$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149333.roa File: AS149333.roa (raw, json) Hash identifier: IShNPX1m6nhhMEnmC5dKxsyDt0tGfmi10UbBuKY+mSs= Subject key identifier: 68:E7:AD:68:33:91:D3:C4:A0:48:9C:BF:EE:89:52:7D:46:AC:E2:12 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 139AE2E588A9285F963479CC806C4CBD8DC71D9F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149333.roa Signing time: Sat 02 May 2026 08:35:08 +0000 ROA not before: Sat 02 May 2026 08:30:08 +0000 ROA not after: Sat 01 May 2027 08:35:08 +0000 asID: 149333 IP address blocks: 2400:a360::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:9a:e2:e5:88:a9:28:5f:96:34:79:cc:80:6c:4c:bd:8d:c7:1d:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:30:08 2026 GMT Not After : May 1 08:35:08 2027 GMT Subject: CN=68E7AD683391D3C4A0489CBFEE89527D46ACE212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d9:90:ac:91:63:7d:d0:a9:66:c5:37:b7:ee: 91:89:85:14:34:8d:d6:d9:58:71:06:f0:83:75:0c: 9b:cd:c9:3c:f2:92:67:2f:8c:a2:cc:9f:a8:d2:33: 8c:8e:56:06:1c:e5:1b:a0:26:4f:e7:87:93:06:58: 1d:54:d2:5a:9f:c5:e6:db:2f:97:b6:98:51:08:84: ef:d7:d8:f7:44:ec:6a:da:72:b3:b7:40:8a:56:ec: 29:c6:82:4f:67:b2:cd:30:04:b6:5b:26:55:b1:23: 81:31:8b:6d:78:9a:95:1f:bc:1b:ff:b7:45:55:07: 07:b2:d2:db:04:a5:90:27:d2:6a:db:76:8b:b2:ad: a5:a5:fe:a4:bd:33:c8:dc:ab:aa:08:f2:7a:40:3c: ef:e2:09:19:56:dc:47:17:62:a7:cd:2a:34:2c:5c: 2c:78:b8:9f:9e:0e:a1:14:a3:b3:b2:32:45:a5:10: 0e:e0:e1:8a:22:c2:8a:75:3f:b7:20:f2:2f:f2:99: 13:0d:93:20:d9:4d:82:17:e9:9e:e5:2d:6b:ef:4f: b4:c7:1d:3e:80:c9:0d:f5:27:58:47:76:cd:d0:45: af:f1:da:eb:c4:3f:06:96:02:b3:22:db:8a:7e:b4: b3:88:e7:09:3c:c7:37:27:38:27:8c:62:f1:49:de: fd:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E7:AD:68:33:91:D3:C4:A0:48:9C:BF:EE:89:52:7D:46:AC:E2:12 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:a360::/32 Signature Algorithm: sha256WithRSAEncryption 91:17:19:75:a5:aa:6a:37:a1:59:04:88:96:8d:10:42:da:1a: 85:2e:0f:97:a9:a5:2b:4f:fd:32:f0:f6:2e:0c:30:1a:1a:c5: f6:a2:7a:af:c5:6c:a5:9f:bf:fa:18:99:e9:b9:5a:f0:4a:73: 81:d4:a6:46:cd:65:54:8e:49:f7:e9:5e:40:11:45:5a:ef:a2: 8d:2b:60:cf:1a:af:5e:63:36:49:eb:15:14:ea:c5:99:f4:16: db:fb:fb:d1:26:7c:40:49:ae:fc:dc:6b:b6:f2:21:c9:96:7d: 79:e4:0d:42:a8:fa:44:8c:bd:a9:bc:59:dd:f1:90:b9:31:90: c1:a6:c6:af:a2:99:3e:5e:6a:bb:eb:a2:72:4a:10:99:e6:ba: 34:e8:e2:60:44:2a:8c:58:af:2f:69:c4:6d:e4:f6:91:22:f2: 5d:fc:12:0c:f0:99:7c:e3:c8:e1:8f:86:d5:f5:ff:60:38:03: 75:9c:ee:e0:85:7b:83:bd:8c:13:c9:f5:04:b9:31:67:fb:8a: 1b:97:83:54:e7:43:db:c6:09:8d:dc:f0:78:63:4b:ff:8b:a6: 67:82:7f:e8:41:4e:e8:42:95:bb:63:04:5d:ad:7f:85:50:df: b9:5d:05:26:bb:4a:96:5c:11:c3:2f:4f:79:70:1c:cc:84:a6: a8:48:e7:f0 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgIUE5ri5YipKF+WNHnMgGxMvY3HHZ8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzAwOFoX DTI3MDUwMTA4MzUwOFowMzExMC8GA1UEAxMoNjhFN0FENjgzMzkxRDNDNEEwNDg5 Q0JGRUU4OTUyN0Q0NkFDRTIxMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKXZkKyRY33QqWbFN7fukYmFFDSN1tlYcQbwg3UMm83JPPKSZy+MosyfqNIz jI5WBhzlG6AmT+eHkwZYHVTSWp/F5tsvl7aYUQiE79fY90Tsatpys7dAilbsKcaC T2eyzTAEtlsmVbEjgTGLbXialR+8G/+3RVUHB7LS2wSlkCfSatt2i7KtpaX+pL0z yNyrqgjyekA87+IJGVbcRxdip80qNCxcLHi4n54OoRSjs7IyRaUQDuDhiiLCinU/ tyDyL/KZEw2TINlNghfpnuUta+9PtMcdPoDJDfUnWEd2zdBFr/Ha68Q/BpYCsyLb in60s4jnCTzHNyc4J4xi8Une/ZcCAwEAAaOCAc0wggHJMB0GA1UdDgQWBBRo561o M5HTxKBInL/uiVJ9RqziEjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ5MzMzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIA AjAHAwUAJACjYDANBgkqhkiG9w0BAQsFAAOCAQEAkRcZdaWqajehWQSIlo0QQtoa hS4Pl6mlK0/9MvD2LgwwGhrF9qJ6r8VspZ+/+hiZ6bla8EpzgdSmRs1lVI5J9+le QBFFWu+ijStgzxqvXmM2SesVFOrFmfQW2/v70SZ8QEmu/NxrtvIhyZZ9eeQNQqj6 RIy9qbxZ3fGQuTGQwabGr6KZPl5qu+uickoQmea6NOjiYEQqjFivL2nEbeT2kSLy XfwSDPCZfOPI4Y+G1fX/YDgDdZzu4IV7g72ME8n1BLkxZ/uKG5eDVOdD28YJjdzw eGNL/4umZ4J/6EFO6EKVu2MEXa1/hVDfuV0FJrtKllwRwy9PeXAczISmqEjn8A== -----END CERTIFICATE-----Generated at Sun May 3 00:42:03 2026 by rpki-client