$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149877.roa File: AS149877.roa (raw, json) Hash identifier: /2l56Sl1yy2uEOg9wVbJuIN4Ddoh+7QIEYBl9HkErvE= Subject key identifier: 21:89:51:7D:E1:B8:63:5B:85:51:24:14:11:6C:DA:E0:92:96:54:13 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 484751662A2B5DB00DFD9734F86D8F5B1E8E885C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149877.roa Signing time: Fri 06 Nov 2026 03:48:53 +0000 ROA not before: Fri 06 Nov 2026 03:43:53 +0000 ROA not after: Fri 05 Nov 2027 03:48:53 +0000 asID: 149877 IP address blocks: 153.60.128.0/18 maxlen: 24 202.70.132.0/23 maxlen: 24 202.125.82.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:47:51:66:2a:2b:5d:b0:0d:fd:97:34:f8:6d:8f:5b:1e:8e:88:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Nov 6 03:43:53 2026 GMT Not After : Nov 5 03:48:53 2027 GMT Subject: CN=2189517DE1B8635B85512414116CDAE092965413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:e0:97:17:b4:ce:f8:f1:3b:a7:a2:e2:3a:ac: bf:48:aa:a0:23:28:80:8e:48:df:e5:3a:da:9d:de: 90:42:41:ce:a4:02:f3:51:e6:29:18:3c:3d:bc:0e: 58:27:27:fb:03:69:14:db:3a:60:6a:6c:a5:92:7b: 5b:43:07:6b:69:45:93:a0:4a:36:76:96:9a:4c:45: 23:d3:ca:4f:b6:aa:22:c3:ef:40:6b:c1:1e:7b:7f: 95:3f:73:15:f8:93:8c:f2:07:74:f6:00:ab:25:4a: cb:e3:61:b8:31:3f:83:a1:16:92:38:e3:5c:0f:ce: f5:ad:f9:0e:45:2f:e0:35:14:2b:7f:da:f7:99:e6: aa:18:de:0c:40:9f:e9:1e:47:5f:33:fa:01:a8:72: f4:cd:0b:42:f3:17:1f:16:2a:be:5a:97:ef:29:7e: 9b:6d:b7:cc:b4:b7:b4:9e:7e:c5:70:16:0c:cb:8c: 49:c0:b8:19:5b:23:e4:1f:0a:cf:63:65:9f:1c:a6: 51:7a:5b:0d:b0:e6:f7:80:57:1b:23:1b:bf:70:c0: 90:7b:79:1f:5e:75:0c:e1:5d:de:3b:a8:9b:c7:13: 66:d3:9d:bd:f8:a2:de:be:1f:4f:fd:82:e3:25:c3: 82:47:38:1e:20:93:f6:48:cd:e9:3a:05:d8:aa:ad: 7e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:89:51:7D:E1:B8:63:5B:85:51:24:14:11:6C:DA:E0:92:96:54:13 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149877.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 153.60.128.0/18 202.70.132.0/23 202.125.82.0/23 Signature Algorithm: sha256WithRSAEncryption 14:d3:ad:96:65:86:52:5f:21:5f:38:11:6a:32:95:d1:8d:05: b4:e1:1b:6c:e7:1f:6d:fc:d6:a2:23:2b:dc:95:e9:db:8e:7f: 62:71:e2:6f:83:90:79:e8:99:16:77:52:0c:2b:5b:42:c1:b9: 20:1e:82:b5:21:a6:ef:d8:b8:d1:30:22:da:eb:bb:fe:25:b3: ef:71:72:bc:72:f4:f5:a5:68:bd:7d:ee:68:bc:13:2f:2e:0a: 95:8c:b2:57:45:47:22:c8:41:27:89:c4:93:d0:4d:7d:09:ed: 13:d0:2a:a6:5e:d5:09:fd:48:5b:09:70:e0:cc:26:7b:43:3b: b5:f3:94:61:d8:2c:35:64:8e:f4:cc:b1:c3:9f:74:31:59:ed: 4c:da:13:5b:23:f8:d9:6d:57:c7:a7:ee:f0:a1:55:5c:5f:9f: 1a:2d:11:44:10:b6:52:ad:23:67:0a:9e:0c:37:d2:7d:fa:52: 41:ee:8e:24:e9:a0:5b:db:75:35:34:df:91:d5:f1:87:9f:0d: 51:fa:a8:e1:35:f1:74:b9:9d:1a:9d:a0:2c:53:40:76:7e:33: 20:14:e6:50:aa:e5:df:80:48:f7:9b:2c:f2:9f:72:8a:11:6d: 4d:7c:7a:ea:91:78:53:43:23:d9:4e:f7:9c:75:b3:a5:c7:a8: 5c:5e:34:40 -----BEGIN CERTIFICATE----- MIIE5TCCA82gAwIBAgIUSEdRZiorXbAN/Zc0+G2PWx6OiFwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTEwNjAzNDM1M1oX DTI3MTEwNTAzNDg1M1owMzExMC8GA1UEAxMoMjE4OTUxN0RFMUI4NjM1Qjg1NTEy NDE0MTE2Q0RBRTA5Mjk2NTQxMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPPglxe0zvjxO6ei4jqsv0iqoCMogI5I3+U62p3ekEJBzqQC81HmKRg8PbwO WCcn+wNpFNs6YGpspZJ7W0MHa2lFk6BKNnaWmkxFI9PKT7aqIsPvQGvBHnt/lT9z FfiTjPIHdPYAqyVKy+NhuDE/g6EWkjjjXA/O9a35DkUv4DUUK3/a95nmqhjeDECf 6R5HXzP6Aahy9M0LQvMXHxYqvlqX7yl+m223zLS3tJ5+xXAWDMuMScC4GVsj5B8K z2NlnxymUXpbDbDm94BXGyMbv3DAkHt5H151DOFd3juom8cTZtOdvfii3r4fT/2C 4yXDgkc4HiCT9kjN6ToF2KqtftsCAwEAAaOCAdgwggHUMB0GA1UdDgQWBBQhiVF9 4bhjW4VRJBQRbNrgkpZUEzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ5ODc3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIA ATASAwQGmTyAAwQBykaEAwQByn1SMA0GCSqGSIb3DQEBCwUAA4IBAQAU062WZYZS XyFfOBFqMpXRjQW04Rts5x9t/NaiIyvclenbjn9iceJvg5B56JkWd1IMK1tCwbkg HoK1Iabv2LjRMCLa67v+JbPvcXK8cvT1pWi9fe5ovBMvLgqVjLJXRUciyEEnicST 0E19Ce0T0CqmXtUJ/UhbCXDgzCZ7Qzu185Rh2Cw1ZI70zLHDn3QxWe1M2hNbI/jZ bVfHp+7woVVcX58aLRFEELZSrSNnCp4MN9J9+lJB7o4k6aBb23U1NN+R1fGHnw1R +qjhNfF0uZ0anaAsU0B2fjMgFOZQquXfgEj3myzyn3KKEW1NfHrqkXhTQyPZTvec dbOlx6hcXjRA -----END CERTIFICATE-----Generated at Mon Nov 9 15:31:17 2026 by rpki-client