$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149748.roa File: AS149748.roa (raw, json) Hash identifier: rEq7qT/TOYW6lO6WoU/iaktgUhvKoLgEq4pklJgw2W8= Subject key identifier: 41:F5:F8:04:10:E2:1A:F2:2A:C4:39:C5:64:28:0B:6C:FD:FE:EB:07 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 298D50142CECCAA16C6E88E9D48BA3AB0C8C96E9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149748.roa Signing time: Mon 29 Sep 2025 01:00:00 +0000 ROA not before: Mon 29 Sep 2025 00:55:00 +0000 ROA not after: Mon 28 Sep 2026 01:00:00 +0000 asID: 149748 IP address blocks: 103.189.104.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:8d:50:14:2c:ec:ca:a1:6c:6e:88:e9:d4:8b:a3:ab:0c:8c:96:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 29 00:55:00 2025 GMT Not After : Sep 28 01:00:00 2026 GMT Subject: CN=41F5F80410E21AF22AC439C564280B6CFDFEEB07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:35:4e:a3:3e:a1:f3:c9:f9:11:18:95:ac:4c: b5:43:c4:0a:bd:2f:5d:bd:a7:3c:cf:cf:e7:5e:50: d0:26:39:6b:2b:fa:97:fb:4a:0f:7e:0c:1d:27:ad: 47:a6:c3:ac:58:54:c1:23:a6:e3:07:8b:e7:3b:c8: d0:cb:ac:1a:15:a8:5c:d7:fe:46:f3:76:40:29:35: e7:96:f5:ac:a6:b7:57:41:32:9b:c8:b9:dc:c5:40: ba:6b:11:3c:15:a6:7e:f5:dd:12:96:cb:ac:62:ea: e1:44:29:0c:90:ae:5e:ac:e7:6b:ce:3b:f8:c8:cf: 0f:33:36:a6:1c:e6:04:5a:cf:fa:c2:df:0c:e8:9e: 83:6a:de:6f:f1:c9:9e:c7:c2:f8:ac:81:cd:fc:b1: 44:c6:33:6b:9b:c5:7a:1e:97:cf:15:68:15:f5:f4: 5e:62:f1:46:21:9b:04:be:e6:9c:62:42:f3:14:a3: 85:22:b6:b2:a3:08:14:32:df:91:e0:81:94:69:07: d8:8b:65:ad:5d:bb:37:85:c2:e2:a5:6f:14:dd:bc: bc:59:ca:e5:be:cc:34:ac:53:7a:ff:b6:cb:f8:02: 37:cd:f6:5e:24:22:c7:f3:28:ab:05:3d:dd:63:3f: fe:b8:81:b4:cc:8d:7d:bc:83:85:d7:cb:88:93:14: f9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F5:F8:04:10:E2:1A:F2:2A:C4:39:C5:64:28:0B:6C:FD:FE:EB:07 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149748.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.104.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:28:f1:c0:4f:2a:1d:47:51:86:53:87:89:c0:44:94:c2:8e: 84:8c:fd:99:51:fb:dc:19:fc:e2:10:c6:72:53:32:69:7a:61: 07:56:ac:0e:73:ef:59:b9:01:0a:f6:e1:a3:e3:fa:c6:a3:38: ac:70:0d:8a:8d:ff:e8:09:f7:9d:14:c4:8d:c1:4c:49:95:66: 27:d2:45:9d:f2:3e:44:c6:24:95:f2:af:cf:fb:8c:59:aa:38: 45:ab:f2:8a:55:2a:d6:c9:79:82:7a:43:29:56:8b:b5:8d:4f: 40:ef:fc:25:c0:72:f4:1a:98:d6:4a:c5:72:11:e2:bd:22:eb: 18:86:ff:dc:b3:5f:5d:39:f3:2e:fc:11:f4:41:69:82:91:98: a0:48:f8:6f:a6:2c:68:51:ae:93:ef:89:45:94:47:29:61:60: 2c:5d:09:b9:d8:9a:73:19:96:d5:ae:4e:bf:58:0c:61:9a:3b: 13:79:53:3b:96:50:28:e8:c7:ee:8a:88:5e:da:69:9c:a6:ca: 69:2b:e0:bb:98:28:73:5a:c4:eb:91:c6:1a:c8:cf:6b:a1:46: 4f:be:f5:e8:21:2f:a6:5a:f9:c0:d9:71:89:15:3e:6a:43:aa: 93:71:3e:60:8a:d9:94:2f:8c:5f:af:6e:55:55:50:a1:5f:d7: 0f:88:a6:b1 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUKY1QFCzsyqFsbojp1IujqwyMlukwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkyOTAwNTUwMFoX DTI2MDkyODAxMDAwMFowMzExMC8GA1UEAxMoNDFGNUY4MDQxMEUyMUFGMjJBQzQz OUM1NjQyODBCNkNGREZFRUIwNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOE1TqM+ofPJ+REYlaxMtUPECr0vXb2nPM/P515Q0CY5ayv6l/tKD34MHSet R6bDrFhUwSOm4weL5zvI0MusGhWoXNf+RvN2QCk155b1rKa3V0Eym8i53MVAumsR PBWmfvXdEpbLrGLq4UQpDJCuXqzna847+MjPDzM2phzmBFrP+sLfDOieg2reb/HJ nsfC+KyBzfyxRMYza5vFeh6XzxVoFfX0XmLxRiGbBL7mnGJC8xSjhSK2sqMIFDLf keCBlGkH2ItlrV27N4XC4qVvFN28vFnK5b7MNKxTev+2y/gCN832XiQix/MoqwU9 3WM//riBtMyNfbyDhdfLiJMU+UsCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRB9fgE EOIa8irEOcVkKAts/f7rBzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTc0OC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWe9aDANBgkqhkiG9w0BAQsFAAOCAQEAayjxwE8qHUdRhlOHicBE lMKOhIz9mVH73Bn84hDGclMyaXphB1asDnPvWbkBCvbho+P6xqM4rHANio3/6An3 nRTEjcFMSZVmJ9JFnfI+RMYklfKvz/uMWao4RavyilUq1sl5gnpDKVaLtY1PQO/8 JcBy9BqY1krFchHivSLrGIb/3LNfXTnzLvwR9EFpgpGYoEj4b6YsaFGuk++JRZRH KWFgLF0JudiacxmW1a5Ov1gMYZo7E3lTO5ZQKOjH7oqIXtppnKbKaSvgu5goc1rE 65HGGsjPa6FGT7716CEvplr5wNlxiRU+akOqk3E+YIrZlC+MX69uVVVQoV/XD4im sQ== -----END CERTIFICATE-----Generated at Mon Oct 20 03:04:38 2025 by rpki-client