$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149785.roa File: AS149785.roa (raw, json) Hash identifier: S8uO7+O9xhz7JPnsCyfLTBJgH1Mxzex3UK+izeBMu2U= Subject key identifier: B7:90:B0:16:26:DB:45:69:65:DE:04:DA:00:C3:7D:48:B7:0F:2A:EE Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1B050F6B59D4223A9C9D99FD632FA8E48A7752A1 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149785.roa Signing time: Thu 18 Jun 2026 08:35:11 +0000 ROA not before: Thu 18 Jun 2026 08:30:11 +0000 ROA not after: Thu 17 Jun 2027 08:35:11 +0000 asID: 149785 IP address blocks: 2001:df7:1c40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 12:15:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:05:0f:6b:59:d4:22:3a:9c:9d:99:fd:63:2f:a8:e4:8a:77:52:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Jun 18 08:30:11 2026 GMT Not After : Jun 17 08:35:11 2027 GMT Subject: CN=B790B01626DB456965DE04DA00C37D48B70F2AEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:15:ec:53:38:9c:fb:ad:c1:00:c8:a6:8b:71: a2:99:04:4b:ce:08:36:b4:ab:a8:a1:9c:03:91:48: d2:e6:8a:10:79:c9:b0:60:d7:42:25:86:71:35:af: 1c:ac:d2:f4:df:0e:bd:35:f2:98:8a:d1:1e:95:f1: 2d:8c:28:57:20:03:e9:7f:4e:e8:e8:eb:d2:b3:78: e7:d7:30:40:ad:3b:fc:aa:13:f1:4e:b7:3d:22:6d: 6a:3f:f2:ec:22:e6:1b:0b:0a:a8:c3:b3:a8:1d:06: 9a:54:8b:48:aa:0e:d2:cc:84:b6:09:cb:39:ca:aa: 4a:a3:ea:2a:98:53:b4:72:ac:c1:62:59:6a:35:e6: de:4d:3f:35:98:4c:2d:ae:8f:97:be:85:55:fb:60: 4a:60:b9:ac:8f:f8:e2:95:1a:b3:d4:6c:83:b7:1b: b1:9b:ea:9c:c6:3e:71:49:06:83:93:a5:38:e8:28: 41:0e:2d:12:8b:22:e1:68:a3:75:c6:f1:3c:a6:70: 7f:99:14:b9:2b:d7:4a:fc:dc:a7:75:bd:96:7f:3a: de:2b:07:53:07:db:bc:ed:4f:0f:cb:6a:73:ed:1e: f5:5d:db:2d:31:3a:64:4a:1f:6a:dd:7d:6e:75:75: 7a:56:c1:64:4a:98:87:e8:7f:9d:4a:6a:f6:b2:95: 2c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:90:B0:16:26:DB:45:69:65:DE:04:DA:00:C3:7D:48:B7:0F:2A:EE X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149785.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df7:1c40::/48 Signature Algorithm: sha256WithRSAEncryption 05:4b:d9:56:83:c6:1d:be:78:67:3b:15:ee:cb:a3:3a:67:13: 7a:14:35:dc:fb:31:10:d1:a5:62:74:90:e1:63:28:14:d7:3a: 39:de:8d:b5:d8:ac:d4:f2:09:45:f7:7c:6c:ab:bb:76:29:3e: 28:b8:7e:fe:93:90:ba:ba:6b:0b:80:fb:00:18:ab:96:13:1d: 11:54:65:0a:14:e4:e9:1e:60:e0:8f:c0:53:8d:c6:d4:a2:c8: a6:ee:5e:10:b0:54:dd:a8:b3:3f:fd:8d:4e:67:a0:63:cc:d4: 6b:5e:51:c3:16:80:f9:29:79:e3:73:0a:7e:3d:7e:9e:8d:a6: 92:41:f5:6b:dc:79:c1:d5:dd:53:9a:b0:e9:00:c0:eb:17:bb: 1d:a9:ed:15:35:40:f8:af:49:70:8f:d5:38:80:3c:77:e9:b6: 1e:62:65:21:d1:f0:e7:f7:4f:ec:ef:8f:90:e9:2e:3d:6b:6f: b1:66:e3:a0:3d:32:b8:b0:b8:3d:7c:58:71:e1:12:d5:6f:67: df:d2:d0:bb:26:2d:72:43:1e:9e:85:2b:b7:93:06:f0:ad:08: 97:a2:21:e1:91:f1:71:a0:76:f0:8c:2a:be:92:f9:41:ec:47: 9b:f0:51:58:4c:fc:6c:df:f8:f9:9f:7f:ac:65:49:b8:fa:1f: f6:b5:21:49 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUGwUPa1nUIjqcnZn9Yy+o5Ip3UqEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDYxODA4MzAxMVoX DTI3MDYxNzA4MzUxMVowMzExMC8GA1UEAxMoQjc5MEIwMTYyNkRCNDU2OTY1REUw NERBMDBDMzdENDhCNzBGMkFFRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPcV7FM4nPutwQDIpotxopkES84INrSrqKGcA5FI0uaKEHnJsGDXQiWGcTWv HKzS9N8OvTXymIrRHpXxLYwoVyAD6X9O6Ojr0rN459cwQK07/KoT8U63PSJtaj/y 7CLmGwsKqMOzqB0GmlSLSKoO0syEtgnLOcqqSqPqKphTtHKswWJZajXm3k0/NZhM La6Pl76FVftgSmC5rI/44pUas9Rsg7cbsZvqnMY+cUkGg5OlOOgoQQ4tEosi4Wij dcbxPKZwf5kUuSvXSvzcp3W9ln863isHUwfbvO1PD8tqc+0e9V3bLTE6ZEofat19 bnV1elbBZEqYh+h/nUpq9rKVLGsCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBS3kLAW JttFaWXeBNoAw31Itw8q7jAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ5Nzg1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9xxAMA0GCSqGSIb3DQEBCwUAA4IBAQAFS9lWg8YdvnhnOxXuy6M6 ZxN6FDXc+zEQ0aVidJDhYygU1zo53o212KzU8glF93xsq7t2KT4ouH7+k5C6umsL gPsAGKuWEx0RVGUKFOTpHmDgj8BTjcbUosim7l4QsFTdqLM//Y1OZ6BjzNRrXlHD FoD5KXnjcwp+PX6ejaaSQfVr3HnB1d1TmrDpAMDrF7sdqe0VNUD4r0lwj9U4gDx3 6bYeYmUh0fDn90/s74+Q6S49a2+xZuOgPTK4sLg9fFhx4RLVb2ff0tC7Ji1yQx6e hSu3kwbwrQiXoiHhkfFxoHbwjCq+kvlB7Eeb8FFYTPxs3/j5n3+sZUm4+h/2tSFJ -----END CERTIFICATE-----Generated at Thu Jun 18 18:10:20 2026 by rpki-client