$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149913.roa File: AS149913.roa (raw, json) Hash identifier: oQiXf4ID+JpejRTNYd/LLYyDyJNlXT4dFknbV3fQabc= Subject key identifier: F4:8F:8D:F6:65:9C:0F:DA:08:E7:F8:C9:AA:E4:56:41:DF:90:20:75 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5157C77E9C3E7BACD64C7E3691A360C797912F8D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149913.roa Signing time: Sun 03 May 2026 06:11:40 +0000 ROA not before: Sun 03 May 2026 06:06:40 +0000 ROA not after: Sun 02 May 2027 06:11:40 +0000 asID: 149913 IP address blocks: 103.191.54.0/23 maxlen: 24 2001:df0:fe40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:57:c7:7e:9c:3e:7b:ac:d6:4c:7e:36:91:a3:60:c7:97:91:2f:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 06:06:40 2026 GMT Not After : May 2 06:11:40 2027 GMT Subject: CN=F48F8DF6659C0FDA08E7F8C9AAE45641DF902075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9c:85:64:9f:40:81:bd:be:03:21:e2:d8:c1: 33:27:7f:93:74:05:ae:d5:60:89:2d:3f:89:85:3f: 5e:87:9a:d0:8d:bf:54:47:25:42:8b:6d:5e:4d:ae: a9:2b:0e:b9:b3:6d:0d:49:01:44:10:f5:7e:e3:56: eb:63:75:73:ee:11:4b:cd:4a:ec:17:e1:c6:5c:b2: 99:27:4b:56:d2:db:3e:8e:c4:51:19:38:95:91:59: c1:3c:20:0e:1a:60:06:6f:63:cf:b1:0b:6a:e4:55: 8d:77:db:72:08:66:6f:ac:f5:f1:21:73:cf:06:9a: f1:0e:4a:ca:fc:a8:23:81:1a:cc:e7:f4:4f:e4:f9: ef:11:c3:99:d4:14:6a:9b:13:0a:06:70:fe:1b:b0: 0c:39:65:74:cd:f6:f2:a1:59:e4:20:29:59:ec:86: 65:3e:f2:fa:38:7e:dd:2b:5f:f6:29:34:ac:43:23: d5:cd:f4:3b:11:e7:2d:ae:4b:97:73:a9:74:7b:08: 5f:ca:62:32:82:b8:aa:5e:a5:48:9d:26:5b:b7:ca: 15:26:37:07:e7:19:1b:2e:0b:ad:07:f0:60:a7:d9: c8:e2:de:24:ba:21:b2:0c:37:62:a1:6d:7f:ff:15: e7:8c:53:39:6e:0d:a9:1f:a9:c4:57:9a:cb:08:a4: bd:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:8F:8D:F6:65:9C:0F:DA:08:E7:F8:C9:AA:E4:56:41:DF:90:20:75 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149913.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.54.0/23 IPv6: 2001:df0:fe40::/48 Signature Algorithm: sha256WithRSAEncryption 71:f9:26:bd:ec:6f:6f:ed:6c:d6:c8:53:95:5e:91:3a:7f:a3: 78:8c:9d:15:92:e0:84:0f:0d:be:dd:ff:57:af:7b:93:b8:12: 3f:ae:17:43:91:b8:ec:6c:39:d5:ac:28:02:49:8c:97:dd:ba: 36:0c:16:72:26:0e:53:21:bc:b9:cb:5f:4a:8d:d0:cc:b0:b9: b8:07:ff:e1:5f:92:81:54:d4:b4:bc:b0:4a:68:f6:7b:b5:b6: 0d:b2:e5:a0:f8:1a:7d:81:b3:84:56:50:48:40:f4:69:9e:27: 0c:5f:bf:e6:6e:3d:4a:cf:3b:0d:ae:78:22:4c:f8:14:fd:ca: 77:a7:81:48:8a:5c:89:93:94:90:71:2a:c5:eb:92:53:e8:8c: 52:d8:22:85:9d:ad:bf:62:bc:ee:18:5e:58:99:c9:fd:21:67: 23:4f:77:40:15:40:49:a9:1a:36:d3:f7:c5:20:d0:2c:8a:96: f6:ba:b0:a5:e2:b7:48:da:f3:44:5d:b1:25:0d:83:89:1b:56: eb:3e:a5:eb:17:b8:6d:73:f8:f6:f5:21:48:87:1d:3b:ee:7b: 98:1e:f9:a1:e0:35:e2:c2:95:20:66:5a:a1:67:22:3c:c5:ab: 7b:8d:26:a2:97:0c:12:a9:91:62:67:2e:ff:ec:20:ca:ab:ff: c5:d4:bc:a4 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUUVfHfpw+e6zWTH42kaNgx5eRL40wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzA2MDY0MFoX DTI3MDUwMjA2MTE0MFowMzExMC8GA1UEAxMoRjQ4RjhERjY2NTlDMEZEQTA4RTdG OEM5QUFFNDU2NDFERjkwMjA3NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALWchWSfQIG9vgMh4tjBMyd/k3QFrtVgiS0/iYU/Xoea0I2/VEclQottXk2u qSsOubNtDUkBRBD1fuNW62N1c+4RS81K7BfhxlyymSdLVtLbPo7EURk4lZFZwTwg DhpgBm9jz7ELauRVjXfbcghmb6z18SFzzwaa8Q5KyvyoI4EazOf0T+T57xHDmdQU apsTCgZw/huwDDlldM328qFZ5CApWeyGZT7y+jh+3Stf9ik0rEMj1c30OxHnLa5L l3OpdHsIX8piMoK4ql6lSJ0mW7fKFSY3B+cZGy4LrQfwYKfZyOLeJLohsgw3YqFt f/8V54xTOW4NqR+pxFeaywikvakCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBT0j432 ZZwP2gjn+Mmq5FZB35AgdTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ5OTEzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQBZ782MA8EAgACMAkDBwAgAQ3w/kAwDQYJKoZIhvcNAQELBQADggEBAHH5 Jr3sb2/tbNbIU5VekTp/o3iMnRWS4IQPDb7d/1eve5O4Ej+uF0ORuOxsOdWsKAJJ jJfdujYMFnImDlMhvLnLX0qN0MywubgH/+FfkoFU1LS8sEpo9nu1tg2y5aD4Gn2B s4RWUEhA9GmeJwxfv+ZuPUrPOw2ueCJM+BT9ynengUiKXImTlJBxKsXrklPojFLY IoWdrb9ivO4YXliZyf0hZyNPd0AVQEmpGjbT98Ug0CyKlva6sKXit0ja80RdsSUN g4kbVus+pesXuG1z+Pb1IUiHHTvue5ge+aHgNeLClSBmWqFnIjzFq3uNJqKXDBKp kWJnLv/sIMqr/8XUvKQ= -----END CERTIFICATE-----Generated at Tue May 12 22:57:01 2026 by rpki-client