$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS59149.roa File: AS59149.roa (raw, json) Hash identifier: 0zOmGWXImzrKcAHxqJabDDbOLl4GVQnAK8rUTi8sqM0= Subject key identifier: 0F:9D:4D:37:08:44:8D:A7:40:19:F2:4A:79:7D:F9:89:0D:0C:F4:B9 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1AD8EEE85F3423B023D1955E28D8511073B21877 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS59149.roa Signing time: Thu 05 Feb 2026 04:00:00 +0000 ROA not before: Thu 05 Feb 2026 03:55:00 +0000 ROA not after: Thu 04 Feb 2027 04:00:00 +0000 asID: 59149 IP address blocks: 103.111.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:d8:ee:e8:5f:34:23:b0:23:d1:95:5e:28:d8:51:10:73:b2:18:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 5 03:55:00 2026 GMT Not After : Feb 4 04:00:00 2027 GMT Subject: CN=0F9D4D3708448DA74019F24A797DF9890D0CF4B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e3:71:e8:58:50:9a:c6:74:72:2e:42:8b:c3: a1:88:56:b2:4a:84:c1:c8:93:fc:8f:6e:c1:d0:22: 44:02:8d:6d:db:08:73:00:aa:69:22:b0:16:9e:e2: 51:a1:f6:a9:6e:d0:15:46:93:3a:51:6f:e6:2b:8d: 7a:49:73:19:c8:88:69:54:4e:10:04:7d:05:c0:ed: 9e:21:4b:55:d5:1f:0f:75:44:65:29:7e:d5:d5:b9: 37:67:e7:0b:1f:28:50:39:1c:f0:f8:c5:48:15:52: 0c:64:6c:35:68:64:f3:bb:a2:d5:41:90:de:64:f9: b7:2e:f7:93:81:5c:66:17:3f:70:e9:26:ed:90:eb: 27:50:22:94:55:68:3b:15:21:f0:dc:96:1f:a0:ba: 04:0b:1e:a6:46:0d:e8:86:c0:de:f0:c8:d9:40:84: cb:fc:6a:7a:58:4e:ec:25:5e:fe:aa:f3:ca:78:5f: 42:f1:f7:35:f3:15:c2:8e:04:cd:af:49:22:84:b7: 5e:ee:91:db:99:37:34:ad:ac:65:53:99:9a:f0:c6: 65:7d:e1:1a:4d:8d:ee:cf:09:c7:5e:6c:4f:fe:73: 26:28:91:3b:40:f4:ac:f5:24:1e:93:9f:72:63:f2: ee:f7:6b:ef:b6:ac:94:f3:be:4b:59:b4:e2:52:2d: 5e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:9D:4D:37:08:44:8D:A7:40:19:F2:4A:79:7D:F9:89:0D:0C:F4:B9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS59149.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.111.248.0/22 Signature Algorithm: sha256WithRSAEncryption 5b:1b:a2:fb:0d:ad:bf:eb:f8:e2:a2:dc:1a:c9:68:58:3e:85: ff:ff:9e:0b:fc:01:58:a9:7e:a4:b7:16:46:cd:59:c8:1d:16: c5:77:64:98:e2:cb:62:e0:22:51:b7:05:1b:1b:fb:e1:ad:c5: 8c:29:0e:fa:dd:6f:dc:6c:47:43:87:05:48:b0:d5:3c:52:20: ac:98:9f:1d:ba:eb:00:58:7d:8e:a3:12:ba:21:e5:78:98:53: 4e:7a:c0:89:b5:e5:6a:7b:1e:a1:d5:9d:e4:dd:a1:b9:d7:d5: 97:f3:ec:c1:d3:73:31:86:72:c1:95:11:fe:55:27:ac:01:a5: c8:11:09:aa:3a:f3:22:a9:39:44:fb:b9:3c:16:9b:c8:b8:1a: ec:d1:43:da:11:30:ad:99:c3:92:40:5f:d8:f1:74:26:cb:12: 47:7f:36:75:cf:4b:1d:fe:5a:e2:6d:b6:07:db:0a:c8:86:c3: 1a:48:69:96:ae:2b:0c:74:05:e8:82:9b:da:31:bb:d6:25:80: fb:1c:02:0e:8c:5b:44:3f:26:1d:11:bf:be:e8:ec:2d:4f:ef: 76:65:a6:93:ca:96:52:7c:03:19:e1:1f:45:97:38:eb:1d:14: c7:3e:28:c3:e5:3e:38:bf:78:9f:5f:7f:96:bf:cb:68:03:a0: b9:ff:6c:d7 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUGtju6F80I7Aj0ZVeKNhREHOyGHcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIwNTAzNTUwMFoX DTI3MDIwNDA0MDAwMFowMzExMC8GA1UEAxMoMEY5RDREMzcwODQ0OERBNzQwMTlG MjRBNzk3REY5ODkwRDBDRjRCOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMnjcehYUJrGdHIuQovDoYhWskqEwciT/I9uwdAiRAKNbdsIcwCqaSKwFp7i UaH2qW7QFUaTOlFv5iuNeklzGciIaVROEAR9BcDtniFLVdUfD3VEZSl+1dW5N2fn Cx8oUDkc8PjFSBVSDGRsNWhk87ui1UGQ3mT5ty73k4FcZhc/cOkm7ZDrJ1AilFVo OxUh8NyWH6C6BAsepkYN6IbA3vDI2UCEy/xqelhO7CVe/qrzynhfQvH3NfMVwo4E za9JIoS3Xu6R25k3NK2sZVOZmvDGZX3hGk2N7s8Jx15sT/5zJiiRO0D0rPUkHpOf cmPy7vdr77aslPO+S1m04lItXtUCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBQPnU03 CESNp0AZ8kp5ffmJDQz0uTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzU5MTQ5LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ2/4MA0GCSqGSIb3DQEBCwUAA4IBAQBbG6L7Da2/6/jiotwayWhY PoX//54L/AFYqX6ktxZGzVnIHRbFd2SY4sti4CJRtwUbG/vhrcWMKQ763W/cbEdD hwVIsNU8UiCsmJ8duusAWH2OoxK6IeV4mFNOesCJteVqex6h1Z3k3aG519WX8+zB 03MxhnLBlRH+VSesAaXIEQmqOvMiqTlE+7k8FpvIuBrs0UPaETCtmcOSQF/Y8XQm yxJHfzZ1z0sd/lribbYH2wrIhsMaSGmWrisMdAXogpvaMbvWJYD7HAIOjFtEPyYd Eb++6OwtT+92ZaaTypZSfAMZ4R9FlzjrHRTHPijD5T44v3ifX3+Wv8toA6C5/2zX -----END CERTIFICATE-----Generated at Mon Mar 2 03:02:04 2026 by rpki-client