$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149394.roa File: AS149394.roa (raw, json) Hash identifier: kGeLV9E9v1qU0pQ7RiPRF23yixoeRXipg0/F5g1La/w= Subject key identifier: 67:A0:9A:4A:94:08:C7:2E:AF:78:67:9A:3E:8E:4E:C7:C1:74:39:D2 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 49950C090404D8BBD041B0B0A0E51FF02EE13A8A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149394.roa Signing time: Mon 23 Mar 2026 03:00:00 +0000 ROA not before: Mon 23 Mar 2026 02:55:00 +0000 ROA not after: Mon 22 Mar 2027 03:00:00 +0000 asID: 149394 IP address blocks: 103.182.52.0/24 maxlen: 24 103.182.53.0/24 maxlen: 24 2001:df1:f540::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:95:0c:09:04:04:d8:bb:d0:41:b0:b0:a0:e5:1f:f0:2e:e1:3a:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 23 02:55:00 2026 GMT Not After : Mar 22 03:00:00 2027 GMT Subject: CN=67A09A4A9408C72EAF78679A3E8E4EC7C17439D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:0f:60:8a:40:2c:75:46:ad:21:41:3f:33:72: 0c:15:3a:90:e4:ed:1d:0b:ad:51:18:ca:c6:3e:f4: 08:0b:e4:84:a5:41:66:d7:b4:63:97:c7:1f:f8:0e: d5:b0:57:78:77:3d:95:61:b2:3c:5c:f4:36:25:93: 0e:d7:2c:f1:5a:e4:ee:e8:52:0b:4d:85:57:5f:ca: c4:bb:f0:d7:df:13:25:96:23:16:4a:02:3d:b1:1f: c2:f9:0c:9a:2b:78:5b:0d:0b:15:2b:01:06:32:f2: 20:bf:b5:39:13:72:7f:a2:19:ec:86:f1:a9:7a:5f: e3:af:e8:48:15:3c:46:5e:a0:53:c3:1b:e2:e4:e1: 64:e1:d3:7e:3f:3d:47:17:b2:af:86:5c:ef:bb:e6: 15:06:30:a5:d3:67:f2:75:4f:27:8a:fe:1f:94:bc: 9f:8d:2a:40:9f:86:49:5d:95:82:54:00:e4:6f:e6: 23:18:ae:5d:9d:5f:a2:6e:ce:62:a4:33:c5:14:98: 13:b6:79:04:f3:35:e1:7f:0b:73:f6:f6:e1:71:a9: ba:c9:1c:a6:9d:ed:ad:3b:63:5d:c9:de:52:f6:8c: 7b:ef:d9:3c:ca:b8:8e:18:f6:9f:1f:13:ae:a0:24: 1f:44:4b:1b:44:d9:d4:22:91:61:52:0e:1d:92:d4: 99:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:A0:9A:4A:94:08:C7:2E:AF:78:67:9A:3E:8E:4E:C7:C1:74:39:D2 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149394.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.182.52.0/23 IPv6: 2001:df1:f540::/48 Signature Algorithm: sha256WithRSAEncryption 76:f9:39:0f:ac:85:7f:37:1a:21:9f:0d:7a:d9:ef:e0:f4:dc: 12:47:5a:99:68:e6:7e:eb:02:fd:0f:88:54:a4:ad:29:3b:05: 1c:8d:f1:76:50:11:a1:44:51:97:74:eb:6c:d2:02:f3:65:92: b9:0d:3c:4f:d3:10:c1:ff:76:b7:3f:47:70:e1:3b:b6:8a:7a: f2:5e:f3:9a:8a:99:d9:3e:72:06:c5:d1:be:1a:35:1f:4d:49: b4:60:28:b0:0d:c5:42:40:ab:f6:9a:b0:18:ad:bd:0c:fa:b6: ce:8f:b2:cf:1b:d7:ce:d5:de:a2:23:6e:c6:d5:75:43:17:de: 9e:b5:03:fc:2a:c4:0a:f3:0c:7d:56:05:c1:0f:b5:2c:68:6c: 5b:1a:13:f5:1c:79:dd:a1:ae:2a:02:38:cf:65:e9:97:ef:96: ed:95:6e:4e:d9:b0:73:01:b6:ee:ed:ac:f9:d9:26:e6:f1:d5: d3:fe:fa:14:b4:b9:02:69:3d:61:42:63:1d:b1:52:14:32:cf: 07:be:8d:45:9f:e1:e3:88:05:75:7a:c7:c9:4d:8d:d9:05:b1: 9f:99:fe:7c:ad:e4:41:10:45:3e:95:83:bd:f3:5c:73:f9:6f: b2:b7:53:81:d4:cc:9b:54:62:35:d8:a0:7a:82:20:df:aa:f2: cc:16:c5:32 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUSZUMCQQE2LvQQbCwoOUf8C7hOoowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMyMzAyNTUwMFoX DTI3MDMyMjAzMDAwMFowMzExMC8GA1UEAxMoNjdBMDlBNEE5NDA4QzcyRUFGNzg2 NzlBM0U4RTRFQzdDMTc0MzlEMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPQPYIpALHVGrSFBPzNyDBU6kOTtHQutURjKxj70CAvkhKVBZte0Y5fHH/gO 1bBXeHc9lWGyPFz0NiWTDtcs8Vrk7uhSC02FV1/KxLvw198TJZYjFkoCPbEfwvkM mit4Ww0LFSsBBjLyIL+1ORNyf6IZ7IbxqXpf46/oSBU8Rl6gU8Mb4uThZOHTfj89 Rxeyr4Zc77vmFQYwpdNn8nVPJ4r+H5S8n40qQJ+GSV2VglQA5G/mIxiuXZ1fom7O YqQzxRSYE7Z5BPM14X8Lc/b24XGpuskcpp3trTtjXcneUvaMe+/ZPMq4jhj2nx8T rqAkH0RLG0TZ1CKRYVIOHZLUmT0CAwEAAaOCAeEwggHdMB0GA1UdDgQWBBRnoJpK lAjHLq94Z5o+jk7HwXQ50jAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTM5NC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAWe2NDAPBAIAAjAJAwcAIAEN8fVAMA0GCSqGSIb3DQEBCwUAA4IB AQB2+TkPrIV/Nxohnw162e/g9NwSR1qZaOZ+6wL9D4hUpK0pOwUcjfF2UBGhRFGX dOts0gLzZZK5DTxP0xDB/3a3P0dw4Tu2inryXvOaipnZPnIGxdG+GjUfTUm0YCiw DcVCQKv2mrAYrb0M+rbOj7LPG9fO1d6iI27G1XVDF96etQP8KsQK8wx9VgXBD7Us aGxbGhP1HHndoa4qAjjPZemX75btlW5O2bBzAbbu7az52Sbm8dXT/voUtLkCaT1h QmMdsVIUMs8Hvo1Fn+HjiAV1esfJTY3ZBbGfmf58reRBEEU+lYO981xz+W+yt1OB 1MybVGI12KB6giDfqvLMFsUy -----END CERTIFICATE-----Generated at Thu Mar 26 04:01:47 2026 by rpki-client