$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149413.roa File: AS149413.roa (raw, json) Hash identifier: Ct+aiMXxcXrB4eTZ8fjHS6LWzZVCZGeqRK1xcnrCtgI= Subject key identifier: 41:24:F0:D4:A5:07:CE:D4:A2:AC:F2:03:37:0C:84:EE:DB:1B:9E:82 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4EBA9147A14486A1DB3827059EF32BED3EDC37C1 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149413.roa Signing time: Thu 21 Aug 2025 07:00:00 +0000 ROA not before: Thu 21 Aug 2025 06:55:00 +0000 ROA not after: Thu 20 Aug 2026 07:00:00 +0000 asID: 149413 IP address blocks: 103.182.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:ba:91:47:a1:44:86:a1:db:38:27:05:9e:f3:2b:ed:3e:dc:37:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 21 06:55:00 2025 GMT Not After : Aug 20 07:00:00 2026 GMT Subject: CN=4124F0D4A507CED4A2ACF203370C84EEDB1B9E82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c3:57:bb:25:31:16:cb:37:31:85:32:ac:f6: c3:44:5b:1e:2f:b4:f2:ef:8e:a5:12:6a:3f:dd:a1: 72:a9:55:02:b4:45:51:ff:ac:3f:a0:aa:5f:8f:bd: 85:f0:c8:1f:68:46:48:f3:e3:ae:18:25:7d:90:73: e8:34:c5:04:e6:55:4a:9d:59:60:f8:74:2b:f2:29: c2:24:63:9f:8c:77:64:01:9e:e9:86:38:d9:b5:72: ba:d3:78:a2:0c:f0:4b:12:db:f2:f6:50:40:76:2e: de:9d:c7:a9:5c:f7:52:e4:f3:a5:43:a7:5e:a7:72: 2a:48:a2:b5:c1:94:ff:f7:da:29:c9:50:82:52:63: 1d:f2:83:a0:aa:76:3f:35:39:10:e7:06:43:29:ad: 57:d1:40:e1:79:62:76:8f:5c:43:d7:f4:a5:d3:04: e0:62:e2:f9:c6:5d:d9:a6:f6:c7:2a:84:ad:6a:d0: 39:86:58:7b:cd:79:d1:23:a6:6d:bd:26:e0:93:b2: 39:6c:f3:98:5b:b5:2f:11:e7:b1:05:69:3d:1b:89: 91:ff:0b:9f:27:0c:d1:f7:3b:59:2d:1e:1d:7f:6b: ed:7c:73:68:88:7e:9f:e5:56:0e:a5:3c:78:dd:af: da:2f:78:ca:c8:96:d5:81:82:d8:12:05:bf:76:20: cd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:24:F0:D4:A5:07:CE:D4:A2:AC:F2:03:37:0C:84:EE:DB:1B:9E:82 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149413.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.182.249.0/24 Signature Algorithm: sha256WithRSAEncryption 21:65:b9:6d:7a:4e:fb:05:4d:30:e2:2d:a2:7d:64:3f:97:70: e9:f9:12:c2:a5:95:ce:6c:84:c8:38:d0:34:8b:51:ec:02:fd: a4:01:09:3a:a4:c6:ab:1e:b6:61:45:89:8b:d3:c6:5e:9f:59: 85:c2:fa:1b:53:db:0b:49:0f:a8:f2:ec:0a:50:aa:57:fb:3d: c0:d5:a1:76:2f:40:96:06:13:85:5b:08:ef:5a:87:e2:74:1b: d4:36:2f:94:1e:c6:2b:af:3e:4a:1c:1c:24:b3:cb:c0:51:3f: da:c1:4a:5c:ed:63:d5:d8:11:a2:28:00:66:11:c8:40:71:25: 88:a4:49:cf:ec:25:e2:68:d7:c8:c0:94:07:40:65:04:8a:55: 17:a8:32:b8:06:06:5a:c5:88:eb:ec:49:fb:a2:5f:d5:b8:66: 4f:0a:82:35:51:36:f3:5d:6f:72:b3:72:3b:37:2a:39:a9:9c: 48:b2:fd:f7:97:fc:bf:85:34:48:39:27:5f:64:f4:3c:e5:81: f2:80:99:8f:3c:08:72:91:78:15:54:0a:2e:1d:1d:a5:d9:18: ec:33:7f:25:b9:f5:e3:fc:25:08:5d:b0:63:e3:7f:4c:03:a6: 05:d0:c2:88:27:cc:73:64:e6:96:51:1d:18:b7:96:42:9f:15: 93:ed:b1:14 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUTrqRR6FEhqHbOCcFnvMr7T7cN8EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgyMTA2NTUwMFoX DTI2MDgyMDA3MDAwMFowMzExMC8GA1UEAxMoNDEyNEYwRDRBNTA3Q0VENEEyQUNG MjAzMzcwQzg0RUVEQjFCOUU4MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ3DV7slMRbLNzGFMqz2w0RbHi+08u+OpRJqP92hcqlVArRFUf+sP6CqX4+9 hfDIH2hGSPPjrhglfZBz6DTFBOZVSp1ZYPh0K/IpwiRjn4x3ZAGe6YY42bVyutN4 ogzwSxLb8vZQQHYu3p3HqVz3UuTzpUOnXqdyKkiitcGU//faKclQglJjHfKDoKp2 PzU5EOcGQymtV9FA4Xlido9cQ9f0pdME4GLi+cZd2ab2xyqErWrQOYZYe8150SOm bb0m4JOyOWzzmFu1LxHnsQVpPRuJkf8LnycM0fc7WS0eHX9r7XxzaIh+n+VWDqU8 eN2v2i94ysiW1YGC2BIFv3Ygza8CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRBJPDU pQfO1KKs8gM3DITu2xuegjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTQxMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGe2+TANBgkqhkiG9w0BAQsFAAOCAQEAIWW5bXpO+wVNMOIton1k P5dw6fkSwqWVzmyEyDjQNItR7AL9pAEJOqTGqx62YUWJi9PGXp9ZhcL6G1PbC0kP qPLsClCqV/s9wNWhdi9AlgYThVsI71qH4nQb1DYvlB7GK68+ShwcJLPLwFE/2sFK XO1j1dgRoigAZhHIQHEliKRJz+wl4mjXyMCUB0BlBIpVF6gyuAYGWsWI6+xJ+6Jf 1bhmTwqCNVE2811vcrNyOzcqOamcSLL995f8v4U0SDknX2T0POWB8oCZjzwIcpF4 FVQKLh0dpdkY7DN/Jbn14/wlCF2wY+N/TAOmBdDCiCfMc2TmllEdGLeWQp8Vk+2x FA== -----END CERTIFICATE-----Generated at Sat Aug 23 12:06:24 2025 by rpki-client