$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149962.roa File: AS149962.roa (raw, json) Hash identifier: SQi1hUgVKfbgHELQiHOF4OyjFwbdjYk/kZTn541ZTo4= Subject key identifier: 12:D9:45:CE:9C:46:B5:5D:14:98:BE:2F:A6:E4:4D:14:38:D6:0F:B2 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5872AA157524A0EEDA958C1981B0F80CDAFEAABC Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149962.roa Signing time: Thu 26 Feb 2026 08:02:48 +0000 ROA not before: Thu 26 Feb 2026 07:57:48 +0000 ROA not after: Thu 25 Feb 2027 08:02:48 +0000 asID: 149962 IP address blocks: 103.112.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:72:aa:15:75:24:a0:ee:da:95:8c:19:81:b0:f8:0c:da:fe:aa:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 26 07:57:48 2026 GMT Not After : Feb 25 08:02:48 2027 GMT Subject: CN=12D945CE9C46B55D1498BE2FA6E44D1438D60FB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ba:bb:2e:ab:f6:8b:f6:dd:0f:50:1b:63:10: 75:6e:0f:58:85:08:9b:d8:22:2d:7d:b7:4a:46:65: 30:d5:d4:32:6c:23:17:1e:7c:08:29:c7:1f:21:3c: 21:e0:78:79:2b:f3:da:07:cb:93:d0:78:f4:f7:e9: 5d:0a:a2:a9:08:40:55:28:51:d3:3f:95:be:a3:7e: b3:04:32:e9:35:01:06:7b:6e:a1:24:44:a8:b3:f1: b3:20:59:5b:e9:47:b3:8a:90:5d:4e:ee:9d:9d:77: 98:ea:6c:15:00:3a:33:e3:cd:5f:32:7e:51:5c:f5: a1:34:b6:e8:22:ce:22:3f:85:bb:8e:4a:e3:04:33: 93:9b:a6:b9:a5:5a:c6:2a:6e:0b:d4:ff:37:80:e1: 1e:a0:29:37:6b:86:43:eb:3d:9b:46:8f:55:b7:8b: 1f:b2:7d:bc:77:ed:70:a1:b7:a0:bc:ff:28:f0:2f: c7:35:ba:d0:62:78:32:ce:4e:1e:66:ff:3e:43:a9: 71:4a:21:ee:38:b3:94:77:2d:df:1a:20:10:bf:60: d7:6f:b8:c1:da:7a:9c:79:0b:0b:43:a5:8b:49:b4: e6:81:fd:82:fb:01:dd:e8:a9:34:22:a6:14:52:b1: f7:f2:1c:12:02:02:3b:67:12:0c:d9:95:b8:22:e1: 6b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D9:45:CE:9C:46:B5:5D:14:98:BE:2F:A6:E4:4D:14:38:D6:0F:B2 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149962.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.112.195.0/24 Signature Algorithm: sha256WithRSAEncryption 11:11:a1:80:c9:e8:d9:2d:a9:2b:36:24:ad:be:42:a8:18:0b: 0c:de:de:58:d9:b3:0c:df:66:ce:7a:45:8c:04:68:75:f7:a3: 48:e8:f8:47:01:b0:9f:ae:29:5b:46:28:07:73:2a:14:23:17: db:3c:13:4d:6a:60:a1:37:b2:e4:12:ab:a7:c2:b0:e9:46:5a: 6e:7d:17:4e:fb:08:27:fa:de:2f:77:c2:e5:08:81:22:81:1a: cf:d5:07:19:95:74:73:60:a6:ff:2e:1d:09:26:0a:21:3b:dd: 0e:12:f3:a0:74:59:55:4d:62:ea:ee:1a:7a:14:be:56:89:92: 3b:35:8c:35:00:42:35:e9:0e:99:95:cf:51:34:7d:7e:b7:6f: 93:6c:c9:24:68:27:3b:c0:a3:dd:18:de:b7:71:3c:95:5e:47: 0e:0d:3a:ab:a3:19:cb:47:22:22:95:b5:35:ba:51:b7:29:b6: 12:33:5e:6a:3b:03:d5:b8:02:5a:6c:4c:6d:2b:bd:dd:11:4b: 4e:c6:7a:d1:d7:44:b9:07:2c:33:59:2e:3e:0e:ed:b9:4a:c7: 2d:62:5c:f0:45:64:ee:eb:07:e0:4f:88:d5:9e:5c:9f:f1:4a: cb:e9:04:2f:61:92:14:e1:26:ae:3d:40:82:c9:66:bf:9f:30: da:fb:41:3b -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUWHKqFXUkoO7alYwZgbD4DNr+qrwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIyNjA3NTc0OFoX DTI3MDIyNTA4MDI0OFowMzExMC8GA1UEAxMoMTJEOTQ1Q0U5QzQ2QjU1RDE0OThC RTJGQTZFNDREMTQzOEQ2MEZCMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKy6uy6r9ov23Q9QG2MQdW4PWIUIm9giLX23SkZlMNXUMmwjFx58CCnHHyE8 IeB4eSvz2gfLk9B49PfpXQqiqQhAVShR0z+VvqN+swQy6TUBBntuoSREqLPxsyBZ W+lHs4qQXU7unZ13mOpsFQA6M+PNXzJ+UVz1oTS26CLOIj+Fu45K4wQzk5umuaVa xipuC9T/N4DhHqApN2uGQ+s9m0aPVbeLH7J9vHftcKG3oLz/KPAvxzW60GJ4Ms5O Hmb/PkOpcUoh7jizlHct3xogEL9g12+4wdp6nHkLC0Oli0m05oH9gvsB3eipNCKm FFKx9/IcEgICO2cSDNmVuCLhax0CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQS2UXO nEa1XRSYvi+m5E0UONYPsjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTk2Mi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGdwwzANBgkqhkiG9w0BAQsFAAOCAQEAERGhgMno2S2pKzYkrb5C qBgLDN7eWNmzDN9mznpFjARodfejSOj4RwGwn64pW0YoB3MqFCMX2zwTTWpgoTey 5BKrp8Kw6UZabn0XTvsIJ/reL3fC5QiBIoEaz9UHGZV0c2Cm/y4dCSYKITvdDhLz oHRZVU1i6u4aehS+VomSOzWMNQBCNekOmZXPUTR9frdvk2zJJGgnO8Cj3Rjet3E8 lV5HDg06q6MZy0ciIpW1NbpRtym2EjNeajsD1bgCWmxMbSu93RFLTsZ60ddEuQcs M1kuPg7tuUrHLWJc8EVk7usH4E+I1Z5cn/FKy+kEL2GSFOEmrj1Agslmv58w2vtB Ow== -----END CERTIFICATE-----Generated at Sun Mar 1 22:00:47 2026 by rpki-client