24:bc:05:b7:41:fb:17:cd:47:81:80:73:49:dc: 2b:c7:c6:9d:f7:bf:88:e4:54:20:97:5a:26:f2:02:42:1a:f2: 04:d4:b5:89:78:99:9c:73:bf:c3:e4:a3:1d:83:54:42:d3:e9: e8:3d:f5:3f:5f:43:ed:bb:21:e6:04:6e:b3:ee:cf:3b:72:c7: 62:69:0d:d4:8a:46:ae:36:1d:61:f6:74:ba:f3:1c:c1:35:01: 50:e8:b2:03:dd:c7:de:d9:b9:97:a0:4b:06:28:66:a6:15:56: a9:17:19:d9:90:ac:13:38:e9:1e:58:48:33:00:86:ef:87:37: 96:2d:1d:e3:65:4c:64:17:92:31:61:83:97:a1:ef:00:66:a3: e2:cc:08:d2:4b:56:54:13:27:cd:c5:b7:ee:02:e3:f2:7b:e3: 2b:79:7b:17:51:a3:4c:b6:15:b3:54:8f:23:e6:c1:1d:12:19: dc:37:98:31:1d:79:c0:40:af:94:2f:66:a4:92:4f:62:06:ea: 8d:bf:19:6a:2f:01:40:26:19:06:ed:5c:01:3e:ce:33:4d:9b: f2:2d:63:be -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUbGn5bs7LSYtDoEqw4kLSAJ/kWHwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTY0NloX DTI3MDUwMTA5MjE0NlowMzExMC8GA1UEAxMoNjAwMzM1OTYwNjZGNDQzQTc5QTE2 Nzc5QjBCOTRENzdBNjgwN0QyQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOEPWGM6AiT218h4B4tO2E5V8dmeB9neIHm8MuSZGj2Rkhx8NsB7skFIfDbQ zHMDWYGF1LOz5a9ZnWGNsP8cpaRGue8YkVo3uJP6v3aESZnOCUmIrbijDUn7WdvJ A8xvhUxh+dHx+XZRuRk5m0EElbXHcJnxn8W68N+5nKTBIdmcbHgrjV8L953+hn3X ckCgS2+BGCckjWk++3aovsTY/PIynsR6rzbjABBrJEzADAgypkXvcMZUpq4LlUna 59cOTfHh+8FxIcJNdOUJ1v4JhqoXdK6asXnLLRUTQJUZwZ0PGFee9RfCKfznR1aj 3umgNzrQecqEVjxhuSFuxxgisjsCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRgAzWW Bm9EOnmhZ3mwuU13poB9KjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ5OTMxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZwSGMA0GCSqGSIb3DQEBCwUAA4IBAQCA58Zo4bJ6EQ3L9BHBDvyQohXJ p+/iPlH/bZL1euykr/9TWqHmiux6JLwFt0H7F81HgYBzSdwrx8ad97+I5FQgl1om 8gJCGvIE1LWJeJmcc7/D5KMdg1RC0+noPfU/X0PtuyHmBG6z7s87csdiaQ3Uikau Nh1h9nS68xzBNQFQ6LID3cfe2bmXoEsGKGamFVapFxnZkKwTOOkeWEgzAIbvhzeW LR3jZUxkF5IxYYOXoe8AZqPizAjSS1ZUEyfNxbfuAuPye+MreXsXUaNMthWzVI8j 5sEdEhncN5gxHXnAQK+UL2akkk9iBuqNvxlqLwFAJhkG7VwBPs4zTZvyLWO+ -----END CERTIFICATE-----Generated at Sun May 3 01:44:56 2026 by rpki-client