$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149714.roa File: AS149714.roa (raw, json) Hash identifier: UVsJZRvQzQpIf//qRQGw/hsoVFKHARzr/4Q/Hz0T0Vg= Subject key identifier: 8C:B7:7E:D8:36:21:BA:E0:E0:DB:54:28:FD:0F:BB:17:28:39:8E:5F Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 41FB83819275756B5A0A3ADBDDAA62DA2E1E1734 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149714.roa Signing time: Sat 02 May 2026 21:24:59 +0000 ROA not before: Sat 02 May 2026 21:19:59 +0000 ROA not after: Sat 01 May 2027 21:24:59 +0000 asID: 149714 IP address blocks: 2001:df1:56c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:fb:83:81:92:75:75:6b:5a:0a:3a:db:dd:aa:62:da:2e:1e:17:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:19:59 2026 GMT Not After : May 1 21:24:59 2027 GMT Subject: CN=8CB77ED83621BAE0E0DB5428FD0FBB1728398E5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:09:00:1c:c0:a6:7a:92:8c:1c:f3:f2:e3:7d: e8:82:e3:a5:38:0d:b8:e6:65:cc:df:12:d9:98:8e: ff:6a:8a:43:23:fc:71:b0:47:cc:70:45:97:9a:75: 17:74:6b:11:70:5b:4c:ef:cf:b9:c4:5a:0c:3d:ac: 4d:c7:2f:48:ca:71:7a:d7:b2:a2:13:65:db:cc:e7: 6c:61:44:c9:04:12:ed:b5:d1:8c:46:25:40:03:f9: 65:8f:b6:28:f3:42:ae:eb:25:db:7b:62:70:19:d5: 5f:a8:01:57:8a:ae:16:42:a2:f8:c9:ec:03:4f:81: 3f:70:70:39:32:1e:37:31:97:03:81:d9:04:1f:d5: 60:c0:7c:9e:44:7f:92:9d:80:1e:58:35:89:00:9d: a0:fd:11:19:38:33:04:03:24:6b:ee:f7:42:44:80: b6:b2:25:16:dd:d5:70:b8:14:d5:6a:55:9d:76:33: 0c:7f:5b:4b:e4:63:75:45:9d:ea:a0:77:a2:36:0b: d6:9e:6d:94:92:b5:1d:d1:b9:68:42:b2:96:a7:a7: 98:d5:f8:16:4c:09:02:28:1c:f4:3e:ce:76:4d:2d: 7e:c4:b0:e6:a0:0b:e7:69:cd:99:4a:ed:bd:db:bc: af:23:d4:99:66:be:78:a8:76:2a:5e:47:2a:36:d4: d4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B7:7E:D8:36:21:BA:E0:E0:DB:54:28:FD:0F:BB:17:28:39:8E:5F X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149714.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:56c0::/48 Signature Algorithm: sha256WithRSAEncryption 8d:fd:da:b0:8c:5b:a1:2b:18:10:27:f4:14:a5:98:e3:c5:f4: b7:d2:85:54:05:aa:59:b6:09:2a:36:cc:80:07:2a:2f:5e:6d: d2:c7:6c:d6:96:a7:04:5e:5e:a3:b4:2a:37:c2:20:6e:1c:b2: c8:7f:96:b4:32:9b:4e:ae:f0:f1:2b:d6:7d:b3:aa:86:6a:46: e7:4b:65:3b:aa:32:97:13:ee:65:cf:c0:88:b3:0e:3e:d2:66: 57:f2:f5:ce:2b:e8:53:62:a1:54:df:8e:cb:9b:d1:2f:07:f7: cf:a9:2b:61:82:55:16:92:92:5c:bd:6e:98:59:ce:84:ea:3c: 78:00:37:f8:40:da:e3:bf:7e:4e:f2:11:ae:65:60:07:f8:fd: 08:ca:7c:5a:4e:33:69:f5:21:57:f9:71:a4:70:4f:c3:1d:07: b0:f6:07:ea:d3:4c:40:f1:0d:27:bd:84:7d:f2:3d:3f:be:e1: c1:ca:b3:e2:87:c5:fd:26:1a:55:bc:4e:e9:39:4b:e5:79:59: 58:71:00:46:15:38:bc:60:19:8a:bf:8d:f1:ff:f3:c5:df:58: 53:56:22:3a:a3:d6:a2:bd:a4:24:ba:30:eb:45:e5:e2:c8:59: 07:41:b9:26:e0:43:ee:eb:3e:66:92:48:8f:a2:b5:af:48:16: 78:b0:9c:50 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUQfuDgZJ1dWtaCjrb3api2i4eFzQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMTk1OVoX DTI3MDUwMTIxMjQ1OVowMzExMC8GA1UEAxMoOENCNzdFRDgzNjIxQkFFMEUwREI1 NDI4RkQwRkJCMTcyODM5OEU1RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIEJABzApnqSjBzz8uN96ILjpTgNuOZlzN8S2ZiO/2qKQyP8cbBHzHBFl5p1 F3RrEXBbTO/PucRaDD2sTccvSMpxeteyohNl28znbGFEyQQS7bXRjEYlQAP5ZY+2 KPNCrusl23ticBnVX6gBV4quFkKi+MnsA0+BP3BwOTIeNzGXA4HZBB/VYMB8nkR/ kp2AHlg1iQCdoP0RGTgzBAMka+73QkSAtrIlFt3VcLgU1WpVnXYzDH9bS+RjdUWd 6qB3ojYL1p5tlJK1HdG5aEKylqenmNX4FkwJAigc9D7Odk0tfsSw5qAL52nNmUrt vdu8ryPUmWa+eKh2Kl5HKjbU1DkCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBSMt37Y NiG64ODbVCj9D7sXKDmOXzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ5NzE0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN8VbAMA0GCSqGSIb3DQEBCwUAA4IBAQCN/dqwjFuhKxgQJ/QUpZjj xfS30oVUBapZtgkqNsyAByovXm3Sx2zWlqcEXl6jtCo3wiBuHLLIf5a0MptOrvDx K9Z9s6qGakbnS2U7qjKXE+5lz8CIsw4+0mZX8vXOK+hTYqFU347Lm9EvB/fPqSth glUWkpJcvW6YWc6E6jx4ADf4QNrjv35O8hGuZWAH+P0IynxaTjNp9SFX+XGkcE/D HQew9gfq00xA8Q0nvYR98j0/vuHByrPih8X9JhpVvE7pOUvleVlYcQBGFTi8YBmK v43x//PF31hTViI6o9aivaQkujDrReXiyFkHQbkm4EPu6z5mkkiPorWvSBZ4sJxQ -----END CERTIFICATE-----Generated at Sun May 3 01:44:44 2026 by rpki-client