$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149713.roa File: AS149713.roa (raw, json) Hash identifier: oyE3iQkKmBclh5xscxgTzeWlPwt6XxbDFn2eFlSyv3g= Subject key identifier: 44:E7:25:29:FA:33:4D:ED:63:B6:4E:F3:B4:51:2A:72:4B:B3:50:2A Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3ECC1822D3D5953C543B609D18E833D8B695A6A8 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149713.roa Signing time: Sat 02 May 2026 08:35:30 +0000 ROA not before: Sat 02 May 2026 08:30:30 +0000 ROA not after: Sat 01 May 2027 08:35:30 +0000 asID: 149713 IP address blocks: 2406:85c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:cc:18:22:d3:d5:95:3c:54:3b:60:9d:18:e8:33:d8:b6:95:a6:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:30:30 2026 GMT Not After : May 1 08:35:30 2027 GMT Subject: CN=44E72529FA334DED63B64EF3B4512A724BB3502A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5d:af:3c:50:88:6e:1e:03:6a:03:ad:84:85: 30:80:57:d3:ce:f9:0f:c5:85:85:2f:45:2c:d0:70: c5:64:73:67:e2:e3:0a:56:fe:7b:0a:07:13:5a:77: 2e:ee:95:79:8d:ad:c4:0d:b3:22:27:69:ea:0c:05: cf:a9:6b:29:20:cc:b0:36:5e:80:8b:27:e5:48:cd: d5:34:48:f1:ff:a9:ea:40:0e:9b:5d:3e:4a:78:9f: 98:33:b0:37:48:d4:15:76:df:3d:a8:c3:77:ad:8c: 50:6b:3c:36:11:dd:65:9e:72:65:dc:76:53:e4:79: e2:8e:4a:df:a6:79:1d:60:90:11:d7:c1:66:ab:75: b5:80:1f:72:80:c5:cb:da:f8:32:ff:a4:98:9a:ce: 29:31:61:db:af:59:7a:0a:96:30:1c:f0:7c:93:aa: 63:6d:b3:4d:89:15:ca:99:1f:44:af:37:4f:14:be: 4b:45:d1:b7:b0:a3:63:69:e3:93:68:e9:4b:c3:b7: 8c:0a:8a:95:c2:b2:e3:b1:70:89:63:6b:23:ab:39: a1:6a:74:8f:9c:4c:7e:b9:0b:16:56:a3:ba:ce:23: c8:45:7f:7e:80:9d:37:50:7f:4b:8d:e4:05:e1:b3: 12:51:aa:c1:ab:fc:ae:8f:b3:0c:39:42:ff:87:e3: 8c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E7:25:29:FA:33:4D:ED:63:B6:4E:F3:B4:51:2A:72:4B:B3:50:2A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149713.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:85c0::/32 Signature Algorithm: sha256WithRSAEncryption 01:82:c3:46:f2:8c:5f:1a:78:a1:0d:43:be:72:67:16:c5:28: 1b:d9:9e:3f:90:45:31:2b:82:8c:b3:a0:18:e3:28:e5:96:54: d3:41:bb:c9:10:48:e5:a5:04:01:42:32:5b:a0:e7:eb:e9:5b: 48:94:f8:3a:4e:67:a9:b3:f0:fa:fd:80:38:6c:b9:14:12:94: d0:7f:35:83:60:4e:d6:bf:ab:33:45:dd:66:7d:0a:95:97:1d: 49:b3:9e:f0:3d:dc:a6:57:c9:cd:3d:ca:41:2d:c5:36:c5:d3: 3f:cf:30:fe:92:8e:16:68:06:0b:4d:7c:8d:e5:41:1b:0c:a6: 6a:03:e5:c7:bd:d1:ac:79:c3:8b:ec:4a:69:3d:33:83:75:ed: 70:5f:f9:33:0f:f1:57:e1:39:2d:5c:12:fe:d8:92:7b:da:dc: 20:02:d8:48:ca:6b:ce:c2:31:3a:cd:08:bb:58:71:91:4f:0f: 0d:0d:b3:73:44:c9:0c:66:a1:b4:84:43:9f:99:ba:66:4b:5e: 71:86:0c:fa:31:42:06:48:f3:6f:aa:42:3e:83:62:a6:17:5d: f6:e0:aa:ea:f2:ea:ab:80:c5:93:87:5b:33:39:5b:28:21:d6: fa:0e:4d:03:79:79:08:4e:01:22:8e:0f:a1:06:e4:e0:8f:c1: 9a:23:7f:f2 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgIUPswYItPVlTxUO2CdGOgz2LaVpqgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzAzMFoX DTI3MDUwMTA4MzUzMFowMzExMC8GA1UEAxMoNDRFNzI1MjlGQTMzNERFRDYzQjY0 RUYzQjQ1MTJBNzI0QkIzNTAyQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKRdrzxQiG4eA2oDrYSFMIBX0875D8WFhS9FLNBwxWRzZ+LjClb+ewoHE1p3 Lu6VeY2txA2zIidp6gwFz6lrKSDMsDZegIsn5UjN1TRI8f+p6kAOm10+SnifmDOw N0jUFXbfPajDd62MUGs8NhHdZZ5yZdx2U+R54o5K36Z5HWCQEdfBZqt1tYAfcoDF y9r4Mv+kmJrOKTFh269ZegqWMBzwfJOqY22zTYkVypkfRK83TxS+S0XRt7CjY2nj k2jpS8O3jAqKlcKy47FwiWNrI6s5oWp0j5xMfrkLFlajus4jyEV/foCdN1B/S43k BeGzElGqwav8ro+zDDlC/4fjjM0CAwEAAaOCAc0wggHJMB0GA1UdDgQWBBRE5yUp +jNN7WO2TvO0USpyS7NQKjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ5NzEzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIA AjAHAwUAJAaFwDANBgkqhkiG9w0BAQsFAAOCAQEAAYLDRvKMXxp4oQ1DvnJnFsUo G9meP5BFMSuCjLOgGOMo5ZZU00G7yRBI5aUEAUIyW6Dn6+lbSJT4Ok5nqbPw+v2A OGy5FBKU0H81g2BO1r+rM0XdZn0KlZcdSbOe8D3cplfJzT3KQS3FNsXTP88w/pKO FmgGC018jeVBGwymagPlx73RrHnDi+xKaT0zg3XtcF/5Mw/xV+E5LVwS/tiSe9rc IALYSMprzsIxOs0Iu1hxkU8PDQ2zc0TJDGahtIRDn5m6ZktecYYM+jFCBkjzb6pC PoNiphdd9uCq6vLqq4DFk4dbMzlbKCHW+g5NA3l5CE4BIo4PoQbk4I/BmiN/8g== -----END CERTIFICATE-----Generated at Sun May 3 00:41:55 2026 by rpki-client