$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149705.roa File: AS149705.roa (raw, json) Hash identifier: EBma7+TCEXMvRvnxvf5/12q57BOMEYVjM957HEAU3DM= Subject key identifier: AD:45:3F:72:B2:57:0C:B6:59:90:E6:BF:D4:A5:8B:93:7C:B0:12:BF Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3FAE5C144C7CC9C66320C22908F1A0DC5DE68D2F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149705.roa Signing time: Sat 02 May 2026 21:26:24 +0000 ROA not before: Sat 02 May 2026 21:21:24 +0000 ROA not after: Sat 01 May 2027 21:26:24 +0000 asID: 149705 IP address blocks: 2001:df2:1b40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:ae:5c:14:4c:7c:c9:c6:63:20:c2:29:08:f1:a0:dc:5d:e6:8d:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:21:24 2026 GMT Not After : May 1 21:26:24 2027 GMT Subject: CN=AD453F72B2570CB65990E6BFD4A58B937CB012BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:03:df:d0:90:25:64:66:f8:d3:83:93:f7:33: 50:58:b8:2e:1c:85:3c:25:3d:11:40:73:a5:fd:67: af:59:81:0d:b9:89:e7:d6:63:cc:6b:9c:4b:47:f5: 0a:1e:b1:90:64:e4:fc:c6:e7:cf:98:fb:3d:e9:91: 70:93:72:83:b9:b9:5f:ee:87:64:1e:01:a9:00:53: a5:98:b5:a3:f1:bf:b4:31:19:f5:68:ac:98:92:c0: 15:88:29:32:b1:c4:db:e5:ea:c4:02:57:53:7b:2e: 14:81:3a:0d:a8:68:d3:55:7e:b0:2d:5b:e6:73:b8: 9f:51:c4:0e:2c:e0:48:83:d2:e7:95:83:65:79:4a: c0:1c:eb:dc:3d:32:eb:4d:83:bf:fa:bd:f4:96:09: 22:f8:6a:a8:4f:bf:41:c4:0f:a7:ad:f4:fd:54:8d: 75:18:13:ee:24:38:16:d0:80:31:a5:fc:83:ae:b7: d4:dd:fa:36:da:76:9c:99:4e:6f:6e:f5:fd:10:08: 28:c8:d9:6d:8e:31:0b:69:85:fc:4e:df:5b:31:fd: 73:fe:b2:cd:46:e2:9e:57:33:05:ba:c6:59:19:4a: 56:fc:ff:22:73:46:39:2b:4c:ba:41:9a:9e:16:ef: df:bd:15:1f:ab:43:78:ee:ed:c2:76:3f:ed:9a:fe: 50:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:45:3F:72:B2:57:0C:B6:59:90:E6:BF:D4:A5:8B:93:7C:B0:12:BF X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149705.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:1b40::/48 Signature Algorithm: sha256WithRSAEncryption 34:6f:d9:96:99:5f:a0:48:87:bc:ae:fb:23:23:8a:f6:d6:28: bb:52:b4:11:d5:97:60:7e:16:18:e5:7d:4c:c6:00:33:ea:41: 2a:cf:3e:66:d5:6b:f5:67:e5:30:70:49:e0:3c:e1:10:eb:03: a7:d6:c8:35:78:cc:77:87:6b:36:ff:05:c0:7c:da:d3:35:b6: 6f:0d:d2:e7:b1:f3:3d:a0:73:d7:9b:14:ec:99:d6:1a:21:7b: da:4a:60:cd:5d:90:87:e5:ce:91:59:8e:38:d1:75:16:2f:23: 78:b7:d3:d4:0c:32:51:87:a9:ac:42:17:de:24:a5:c6:e7:93: dc:39:3d:c5:76:c4:2c:67:04:24:da:c5:de:10:e1:25:23:8f: 88:97:59:92:1d:df:6d:ad:ce:7f:a6:64:64:a2:0f:3c:1e:e9: f3:8d:7e:ec:e8:51:d3:99:02:a9:82:32:9c:33:ee:0e:a6:38: 31:24:2b:29:2b:a5:07:87:1e:4c:8d:8a:f5:36:25:5e:64:d0: 23:a0:6a:9b:0b:b8:31:4e:92:bd:94:4a:94:da:9b:25:a0:98: 5f:80:14:f4:e4:41:e7:73:c1:36:b6:2a:07:b4:3e:8d:e5:9d: 02:9a:e4:fe:61:7e:c2:27:75:77:3f:01:65:13:25:41:2a:40: c4:ce:bb:e7 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUP65cFEx8ycZjIMIpCPGg3F3mjS8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjEyNFoX DTI3MDUwMTIxMjYyNFowMzExMC8GA1UEAxMoQUQ0NTNGNzJCMjU3MENCNjU5OTBF NkJGRDRBNThCOTM3Q0IwMTJCRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKwD39CQJWRm+NODk/czUFi4LhyFPCU9EUBzpf1nr1mBDbmJ59ZjzGucS0f1 Ch6xkGTk/Mbnz5j7PemRcJNyg7m5X+6HZB4BqQBTpZi1o/G/tDEZ9WismJLAFYgp MrHE2+XqxAJXU3suFIE6Daho01V+sC1b5nO4n1HEDizgSIPS55WDZXlKwBzr3D0y 602Dv/q99JYJIvhqqE+/QcQPp630/VSNdRgT7iQ4FtCAMaX8g6631N36Ntp2nJlO b271/RAIKMjZbY4xC2mF/E7fWzH9c/6yzUbinlczBbrGWRlKVvz/InNGOStMukGa nhbv370VH6tDeO7twnY/7Zr+UI0CAwEAAaOCAc8wggHLMB0GA1UdDgQWBBStRT9y slcMtlmQ5r/UpYuTfLASvzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ5NzA1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN8htAMA0GCSqGSIb3DQEBCwUAA4IBAQA0b9mWmV+gSIe8rvsjI4r2 1ii7UrQR1ZdgfhYY5X1MxgAz6kEqzz5m1Wv1Z+UwcEngPOEQ6wOn1sg1eMx3h2s2 /wXAfNrTNbZvDdLnsfM9oHPXmxTsmdYaIXvaSmDNXZCH5c6RWY440XUWLyN4t9PU DDJRh6msQhfeJKXG55PcOT3FdsQsZwQk2sXeEOElI4+Il1mSHd9trc5/pmRkog88 HunzjX7s6FHTmQKpgjKcM+4OpjgxJCspK6UHhx5MjYr1NiVeZNAjoGqbC7gxTpK9 lEqU2psloJhfgBT05EHnc8E2tioHtD6N5Z0CmuT+YX7CJ3V3PwFlEyVBKkDEzrvn -----END CERTIFICATE-----Generated at Sun May 3 01:41:17 2026 by rpki-client