$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149676.roa File: AS149676.roa (raw, json) Hash identifier: ZiWpkVhvH/b+45Lkvg3WBvctWfYIvrXr1jr56aUxKYk= Subject key identifier: 48:08:DA:5A:7D:A1:15:69:C3:87:BB:A3:21:5D:D0:44:0F:CF:BB:64 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1DB39DF87258CDF203C1644B1AD5D0AFD935988E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149676.roa Signing time: Sat 02 May 2026 21:26:00 +0000 ROA not before: Sat 02 May 2026 21:21:00 +0000 ROA not after: Sat 01 May 2027 21:26:00 +0000 asID: 149676 IP address blocks: 2001:df1:cd40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:b3:9d:f8:72:58:cd:f2:03:c1:64:4b:1a:d5:d0:af:d9:35:98:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:21:00 2026 GMT Not After : May 1 21:26:00 2027 GMT Subject: CN=4808DA5A7DA11569C387BBA3215DD0440FCFBB64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:03:5d:de:39:09:6a:f2:d5:93:b6:34:83:00: 75:90:32:76:3d:cb:65:bc:15:a5:d5:9d:0e:28:e8: 78:fd:e6:81:25:0c:ce:7b:bd:97:d4:44:4f:df:36: 44:68:c2:a0:24:da:6d:d5:db:53:f1:9d:56:bd:7c: e9:52:fa:d3:7d:56:18:e6:ea:16:01:c5:31:19:39: 03:5d:4c:7f:ba:9f:31:26:78:38:55:63:d0:14:56: b7:81:54:b9:62:2b:49:26:ca:8b:95:36:41:f4:a5: 00:e3:a4:0b:e0:14:79:a2:42:fe:4a:3b:99:43:4b: 2c:c2:6e:24:00:8b:4b:2a:ea:1f:71:a3:1e:19:43: 5e:b7:ac:72:db:62:26:3c:77:48:cc:bc:53:17:93: f5:7f:e0:b2:2a:53:a1:5c:c0:1e:e8:5c:2b:ea:2e: 5f:45:15:4b:de:b3:f8:fd:f8:a7:a9:b7:10:81:4b: 33:42:f6:a5:70:13:0b:11:a4:7a:76:71:af:77:ed: 98:22:cb:b9:c0:11:d7:1d:6a:9f:6e:34:e4:72:bd: f6:76:6d:d0:55:47:12:46:02:b5:2a:40:9a:c9:1f: a4:a8:e2:70:28:33:44:e8:90:73:21:8e:eb:c2:ab: da:e2:8e:1c:5b:a5:cd:da:ad:3f:94:cc:25:d2:4d: 5f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:08:DA:5A:7D:A1:15:69:C3:87:BB:A3:21:5D:D0:44:0F:CF:BB:64 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149676.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:cd40::/48 Signature Algorithm: sha256WithRSAEncryption 46:de:ea:eb:11:45:ff:df:70:ac:47:49:f2:fc:6e:09:4b:f7: 0e:b6:3d:16:32:d9:3f:a6:8d:74:45:95:e1:be:9e:f0:57:ee: 49:27:b1:d4:be:f6:dc:04:67:8a:0b:93:fd:9f:a5:47:84:35: c5:92:35:47:d2:b6:4a:85:33:53:36:03:f0:d7:8c:b1:9e:93: aa:5f:46:a2:ee:63:66:80:76:27:1e:1d:80:c0:93:e8:76:70: 0e:75:35:9b:1c:94:23:55:87:0a:53:34:e6:9e:13:2d:ff:34: df:2c:a7:bd:3e:9a:da:1c:32:92:4e:b7:1a:4a:9e:17:4c:0a: 19:57:42:af:11:e0:e9:0c:f7:88:94:51:bc:fe:99:cb:9c:c4: 87:12:9f:e2:86:2c:95:78:21:a3:f9:c0:cd:b7:0b:1c:1d:4e: e7:95:d6:e7:a4:67:ef:d0:1d:c7:ab:65:0f:cc:66:d7:f8:75: 5c:b9:f0:2a:e2:2e:6b:8f:bf:c3:cf:cb:9b:a6:9e:e6:c9:3a: 86:e3:5c:40:71:cd:f3:8b:22:32:50:af:1f:4b:5d:aa:1e:b5: 9b:e5:90:f7:db:86:ea:a0:ac:36:2b:10:72:9c:08:eb:ed:07: 77:02:ff:77:76:a2:fb:c9:d2:6e:99:b6:74:d8:e1:46:8f:13: 7c:81:6d:1c -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUHbOd+HJYzfIDwWRLGtXQr9k1mI4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjEwMFoX DTI3MDUwMTIxMjYwMFowMzExMC8GA1UEAxMoNDgwOERBNUE3REExMTU2OUMzODdC QkEzMjE1REQwNDQwRkNGQkI2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKADXd45CWry1ZO2NIMAdZAydj3LZbwVpdWdDijoeP3mgSUMznu9l9RET982 RGjCoCTabdXbU/GdVr186VL6031WGObqFgHFMRk5A11Mf7qfMSZ4OFVj0BRWt4FU uWIrSSbKi5U2QfSlAOOkC+AUeaJC/ko7mUNLLMJuJACLSyrqH3GjHhlDXresctti Jjx3SMy8UxeT9X/gsipToVzAHuhcK+ouX0UVS96z+P34p6m3EIFLM0L2pXATCxGk enZxr3ftmCLLucAR1x1qn2405HK99nZt0FVHEkYCtSpAmskfpKjicCgzROiQcyGO 68Kr2uKOHFulzdqtP5TMJdJNXwcCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBRICNpa faEVacOHu6MhXdBED8+7ZDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ5Njc2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN8c1AMA0GCSqGSIb3DQEBCwUAA4IBAQBG3urrEUX/33CsR0ny/G4J S/cOtj0WMtk/po10RZXhvp7wV+5JJ7HUvvbcBGeKC5P9n6VHhDXFkjVH0rZKhTNT NgPw14yxnpOqX0ai7mNmgHYnHh2AwJPodnAOdTWbHJQjVYcKUzTmnhMt/zTfLKe9 PpraHDKSTrcaSp4XTAoZV0KvEeDpDPeIlFG8/pnLnMSHEp/ihiyVeCGj+cDNtwsc HU7nldbnpGfv0B3Hq2UPzGbX+HVcufAq4i5rj7/Dz8ubpp7myTqG41xAcc3ziyIy UK8fS12qHrWb5ZD324bqoKw2KxBynAjr7Qd3Av93dqL7ydJumbZ02OFGjxN8gW0c -----END CERTIFICATE-----Generated at Sun May 3 00:41:59 2026 by rpki-client