$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149412.roa File: AS149412.roa (raw, json) Hash identifier: bi5dbjibto1MHpTGdUl6snJ/U4/N7QGa9kBQDz2B2pE= Subject key identifier: E9:D1:A1:21:38:91:5C:B9:14:4E:C2:87:E7:F5:8C:66:32:59:80:45 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 69CA2F3699378DB8821F4C685257E566A37B3152 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149412.roa Signing time: Mon 23 Mar 2026 05:00:00 +0000 ROA not before: Mon 23 Mar 2026 04:55:00 +0000 ROA not after: Mon 22 Mar 2027 05:00:00 +0000 asID: 149412 IP address blocks: 103.183.94.0/24 maxlen: 24 103.191.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:51:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:ca:2f:36:99:37:8d:b8:82:1f:4c:68:52:57:e5:66:a3:7b:31:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 23 04:55:00 2026 GMT Not After : Mar 22 05:00:00 2027 GMT Subject: CN=E9D1A12138915CB9144EC287E7F58C6632598045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2e:f9:47:6f:5e:8f:5f:af:75:be:10:60:d6: 8d:a1:71:bf:14:66:7d:62:6f:d1:94:cb:7e:ec:5c: 29:c6:d3:e2:50:ed:98:b0:31:eb:b9:90:e2:59:4e: bd:41:d1:7a:66:4f:a9:68:4d:c4:02:e9:ac:10:6c: c4:1b:24:36:6f:f0:ec:44:d6:52:14:4d:33:5e:c2: 01:3f:73:39:27:ab:2e:43:a3:a8:9c:b4:d8:5f:d7: 65:84:2d:e9:8f:47:42:6d:c3:e5:e4:94:72:9e:5c: 46:00:2f:9e:cf:82:1e:16:b5:9b:69:24:4d:60:48: 4f:36:a0:d2:ad:af:54:f0:e6:c5:80:7a:ce:36:f0: 4e:a6:1c:a8:b8:47:bf:91:01:20:2c:97:1c:83:9a: c8:ee:73:f7:1c:89:e8:4a:24:fe:e5:3a:68:5d:31: 87:d8:5b:97:4b:4a:61:1f:97:24:aa:94:d5:6d:f7: 2f:74:0b:4d:b6:41:d3:a1:bf:06:65:2c:53:9a:89: cd:61:9b:e8:31:c0:7b:65:1f:72:e1:0f:ed:c3:3c: 8c:1c:11:01:4c:a6:e1:0e:02:8e:dd:e5:1e:d0:44: 8a:54:ae:f7:20:7f:40:2e:45:6e:9f:e8:32:3b:b9: c5:ed:60:37:34:02:b4:00:59:71:c3:69:02:29:22: 35:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D1:A1:21:38:91:5C:B9:14:4E:C2:87:E7:F5:8C:66:32:59:80:45 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149412.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.183.94.0/24 103.191.94.0/24 Signature Algorithm: sha256WithRSAEncryption 15:64:bc:d2:f8:68:d9:e4:5c:c5:e0:4e:79:50:e8:cb:8c:6f: ce:d1:e8:50:7b:f2:7f:f3:05:ad:23:27:41:08:d3:a0:79:a0: c5:f5:37:7b:91:66:69:b3:db:fe:bb:6a:ec:2c:f4:c6:63:1d: 31:f0:d2:1f:45:a2:22:fc:1f:6f:a7:59:92:d4:b3:7b:47:3d: 3e:5f:6d:d3:2b:3a:8c:0f:f9:a7:01:94:eb:7b:31:9c:58:1d: 5c:4e:d0:c9:45:d7:8d:02:25:b6:8b:11:e5:e9:86:c3:ac:d0: 59:c3:7e:27:47:d4:4e:31:99:30:2a:85:c1:e2:87:b9:c5:76: 3d:70:07:74:d6:07:7f:67:30:5b:20:62:3c:71:8f:96:a9:0a: 3e:03:1d:3b:3e:c8:e5:77:ce:d6:cc:92:46:d1:95:67:f2:f7: 4b:06:5f:54:56:f4:ae:81:59:be:48:5c:92:84:c5:ad:6c:ee: 6c:21:95:55:6d:17:07:ce:03:cd:1d:76:02:1e:ba:90:2b:65: 4e:7d:80:0b:f2:ae:81:9d:0b:8b:d3:57:71:8b:20:97:50:59: 02:17:95:37:39:88:ac:d1:a8:2e:2a:ef:d4:e7:1f:1d:0f:13: 23:70:47:97:1d:6a:a1:07:b9:b3:76:09:45:5c:6c:e6:9f:7f: d2:10:54:41 -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUacovNpk3jbiCH0xoUlflZqN7MVIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMyMzA0NTUwMFoX DTI3MDMyMjA1MDAwMFowMzExMC8GA1UEAxMoRTlEMUExMjEzODkxNUNCOTE0NEVD Mjg3RTdGNThDNjYzMjU5ODA0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMQu+UdvXo9fr3W+EGDWjaFxvxRmfWJv0ZTLfuxcKcbT4lDtmLAx67mQ4llO vUHRemZPqWhNxALprBBsxBskNm/w7ETWUhRNM17CAT9zOSerLkOjqJy02F/XZYQt 6Y9HQm3D5eSUcp5cRgAvns+CHha1m2kkTWBITzag0q2vVPDmxYB6zjbwTqYcqLhH v5EBICyXHIOayO5z9xyJ6Eok/uU6aF0xh9hbl0tKYR+XJKqU1W33L3QLTbZB06G/ BmUsU5qJzWGb6DHAe2UfcuEP7cM8jBwRAUym4Q4Cjt3lHtBEilSu9yB/QC5Fbp/o Mju5xe1gNzQCtABZccNpAikiNeMCAwEAAaOCAdYwggHSMB0GA1UdDgQWBBTp0aEh OJFcuRROwofn9YxmMlmARTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTQxMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAGe3XgMEAGe/XjANBgkqhkiG9w0BAQsFAAOCAQEAFWS80vho2eRc xeBOeVDoy4xvztHoUHvyf/MFrSMnQQjToHmgxfU3e5FmabPb/rtq7Cz0xmMdMfDS H0WiIvwfb6dZktSze0c9Pl9t0ys6jA/5pwGU63sxnFgdXE7QyUXXjQIltosR5emG w6zQWcN+J0fUTjGZMCqFweKHucV2PXAHdNYHf2cwWyBiPHGPlqkKPgMdOz7I5XfO 1sySRtGVZ/L3SwZfVFb0roFZvkhckoTFrWzubCGVVW0XB84DzR12Ah66kCtlTn2A C/KugZ0Li9NXcYsgl1BZAheVNzmIrNGoLirv1OcfHQ8TI3BHlx1qoQe5s3YJRVxs 5p9/0hBUQQ== -----END CERTIFICATE-----Generated at Thu Mar 26 07:11:02 2026 by rpki-client