$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149672.roa File: AS149672.roa (raw, json) Hash identifier: Cd83MgAfQBYQQZGMJr0Gpi2qzekhCciiMBcZZbdvuw8= Subject key identifier: 31:1A:0F:60:E1:E8:7F:60:85:69:DF:47:3D:FD:6B:AC:15:6A:30:A0 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 56376802E562621786F7D9D54F63C570DF0ADEF8 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149672.roa Signing time: Mon 21 Sep 2026 03:47:00 +0000 ROA not before: Mon 21 Sep 2026 03:42:00 +0000 ROA not after: Mon 20 Sep 2027 03:47:00 +0000 asID: 149672 IP address blocks: 103.15.160.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 23:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:37:68:02:e5:62:62:17:86:f7:d9:d5:4f:63:c5:70:df:0a:de:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 21 03:42:00 2026 GMT Not After : Sep 20 03:47:00 2027 GMT Subject: CN=311A0F60E1E87F608569DF473DFD6BAC156A30A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:46:77:ca:f7:a6:4e:6c:50:51:94:50:d1:cc: 19:6b:14:49:8f:c2:0a:ef:8b:0d:d5:72:aa:82:cf: 23:20:5f:76:fe:4a:4c:54:48:a9:5c:19:bc:b4:84: 19:65:28:b3:b5:ce:60:c7:a7:73:e9:c7:29:38:0f: 0c:2a:fb:aa:51:72:71:af:9d:39:0b:3a:06:b1:0b: 33:0e:24:c6:b6:f4:ea:e0:5b:e5:9d:eb:23:07:63: 9b:38:02:08:20:39:a6:fb:7e:24:9a:b1:16:9b:bc: a1:26:9e:e6:6f:b1:9f:12:11:3c:50:5f:86:e8:66: 19:7a:52:9c:57:b5:4f:e9:c1:c5:80:d0:b3:3c:bc: 97:fc:99:38:03:f8:6f:1d:27:73:f2:ae:ef:d1:9c: 01:b2:c5:92:b2:98:74:a2:d9:83:bc:e4:9e:6a:2b: 29:a7:e1:21:a9:17:7b:1b:49:e0:fb:2e:52:f1:5a: 9d:80:71:75:6f:81:18:76:9b:c8:79:54:f3:09:1b: 31:fa:49:08:d0:f9:6c:7a:9e:e2:68:fe:59:ba:1e: f5:c3:11:0d:d1:b5:eb:65:b4:64:2a:d1:42:21:eb: 80:f7:59:58:b9:dc:ff:cc:97:2d:fa:1b:d2:9f:2f: 67:65:09:ec:15:d0:4c:94:e9:40:c1:a2:63:90:5e: a1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:1A:0F:60:E1:E8:7F:60:85:69:DF:47:3D:FD:6B:AC:15:6A:30:A0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149672.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.15.160.0/23 Signature Algorithm: sha256WithRSAEncryption 51:4d:e2:ec:93:d5:e5:1d:dc:43:65:b7:d5:ab:fd:e5:6f:56: e7:0c:29:a2:1d:86:10:8e:46:01:37:92:64:e1:d7:17:1c:5f: 13:d2:c1:cb:e5:09:48:b2:59:38:ec:41:3c:28:18:4e:d1:fd: 47:80:b7:3b:08:eb:1b:eb:94:02:d3:ec:a0:18:6a:5e:9c:3f: 81:f9:72:a9:78:f3:f1:88:60:8f:89:92:80:72:e3:30:30:7c: 51:da:55:39:c1:3b:07:0f:32:fe:55:90:99:80:8f:04:91:5b: d4:bd:11:4f:2b:31:ff:20:c3:8a:fd:24:28:b5:23:8f:ce:3d: d0:91:7a:4c:c7:d0:61:4b:4e:97:b1:fa:bc:b4:f4:ad:26:ff: 16:ea:a5:93:e6:d5:39:9c:85:6a:84:44:a3:00:22:e2:96:3d: 2d:b4:89:3e:af:01:7a:72:a2:47:75:a8:c2:a9:df:e4:77:35: 75:ce:5f:c1:c5:14:21:8b:70:0b:d5:d2:57:00:89:76:50:a4: 76:f5:33:fa:e5:45:c5:85:66:78:62:06:44:c0:fb:4a:46:fa: 81:41:0e:85:ec:e9:40:33:c0:09:49:37:fb:20:48:80:8b:ce: 78:a8:90:17:35:fd:a6:3a:a5:05:66:d4:39:8f:f3:2c:6c:08: 41:02:83:3c -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUVjdoAuViYheG99nVT2PFcN8K3vgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkyMTAzNDIwMFoX DTI3MDkyMDAzNDcwMFowMzExMC8GA1UEAxMoMzExQTBGNjBFMUU4N0Y2MDg1NjlE RjQ3M0RGRDZCQUMxNTZBMzBBMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMNGd8r3pk5sUFGUUNHMGWsUSY/CCu+LDdVyqoLPIyBfdv5KTFRIqVwZvLSE GWUos7XOYMenc+nHKTgPDCr7qlFyca+dOQs6BrELMw4kxrb06uBb5Z3rIwdjmzgC CCA5pvt+JJqxFpu8oSae5m+xnxIRPFBfhuhmGXpSnFe1T+nBxYDQszy8l/yZOAP4 bx0nc/Ku79GcAbLFkrKYdKLZg7zknmorKafhIakXextJ4PsuUvFanYBxdW+BGHab yHlU8wkbMfpJCND5bHqe4mj+Wboe9cMRDdG162W0ZCrRQiHrgPdZWLnc/8yXLfob 0p8vZ2UJ7BXQTJTpQMGiY5BeoXcCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQxGg9g 4eh/YIVp30c9/WusFWowoDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ5NjcyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZw+gMA0GCSqGSIb3DQEBCwUAA4IBAQBRTeLsk9XlHdxDZbfVq/3lb1bn DCmiHYYQjkYBN5Jk4dcXHF8T0sHL5QlIslk47EE8KBhO0f1HgLc7COsb65QC0+yg GGpenD+B+XKpePPxiGCPiZKAcuMwMHxR2lU5wTsHDzL+VZCZgI8EkVvUvRFPKzH/ IMOK/SQotSOPzj3QkXpMx9BhS06Xsfq8tPStJv8W6qWT5tU5nIVqhESjACLilj0t tIk+rwF6cqJHdajCqd/kdzV1zl/BxRQhi3AL1dJXAIl2UKR29TP65UXFhWZ4YgZE wPtKRvqBQQ6F7OlAM8AJSTf7IEiAi854qJAXNf2mOqUFZtQ5j/MsbAhBAoM8 -----END CERTIFICATE-----Generated at Mon Sep 21 23:29:43 2026 by rpki-client