$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149948.roa File: AS149948.roa (raw, json) Hash identifier: prWL3xi0v3IgqC+BgvDRTvT4+QT/t9WeIVhtNGUeAsc= Subject key identifier: 45:13:14:52:17:66:B4:06:64:5D:EA:86:0A:EB:15:B5:04:8E:C7:E5 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3CF679623DE1DF0BF1A862ED2E1B4E84EAB87AB3 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149948.roa Signing time: Sat 02 May 2026 21:29:42 +0000 ROA not before: Sat 02 May 2026 21:24:42 +0000 ROA not after: Sat 01 May 2027 21:29:42 +0000 asID: 149948 IP address blocks: 103.190.28.0/23 maxlen: 24 203.100.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:f6:79:62:3d:e1:df:0b:f1:a8:62:ed:2e:1b:4e:84:ea:b8:7a:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:24:42 2026 GMT Not After : May 1 21:29:42 2027 GMT Subject: CN=451314521766B406645DEA860AEB15B5048EC7E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:05:ec:b3:a5:94:09:37:8f:13:a2:ed:2f:a3: 56:d8:ba:04:5b:f5:54:82:66:ea:2d:7e:7f:4b:18: 5d:cc:6e:b0:1e:f2:85:f9:0c:36:89:42:95:67:de: b2:1f:96:f2:80:c6:0e:23:b3:b3:13:16:3a:db:59: 64:74:e0:d5:7c:ca:b5:e9:19:4a:6b:df:b0:aa:bf: a0:9a:35:17:9d:64:8f:f3:18:2d:22:f0:62:7d:50: b3:5d:ba:ad:69:16:7c:a8:5d:e7:29:f6:07:b0:81: 11:d2:a3:fc:75:66:d9:69:af:4c:ef:bd:be:8a:9e: be:ad:5b:4d:1e:77:79:6e:b3:ae:4e:47:4e:49:64: 80:61:1e:2e:b4:f1:28:d8:28:0d:b3:e9:ec:97:f6: fe:a0:51:08:7c:a2:be:82:64:53:08:de:2c:cd:22: 1d:b7:41:4d:0c:db:65:cd:0e:bb:ec:09:40:e1:bb: 50:aa:44:7a:e4:44:c5:49:f2:87:bb:6e:63:f6:55: 49:6e:e3:4f:3c:f8:fb:7f:c6:17:45:ac:ed:10:cf: 03:81:a4:e6:b8:7b:45:26:48:ad:8a:8c:35:11:1d: 44:91:ae:c7:c3:53:a6:0f:31:aa:9e:2b:0c:2b:cd: 6f:21:19:bf:75:7a:4f:fa:23:06:f9:cf:14:38:66: 48:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:13:14:52:17:66:B4:06:64:5D:EA:86:0A:EB:15:B5:04:8E:C7:E5 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149948.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.190.28.0/23 203.100.57.0/24 Signature Algorithm: sha256WithRSAEncryption 18:38:0f:12:a5:14:8b:27:b6:3a:80:93:2c:40:db:31:28:eb: 40:b6:68:09:94:c6:e6:a5:ee:e6:84:50:47:b4:50:b3:c3:56: e0:32:46:6a:58:b0:60:e0:99:56:a2:71:b0:c9:8b:3f:7f:8b: 5d:c4:2d:78:2e:cb:0a:76:b0:81:15:f5:8c:59:57:6a:30:87: 8e:52:c0:aa:63:ca:47:e8:cb:19:8f:35:96:50:e0:17:2f:2d: f2:70:38:58:f3:20:49:82:af:4b:28:66:a4:85:44:57:e4:47: c3:f5:7b:59:fa:b9:f4:88:15:3b:67:ae:73:08:57:33:bb:56: bb:a1:59:88:25:32:fe:50:70:e6:db:85:f7:81:99:99:62:8f: b9:6c:95:f3:a1:04:80:4a:31:9d:5e:e9:da:23:ca:96:8f:69: cb:5b:72:62:6c:fa:70:06:71:69:d8:a2:79:48:8a:8e:08:e1: 89:ae:a1:d7:a1:c7:c5:75:67:6f:b4:d9:55:e7:c7:ca:e6:b4: aa:e7:00:fa:46:c1:ea:8b:e5:44:85:e1:3b:f0:fe:21:a7:61: d3:b7:0b:f4:fc:da:ca:c0:ef:ae:d4:89:4e:9f:a5:5c:ac:8b: f8:fe:64:16:92:73:96:af:ad:6e:6d:5c:15:6e:c5:9b:9d:de: e4:8f:a1:4e -----BEGIN CERTIFICATE----- MIIE3zCCA8egAwIBAgIUPPZ5Yj3h3wvxqGLtLhtOhOq4erMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjQ0MloX DTI3MDUwMTIxMjk0MlowMzExMC8GA1UEAxMoNDUxMzE0NTIxNzY2QjQwNjY0NURF QTg2MEFFQjE1QjUwNDhFQzdFNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL8F7LOllAk3jxOi7S+jVti6BFv1VIJm6i1+f0sYXcxusB7yhfkMNolClWfe sh+W8oDGDiOzsxMWOttZZHTg1XzKtekZSmvfsKq/oJo1F51kj/MYLSLwYn1Qs126 rWkWfKhd5yn2B7CBEdKj/HVm2WmvTO+9voqevq1bTR53eW6zrk5HTklkgGEeLrTx KNgoDbPp7Jf2/qBRCHyivoJkUwjeLM0iHbdBTQzbZc0Ou+wJQOG7UKpEeuRExUny h7tuY/ZVSW7jTzz4+3/GF0Ws7RDPA4Gk5rh7RSZIrYqMNREdRJGux8NTpg8xqp4r DCvNbyEZv3V6T/ojBvnPFDhmSIkCAwEAAaOCAdIwggHOMB0GA1UdDgQWBBRFExRS F2a0BmRd6oYK6xW1BI7H5TAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ5OTQ4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIA ATAMAwQBZ74cAwQAy2Q5MA0GCSqGSIb3DQEBCwUAA4IBAQAYOA8SpRSLJ7Y6gJMs QNsxKOtAtmgJlMbmpe7mhFBHtFCzw1bgMkZqWLBg4JlWonGwyYs/f4tdxC14LssK drCBFfWMWVdqMIeOUsCqY8pH6MsZjzWWUOAXLy3ycDhY8yBJgq9LKGakhURX5EfD 9XtZ+rn0iBU7Z65zCFczu1a7oVmIJTL+UHDm24X3gZmZYo+5bJXzoQSASjGdXuna I8qWj2nLW3JibPpwBnFp2KJ5SIqOCOGJrqHXocfFdWdvtNlV58fK5rSq5wD6RsHq i+VEheE78P4hp2HTtwv0/NrKwO+u1IlOn6VcrIv4/mQWknOWr61ubVwVbsWbnd7k j6FO -----END CERTIFICATE-----Generated at Sun May 3 01:44:01 2026 by rpki-client