$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149907.roa File: AS149907.roa (raw, json) Hash identifier: bRYkpWVotKNaokIIxLK/vqA1A9xVcIJRwsJm5a/nuW4= Subject key identifier: 37:55:C6:55:52:0C:41:BD:02:0E:AB:D5:F3:9E:8F:12:24:60:70:C3 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 59F6695AE4087DCA2862FB7061054FBFA8CA32A2 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149907.roa Signing time: Thu 24 Jul 2025 05:00:00 +0000 ROA not before: Thu 24 Jul 2025 04:55:00 +0000 ROA not after: Thu 23 Jul 2026 05:00:00 +0000 asID: 149907 IP address blocks: 103.190.112.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 13:36:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:f6:69:5a:e4:08:7d:ca:28:62:fb:70:61:05:4f:bf:a8:ca:32:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 24 04:55:00 2025 GMT Not After : Jul 23 05:00:00 2026 GMT Subject: CN=3755C655520C41BD020EABD5F39E8F12246070C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:26:72:de:11:db:f2:e0:9f:b3:c7:be:2f:2a: e8:79:9c:da:c3:fd:46:96:67:1b:3e:34:4e:d9:6d: be:40:ba:63:02:cd:a4:b6:0e:c8:0b:5b:f4:a7:73: 50:2d:90:08:d2:3c:f5:a7:bd:85:ba:36:53:12:04: 83:df:a9:97:ee:3e:9d:cd:1b:53:c0:7c:17:dd:2a: 19:0e:87:7b:48:3d:df:fb:59:3a:3a:fd:22:5b:2b: fd:ec:01:c3:2d:4c:3f:5c:2c:a6:40:ec:af:e1:60: 59:ff:b3:1d:79:10:b8:5c:05:5b:b3:6d:fc:4c:c7: b6:44:a0:85:82:aa:df:07:3d:7a:3f:96:83:9f:d7: 47:72:90:08:79:7a:15:3e:ac:a7:5e:53:c0:55:71: a0:54:a7:88:a1:68:8c:94:65:0c:f8:ea:2e:e3:4d: 3b:49:c7:c2:18:bc:2f:16:fc:f1:80:a9:7d:27:4f: 81:39:be:3b:e6:0f:bd:93:c1:43:c9:c7:91:33:fb: 0d:eb:18:4b:94:cb:8f:e6:a9:b0:08:a7:b7:f7:22: c3:06:59:5e:0d:be:18:22:8f:ab:9a:3e:54:8e:8e: d5:53:92:94:4a:b0:11:24:6b:fd:7b:19:f8:da:3e: 3d:2f:6f:0d:29:6f:39:78:7c:6f:41:8f:54:11:6a: 94:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:55:C6:55:52:0C:41:BD:02:0E:AB:D5:F3:9E:8F:12:24:60:70:C3 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149907.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.190.112.0/23 Signature Algorithm: sha256WithRSAEncryption 07:09:6f:c7:2d:0c:66:2a:f2:05:28:3c:39:0b:48:23:25:68: 83:7b:bc:a7:ec:01:b6:a9:b3:a2:64:be:0e:88:57:7b:a9:4d: 05:49:ae:69:74:f2:c0:5e:f4:e1:37:7c:14:e1:99:cc:56:13: 5a:e9:7e:30:79:75:69:18:d4:00:67:c9:6d:b3:77:3a:68:16: 5a:4a:c4:89:bd:7b:4b:dc:ef:06:6c:18:5b:6d:6a:b8:f2:57: 15:de:59:24:1a:e2:0e:28:4f:7b:a3:d2:8b:a5:f1:76:26:a9: 24:a5:08:b0:17:0b:b5:51:49:2b:29:31:be:8b:33:21:3d:ca: 46:2c:7c:f1:cb:87:9b:de:f6:69:42:ee:8c:67:6e:b0:fc:58: d2:32:a1:bc:c5:82:1b:a5:13:f1:e3:41:47:94:5d:66:8d:3e: 0b:38:81:30:52:12:93:e0:4a:1a:61:47:43:12:58:9a:e3:fb: 49:34:10:10:4b:ff:43:0a:17:57:e4:aa:fb:4a:60:26:5f:d4: 80:28:94:03:56:4e:2f:ce:4d:0a:a2:a5:e7:5f:28:b9:7b:fa: 9d:e0:93:26:ce:9a:06:e6:77:5f:d1:47:1c:2c:60:90:de:04: cd:31:e3:01:fc:ea:ad:46:e9:70:4a:48:28:59:e5:42:f7:dd: b3:e7:b7:19 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUWfZpWuQIfcooYvtwYQVPv6jKMqIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcyNDA0NTUwMFoX DTI2MDcyMzA1MDAwMFowMzExMC8GA1UEAxMoMzc1NUM2NTU1MjBDNDFCRDAyMEVB QkQ1RjM5RThGMTIyNDYwNzBDMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKomct4R2/Lgn7PHvi8q6Hmc2sP9RpZnGz40TtltvkC6YwLNpLYOyAtb9Kdz UC2QCNI89ae9hbo2UxIEg9+pl+4+nc0bU8B8F90qGQ6He0g93/tZOjr9Ilsr/ewB wy1MP1wspkDsr+FgWf+zHXkQuFwFW7Nt/EzHtkSghYKq3wc9ej+Wg5/XR3KQCHl6 FT6sp15TwFVxoFSniKFojJRlDPjqLuNNO0nHwhi8Lxb88YCpfSdPgTm+O+YPvZPB Q8nHkTP7DesYS5TLj+apsAint/ciwwZZXg2+GCKPq5o+VI6O1VOSlEqwESRr/XsZ +No+PS9vDSlvOXh8b0GPVBFqlGkCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQ3VcZV UgxBvQIOq9Xzno8SJGBwwzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTkwNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWe+cDANBgkqhkiG9w0BAQsFAAOCAQEABwlvxy0MZiryBSg8OQtI IyVog3u8p+wBtqmzomS+DohXe6lNBUmuaXTywF704Td8FOGZzFYTWul+MHl1aRjU AGfJbbN3OmgWWkrEib17S9zvBmwYW21quPJXFd5ZJBriDihPe6PSi6XxdiapJKUI sBcLtVFJKykxvoszIT3KRix88cuHm972aULujGdusPxY0jKhvMWCG6UT8eNBR5Rd Zo0+CziBMFISk+BKGmFHQxJYmuP7STQQEEv/QwoXV+Sq+0pgJl/UgCiUA1ZOL85N CqKl518ouXv6neCTJs6aBuZ3X9FHHCxgkN4EzTHjAfzqrUbpcEpIKFnlQvfds+e3 GQ== -----END CERTIFICATE-----Generated at Wed Aug 6 03:58:24 2025 by rpki-client