$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS59149.roa File: AS59149.roa (raw, json) Hash identifier: KyNSKYNb9SdAC66aqvm/aaGzH/6aDtRW4H9o6hQYQaw= Subject key identifier: 04:C5:C7:7F:41:F7:A6:7B:27:E6:19:92:28:FD:E2:79:4A:BB:9D:61 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1B87C4D0ED3122A20871B880ACA3D6082F00161E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS59149.roa Signing time: Sat 02 May 2026 09:19:25 +0000 ROA not before: Sat 02 May 2026 09:14:25 +0000 ROA not after: Sat 01 May 2027 09:19:25 +0000 asID: 59149 IP address blocks: 103.111.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:87:c4:d0:ed:31:22:a2:08:71:b8:80:ac:a3:d6:08:2f:00:16:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:14:25 2026 GMT Not After : May 1 09:19:25 2027 GMT Subject: CN=04C5C77F41F7A67B27E6199228FDE2794ABB9D61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b7:b5:ba:be:1c:7d:c8:59:51:d8:d4:eb:fa: cc:c6:12:74:eb:c1:2f:a5:74:0a:4f:98:b0:dd:c5: 14:ae:d5:b7:aa:08:58:0e:e3:35:31:69:50:33:6d: 79:2e:32:39:5f:f6:cd:bf:2e:3e:13:2f:da:20:3b: a9:02:0d:0c:4f:1b:29:c1:40:50:a6:75:92:48:03: 2a:df:70:a9:f0:de:f3:26:6d:47:ca:e8:be:3d:07: a5:25:a2:33:c3:ec:d6:cc:29:27:cb:34:75:77:0d: 64:d3:eb:99:68:11:e6:29:17:56:ef:68:e1:9d:02: 94:74:7d:4a:71:91:14:a3:9f:9b:c5:9e:8b:89:f2: 4c:54:8f:f7:f4:8a:4f:fc:d7:07:60:58:c7:ba:1a: a6:79:46:3d:3e:04:f4:ff:06:c6:64:02:f1:99:a6: c9:aa:de:48:35:05:3c:01:a5:b4:32:0d:7d:be:ff: 76:23:08:f3:22:06:45:1a:38:d5:8a:a2:24:47:e4: 84:2a:7d:5c:1c:40:8f:c1:f0:0c:fd:d7:98:23:bd: a3:a5:e3:4f:f2:03:8d:c4:18:25:62:36:93:de:65: 89:e6:c3:7b:d3:14:3a:fb:ae:69:92:f1:ba:7b:76: 74:da:07:1c:e4:41:92:de:77:e3:f2:4d:70:ce:8b: 2e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C5:C7:7F:41:F7:A6:7B:27:E6:19:92:28:FD:E2:79:4A:BB:9D:61 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS59149.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.111.248.0/22 Signature Algorithm: sha256WithRSAEncryption 60:76:05:99:93:4e:be:f3:d1:f9:45:8e:10:9c:ba:43:24:93: c3:f7:e5:7e:ed:f3:c8:60:50:e7:33:fe:37:aa:91:c0:e9:4b: 9c:4b:e8:e8:5e:1a:40:19:e7:b4:22:73:0a:fb:65:34:07:38: 3c:d0:19:f0:e5:d5:5f:9b:76:27:eb:7d:c1:66:f7:d5:2c:dd: a8:32:ac:43:4d:de:33:ca:b7:0d:a1:65:f3:76:49:ee:20:9e: f7:5f:26:08:2f:fe:23:15:54:7a:4f:7f:cb:fe:76:6f:61:16: a2:ad:6f:b8:cd:a6:c1:78:25:ba:a7:05:38:e6:13:b6:3e:f2: 1d:d1:11:24:a8:97:63:fb:5e:4a:c8:80:00:50:05:66:82:cb: 02:44:d1:5b:95:b4:64:2c:90:2b:ea:5d:5a:b6:cf:8b:3f:6c: 07:32:1c:f1:7c:cc:9b:7b:65:e4:b7:1b:d9:b0:ab:e7:cb:82: 68:35:8e:2f:b6:31:c8:0d:c8:28:94:f0:04:54:88:6b:7b:21: 3d:1e:dc:79:27:f6:68:78:80:c7:48:bd:35:63:2f:0e:5e:84: 0d:7a:2c:0e:c6:00:0d:33:64:ba:dc:07:9f:1d:8c:f7:da:d5: e5:50:d2:58:72:07:f3:1a:42:06:33:79:df:40:2b:d2:c7:6f: 0a:be:ad:ce -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIUG4fE0O0xIqIIcbiArKPWCC8AFh4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTQyNVoX DTI3MDUwMTA5MTkyNVowMzExMC8GA1UEAxMoMDRDNUM3N0Y0MUY3QTY3QjI3RTYx OTkyMjhGREUyNzk0QUJCOUQ2MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALG3tbq+HH3IWVHY1Ov6zMYSdOvBL6V0Ck+YsN3FFK7Vt6oIWA7jNTFpUDNt eS4yOV/2zb8uPhMv2iA7qQINDE8bKcFAUKZ1kkgDKt9wqfDe8yZtR8rovj0HpSWi M8Ps1swpJ8s0dXcNZNPrmWgR5ikXVu9o4Z0ClHR9SnGRFKOfm8Wei4nyTFSP9/SK T/zXB2BYx7oapnlGPT4E9P8GxmQC8ZmmyareSDUFPAGltDINfb7/diMI8yIGRRo4 1YqiJEfkhCp9XBxAj8HwDP3XmCO9o6XjT/IDjcQYJWI2k95liebDe9MUOvuuaZLx unt2dNoHHORBkt534/JNcM6LLoUCAwEAAaOCAcswggHHMB0GA1UdDgQWBBQExcd/ QfemeyfmGZIo/eJ5SrudYTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTNTkxNDkucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJnb/gwDQYJKoZIhvcNAQELBQADggEBAGB2BZmTTr7z0flFjhCcukMkk8P3 5X7t88hgUOcz/jeqkcDpS5xL6OheGkAZ57Qicwr7ZTQHODzQGfDl1V+bdifrfcFm 99Us3agyrENN3jPKtw2hZfN2Se4gnvdfJggv/iMVVHpPf8v+dm9hFqKtb7jNpsF4 JbqnBTjmE7Y+8h3RESSol2P7XkrIgABQBWaCywJE0VuVtGQskCvqXVq2z4s/bAcy HPF8zJt7ZeS3G9mwq+fLgmg1ji+2McgNyCiU8ARUiGt7IT0e3Hkn9mh4gMdIvTVj Lw5ehA16LA7GAA0zZLrcB58djPfa1eVQ0lhyB/MaQgYzed9AK9LHbwq+rc4= -----END CERTIFICATE-----Generated at Sun May 3 00:39:39 2026 by rpki-client