$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149341.roa File: AS149341.roa (raw, json) Hash identifier: h8sKNIJh85xJI4mqrHspHRqo5WREijk6dvcPSmqpqBk= Subject key identifier: C1:7A:31:FB:BA:6E:EF:59:3A:EF:BE:1B:56:E5:65:EF:91:28:BF:DA Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5CF40383646718C3E45EF973D36556464BED63EC Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149341.roa Signing time: Thu 15 Oct 2026 04:01:29 +0000 ROA not before: Thu 15 Oct 2026 03:56:29 +0000 ROA not after: Thu 14 Oct 2027 04:01:29 +0000 asID: 149341 IP address blocks: 103.179.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:f4:03:83:64:67:18:c3:e4:5e:f9:73:d3:65:56:46:4b:ed:63:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 15 03:56:29 2026 GMT Not After : Oct 14 04:01:29 2027 GMT Subject: CN=C17A31FBBA6EEF593AEFBE1B56E565EF9128BFDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:04:f7:0d:d8:4c:79:80:9c:e0:a2:5f:32:6a: a7:84:04:d6:e8:c1:93:87:9c:32:e8:73:89:d1:1b: 1e:7b:93:1e:6c:0d:22:22:93:05:7f:06:54:b9:3b: 9a:41:1f:21:a8:1d:2b:3a:6d:18:19:98:a6:fb:0d: 52:d0:b4:84:ea:bc:b6:12:68:8b:43:ee:94:5f:de: df:2c:2a:c2:21:bd:0c:9f:df:f6:15:fb:ba:cd:e3: 49:c1:a6:d8:ec:ed:70:15:c4:3e:e5:d7:42:5d:18: eb:12:07:62:ec:f9:18:21:99:a4:c8:94:27:e8:61: 97:56:54:b7:91:53:9c:83:5e:5d:b3:7b:a9:9d:cb: 18:a5:5e:4f:a8:4d:85:c0:2b:6e:4c:63:d5:5b:60: 5a:d8:00:7e:63:3e:6c:fa:40:b7:d5:b3:41:2c:21: 58:16:d5:20:42:af:2c:be:dd:3c:48:58:61:e1:57: 5f:ec:cf:dd:a1:f1:e4:15:10:f9:da:d6:88:ff:de: d1:38:44:e5:cc:5f:22:3d:f4:ca:a7:1a:05:6d:2d: 9b:f1:77:64:69:59:59:c9:24:87:6f:44:66:96:19: 9e:b6:6f:68:6c:c8:0f:79:12:cc:ce:48:52:4b:57: 1d:23:e6:ed:c0:f8:43:23:ba:a7:63:47:ad:ed:16: 7a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:7A:31:FB:BA:6E:EF:59:3A:EF:BE:1B:56:E5:65:EF:91:28:BF:DA X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149341.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.179.71.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:48:ae:55:aa:e3:1c:00:25:97:82:6d:20:5e:31:2b:8e:21: 8c:72:26:7b:2d:eb:9c:68:9b:dc:f1:35:44:d3:71:44:83:9c: ad:c3:75:32:b1:24:37:ab:c2:bf:85:af:57:a6:f0:e8:83:6e: ea:5d:c8:bd:26:05:7b:cb:e3:94:33:e7:85:5d:ff:b5:1a:ad: df:59:4b:14:6e:d9:24:d6:2d:92:0c:87:d4:40:0a:64:01:eb: c0:5e:91:c2:df:d9:fe:c9:c8:38:02:85:8b:b4:e6:2c:1f:5e: c1:4b:a7:77:71:63:0c:b0:01:db:31:e2:80:7d:6f:5f:c8:31: 2d:dd:d7:04:fe:1d:94:bb:8b:44:1e:07:f5:17:e9:00:3b:65: 65:19:6f:d6:86:91:20:4f:0b:93:f3:89:c5:47:9b:7f:ab:10: 71:5e:b9:74:82:dd:21:5a:7c:bc:6a:9b:28:26:0e:ab:a3:79: 7b:96:5d:75:31:85:45:64:cc:64:bd:7a:d7:29:42:d4:5d:c1: d0:3d:63:07:0d:70:fe:0a:8f:ec:8a:7b:94:76:0f:a6:4b:a2: 4d:d4:9f:af:2a:2d:7b:45:91:f8:be:28:74:c1:8b:63:fd:6b: 6c:35:67:21:5c:85:16:ef:c3:ab:d7:3f:f0:33:a6:50:d3:cc: 37:dd:2b:d1 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUXPQDg2RnGMPkXvlz02VWRkvtY+wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAxNTAzNTYyOVoX DTI3MTAxNDA0MDEyOVowMzExMC8GA1UEAxMoQzE3QTMxRkJCQTZFRUY1OTNBRUZC RTFCNTZFNTY1RUY5MTI4QkZEQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJUE9w3YTHmAnOCiXzJqp4QE1ujBk4ecMuhzidEbHnuTHmwNIiKTBX8GVLk7 mkEfIagdKzptGBmYpvsNUtC0hOq8thJoi0PulF/e3ywqwiG9DJ/f9hX7us3jScGm 2OztcBXEPuXXQl0Y6xIHYuz5GCGZpMiUJ+hhl1ZUt5FTnINeXbN7qZ3LGKVeT6hN hcArbkxj1VtgWtgAfmM+bPpAt9WzQSwhWBbVIEKvLL7dPEhYYeFXX+zP3aHx5BUQ +drWiP/e0ThE5cxfIj30yqcaBW0tm/F3ZGlZWckkh29EZpYZnrZvaGzID3kSzM5I UktXHSPm7cD4QyO6p2NHre0WerUCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTBejH7 um7vWTrvvhtW5WXvkSi/2jAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ5MzQxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ7NHMA0GCSqGSIb3DQEBCwUAA4IBAQCeSK5VquMcACWXgm0gXjErjiGM ciZ7LeucaJvc8TVE03FEg5ytw3UysSQ3q8K/ha9XpvDog27qXci9JgV7y+OUM+eF Xf+1Gq3fWUsUbtkk1i2SDIfUQApkAevAXpHC39n+ycg4AoWLtOYsH17BS6d3cWMM sAHbMeKAfW9fyDEt3dcE/h2Uu4tEHgf1F+kAO2VlGW/WhpEgTwuT84nFR5t/qxBx Xrl0gt0hWny8apsoJg6ro3l7ll11MYVFZMxkvXrXKULUXcHQPWMHDXD+Co/sinuU dg+mS6JN1J+vKi17RZH4vih0wYtj/WtsNWchXIUW78Or1z/wM6ZQ08w33SvR -----END CERTIFICATE-----Generated at Mon Nov 9 15:04:40 2026 by rpki-client