$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149385.roa File: AS149385.roa (raw, json) Hash identifier: HaYl2190zajAd1zw9cAiqxtzHAci3RTynRgNELpw/YQ= Subject key identifier: 22:C3:9A:0B:8A:6F:C2:1F:84:4E:8F:E4:F1:E9:F6:20:00:27:17:D4 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 75EDA83A05E544F15B81403A8E9F5BDB9332D6AB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149385.roa Signing time: Mon 30 Mar 2026 04:00:00 +0000 ROA not before: Mon 30 Mar 2026 03:55:00 +0000 ROA not after: Mon 29 Mar 2027 04:00:00 +0000 asID: 149385 IP address blocks: 103.178.223.0/24 maxlen: 24 103.205.185.0/24 maxlen: 24 2001:df2:1ac0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 05:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:ed:a8:3a:05:e5:44:f1:5b:81:40:3a:8e:9f:5b:db:93:32:d6:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 30 03:55:00 2026 GMT Not After : Mar 29 04:00:00 2027 GMT Subject: CN=22C39A0B8A6FC21F844E8FE4F1E9F620002717D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a4:50:18:08:63:41:7b:bb:1c:b3:3f:b5:68: be:4b:62:e3:ff:36:ec:b6:bb:fb:5f:f6:1c:91:4d: 57:69:18:af:f6:20:ec:d4:d9:ba:08:bc:b6:60:76: f7:87:6a:84:af:ad:e4:d3:35:55:99:cf:3d:c0:02: 48:77:83:bb:6f:96:a3:6c:ed:c9:7f:b0:37:14:f7: 1a:bb:45:c8:4d:27:48:37:cb:8e:09:ef:f3:7d:2f: 85:dd:81:29:f6:b3:72:0b:2a:6d:79:76:74:04:8d: b2:81:05:09:b4:81:0e:6a:7c:4f:23:93:ff:5e:38: 48:68:56:1a:8c:3b:7e:48:e7:10:6b:6d:63:15:1c: a4:c3:25:05:a5:41:d2:ac:5c:44:b2:5e:73:dc:d5: 71:69:29:82:02:9b:83:f2:68:a5:3e:42:2c:7a:36: 7d:dd:38:33:86:39:c2:60:d7:da:71:05:1a:f3:c9: 3d:07:03:b5:be:66:0b:21:12:9a:5c:51:de:d7:8f: dd:2d:e9:32:38:1d:90:25:a0:73:b8:7b:5b:e1:32: 13:14:34:86:89:40:d9:e1:d5:c3:7d:e3:36:8d:77: 2e:f6:69:77:bf:a7:5e:a6:8a:78:31:15:67:22:d4: f8:e4:c2:e1:29:6c:4c:f7:48:21:2c:b3:45:9c:ce: fe:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C3:9A:0B:8A:6F:C2:1F:84:4E:8F:E4:F1:E9:F6:20:00:27:17:D4 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149385.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.178.223.0/24 103.205.185.0/24 IPv6: 2001:df2:1ac0::/48 Signature Algorithm: sha256WithRSAEncryption 6e:01:7a:49:05:03:0d:90:50:c9:97:60:f3:23:02:86:9e:19: 93:5c:51:e7:66:72:13:cd:cb:7c:8e:59:23:8d:02:24:11:d2: 29:ca:ff:a5:13:cf:b8:d6:e8:ff:54:92:84:ed:83:a1:ee:c5: d0:c2:ff:36:25:c6:d4:63:2e:c4:ae:3b:85:d0:75:23:70:7c: 92:ff:1d:5c:8f:48:64:a3:7b:90:ef:cf:a4:bb:0f:51:99:fb: fb:9f:98:02:fb:4c:2f:41:85:b3:f4:47:de:89:c4:fc:9d:06: 90:fe:25:79:02:75:f0:11:4c:b3:94:03:30:92:78:3b:77:95: bf:f4:5e:d9:3f:59:4e:20:e6:02:92:39:9d:96:a6:d0:77:ee: 17:4a:cc:94:98:e6:5b:16:e5:53:b7:ae:66:fe:ff:9b:75:02: df:41:29:75:83:e9:63:05:3f:e3:35:85:f4:ba:17:fc:ef:76: fe:a1:36:97:99:7d:83:4f:9f:47:30:b5:ab:c9:bf:ae:32:c3: 86:8b:15:2d:5b:fc:79:46:ac:00:81:26:31:9f:8e:f5:aa:d1: f2:15:d7:f6:ae:59:7d:52:af:ef:72:76:4e:04:9e:12:50:45: 64:87:99:5b:ab:ac:ee:44:88:44:af:f5:17:ae:e3:57:79:23: 46:e8:d1:3b -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUde2oOgXlRPFbgUA6jp9b25My1qswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMzMDAzNTUwMFoX DTI3MDMyOTA0MDAwMFowMzExMC8GA1UEAxMoMjJDMzlBMEI4QTZGQzIxRjg0NEU4 RkU0RjFFOUY2MjAwMDI3MTdENDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOikUBgIY0F7uxyzP7Vovkti4/827La7+1/2HJFNV2kYr/Yg7NTZugi8tmB2 94dqhK+t5NM1VZnPPcACSHeDu2+Wo2ztyX+wNxT3GrtFyE0nSDfLjgnv830vhd2B KfazcgsqbXl2dASNsoEFCbSBDmp8TyOT/144SGhWGow7fkjnEGttYxUcpMMlBaVB 0qxcRLJec9zVcWkpggKbg/JopT5CLHo2fd04M4Y5wmDX2nEFGvPJPQcDtb5mCyES mlxR3teP3S3pMjgdkCWgc7h7W+EyExQ0holA2eHVw33jNo13LvZpd7+nXqaKeDEV ZyLU+OTC4SlsTPdIISyzRZzO/lUCAwEAAaOCAecwggHjMB0GA1UdDgQWBBQiw5oL im/CH4ROj+Tx6fYgACcX1DAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTM4NS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2BggrBgEFBQcBBwEB/wQnMCUw EgQCAAEwDAMEAGey3wMEAGfNuTAPBAIAAjAJAwcAIAEN8hrAMA0GCSqGSIb3DQEB CwUAA4IBAQBuAXpJBQMNkFDJl2DzIwKGnhmTXFHnZnITzct8jlkjjQIkEdIpyv+l E8+41uj/VJKE7YOh7sXQwv82JcbUYy7ErjuF0HUjcHyS/x1cj0hko3uQ78+kuw9R mfv7n5gC+0wvQYWz9EfeicT8nQaQ/iV5AnXwEUyzlAMwkng7d5W/9F7ZP1lOIOYC kjmdlqbQd+4XSsyUmOZbFuVTt65m/v+bdQLfQSl1g+ljBT/jNYX0uhf873b+oTaX mX2DT59HMLWryb+uMsOGixUtW/x5RqwAgSYxn471qtHyFdf2rll9Uq/vcnZOBJ4S UEVkh5lbq6zuRIhEr/UXruNXeSNG6NE7 -----END CERTIFICATE-----Generated at Fri Apr 17 08:16:44 2026 by rpki-client