$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149409.roa File: AS149409.roa (raw, json) Hash identifier: ZMf7m4fvJPMHlWwwZ1WVoDEAnbb417k2dGH8V3YI1CE= Subject key identifier: B8:4F:FD:EC:31:D6:62:6A:7F:8B:65:D4:D7:67:8E:3F:83:21:4F:41 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 57A0C8FF89D8A8865683B95823D955BD36D9BF62 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149409.roa Signing time: Sun 03 May 2026 08:14:47 +0000 ROA not before: Sun 03 May 2026 08:09:47 +0000 ROA not after: Sun 02 May 2027 08:14:47 +0000 asID: 149409 IP address blocks: 202.51.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:a0:c8:ff:89:d8:a8:86:56:83:b9:58:23:d9:55:bd:36:d9:bf:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 08:09:47 2026 GMT Not After : May 2 08:14:47 2027 GMT Subject: CN=B84FFDEC31D6626A7F8B65D4D7678E3F83214F41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0d:cc:c7:bf:71:a9:40:d9:c5:fe:3e:3a:e8: d9:b5:fe:0d:71:9e:15:22:31:07:c5:d9:f8:30:e0: 5e:08:79:13:db:1a:cd:64:e8:a5:4e:2f:8c:93:78: 2c:77:59:10:bc:09:b4:b1:22:0f:4c:fd:43:49:87: d7:54:55:6d:07:74:69:89:1a:36:f8:b6:91:88:36: fd:4c:74:9b:9f:be:51:fb:87:88:e3:cc:a1:25:ba: 11:73:c1:4b:b3:81:69:a1:4e:77:e3:58:8a:b0:22: f9:7d:83:25:56:b4:2c:c8:e1:1c:e6:5a:4d:31:bc: 68:e6:5d:08:27:13:06:26:59:0b:2e:a7:3e:b4:85: 4b:fb:7e:7b:4c:af:e1:91:be:30:b5:25:8b:15:46: 68:20:f4:0f:d1:97:b3:ca:0f:5b:bc:bf:9b:5b:50: 02:78:87:2a:7d:42:70:f7:13:d0:6b:e6:70:5a:1b: 40:c4:0d:b4:ed:a5:e2:b6:c1:0a:6d:85:06:9a:47: 5d:62:fd:39:f7:46:34:66:2b:87:30:31:1e:eb:07: fd:d1:68:e1:81:df:66:0a:f2:62:5f:bf:e0:23:c6: 11:62:91:47:fd:de:43:b1:06:79:a0:49:85:02:0c: a3:7a:a8:33:73:2a:dd:f8:15:0f:64:66:ee:61:81: 0e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:4F:FD:EC:31:D6:62:6A:7F:8B:65:D4:D7:67:8E:3F:83:21:4F:41 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149409.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.51.20.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:ea:99:08:d4:66:bd:2a:c6:39:4a:80:13:e2:9d:e8:7e:81: 3d:0d:3d:9f:c7:de:b4:1e:d9:4d:a7:53:e4:f7:b1:0b:ff:18: e6:c0:42:c1:c7:10:b1:d9:18:48:ca:67:67:71:d0:31:68:51: 3c:f6:62:3e:3e:1d:c4:b1:e8:75:74:fa:a5:0a:a5:3a:30:86: 61:6e:b8:0c:24:dd:77:d4:49:9f:d8:60:1b:1e:c9:b8:bb:f2: f7:5e:51:d2:1a:b6:81:02:8b:6c:89:55:b1:8e:44:e5:d4:fe: 69:3d:eb:b3:c1:d9:45:6b:d6:76:e9:ac:91:fc:95:23:e2:1f: d3:e9:b1:64:28:04:02:ac:c5:79:f9:b1:f4:18:75:f3:7d:97: 58:31:55:93:eb:ae:55:e3:13:57:d3:22:2b:80:74:95:0b:c1: 05:bb:85:31:7d:42:8d:77:54:a9:83:6e:96:74:63:2f:24:4d: d5:6c:4b:36:a4:01:52:66:87:88:88:cd:4b:0e:bf:d7:12:ba: ee:21:dc:35:e9:06:c7:38:20:85:12:01:d4:f7:10:35:f4:66: 70:8a:d2:71:a4:68:93:84:bf:cd:48:9c:93:11:f7:91:b7:08: 86:56:b2:5d:53:46:d0:1e:27:f2:24:cb:6e:13:75:53:fa:65: c3:35:03:b6 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUV6DI/4nYqIZWg7lYI9lVvTbZv2IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzA4MDk0N1oX DTI3MDUwMjA4MTQ0N1owMzExMC8GA1UEAxMoQjg0RkZERUMzMUQ2NjI2QTdGOEI2 NUQ0RDc2NzhFM0Y4MzIxNEY0MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL8NzMe/calA2cX+Pjro2bX+DXGeFSIxB8XZ+DDgXgh5E9sazWTopU4vjJN4 LHdZELwJtLEiD0z9Q0mH11RVbQd0aYkaNvi2kYg2/Ux0m5++UfuHiOPMoSW6EXPB S7OBaaFOd+NYirAi+X2DJVa0LMjhHOZaTTG8aOZdCCcTBiZZCy6nPrSFS/t+e0yv 4ZG+MLUlixVGaCD0D9GXs8oPW7y/m1tQAniHKn1CcPcT0GvmcFobQMQNtO2l4rbB Cm2FBppHXWL9OfdGNGYrhzAxHusH/dFo4YHfZgryYl+/4CPGEWKRR/3eQ7EGeaBJ hQIMo3qoM3Mq3fgVD2Rm7mGBDp8CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBS4T/3s MdZian+LZdTXZ44/gyFPQTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ5NDA5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQByjMUMA0GCSqGSIb3DQEBCwUAA4IBAQBq6pkI1Ga9KsY5SoAT4p3ofoE9 DT2fx960HtlNp1Pk97EL/xjmwELBxxCx2RhIymdncdAxaFE89mI+Ph3Eseh1dPql CqU6MIZhbrgMJN131Emf2GAbHsm4u/L3XlHSGraBAotsiVWxjkTl1P5pPeuzwdlF a9Z26ayR/JUj4h/T6bFkKAQCrMV5+bH0GHXzfZdYMVWT665V4xNX0yIrgHSVC8EF u4UxfUKNd1Spg26WdGMvJE3VbEs2pAFSZoeIiM1LDr/XErruIdw16QbHOCCFEgHU 9xA19GZwitJxpGiThL/NSJyTEfeRtwiGVrJdU0bQHifyJMtuE3VT+mXDNQO2 -----END CERTIFICATE-----Generated at Tue May 12 22:43:12 2026 by rpki-client