$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS149662.roa File: AS149662.roa (raw, json) Hash identifier: NR0JkLA1SS0C8cuFsgYrZYMlKlIwEU4AhUJIq3wUL8Y= Subject key identifier: 6E:8F:4B:64:19:79:A4:E5:49:56:08:00:AC:D4:AB:6F:F8:C8:78:65 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 32FC235E96EB0FD573539A988ABF312CEABD5AEF Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS149662.roa Signing time: Thu 06 Aug 2026 03:00:17 +0000 ROA not before: Thu 06 Aug 2026 02:55:17 +0000 ROA not after: Thu 05 Aug 2027 03:00:17 +0000 asID: 149662 IP address blocks: 160.25.162.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:34:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:fc:23:5e:96:eb:0f:d5:73:53:9a:98:8a:bf:31:2c:ea:bd:5a:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Aug 6 02:55:17 2026 GMT Not After : Aug 5 03:00:17 2027 GMT Subject: CN=6E8F4B641979A4E549560800ACD4AB6FF8C87865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6d:f1:7e:2c:a5:5a:26:eb:7c:01:7e:b5:8c: 1b:1c:62:e0:7e:c0:04:00:7f:42:52:8d:17:99:bc: 76:32:54:2e:b9:ad:89:5a:3d:bb:ba:45:67:78:5d: 30:f3:d2:21:a2:a9:ec:28:8e:a6:0d:67:7e:d8:37: 40:39:b2:d8:ae:d1:fa:fd:3c:c0:33:45:3b:2e:f4: a3:7e:4a:a2:ed:3d:73:25:a9:68:ed:ce:a3:fb:6d: 5d:4b:95:57:d3:47:e8:50:f8:4e:b0:9a:e9:db:5a: 7e:2f:f4:f4:8a:19:d9:ef:bc:74:39:df:8a:1c:f0: 47:8d:89:6d:b0:c4:d2:1c:d5:37:a5:84:00:5e:fe: 38:ac:d9:35:bf:bb:80:cd:18:7f:1f:54:de:3f:64: 0f:59:fd:2a:6a:58:a6:03:f9:9b:c6:42:1c:16:12: e5:29:21:e7:70:f7:eb:ae:29:74:61:03:c7:24:24: 64:59:bb:69:7d:63:06:91:33:0e:d5:53:a3:a5:ec: 56:2c:28:99:8b:4d:72:ff:1a:cb:a2:44:85:2b:74: 9d:82:a4:1e:1b:a5:5d:89:a1:1f:46:55:31:13:c9: 44:cc:93:c4:a8:2a:00:39:b7:b5:56:90:cb:ba:10: 48:bf:01:61:0e:90:da:0e:c0:c8:cc:c9:ff:0f:9d: 07:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:8F:4B:64:19:79:A4:E5:49:56:08:00:AC:D4:AB:6F:F8:C8:78:65 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS149662.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.162.0/23 Signature Algorithm: sha256WithRSAEncryption 96:b4:1d:5d:1d:a7:96:b2:13:11:ba:15:6e:c6:9e:5c:ef:32: ea:56:da:79:aa:16:3c:00:0d:aa:a3:eb:6f:c4:34:a3:57:c3: 9d:bd:9e:0d:40:0b:04:a1:8f:70:68:1f:a5:46:fb:31:98:4f: 0a:e6:96:51:01:bc:fa:06:ea:57:a0:97:f8:64:ed:09:bd:f8: 38:d2:32:21:7b:e1:81:0d:2e:0d:85:02:2d:f6:82:5f:3e:1e: 0b:de:a0:b8:14:9c:71:1d:ed:9d:cf:f6:67:c0:ce:11:79:a4: 60:99:c4:ab:a8:1d:80:ba:23:e4:61:bf:84:80:a4:a6:89:45: 23:04:76:b5:41:fa:4f:f2:21:83:17:82:bd:dd:50:15:5c:7a: f7:06:f2:d5:90:84:0f:7d:93:f1:f9:7b:b7:24:65:ea:35:6a: 73:9d:4b:96:27:28:80:68:5b:1b:4a:2e:81:ff:aa:51:00:cb: be:7d:eb:55:cb:c7:9d:45:c2:79:61:a3:e8:8c:a2:c1:c5:ad: 76:3a:2b:40:2c:e8:cf:0d:6d:92:3d:f4:25:66:6e:21:a5:46: 34:8a:c4:f6:79:e4:68:5e:eb:9b:b1:c9:f0:c5:dd:ea:3e:5e: e3:42:27:22:88:bb:a5:80:6e:70:0f:74:50:55:28:6b:10:25: 78:a1:d0:c1 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUMvwjXpbrD9VzU5qYir8xLOq9Wu8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDgwNjAyNTUxN1oX DTI3MDgwNTAzMDAxN1owMzExMC8GA1UEAxMoNkU4RjRCNjQxOTc5QTRFNTQ5NTYw ODAwQUNENEFCNkZGOEM4Nzg2NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKFt8X4spVom63wBfrWMGxxi4H7ABAB/QlKNF5m8djJULrmtiVo9u7pFZ3hd MPPSIaKp7CiOpg1nftg3QDmy2K7R+v08wDNFOy70o35Kou09cyWpaO3Oo/ttXUuV V9NH6FD4TrCa6dtafi/09IoZ2e+8dDnfihzwR42JbbDE0hzVN6WEAF7+OKzZNb+7 gM0Yfx9U3j9kD1n9KmpYpgP5m8ZCHBYS5Skh53D3664pdGEDxyQkZFm7aX1jBpEz DtVTo6XsViwomYtNcv8ay6JEhSt0nYKkHhulXYmhH0ZVMRPJRMyTxKgqADm3tVaQ y7oQSL8BYQ6Q2g7AyMzJ/w+dB/8CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRuj0tk GXmk5UlWCACs1Ktv+Mh4ZTAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTQ5NjYyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBoBmiMA0GCSqGSIb3DQEBCwUAA4IBAQCWtB1dHaeWshMRuhVuxp5c7zLq Vtp5qhY8AA2qo+tvxDSjV8OdvZ4NQAsEoY9waB+lRvsxmE8K5pZRAbz6BupXoJf4 ZO0Jvfg40jIhe+GBDS4NhQIt9oJfPh4L3qC4FJxxHe2dz/ZnwM4ReaRgmcSrqB2A uiPkYb+EgKSmiUUjBHa1QfpP8iGDF4K93VAVXHr3BvLVkIQPfZPx+Xu3JGXqNWpz nUuWJyiAaFsbSi6B/6pRAMu+fetVy8edRcJ5YaPojKLBxa12OitALOjPDW2SPfQl Zm4hpUY0isT2eeRoXuubscnwxd3qPl7jQiciiLulgG5wD3RQVShrECV4odDB -----END CERTIFICATE-----Generated at Thu Sep 3 17:33:02 2026 by rpki-client