$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149946.roa File: AS149946.roa (raw, json) Hash identifier: lLIUOyWfTGp2b+3EBT8iGOC84/WmZkgpDzXuZpVrPV4= Subject key identifier: 31:4E:98:57:C9:99:5E:C1:2B:64:9E:14:5C:59:4C:21:9F:D5:A6:6E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 59C0A1E50AC57D5E5B693CB1C7709C798B1BD7C5 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149946.roa Signing time: Sat 02 May 2026 09:22:25 +0000 ROA not before: Sat 02 May 2026 09:17:25 +0000 ROA not after: Sat 01 May 2027 09:22:25 +0000 asID: 149946 IP address blocks: 117.102.160.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:c0:a1:e5:0a:c5:7d:5e:5b:69:3c:b1:c7:70:9c:79:8b:1b:d7:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:17:25 2026 GMT Not After : May 1 09:22:25 2027 GMT Subject: CN=314E9857C9995EC12B649E145C594C219FD5A66E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:14:90:ed:d3:8b:cf:d3:5e:56:0e:73:c3:c6: 8c:35:de:0c:2b:70:7e:69:70:06:68:06:f7:e2:78: 6c:67:ea:f4:1a:43:f0:95:91:05:49:6f:6a:05:bf: 5f:db:a0:c0:9a:b5:7b:11:1f:ab:91:be:35:96:5a: 29:91:a7:d3:34:69:07:f0:41:2f:20:fa:6e:3a:25: 83:41:d0:0d:60:73:b6:0c:82:1a:92:ca:c1:d3:d7: b1:2c:1a:67:ff:cf:2c:cc:e0:cc:b0:75:38:dd:cd: 19:6d:91:41:8d:57:4d:0b:d2:9b:5d:fe:bf:45:60: e3:4e:a1:53:c3:87:2e:05:7e:bc:2e:b0:a1:21:ba: 84:46:a5:72:8f:38:17:c4:59:1b:55:cc:30:16:1a: f9:44:3d:29:9e:e7:1a:e5:25:df:d9:53:76:cf:44: cb:1e:1f:ae:31:4e:d9:ce:3c:ba:9e:d1:e9:a7:2f: 6f:97:a7:9e:8f:68:8d:16:5f:6e:04:d2:cf:fa:04: 07:d8:c2:2d:dc:76:2e:a1:1e:cc:ae:a6:bc:bb:2a: 7c:16:ac:e2:be:90:7f:41:68:98:6e:a2:f2:e5:47: 2f:44:d3:1c:df:87:1e:8a:f9:ea:50:e9:b1:20:0d: 17:a5:4d:b3:53:a4:7a:47:ad:64:c4:53:ee:ff:c4: 2e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:4E:98:57:C9:99:5E:C1:2B:64:9E:14:5C:59:4C:21:9F:D5:A6:6E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149946.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.102.160.0/23 Signature Algorithm: sha256WithRSAEncryption 67:56:a5:9e:44:d3:88:36:38:20:61:aa:de:7d:55:64:a2:ba: c7:15:e9:82:f9:4c:22:78:77:31:1e:fb:48:41:22:e7:3e:55: 89:62:88:b6:6e:d3:8f:90:5a:3f:18:19:02:b9:a8:c8:e5:d0: ef:68:5f:d0:ad:03:83:ea:e9:02:9b:24:ea:ef:74:96:9e:ec: 27:e9:02:57:3a:8e:10:a3:0f:cc:ee:cd:4b:e3:1d:0a:72:59: ac:78:23:66:80:e7:e2:fd:b6:97:b3:23:bb:7e:8c:c6:d9:bc: a0:9d:23:47:e9:ad:9b:83:9b:73:9d:e3:53:74:e0:de:80:b4: 6b:58:93:8d:77:c6:a3:28:e7:91:ab:d5:6f:ee:a7:70:8d:1b: 40:5d:1e:e6:be:7b:08:d9:19:82:fc:b9:b9:20:0d:58:ac:c8: 47:65:38:fa:6f:da:22:de:54:b5:bd:ec:0c:2b:43:94:85:c4: 1a:61:ae:39:b2:7d:7d:e8:47:7f:cd:94:8d:ea:61:d4:89:ee: 31:53:5f:17:4f:55:fa:47:73:38:33:5d:e6:a1:43:20:c6:e7: fd:b3:67:a7:bb:1e:1c:05:26:48:90:a5:43:e4:45:d3:dc:da: 97:50:0e:04:e7:b0:07:ee:cc:25:ba:6b:27:f7:7c:52:82:0f: 46:12:cb:2a -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUWcCh5QrFfV5baTyxx3CceYsb18UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTcyNVoX DTI3MDUwMTA5MjIyNVowMzExMC8GA1UEAxMoMzE0RTk4NTdDOTk5NUVDMTJCNjQ5 RTE0NUM1OTRDMjE5RkQ1QTY2RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALUUkO3Ti8/TXlYOc8PGjDXeDCtwfmlwBmgG9+J4bGfq9BpD8JWRBUlvagW/ X9ugwJq1exEfq5G+NZZaKZGn0zRpB/BBLyD6bjolg0HQDWBztgyCGpLKwdPXsSwa Z//PLMzgzLB1ON3NGW2RQY1XTQvSm13+v0Vg406hU8OHLgV+vC6woSG6hEalco84 F8RZG1XMMBYa+UQ9KZ7nGuUl39lTds9Eyx4frjFO2c48up7R6acvb5enno9ojRZf bgTSz/oEB9jCLdx2LqEezK6mvLsqfBas4r6Qf0FomG6i8uVHL0TTHN+HHor56lDp sSANF6VNs1OkeketZMRT7v/ELnECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQxTphX yZlewStknhRcWUwhn9WmbjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ5OTQ2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBdWagMA0GCSqGSIb3DQEBCwUAA4IBAQBnVqWeRNOINjggYarefVVkorrH FemC+UwieHcxHvtIQSLnPlWJYoi2btOPkFo/GBkCuajI5dDvaF/QrQOD6ukCmyTq 73SWnuwn6QJXOo4Qow/M7s1L4x0KclmseCNmgOfi/baXsyO7fozG2bygnSNH6a2b g5tzneNTdODegLRrWJONd8ajKOeRq9Vv7qdwjRtAXR7mvnsI2RmC/Lm5IA1YrMhH ZTj6b9oi3lS1vewMK0OUhcQaYa45sn196Ed/zZSN6mHUie4xU18XT1X6R3M4M13m oUMgxuf9s2enux4cBSZIkKVD5EXT3NqXUA4E57AH7swlumsn93xSgg9GEssq -----END CERTIFICATE-----Generated at Sun May 3 00:40:38 2026 by rpki-client