$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149689.roa File: AS149689.roa (raw, json) Hash identifier: wr6tvEeVPuVLkPqq3hykeR3YOuPspmA0WR27YB/m//U= Subject key identifier: B9:5C:E3:D0:E9:94:52:7A:09:55:3D:EC:EB:03:71:14:26:ED:39:2D Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5B81C6208D918A31A8850E7A81760D68123BC075 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149689.roa Signing time: Fri 03 Apr 2026 05:00:00 +0000 ROA not before: Fri 03 Apr 2026 04:55:00 +0000 ROA not after: Fri 02 Apr 2027 05:00:00 +0000 asID: 149689 IP address blocks: 103.185.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 05:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:81:c6:20:8d:91:8a:31:a8:85:0e:7a:81:76:0d:68:12:3b:c0:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 3 04:55:00 2026 GMT Not After : Apr 2 05:00:00 2027 GMT Subject: CN=B95CE3D0E994527A09553DECEB03711426ED392D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:30:82:1c:f9:8e:24:1e:97:d8:b3:b4:97:a9: ea:d2:0d:dd:9c:e1:6d:d6:1d:25:f8:bb:e4:1a:15: 57:2d:e5:35:22:c7:1e:9c:e4:2b:1c:e8:8d:22:29: 23:b8:3a:58:f9:c9:9f:d4:21:1b:54:33:36:7e:d0: 86:06:ba:49:30:fe:10:74:08:dc:07:76:88:9c:16: dc:8b:27:97:b4:3f:73:90:72:5e:b1:67:93:c1:53: 10:9e:aa:e8:60:10:de:c0:a3:24:2d:e6:bf:ac:2a: 06:ce:f0:01:f4:9c:f3:bd:0e:75:a8:a5:de:9b:c4: 4a:fe:c1:0b:cb:63:98:90:26:3e:02:27:e7:45:f7: 62:30:c1:98:07:21:68:15:44:e7:29:2f:b8:e1:f8: c3:17:05:bc:25:12:93:4e:b6:7a:a1:2c:72:46:cc: 9d:2c:a8:09:af:60:92:9e:b3:ec:5a:2d:f3:ed:75: a5:24:ac:c6:24:41:0f:59:e0:a2:10:09:82:96:7f: ca:08:29:b4:f2:ce:53:ea:41:13:d7:99:57:5c:b9: b3:10:6d:f6:ee:fe:1e:f8:42:fd:17:c4:14:42:8b: 52:ac:94:c8:6a:76:82:27:2d:87:93:95:28:2b:5f: 64:54:c4:39:6d:fa:e0:6d:ce:fd:36:87:26:3b:ca: b9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:5C:E3:D0:E9:94:52:7A:09:55:3D:EC:EB:03:71:14:26:ED:39:2D X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149689.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.185.252.0/23 Signature Algorithm: sha256WithRSAEncryption 99:3e:d8:30:e0:cb:31:f9:7d:a2:7d:24:95:4f:c5:ae:9e:1e: ac:96:79:87:a8:06:80:52:9a:30:ee:55:bb:06:8b:67:41:9b: 13:99:a1:c6:e4:e1:34:64:15:10:e3:17:19:f8:14:c1:5e:6b: d4:0c:78:65:a0:86:f2:26:52:6e:40:c1:9c:29:37:32:2d:ac: df:b6:cd:91:65:2d:8d:9a:c9:b4:23:26:0b:c6:1e:32:0a:2e: db:6b:c7:53:a0:17:7c:5a:45:0f:1e:9b:ca:04:b5:46:91:fb: 4a:b1:ec:ba:07:a8:29:61:ca:cf:49:cd:b7:3b:ab:5b:8e:43: 69:39:81:7c:f6:b5:f7:fe:d9:ed:63:0e:3c:39:39:46:02:b5: e2:3d:a9:b8:e0:30:73:07:7c:a3:fd:4e:09:06:c1:0a:40:9d: ea:89:03:b6:39:26:18:21:74:e1:a2:20:44:7d:7e:7e:ca:05: 22:ba:b2:6f:16:93:44:88:22:cb:07:88:f7:f1:15:8a:79:db: 7f:fe:91:8d:5b:2d:5e:92:bd:e3:70:47:8a:aa:f8:3b:97:43: 2e:df:4a:f2:d5:b2:aa:ef:ea:b4:88:25:79:e8:b5:6c:b4:ba: dd:62:ec:c1:21:78:8b:ff:0a:03:ec:83:4b:e5:2c:84:28:f3: 35:6d:8d:aa -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUW4HGII2RijGohQ56gXYNaBI7wHUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQwMzA0NTUwMFoX DTI3MDQwMjA1MDAwMFowMzExMC8GA1UEAxMoQjk1Q0UzRDBFOTk0NTI3QTA5NTUz REVDRUIwMzcxMTQyNkVEMzkyRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPkwghz5jiQel9iztJep6tIN3ZzhbdYdJfi75BoVVy3lNSLHHpzkKxzojSIp I7g6WPnJn9QhG1QzNn7Qhga6STD+EHQI3Ad2iJwW3Isnl7Q/c5ByXrFnk8FTEJ6q 6GAQ3sCjJC3mv6wqBs7wAfSc870Odail3pvESv7BC8tjmJAmPgIn50X3YjDBmAch aBVE5ykvuOH4wxcFvCUSk062eqEsckbMnSyoCa9gkp6z7Fot8+11pSSsxiRBD1ng ohAJgpZ/yggptPLOU+pBE9eZV1y5sxBt9u7+HvhC/RfEFEKLUqyUyGp2gicth5OV KCtfZFTEOW364G3O/TaHJjvKubECAwEAAaOCAdAwggHMMB0GA1UdDgQWBBS5XOPQ 6ZRSeglVPezrA3EUJu05LTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTY4OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWe5/DANBgkqhkiG9w0BAQsFAAOCAQEAmT7YMODLMfl9on0klU/F rp4erJZ5h6gGgFKaMO5VuwaLZ0GbE5mhxuThNGQVEOMXGfgUwV5r1Ax4ZaCG8iZS bkDBnCk3Mi2s37bNkWUtjZrJtCMmC8YeMgou22vHU6AXfFpFDx6bygS1RpH7SrHs ugeoKWHKz0nNtzurW45DaTmBfPa19/7Z7WMOPDk5RgK14j2puOAwcwd8o/1OCQbB CkCd6okDtjkmGCF04aIgRH1+fsoFIrqybxaTRIgiyweI9/EVinnbf/6RjVstXpK9 43BHiqr4O5dDLt9K8tWyqu/qtIgleei1bLS63WLswSF4i/8KA+yDS+UshCjzNW2N qg== -----END CERTIFICATE-----Generated at Fri Apr 17 08:16:37 2026 by rpki-client