$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149736.roa File: AS149736.roa (raw, json) Hash identifier: l/aLusAVzHvoF0Nf4GvrjBPnDEfFHLVVjghkdrlogrk= Subject key identifier: B3:F2:ED:01:88:CE:56:73:BE:58:9E:87:67:60:46:32:4F:A6:C0:35 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7C960B52F9175922278605140F5160B441FEE285 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149736.roa Signing time: Sat 28 Feb 2026 04:35:20 +0000 ROA not before: Sat 28 Feb 2026 04:30:20 +0000 ROA not after: Sat 27 Feb 2027 04:35:20 +0000 asID: 149736 IP address blocks: 103.188.172.0/23 maxlen: 24 103.215.69.0/24 maxlen: 24 103.251.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:96:0b:52:f9:17:59:22:27:86:05:14:0f:51:60:b4:41:fe:e2:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 28 04:30:20 2026 GMT Not After : Feb 27 04:35:20 2027 GMT Subject: CN=B3F2ED0188CE5673BE589E87676046324FA6C035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0b:ef:7d:c5:ad:24:3b:c6:00:7f:ce:80:36: 16:77:4a:68:6a:b0:34:da:25:1f:75:58:bb:e2:1c: 99:6c:af:8b:32:1f:37:65:9d:31:f1:b0:46:f0:a6: 31:4c:db:a1:06:f6:0f:b0:bb:c9:cf:77:33:80:d8: d3:1f:dd:df:12:49:2f:8f:c8:eb:a4:fa:6d:25:c2: 3d:0a:80:7b:71:80:4e:26:a9:ac:cd:4e:16:a1:32: c8:96:b8:4a:69:39:61:0d:e2:15:61:f9:23:7d:46: 81:d9:4a:9a:f8:de:bd:b7:86:36:c3:68:33:cf:8d: ba:c7:b9:a6:c6:4c:19:52:48:b0:80:ef:66:a4:bf: c4:3a:40:76:e4:66:94:d7:5e:9c:ae:dc:93:8e:11: 4f:c7:d3:35:3c:1a:fd:02:f8:44:7b:aa:a6:e2:a3: 47:9c:b9:63:97:86:89:0a:39:7e:c1:f2:81:82:72: 40:74:47:45:59:c0:a4:6c:30:3a:57:bf:1e:2d:c4: 34:7c:59:2b:d8:6e:78:3e:9c:2c:de:3a:b5:c4:fb: f6:97:ba:69:9d:e8:31:bc:3c:1f:25:76:3b:c5:f4: be:df:a1:e5:b7:8d:9c:4c:aa:a3:2d:ee:2b:12:6f: 3a:6b:b4:da:ef:30:98:48:49:3c:84:f8:5a:73:cf: f5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F2:ED:01:88:CE:56:73:BE:58:9E:87:67:60:46:32:4F:A6:C0:35 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.188.172.0/23 103.215.69.0/24 103.251.155.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:1e:78:b4:52:01:f6:46:34:19:d2:c4:f6:38:6a:86:15:38: 62:c3:b7:25:f9:7d:0f:75:80:4a:fa:d3:b4:25:1b:2b:1e:4b: 14:70:49:1c:cc:64:a7:0e:68:5a:31:97:dd:55:fa:4c:af:18: 8b:25:6d:bc:b7:76:5b:e2:bb:46:f8:35:23:97:53:fe:e9:ab: 5d:85:df:c0:46:70:b2:b5:5b:11:7f:b9:2c:c1:de:c0:37:31: 35:59:1c:9e:51:1f:43:e9:74:16:16:93:85:df:26:42:e1:43: 8e:49:16:f2:06:b8:e5:10:0f:6b:eb:4e:87:28:df:c3:32:9a: 29:f0:3d:6a:1c:38:5d:07:f2:f6:18:00:2e:6e:6f:a8:77:43: 6b:2a:e1:43:fe:b5:2d:39:54:9e:6f:fa:ee:f2:05:ca:61:fc: d8:ba:0a:f8:e5:07:6d:01:8a:b4:16:c4:f1:e6:9e:31:2a:88: f1:a8:c8:28:cc:d4:c5:f4:82:1b:98:9f:5f:e7:fb:15:7e:17: 89:16:50:4a:2b:5e:f8:58:cf:aa:74:8d:00:d8:09:99:64:01: 8f:cf:2f:89:74:ac:7c:21:a4:02:3f:15:30:0b:5d:e8:c0:e3: fd:0d:9f:2f:fa:5f:87:4c:2e:19:bb:f9:bf:45:1c:26:39:4a: ea:3c:e5:e7 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgIUfJYLUvkXWSInhgUUD1FgtEH+4oUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIyODA0MzAyMFoX DTI3MDIyNzA0MzUyMFowMzExMC8GA1UEAxMoQjNGMkVEMDE4OENFNTY3M0JFNTg5 RTg3Njc2MDQ2MzI0RkE2QzAzNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALAL733FrSQ7xgB/zoA2FndKaGqwNNolH3VYu+IcmWyvizIfN2WdMfGwRvCm MUzboQb2D7C7yc93M4DY0x/d3xJJL4/I66T6bSXCPQqAe3GATiaprM1OFqEyyJa4 Smk5YQ3iFWH5I31GgdlKmvjevbeGNsNoM8+Nuse5psZMGVJIsIDvZqS/xDpAduRm lNdenK7ck44RT8fTNTwa/QL4RHuqpuKjR5y5Y5eGiQo5fsHygYJyQHRHRVnApGww Ole/Hi3ENHxZK9hueD6cLN46tcT79pe6aZ3oMbw8HyV2O8X0vt+h5beNnEyqoy3u KxJvOmu02u8wmEhJPIT4WnPP9SMCAwEAAaOCAdwwggHYMB0GA1UdDgQWBBSz8u0B iM5Wc75YnodnYEYyT6bANTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTczNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBow GAQCAAEwEgMEAWe8rAMEAGfXRQMEAGf7mzANBgkqhkiG9w0BAQsFAAOCAQEAax54 tFIB9kY0GdLE9jhqhhU4YsO3Jfl9D3WASvrTtCUbKx5LFHBJHMxkpw5oWjGX3VX6 TK8YiyVtvLd2W+K7Rvg1I5dT/umrXYXfwEZwsrVbEX+5LMHewDcxNVkcnlEfQ+l0 FhaThd8mQuFDjkkW8ga45RAPa+tOhyjfwzKaKfA9ahw4XQfy9hgALm5vqHdDayrh Q/61LTlUnm/67vIFymH82LoK+OUHbQGKtBbE8eaeMSqI8ajIKMzUxfSCG5ifX+f7 FX4XiRZQSite+FjPqnSNANgJmWQBj88viXSsfCGkAj8VMAtd6MDj/Q2fL/pfh0wu Gbv5v0UcJjlK6jzl5w== -----END CERTIFICATE-----Generated at Sun Mar 1 22:01:23 2026 by rpki-client