$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149688.roa File: AS149688.roa (raw, json) Hash identifier: qTpcqrKzejdz6hqa94nha0Q06MXMZkM3Ym3rac9s/U0= Subject key identifier: 29:9D:F4:11:57:27:9F:72:84:7D:BC:D2:0E:61:BE:C6:47:88:12:75 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 669E9988AE75A21ED9233DFA2BBF7085232DB0DB Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149688.roa Signing time: Sat 02 May 2026 21:32:20 +0000 ROA not before: Sat 02 May 2026 21:27:20 +0000 ROA not after: Sat 01 May 2027 21:32:20 +0000 asID: 149688 IP address blocks: 2401:5920::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:9e:99:88:ae:75:a2:1e:d9:23:3d:fa:2b:bf:70:85:23:2d:b0:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:27:20 2026 GMT Not After : May 1 21:32:20 2027 GMT Subject: CN=299DF41157279F72847DBCD20E61BEC647881275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:52:de:dc:bc:be:4d:30:e7:25:a0:c4:38:68: 52:ad:b2:12:03:76:7e:7d:1d:08:db:44:91:fb:93: e0:6f:5d:01:b4:e1:d8:13:45:8d:c6:d5:91:d5:87: 50:bf:6b:0d:61:03:b6:17:30:40:53:4d:ba:50:1f: 6b:c9:75:b3:29:44:e5:89:ff:be:89:be:66:3f:29: 2d:89:4e:89:21:af:4a:2f:ca:84:f2:0c:ae:b2:23: 91:1f:96:66:db:ad:fd:b2:94:2d:9c:3f:86:db:63: b7:b0:b2:c3:b4:24:06:b7:31:e6:81:00:52:87:70: db:38:ef:37:c1:d8:a0:2d:a2:40:dc:74:16:75:3a: 7c:b4:b6:54:7d:fb:e6:39:0f:f4:47:c0:f0:ea:d9: 05:b3:21:47:54:b1:fa:8f:33:de:78:a5:b7:7f:f2: 47:b6:30:f0:8e:5a:27:51:12:d5:62:b5:f3:18:a3: 0d:ce:7c:8c:70:bd:75:e8:4b:ee:05:f7:a8:ba:05: b7:9c:b6:07:ab:60:2e:02:dc:37:6f:8f:4e:6a:29: 31:d2:c5:c1:02:3a:b9:36:53:4f:32:79:8d:83:89: e3:bc:d0:08:59:69:91:8a:42:0b:79:2b:14:e3:e6: be:74:da:7c:13:a1:1f:b4:77:6c:e6:5e:b0:15:20: 2a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:9D:F4:11:57:27:9F:72:84:7D:BC:D2:0E:61:BE:C6:47:88:12:75 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149688.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:5920::/32 Signature Algorithm: sha256WithRSAEncryption 40:d9:9e:00:35:52:54:ea:42:de:15:2a:d7:9e:3c:04:02:ad: 39:09:4f:58:4e:4f:05:7f:f4:f4:4b:e1:9c:ee:d9:ba:d5:4e: 5b:a7:34:5a:3b:3d:78:db:a8:53:b8:d0:0d:7f:65:b5:ed:53: ab:8c:c1:c3:7b:5b:0e:37:d5:ea:62:ae:7a:5b:e8:0b:26:8f: 87:28:21:9c:cf:59:64:b6:a1:35:0b:06:22:54:08:fd:31:f7: 87:b5:b9:f8:a0:6e:e8:82:20:2b:8d:0d:8c:c2:58:fc:47:fe: a6:a1:66:e7:c1:dd:65:1c:65:1a:5f:88:7a:98:39:0d:69:81: ff:ed:cb:c2:40:3b:9a:b3:b1:78:20:c8:8c:15:c6:f4:a8:f9: 88:36:cc:75:de:11:04:7b:a6:91:a4:f2:aa:f6:2e:11:ff:cf: 2b:8b:99:2e:31:56:3b:ba:d5:d3:1e:d5:44:93:b2:64:18:61: 6c:38:65:59:32:88:ee:40:3f:cf:8d:53:0f:6e:61:69:df:06: e7:7c:56:5d:cb:f3:06:8b:f6:de:cd:ad:8c:3f:b3:7d:0c:8a: 33:fd:8b:b1:79:e7:d5:93:fa:c0:18:09:f8:42:7b:8d:1f:ac: 30:8e:b2:7c:31:7c:d7:42:87:6a:4d:96:d4:0c:1b:88:6a:9b: 24:4e:3a:53 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgIUZp6ZiK51oh7ZIz36K79whSMtsNswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjcyMFoX DTI3MDUwMTIxMzIyMFowMzExMC8GA1UEAxMoMjk5REY0MTE1NzI3OUY3Mjg0N0RC Q0QyMEU2MUJFQzY0Nzg4MTI3NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMJS3ty8vk0w5yWgxDhoUq2yEgN2fn0dCNtEkfuT4G9dAbTh2BNFjcbVkdWH UL9rDWEDthcwQFNNulAfa8l1sylE5Yn/vom+Zj8pLYlOiSGvSi/KhPIMrrIjkR+W Ztut/bKULZw/httjt7Cyw7QkBrcx5oEAUodw2zjvN8HYoC2iQNx0FnU6fLS2VH37 5jkP9EfA8OrZBbMhR1Sx+o8z3nilt3/yR7Yw8I5aJ1ES1WK18xijDc58jHC9dehL 7gX3qLoFt5y2B6tgLgLcN2+PTmopMdLFwQI6uTZTTzJ5jYOJ47zQCFlpkYpCC3kr FOPmvnTafBOhH7R3bOZesBUgKv0CAwEAAaOCAc0wggHJMB0GA1UdDgQWBBQpnfQR VyefcoR9vNIOYb7GR4gSdTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ5Njg4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIA AjAHAwUAJAFZIDANBgkqhkiG9w0BAQsFAAOCAQEAQNmeADVSVOpC3hUq1548BAKt OQlPWE5PBX/09EvhnO7ZutVOW6c0Wjs9eNuoU7jQDX9lte1Tq4zBw3tbDjfV6mKu elvoCyaPhyghnM9ZZLahNQsGIlQI/TH3h7W5+KBu6IIgK40NjMJY/Ef+pqFm58Hd ZRxlGl+Iepg5DWmB/+3LwkA7mrOxeCDIjBXG9Kj5iDbMdd4RBHumkaTyqvYuEf/P K4uZLjFWO7rV0x7VRJOyZBhhbDhlWTKI7kA/z41TD25had8G53xWXcvzBov23s2t jD+zfQyKM/2LsXnn1ZP6wBgJ+EJ7jR+sMI6yfDF810KHak2W1AwbiGqbJE46Uw== -----END CERTIFICATE-----Generated at Sun May 3 01:44:02 2026 by rpki-client