$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149883.roa File: AS149883.roa (raw, json) Hash identifier: w5gMan0EJVGyO1BYM2+mY6UhP98cx5KqIYhJovJJStw= Subject key identifier: 3E:3C:D2:47:F0:9E:49:35:79:2E:BE:82:75:0E:EB:33:CF:C4:1B:9D Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 64A53A7E12A532A9568850055A6E0CD76CE9E51E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149883.roa Signing time: Sun 03 May 2026 05:38:39 +0000 ROA not before: Sun 03 May 2026 05:33:39 +0000 ROA not after: Sun 02 May 2027 05:38:39 +0000 asID: 149883 IP address blocks: 103.156.140.0/24 maxlen: 24 103.156.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:a5:3a:7e:12:a5:32:a9:56:88:50:05:5a:6e:0c:d7:6c:e9:e5:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 05:33:39 2026 GMT Not After : May 2 05:38:39 2027 GMT Subject: CN=3E3CD247F09E4935792EBE82750EEB33CFC41B9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8f:ed:7f:3a:37:fd:f3:72:9b:eb:bb:6c:2b: 0c:d0:85:c5:4c:21:69:9d:64:ac:fc:25:d7:6b:7c: bf:92:10:0d:6f:2c:84:55:d9:b7:50:e6:65:ef:55: 9e:42:26:95:c4:d8:17:e2:ea:86:d2:96:b4:34:ec: 8a:4a:ef:d7:56:42:c2:93:34:cc:a1:09:f1:53:50: 36:35:a3:32:b9:d2:e9:9a:33:33:84:e5:42:bc:3d: 7a:74:19:e7:af:c8:9c:e6:a6:34:1a:c0:dc:a6:6d: 37:9b:5a:2e:48:84:3a:4a:ba:eb:90:04:de:30:fd: 4a:bf:e9:00:e9:c9:be:c2:5d:9b:a9:4b:1f:bc:87: 63:44:dd:61:24:20:e1:29:7d:d4:d5:41:38:ed:10: ed:dd:73:8b:b1:b0:11:f0:08:f4:70:c1:51:30:5f: 2f:4b:88:66:29:7d:52:d4:72:19:7d:5d:65:12:b5: b9:a1:b8:2f:f0:de:18:7b:03:92:bb:25:ce:65:64: bc:85:79:2c:a2:e0:ca:10:ad:c2:f8:64:ad:71:a7: 39:c8:dc:a4:37:45:81:c9:dd:41:6d:86:39:d4:0f: 59:58:68:63:8a:3b:42:48:7f:f4:c4:2a:d1:6a:f1: 92:5f:3e:d3:a7:5d:e3:a9:07:de:72:5c:b8:25:a7: 4b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:3C:D2:47:F0:9E:49:35:79:2E:BE:82:75:0E:EB:33:CF:C4:1B:9D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149883.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.140.0/23 Signature Algorithm: sha256WithRSAEncryption 19:34:b3:f5:81:61:eb:fc:99:e2:ec:ab:8d:2b:9c:46:d0:ed: a9:9a:68:56:15:c4:cd:57:df:b0:8d:0f:37:6a:68:bb:70:dc: c6:6a:bb:8b:dc:e7:87:e9:52:84:a4:c8:fa:57:7c:fa:23:ae: 51:8b:22:ab:50:76:88:09:9a:43:f2:cd:be:b3:34:55:7d:1d: fc:5b:37:92:6c:03:fd:26:95:fe:03:70:7b:9d:66:ae:5f:55: 23:2e:9d:92:14:4e:fa:50:1f:b0:89:cb:07:62:3f:2e:00:b5: 50:4b:6a:ca:8a:64:46:93:ad:0f:eb:d7:a6:d7:08:6b:e4:93: a2:07:93:18:02:6f:74:f3:cb:a2:72:32:f8:64:93:97:cd:fb: 78:b5:07:11:d4:6f:b4:c0:bf:fb:9c:4d:81:fd:e6:90:80:30: 50:ec:7f:b6:ba:d2:db:87:b7:e6:0b:d2:0d:a0:a8:36:79:e1: ae:bc:54:42:37:9f:55:5d:76:3c:4a:8a:65:5f:4d:6b:2f:6c: 7f:98:b8:e2:00:6e:8d:26:63:69:2a:be:f7:8b:bf:48:61:db: 58:e7:c3:e7:a9:fa:88:96:f9:4b:13:86:40:91:b9:6d:6e:fd: 51:07:1c:ff:71:46:f7:fb:e3:df:1b:a3:40:5d:ae:5c:02:e8: 53:9c:7b:43 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUZKU6fhKlMqlWiFAFWm4M12zp5R4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzA1MzMzOVoX DTI3MDUwMjA1MzgzOVowMzExMC8GA1UEAxMoM0UzQ0QyNDdGMDlFNDkzNTc5MkVC RTgyNzUwRUVCMzNDRkM0MUI5RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALiP7X86N/3zcpvru2wrDNCFxUwhaZ1krPwl12t8v5IQDW8shFXZt1DmZe9V nkImlcTYF+LqhtKWtDTsikrv11ZCwpM0zKEJ8VNQNjWjMrnS6ZozM4TlQrw9enQZ 56/InOamNBrA3KZtN5taLkiEOkq665AE3jD9Sr/pAOnJvsJdm6lLH7yHY0TdYSQg 4Sl91NVBOO0Q7d1zi7GwEfAI9HDBUTBfL0uIZil9UtRyGX1dZRK1uaG4L/DeGHsD krslzmVkvIV5LKLgyhCtwvhkrXGnOcjcpDdFgcndQW2GOdQPWVhoY4o7Qkh/9MQq 0Wrxkl8+06dd46kH3nJcuCWnS40CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQ+PNJH 8J5JNXkuvoJ1Duszz8QbnTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ5ODgzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ5yMMA0GCSqGSIb3DQEBCwUAA4IBAQAZNLP1gWHr/Jni7KuNK5xG0O2p mmhWFcTNV9+wjQ83ami7cNzGaruL3OeH6VKEpMj6V3z6I65RiyKrUHaICZpD8s2+ szRVfR38WzeSbAP9JpX+A3B7nWauX1UjLp2SFE76UB+wicsHYj8uALVQS2rKimRG k60P69em1whr5JOiB5MYAm9088uicjL4ZJOXzft4tQcR1G+0wL/7nE2B/eaQgDBQ 7H+2utLbh7fmC9INoKg2eeGuvFRCN59VXXY8SoplX01rL2x/mLjiAG6NJmNpKr73 i79IYdtY58PnqfqIlvlLE4ZAkbltbv1RBxz/cUb3++PfG6NAXa5cAuhTnHtD -----END CERTIFICATE-----Generated at Tue May 12 22:43:13 2026 by rpki-client