$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149741.roa File: AS149741.roa (raw, json) Hash identifier: 0OF6QcFqWg3J4YFUZvL1mFa9Kv/TY86Y2OQF266aILQ= Subject key identifier: 9C:4D:38:5D:8A:FA:2D:70:C2:2E:16:CD:67:A6:98:BD:FC:BD:04:3C Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 63D2EDEEC152B8F1EA72C39277FA43833482F56E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149741.roa Signing time: Fri 06 Feb 2026 07:41:01 +0000 ROA not before: Fri 06 Feb 2026 07:36:01 +0000 ROA not after: Fri 05 Feb 2027 07:41:01 +0000 asID: 149741 IP address blocks: 103.189.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:d2:ed:ee:c1:52:b8:f1:ea:72:c3:92:77:fa:43:83:34:82:f5:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 6 07:36:01 2026 GMT Not After : Feb 5 07:41:01 2027 GMT Subject: CN=9C4D385D8AFA2D70C22E16CD67A698BDFCBD043C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:98:d0:4f:d3:12:16:20:18:03:9e:a0:63:1d: 58:0b:ca:2f:59:5c:60:bf:8c:d9:3a:fc:db:3b:35: c8:41:35:4a:e6:03:15:c4:46:9f:d6:a8:02:63:f2: ab:9f:18:a4:6b:a6:ae:8c:a3:d7:d9:45:ed:b4:ce: 04:fa:a4:1d:5e:ea:30:76:5f:53:63:58:0f:81:3c: 52:5b:ec:9a:80:7b:14:d2:a6:7c:21:19:cd:93:79: 60:58:4d:1c:06:d2:f8:67:22:45:2f:50:32:90:71: e2:7f:43:1b:fa:65:2d:8d:18:ab:a4:3a:08:bc:49: e8:01:60:29:25:1d:ac:85:bd:4b:37:ac:00:83:bf: 64:f8:9e:bb:72:54:ed:ef:42:d7:06:f4:2e:23:6c: 2b:2c:d7:b5:16:73:a5:ec:a0:cc:8f:2e:06:7f:81: b8:a6:98:f3:95:38:44:83:23:13:af:9a:21:38:af: 16:29:36:3e:69:5f:73:eb:ba:00:80:dc:43:a8:46: 26:b9:7f:05:00:4d:e5:89:ed:65:a5:c9:8e:fc:d9: ee:bd:38:6d:50:ae:d0:a3:6e:1b:35:33:e6:33:01: 9e:10:a1:7e:bd:37:1c:cb:53:23:d0:ac:5e:1d:42: 3d:1e:9b:6d:6b:8b:18:22:cf:9e:4f:13:11:50:5c: ae:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:4D:38:5D:8A:FA:2D:70:C2:2E:16:CD:67:A6:98:BD:FC:BD:04:3C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149741.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.49.0/24 Signature Algorithm: sha256WithRSAEncryption 33:cc:82:25:75:6a:7e:02:19:59:d7:6a:c0:4c:89:eb:f0:62: 42:ea:df:73:94:cb:18:45:b4:45:93:ef:16:8d:1d:4b:e2:db: 91:3b:1a:2e:2f:5c:18:11:c2:86:4c:b7:d5:8e:ed:3f:76:a4: d4:f6:45:65:bc:e9:8b:83:0c:d9:b1:f7:94:53:29:b1:f7:fe: bf:e0:04:cb:66:ef:a5:46:44:61:19:89:0e:60:6b:b1:68:be: 27:9d:a8:c1:b0:6e:3b:5e:bb:d4:70:ce:9f:2d:a4:3a:56:26: d5:c6:5b:f6:2c:c6:39:5f:77:b1:15:bc:1c:11:ba:f2:5e:67: 44:f3:99:ed:e6:41:e3:6f:83:12:3b:84:fd:a0:ec:16:62:fe: 92:bc:8e:a5:43:46:fc:b7:b1:f3:12:d2:07:e9:5e:4d:93:fc: 29:6f:3b:3d:4f:ce:98:53:d0:b2:b4:ac:a9:29:f4:89:8a:4b: 13:0f:0d:a7:a5:c4:74:6d:c1:da:7b:ed:36:58:ba:28:15:ae: 55:98:bb:a7:b9:f6:c1:f6:3f:2c:48:e9:33:aa:56:c4:4b:32: 3d:2c:8a:20:3a:94:9c:05:18:ae:4b:d2:24:36:3e:e9:31:de: 37:be:47:a9:2e:07:a1:63:7b:29:4c:5d:d0:c0:68:61:b6:13: 0e:78:bd:4a -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUY9Lt7sFSuPHqcsOSd/pDgzSC9W4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIwNjA3MzYwMVoX DTI3MDIwNTA3NDEwMVowMzExMC8GA1UEAxMoOUM0RDM4NUQ4QUZBMkQ3MEMyMkUx NkNENjdBNjk4QkRGQ0JEMDQzQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALWY0E/TEhYgGAOeoGMdWAvKL1lcYL+M2Tr82zs1yEE1SuYDFcRGn9aoAmPy q58YpGumroyj19lF7bTOBPqkHV7qMHZfU2NYD4E8UlvsmoB7FNKmfCEZzZN5YFhN HAbS+GciRS9QMpBx4n9DG/plLY0Yq6Q6CLxJ6AFgKSUdrIW9SzesAIO/ZPieu3JU 7e9C1wb0LiNsKyzXtRZzpeygzI8uBn+BuKaY85U4RIMjE6+aITivFik2Pmlfc+u6 AIDcQ6hGJrl/BQBN5YntZaXJjvzZ7r04bVCu0KNuGzUz5jMBnhChfr03HMtTI9Cs Xh1CPR6bbWuLGCLPnk8TEVBcrjsCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBScTThd ivotcMIuFs1nppi9/L0EPDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTc0MS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGe9MTANBgkqhkiG9w0BAQsFAAOCAQEAM8yCJXVqfgIZWddqwEyJ 6/BiQurfc5TLGEW0RZPvFo0dS+LbkTsaLi9cGBHChky31Y7tP3ak1PZFZbzpi4MM 2bH3lFMpsff+v+AEy2bvpUZEYRmJDmBrsWi+J52owbBuO1671HDOny2kOlYm1cZb 9izGOV93sRW8HBG68l5nRPOZ7eZB42+DEjuE/aDsFmL+kryOpUNG/Lex8xLSB+le TZP8KW87PU/OmFPQsrSsqSn0iYpLEw8Np6XEdG3B2nvtNli6KBWuVZi7p7n2wfY/ LEjpM6pWxEsyPSyKIDqUnAUYrkvSJDY+6THeN75HqS4HoWN7KUxd0MBoYbYTDni9 Sg== -----END CERTIFICATE-----Generated at Mon Mar 2 14:56:33 2026 by rpki-client