$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149940.roa File: AS149940.roa (raw, json) Hash identifier: bP0jByc8o7/ikZRuYqGodQuedQgpVk2e6Ux4tOtRC3g= Subject key identifier: 19:1C:22:28:34:33:CF:A0:96:DB:FB:18:60:F7:6F:7E:29:55:FF:C1 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 05B00B6DE28669E3E4969B96C1AE6BAAB7816261 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149940.roa Signing time: Fri 10 Oct 2025 08:00:00 +0000 ROA not before: Fri 10 Oct 2025 07:55:00 +0000 ROA not after: Fri 09 Oct 2026 08:00:00 +0000 asID: 149940 IP address blocks: 103.191.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:b0:0b:6d:e2:86:69:e3:e4:96:9b:96:c1:ae:6b:aa:b7:81:62:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 10 07:55:00 2025 GMT Not After : Oct 9 08:00:00 2026 GMT Subject: CN=191C22283433CFA096DBFB1860F76F7E2955FFC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:61:80:bd:65:27:45:fa:f1:7e:ef:a4:34:2b: ec:14:f7:85:6e:30:1f:93:2b:16:60:35:7f:2e:24: 33:97:50:5d:99:49:16:a8:fd:f6:b4:80:2a:9c:5d: c9:b0:23:52:c7:a2:ae:38:85:85:ad:6c:24:4a:55: cf:a9:2f:ec:50:21:25:b1:c9:a6:a1:b8:5b:f9:a9: da:11:7e:85:a2:01:c1:8e:60:19:02:e3:6e:34:ce: d2:ef:67:66:61:4b:28:b1:b9:8b:f5:01:6f:d6:4a: c8:04:ad:02:70:89:70:4c:02:ab:39:e0:f3:e1:58: 02:ba:23:85:23:1b:a0:65:20:6f:a8:ab:63:78:f1: 0a:4b:12:84:0d:c5:8f:1c:45:99:b0:b1:67:aa:4f: 28:3b:fe:8c:56:e7:6e:9b:c0:19:f4:0d:a4:09:75: d7:b8:77:87:e0:af:c9:c9:43:09:01:54:49:c8:f9: 5d:a9:a5:a8:a6:98:32:ae:b4:47:7d:60:cd:21:18: 4f:49:a9:0e:f7:9f:97:3d:ee:ba:0e:c4:56:38:2c: da:9b:dc:0e:a6:82:dc:bf:10:04:5d:da:0e:ed:60: 21:79:3b:67:9a:45:17:c3:31:10:c5:9d:dc:f8:51: 31:26:ea:e5:1a:96:63:5a:b5:c9:c4:8b:f3:cd:f6: b3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:1C:22:28:34:33:CF:A0:96:DB:FB:18:60:F7:6F:7E:29:55:FF:C1 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149940.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.250.0/23 Signature Algorithm: sha256WithRSAEncryption 91:e3:20:dc:29:ce:3f:6a:73:0a:5a:d3:80:34:53:42:91:98: 26:3e:95:e9:db:91:58:de:4d:cb:dc:96:b7:82:0b:b2:d5:fc: 72:a8:18:ac:13:46:89:f3:8a:27:50:05:f2:b4:d9:16:47:a5: a7:f5:ea:0c:48:91:3b:e8:b5:f3:ec:6c:4e:7a:c8:84:d0:47: 7d:89:a8:d9:8e:d7:9c:04:9b:54:db:89:0a:e4:92:61:1f:1f: 59:99:30:58:ed:0f:ed:7a:24:87:41:45:89:3e:23:f4:31:19: 6e:0a:e9:7a:ea:98:ab:7f:73:b5:a5:2f:c5:ec:15:3f:20:cd: e9:56:84:13:b7:47:0e:33:ba:aa:4d:44:c5:c6:ad:8e:59:b8: 77:c9:65:6f:55:8b:0e:ba:dd:11:ea:f6:f1:4d:09:f6:69:45: 59:bc:7a:71:95:89:5e:0a:13:3e:00:c1:cb:cd:e6:04:43:38: 0d:52:d0:df:e9:31:c4:d8:7a:da:bd:18:90:97:82:5b:a6:ab: 46:66:5d:1f:71:c9:92:fa:fa:00:a7:f5:d1:22:8c:a5:bf:ef: 6a:3a:73:8f:f3:b7:b9:ea:78:08:d1:7d:89:8c:b2:86:8c:06: 9e:64:d3:9e:45:cf:9d:9b:da:23:76:e2:eb:e3:f9:83:e2:9e: 68:ed:9e:02 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUBbALbeKGaePklpuWwa5rqreBYmEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAxMDA3NTUwMFoX DTI2MTAwOTA4MDAwMFowMzExMC8GA1UEAxMoMTkxQzIyMjgzNDMzQ0ZBMDk2REJG QjE4NjBGNzZGN0UyOTU1RkZDMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANhhgL1lJ0X68X7vpDQr7BT3hW4wH5MrFmA1fy4kM5dQXZlJFqj99rSAKpxd ybAjUseirjiFha1sJEpVz6kv7FAhJbHJpqG4W/mp2hF+haIBwY5gGQLjbjTO0u9n ZmFLKLG5i/UBb9ZKyAStAnCJcEwCqzng8+FYArojhSMboGUgb6irY3jxCksShA3F jxxFmbCxZ6pPKDv+jFbnbpvAGfQNpAl117h3h+CvyclDCQFUScj5XamlqKaYMq60 R31gzSEYT0mpDveflz3uug7EVjgs2pvcDqaC3L8QBF3aDu1gIXk7Z5pFF8MxEMWd 3PhRMSbq5RqWY1q1ycSL8832s/UCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQZHCIo NDPPoJbb+xhg929+KVX/wTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTk0MC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWe/+jANBgkqhkiG9w0BAQsFAAOCAQEAkeMg3CnOP2pzClrTgDRT QpGYJj6V6duRWN5Ny9yWt4ILstX8cqgYrBNGifOKJ1AF8rTZFkelp/XqDEiRO+i1 8+xsTnrIhNBHfYmo2Y7XnASbVNuJCuSSYR8fWZkwWO0P7Xokh0FFiT4j9DEZbgrp euqYq39ztaUvxewVPyDN6VaEE7dHDjO6qk1Excatjlm4d8llb1WLDrrdEer28U0J 9mlFWbx6cZWJXgoTPgDBy83mBEM4DVLQ3+kxxNh62r0YkJeCW6arRmZdH3HJkvr6 AKf10SKMpb/vajpzj/O3uep4CNF9iYyyhowGnmTTnkXPnZvaI3bi6+P5g+KeaO2e Ag== -----END CERTIFICATE-----Generated at Mon Oct 20 03:03:31 2025 by rpki-client