$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149696.roa File: AS149696.roa (raw, json) Hash identifier: afHN9/V53bSjUYrPya8ezoSgd8qT2UBfscod8Y6ZmAQ= Subject key identifier: B2:5F:F7:D8:67:E9:F7:F4:35:9F:85:1C:76:65:43:BB:28:D4:0C:16 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 20A692E3FD9199A4B4EDFB996692F6D7BC4EA368 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149696.roa Signing time: Fri 13 Mar 2026 09:00:00 +0000 ROA not before: Fri 13 Mar 2026 08:55:00 +0000 ROA not after: Fri 12 Mar 2027 09:00:00 +0000 asID: 149696 IP address blocks: 103.186.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:a6:92:e3:fd:91:99:a4:b4:ed:fb:99:66:92:f6:d7:bc:4e:a3:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 13 08:55:00 2026 GMT Not After : Mar 12 09:00:00 2027 GMT Subject: CN=B25FF7D867E9F7F4359F851C766543BB28D40C16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:49:cf:32:98:0e:7a:6e:c6:05:ee:f3:06:92: f0:35:37:b4:98:31:49:aa:73:b9:62:e1:1d:20:98: f2:1c:3c:42:41:6a:d1:04:7b:9b:ad:a5:ca:59:bf: bd:a9:9a:d1:6c:82:a8:d5:4d:1c:24:71:ac:9b:60: af:58:77:fb:bd:70:87:32:49:82:c7:e2:a4:68:74: c7:85:c5:41:74:93:79:91:d4:71:62:67:71:92:44: 55:1d:23:3b:9b:c4:4d:ff:9d:d6:ea:ed:5e:28:80: 7c:ad:76:e5:3a:5f:56:4a:d5:fa:8c:f7:44:33:af: 54:60:e2:e9:f9:ef:2a:1e:7f:83:46:0a:54:34:07: e0:b5:4f:7e:b9:0d:12:95:2d:47:5a:83:9c:28:17: d6:1b:12:c3:49:1f:2e:98:a5:4e:03:80:0e:2e:51: 3b:bd:4a:cc:6c:63:9d:ab:01:5a:87:7b:94:dd:dd: 75:41:d7:1e:d8:26:1c:80:85:ff:b6:65:4d:b2:07: 30:64:c2:98:0c:2f:2a:5c:4d:e2:04:a5:b7:9f:cc: 8c:d7:71:e8:82:63:b9:f2:0d:05:2b:7a:44:58:9a: b7:15:fb:ab:40:da:42:01:82:99:3e:ca:94:76:24: 0f:69:3f:fc:1c:6d:14:37:96:64:5a:d2:a7:f5:d7: 04:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:5F:F7:D8:67:E9:F7:F4:35:9F:85:1C:76:65:43:BB:28:D4:0C:16 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149696.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.98.0/23 Signature Algorithm: sha256WithRSAEncryption 27:49:26:b9:5b:b4:a9:28:31:95:dd:76:5b:6c:68:dd:92:75: 8d:39:94:57:ff:3c:91:65:25:b8:ea:28:e7:fc:9e:e4:e8:6b: f4:89:36:1c:7d:1a:0a:78:ab:20:b9:e5:39:9f:79:24:9d:9e: 92:9d:68:a1:23:97:bb:3d:e2:e8:d7:1b:c2:27:a1:1d:c0:95: da:89:e8:03:4b:ec:30:45:07:26:b3:b3:75:98:f7:0c:00:d0: d8:8b:9f:9e:ae:01:d9:df:58:7b:bb:45:07:a1:ca:6f:eb:17: 2c:c3:99:66:7c:94:63:7e:a0:08:12:d4:73:30:fa:dc:a9:9a: ea:45:d8:84:81:7a:a2:43:70:1e:20:19:0b:4d:e2:91:26:c8: 4b:72:4d:df:92:4c:3b:43:66:62:3c:e6:71:d1:5f:2a:52:8f: f9:20:5b:bd:c3:1c:49:72:76:cd:59:e5:a2:4f:65:2e:25:2b: 65:2c:8f:29:cb:32:24:c1:38:fb:85:a3:65:cc:5e:7f:50:fb: b1:6d:50:85:3b:aa:6c:ca:ec:73:56:64:61:13:3c:59:07:c4: 69:ec:9c:fc:19:45:c1:91:02:36:8e:29:8c:6e:31:0c:de:19: 53:79:74:a3:b8:b2:51:57:fd:1e:b6:c2:69:22:96:e0:cf:54: 4b:2c:b8:f6 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUIKaS4/2RmaS07fuZZpL217xOo2gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMxMzA4NTUwMFoX DTI3MDMxMjA5MDAwMFowMzExMC8GA1UEAxMoQjI1RkY3RDg2N0U5RjdGNDM1OUY4 NTFDNzY2NTQzQkIyOEQ0MEMxNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMJJzzKYDnpuxgXu8waS8DU3tJgxSapzuWLhHSCY8hw8QkFq0QR7m62lylm/ vama0WyCqNVNHCRxrJtgr1h3+71whzJJgsfipGh0x4XFQXSTeZHUcWJncZJEVR0j O5vETf+d1urtXiiAfK125TpfVkrV+oz3RDOvVGDi6fnvKh5/g0YKVDQH4LVPfrkN EpUtR1qDnCgX1hsSw0kfLpilTgOADi5RO71KzGxjnasBWod7lN3ddUHXHtgmHICF /7ZlTbIHMGTCmAwvKlxN4gSlt5/MjNdx6IJjufINBSt6RFiatxX7q0DaQgGCmT7K lHYkD2k//BxtFDeWZFrSp/XXBFUCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSyX/fY Z+n39DWfhRx2ZUO7KNQMFjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTY5Ni5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWe6YjANBgkqhkiG9w0BAQsFAAOCAQEAJ0kmuVu0qSgxld12W2xo 3ZJ1jTmUV/88kWUluOoo5/ye5Ohr9Ik2HH0aCnirILnlOZ95JJ2ekp1ooSOXuz3i 6NcbwiehHcCV2onoA0vsMEUHJrOzdZj3DADQ2Iufnq4B2d9Ye7tFB6HKb+sXLMOZ ZnyUY36gCBLUczD63Kma6kXYhIF6okNwHiAZC03ikSbIS3JN35JMO0NmYjzmcdFf KlKP+SBbvcMcSXJ2zVnlok9lLiUrZSyPKcsyJME4+4WjZcxef1D7sW1QhTuqbMrs c1ZkYRM8WQfEaeyc/BlFwZECNo4pjG4xDN4ZU3l0o7iyUVf9HrbCaSKW4M9USyy4 9g== -----END CERTIFICATE-----Generated at Thu Mar 26 04:01:58 2026 by rpki-client