$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149699.roa File: AS149699.roa (raw, json) Hash identifier: fcS6XZddy/Ep4AQqNUKJ2Sx65NBSNo4kknQ/RK48Mkc= Subject key identifier: A6:72:B6:8F:B3:85:0D:73:41:9D:20:A7:8D:B9:8D:0D:0E:74:A1:79 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 271FC98B981314461A089F5DDC1A000102AB7D0B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149699.roa Signing time: Mon 16 Mar 2026 08:00:00 +0000 ROA not before: Mon 16 Mar 2026 07:55:00 +0000 ROA not after: Mon 15 Mar 2027 08:00:00 +0000 asID: 149699 IP address blocks: 103.186.166.0/24 maxlen: 24 103.242.86.0/24 maxlen: 24 2400:f5a0::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:1f:c9:8b:98:13:14:46:1a:08:9f:5d:dc:1a:00:01:02:ab:7d:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 16 07:55:00 2026 GMT Not After : Mar 15 08:00:00 2027 GMT Subject: CN=A672B68FB3850D73419D20A78DB98D0D0E74A179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ec:50:1e:a3:7f:9c:8d:24:44:bf:23:e0:a2: a3:a4:16:b4:08:c8:61:ac:71:06:35:bc:a9:9a:ab: 56:bc:b8:17:df:5f:9d:41:42:ac:24:f2:1e:a1:6d: 53:b9:5e:a4:6f:c4:78:9e:cc:2e:a4:2a:45:62:01: 4a:06:70:3c:42:61:0a:ce:51:aa:53:b6:17:9b:c9: c7:70:c6:f9:dc:2f:fa:14:fa:5f:45:5e:e9:15:e4: de:ba:16:fb:33:36:52:69:06:ca:de:6d:1a:2d:32: be:26:87:3e:12:be:51:03:f8:42:e6:5d:91:79:ad: 6a:eb:57:a0:3c:98:4a:92:8b:6e:99:b0:45:47:af: f9:59:f6:91:99:23:52:c2:41:ee:c2:2a:cc:a9:14: a2:00:ea:42:10:13:32:ad:b3:7b:97:26:72:2e:18: 21:fb:0f:1b:fb:d0:4b:26:69:40:20:16:e1:9d:ef: 69:80:c8:dc:d8:e6:20:89:38:18:56:74:ff:d3:04: 1b:a7:f6:6b:17:5b:80:17:f5:58:1f:33:ff:28:26: 10:95:65:4c:6e:4d:46:9e:22:a9:9f:60:15:5c:5b: 32:df:8b:72:2c:11:64:96:6a:16:55:bc:68:11:da: 6e:ab:15:33:25:47:52:82:06:7d:f5:a6:5b:05:92: 4c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:72:B6:8F:B3:85:0D:73:41:9D:20:A7:8D:B9:8D:0D:0E:74:A1:79 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149699.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.166.0/24 103.242.86.0/24 IPv6: 2400:f5a0::/32 Signature Algorithm: sha256WithRSAEncryption 90:2b:04:43:1f:a5:ed:0c:ee:15:ba:c3:b3:16:4f:3b:fe:bf: 73:f5:9f:f6:45:6c:6c:21:92:c0:aa:0c:3c:a0:21:5d:0d:e1: 81:c6:18:c0:71:8d:fc:23:e2:e2:99:99:c2:b9:7c:3a:d8:bb: 80:18:c9:32:f5:80:e7:c9:c2:e8:fe:69:6e:2f:a3:c3:b3:68: b9:51:4a:29:27:0e:0e:50:32:76:62:7b:d9:80:76:61:5c:12: 96:4f:2e:c3:81:e2:72:d1:51:c1:2c:fc:2d:ad:28:e7:c2:b5: af:e8:81:33:c9:60:dd:1f:4b:0d:e2:b8:b9:dc:09:75:6e:36: a5:3b:f2:4b:a3:49:85:54:af:9a:42:10:e1:ca:ee:ad:f4:0f: b9:62:11:6b:f0:5d:05:41:e2:5c:db:15:0a:ee:bc:a5:dc:6c: 9f:85:f3:0e:65:82:b2:e7:17:3a:88:58:c1:61:04:0e:ea:53: a7:c8:7e:11:78:b6:7d:bb:39:7d:7a:03:f9:4a:c2:05:57:23: 41:a5:01:03:cc:1f:d6:ed:1c:03:12:f6:c9:98:bf:48:79:a5: 3f:3a:3f:96:f4:54:a0:91:ba:bb:46:03:66:28:d6:ff:f5:8f: 3d:c5:17:89:57:56:70:c9:a3:69:05:1f:5d:ff:df:ff:37:17: 03:41:bc:93 -----BEGIN CERTIFICATE----- MIIE8jCCA9qgAwIBAgIUJx/Ji5gTFEYaCJ9d3BoAAQKrfQswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMxNjA3NTUwMFoX DTI3MDMxNTA4MDAwMFowMzExMC8GA1UEAxMoQTY3MkI2OEZCMzg1MEQ3MzQxOUQy MEE3OERCOThEMEQwRTc0QTE3OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALXsUB6jf5yNJES/I+Cio6QWtAjIYaxxBjW8qZqrVry4F99fnUFCrCTyHqFt U7lepG/EeJ7MLqQqRWIBSgZwPEJhCs5RqlO2F5vJx3DG+dwv+hT6X0Ve6RXk3roW +zM2UmkGyt5tGi0yviaHPhK+UQP4QuZdkXmtautXoDyYSpKLbpmwRUev+Vn2kZkj UsJB7sIqzKkUogDqQhATMq2ze5cmci4YIfsPG/vQSyZpQCAW4Z3vaYDI3NjmIIk4 GFZ0/9MEG6f2axdbgBf1WB8z/ygmEJVlTG5NRp4iqZ9gFVxbMt+LciwRZJZqFlW8 aBHabqsVMyVHUoIGffWmWwWSTOkCAwEAAaOCAeUwggHhMB0GA1UdDgQWBBSmcraP s4UNc0GdIKeNuY0NDnSheTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTY5OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQlMCMw EgQCAAEwDAMEAGe6pgMEAGfyVjANBAIAAjAHAwUAJAD1oDANBgkqhkiG9w0BAQsF AAOCAQEAkCsEQx+l7QzuFbrDsxZPO/6/c/Wf9kVsbCGSwKoMPKAhXQ3hgcYYwHGN /CPi4pmZwrl8Oti7gBjJMvWA58nC6P5pbi+jw7NouVFKKScODlAydmJ72YB2YVwS lk8uw4HictFRwSz8La0o58K1r+iBM8lg3R9LDeK4udwJdW42pTvyS6NJhVSvmkIQ 4crurfQPuWIRa/BdBUHiXNsVCu68pdxsn4XzDmWCsucXOohYwWEEDupTp8h+EXi2 fbs5fXoD+UrCBVcjQaUBA8wf1u0cAxL2yZi/SHmlPzo/lvRUoJG6u0YDZijW//WP PcUXiVdWcMmjaQUfXf/f/zcXA0G8kw== -----END CERTIFICATE-----Generated at Thu Mar 26 04:01:52 2026 by rpki-client