$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149951.roa File: AS149951.roa (raw, json) Hash identifier: 6lVQkXRsdjR3okdWxZBIeMEAs49todLfkQTC/Mv0BSk= Subject key identifier: A4:89:E8:F7:5B:09:A5:7A:13:F1:0B:78:43:70:A5:22:4A:57:68:B2 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4B9474B06A6B628F208E96C3D5F11E76A0222D40 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149951.roa Signing time: Sun 03 May 2026 05:39:14 +0000 ROA not before: Sun 03 May 2026 05:34:14 +0000 ROA not after: Sun 02 May 2027 05:39:14 +0000 asID: 149951 IP address blocks: 103.111.118.0/23 maxlen: 24 2001:df1:1ec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:94:74:b0:6a:6b:62:8f:20:8e:96:c3:d5:f1:1e:76:a0:22:2d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 05:34:14 2026 GMT Not After : May 2 05:39:14 2027 GMT Subject: CN=A489E8F75B09A57A13F10B784370A5224A5768B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:79:8a:de:ca:f8:a4:fa:b2:1a:10:28:57:d3: f4:b6:89:2a:47:82:2e:51:fa:c3:ad:20:4d:2a:0c: 80:eb:a5:f7:18:76:06:91:50:57:9b:45:42:15:a7: 5d:77:9b:22:ed:5b:35:13:47:16:91:3f:c9:73:26: aa:ad:39:29:74:90:0b:7c:a6:70:c5:c8:b7:c4:cf: 41:8a:5e:df:15:39:d7:ea:16:66:fa:77:03:47:14: af:10:28:49:63:ad:43:a1:b8:58:09:3c:5e:fc:55: ef:c8:a5:dd:de:8b:9b:59:15:b2:ad:f5:70:87:9b: 3b:04:dd:e4:0d:ff:6f:02:ba:6e:4c:37:b8:a2:48: c7:b8:b9:d8:11:97:1c:81:43:f9:5e:b6:a6:7a:fd: ae:61:d0:c8:07:98:96:bc:35:e5:27:58:22:89:2f: 54:81:12:99:2f:b6:e7:9e:0b:84:50:82:08:7f:6d: 50:b3:5c:bf:47:d4:97:7e:c0:65:b3:46:42:3b:3d: 94:f2:b9:de:45:e1:72:ec:07:61:2b:53:a8:7c:de: 7b:bb:e3:0b:79:0d:89:78:70:fb:ce:ee:f7:d3:d7: 1c:9e:1b:fa:06:34:23:19:92:38:89:f9:bb:48:cb: 10:9f:f6:06:d9:d1:c5:e1:91:79:ff:6a:fd:ce:4e: 83:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:89:E8:F7:5B:09:A5:7A:13:F1:0B:78:43:70:A5:22:4A:57:68:B2 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149951.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.111.118.0/23 IPv6: 2001:df1:1ec0::/48 Signature Algorithm: sha256WithRSAEncryption 8b:26:f7:d2:80:35:f1:73:d8:6b:b7:0d:ec:79:b8:3e:d5:df: ed:d8:c9:84:16:f2:a5:1d:e7:20:c0:c4:48:29:27:b4:b2:9f: 74:55:3b:dd:69:75:2a:e1:ac:1d:f5:4f:e5:9c:b9:8e:84:31: 4d:85:c0:06:cd:e9:5e:aa:1d:38:fc:ee:f2:a9:50:0e:41:d2: cd:4a:0d:1f:2f:47:f6:ab:77:68:61:3f:51:93:86:91:ff:9f: e1:e4:d8:59:3e:90:38:f5:47:86:07:a6:70:bb:3c:3d:34:34: be:06:e5:53:d2:22:fe:ca:4f:cb:cf:dd:61:06:09:8d:d8:b6: 22:64:09:a0:cb:04:99:ca:f5:12:30:18:11:38:53:f3:01:2d: c7:83:d5:d4:d0:3a:79:9b:c1:5b:02:77:4c:c7:81:fb:91:0a: 63:f4:16:01:09:6b:0e:a0:60:05:a6:e0:3b:cc:76:dc:75:3f: fb:41:b0:8b:28:8b:a6:14:c2:1c:9c:8f:99:bd:0c:58:3e:cc: 0a:6e:c8:4a:f5:b8:a4:61:6a:29:7f:47:c1:8f:00:bc:39:81: e4:aa:a8:42:94:6c:82:a8:24:d2:28:dd:fb:91:70:2a:8b:35: d2:61:a4:51:7f:8c:03:32:0c:f8:4d:93:2d:8a:bd:5d:ac:e0: a1:10:83:e4 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUS5R0sGprYo8gjpbD1fEedqAiLUAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzA1MzQxNFoX DTI3MDUwMjA1MzkxNFowMzExMC8GA1UEAxMoQTQ4OUU4Rjc1QjA5QTU3QTEzRjEw Qjc4NDM3MEE1MjI0QTU3NjhCMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANR5it7K+KT6shoQKFfT9LaJKkeCLlH6w60gTSoMgOul9xh2BpFQV5tFQhWn XXebIu1bNRNHFpE/yXMmqq05KXSQC3ymcMXIt8TPQYpe3xU51+oWZvp3A0cUrxAo SWOtQ6G4WAk8XvxV78il3d6Lm1kVsq31cIebOwTd5A3/bwK6bkw3uKJIx7i52BGX HIFD+V62pnr9rmHQyAeYlrw15SdYIokvVIESmS+2554LhFCCCH9tULNcv0fUl37A ZbNGQjs9lPK53kXhcuwHYStTqHzee7vjC3kNiXhw+87u99PXHJ4b+gY0IxmSOIn5 u0jLEJ/2BtnRxeGRef9q/c5Og10CAwEAAaOCAd0wggHZMB0GA1UdDgQWBBSkiej3 WwmlehPxC3hDcKUiSldosjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ5OTUxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQBZ292MA8EAgACMAkDBwAgAQ3xHsAwDQYJKoZIhvcNAQELBQADggEBAIsm 99KANfFz2Gu3Dex5uD7V3+3YyYQW8qUd5yDAxEgpJ7Syn3RVO91pdSrhrB31T+Wc uY6EMU2FwAbN6V6qHTj87vKpUA5B0s1KDR8vR/ard2hhP1GThpH/n+Hk2Fk+kDj1 R4YHpnC7PD00NL4G5VPSIv7KT8vP3WEGCY3YtiJkCaDLBJnK9RIwGBE4U/MBLceD 1dTQOnmbwVsCd0zHgfuRCmP0FgEJaw6gYAWm4DvMdtx1P/tBsIsoi6YUwhycj5m9 DFg+zApuyEr1uKRhail/R8GPALw5geSqqEKUbIKoJNIo3fuRcCqLNdJhpFF/jAMy DPhNky2KvV2s4KEQg+Q= -----END CERTIFICATE-----Generated at Tue May 12 23:03:57 2026 by rpki-client