$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149344.roa File: AS149344.roa (raw, json) Hash identifier: NZ4c8xNsLqj6PnuDPifKDHMA8o85leUMCYAcgqmf4Y0= Subject key identifier: D2:5C:70:89:CB:68:14:28:C1:BC:D5:BA:EB:4C:73:B3:CB:2F:96:FD Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 34565A18C2B4358CF6775C9D1B8318FA5B1E007C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149344.roa Signing time: Sat 02 May 2026 21:24:03 +0000 ROA not before: Sat 02 May 2026 21:19:03 +0000 ROA not after: Sat 01 May 2027 21:24:03 +0000 asID: 149344 IP address blocks: 2001:df0:d240::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:56:5a:18:c2:b4:35:8c:f6:77:5c:9d:1b:83:18:fa:5b:1e:00:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:19:03 2026 GMT Not After : May 1 21:24:03 2027 GMT Subject: CN=D25C7089CB681428C1BCD5BAEB4C73B3CB2F96FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:bd:50:12:73:80:d3:d1:d3:73:fb:9f:04:32: 6a:ab:bf:8f:59:0c:30:5e:a6:0f:6a:8b:6f:59:e6: e3:b6:d7:8e:bc:48:bc:e2:48:ea:5b:24:9a:30:d8: ed:91:69:bb:c3:19:32:a7:2a:5c:81:79:1d:18:8a: a2:66:2c:1e:1a:5f:8d:17:96:2b:a3:20:34:9d:37: e8:a7:c7:42:07:01:29:ab:14:e9:cc:d5:b9:92:5f: 4a:6b:45:c0:b4:d6:82:85:12:e4:e6:4b:2c:32:d9: 30:e2:b6:03:fa:1d:bc:48:01:e7:ec:86:a3:5a:e9: e1:21:db:fe:0b:de:97:60:17:a9:87:da:f2:25:2e: 56:81:bb:f9:e3:dd:93:8d:b4:5b:6b:9b:43:1d:7a: 56:82:62:3a:cc:c2:2f:b6:68:73:b8:79:e5:99:e8: 4c:2b:72:26:c6:d0:26:03:1e:12:d2:ab:e5:c7:a2: fa:64:1c:9c:aa:5b:4c:c9:65:02:5f:62:eb:28:f1: f7:7d:f3:6b:99:26:6a:89:39:98:4b:b3:55:eb:e0: f1:81:ae:ab:b1:d0:d8:0d:4d:60:29:d4:d0:1e:7a: a4:53:fe:2b:7a:7e:0e:6a:3e:52:5c:29:f6:65:57: ce:2e:c5:16:35:d8:dc:cb:b9:54:47:23:55:69:2f: 89:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:5C:70:89:CB:68:14:28:C1:BC:D5:BA:EB:4C:73:B3:CB:2F:96:FD X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149344.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df0:d240::/48 Signature Algorithm: sha256WithRSAEncryption 1f:56:d9:76:66:84:d8:5f:78:7e:3d:91:c4:e7:8b:de:5a:7d: db:79:6f:5c:b7:f0:f1:f3:19:3f:8e:ae:1a:bf:91:93:f4:6d: 1c:3f:dd:ee:2f:9a:6f:b6:ba:8b:dc:f1:91:54:b7:32:bc:7c: 62:4b:ff:e7:70:a1:26:dd:4a:01:91:8b:ef:32:98:79:9e:12: 68:a1:2a:6f:47:86:84:b8:32:66:41:90:02:92:12:17:8c:16: 92:9d:a0:e2:42:55:97:00:05:87:f0:8b:a5:5e:13:a5:42:71: 50:02:bd:05:ab:f0:12:f9:02:e9:dc:9c:e4:04:54:ac:2d:85: 11:b6:b7:de:0a:16:99:27:b9:ab:44:ae:f7:ca:33:2d:69:ee: 61:87:c2:6e:bc:91:67:d3:4e:5c:60:71:7e:76:0e:a8:92:7b: a3:95:d5:58:73:db:24:cb:1b:0a:b9:c7:0c:18:7a:a0:27:7d: 0b:0a:27:9a:66:32:f6:df:f8:f9:a0:07:32:54:99:a8:11:cf: 0f:31:cf:f4:7e:0a:2f:11:30:bd:6a:9e:17:2b:9f:20:82:d3: 7d:f8:a0:88:c0:8b:e1:ff:6e:ce:5b:64:3f:e8:c1:7f:61:04: ce:20:6f:d0:c6:20:65:a7:7f:3c:81:de:0c:38:4e:29:0a:36: dc:e9:63:db -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUNFZaGMK0NYz2d1ydG4MY+lseAHwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMTkwM1oX DTI3MDUwMTIxMjQwM1owMzExMC8GA1UEAxMoRDI1QzcwODlDQjY4MTQyOEMxQkNE NUJBRUI0QzczQjNDQjJGOTZGRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOW9UBJzgNPR03P7nwQyaqu/j1kMMF6mD2qLb1nm47bXjrxIvOJI6lskmjDY 7ZFpu8MZMqcqXIF5HRiKomYsHhpfjReWK6MgNJ036KfHQgcBKasU6czVuZJfSmtF wLTWgoUS5OZLLDLZMOK2A/odvEgB5+yGo1rp4SHb/gvel2AXqYfa8iUuVoG7+ePd k420W2ubQx16VoJiOszCL7Zoc7h55ZnoTCtyJsbQJgMeEtKr5cei+mQcnKpbTMll Al9i6yjx933za5kmaok5mEuzVevg8YGuq7HQ2A1NYCnU0B56pFP+K3p+Dmo+Ulwp 9mVXzi7FFjXY3Mu5VEcjVWkvibMCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBTSXHCJ y2gUKMG81brrTHOzyy+W/TAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ5MzQ0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN8NJAMA0GCSqGSIb3DQEBCwUAA4IBAQAfVtl2ZoTYX3h+PZHE54ve Wn3beW9ct/Dx8xk/jq4av5GT9G0cP93uL5pvtrqL3PGRVLcyvHxiS//ncKEm3UoB kYvvMph5nhJooSpvR4aEuDJmQZACkhIXjBaSnaDiQlWXAAWH8IulXhOlQnFQAr0F q/AS+QLp3JzkBFSsLYURtrfeChaZJ7mrRK73yjMtae5hh8JuvJFn005cYHF+dg6o knujldVYc9skyxsKuccMGHqgJ30LCieaZjL23/j5oAcyVJmoEc8PMc/0fgovETC9 ap4XK58ggtN9+KCIwIvh/27OW2Q/6MF/YQTOIG/QxiBlp388gd4MOE4pCjbc6WPb -----END CERTIFICATE-----Generated at Sun May 3 00:41:59 2026 by rpki-client