$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149912.roa File: AS149912.roa (raw, json) Hash identifier: 4O4jjMC61F4ZVp6F4JtXaHZtf4e43OUNDX+eSUI81KI= Subject key identifier: F4:E4:C6:4A:3A:46:C2:A3:A1:12:C3:93:1B:36:03:D5:7A:F5:4C:CC Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 46847B7DE59A7FA45DDC2567BCE5D93C9B57FFFC Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149912.roa Signing time: Sat 02 May 2026 09:26:01 +0000 ROA not before: Sat 02 May 2026 09:21:01 +0000 ROA not after: Sat 01 May 2027 09:26:01 +0000 asID: 149912 IP address blocks: 2001:df3:2740::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:84:7b:7d:e5:9a:7f:a4:5d:dc:25:67:bc:e5:d9:3c:9b:57:ff:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:21:01 2026 GMT Not After : May 1 09:26:01 2027 GMT Subject: CN=F4E4C64A3A46C2A3A112C3931B3603D57AF54CCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e0:8d:1b:a9:39:c3:f5:87:f5:f9:6c:67:7b: 9a:44:0a:fb:40:b6:13:d0:2a:83:a8:c3:dd:43:8f: 03:2f:14:f3:fa:83:f2:e2:69:24:75:4b:b5:be:31: c1:db:37:45:f5:39:ff:8a:c1:be:00:83:d4:c7:41: 40:c5:48:3d:b3:5a:31:e1:f0:1b:d1:a6:51:3b:7d: f9:c9:bc:fb:be:e0:19:88:f8:13:11:5c:52:3c:c5: 8f:ef:f3:b9:67:f2:b0:a9:8b:a5:17:ea:7c:0b:02: ca:26:49:dd:9b:b6:ef:4d:c6:35:a7:1b:93:a1:a5: 7d:c5:9f:52:82:71:a1:87:24:e6:c9:e4:fa:db:13: 38:35:01:7a:7b:38:e0:71:d8:61:df:da:9b:01:90: c7:57:55:fd:43:43:51:22:91:8d:63:89:9e:5c:16: 4b:2c:b8:ca:c3:03:68:35:a1:24:7e:89:ec:ea:2a: 50:3f:f5:3d:8a:cd:aa:73:ba:46:04:77:25:ef:f3: 09:6b:97:28:09:d4:0a:5e:74:d8:59:5f:3f:d3:48: c7:ed:15:d1:2e:f1:57:50:2f:6e:12:a1:38:97:52: 62:c2:86:4f:cd:ef:c5:de:e0:91:b6:d3:fa:a4:e6: 83:b1:4b:cf:9d:32:8c:22:f9:9c:7d:76:56:98:74: b7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E4:C6:4A:3A:46:C2:A3:A1:12:C3:93:1B:36:03:D5:7A:F5:4C:CC X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149912.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:2740::/48 Signature Algorithm: sha256WithRSAEncryption 14:c2:bd:5f:cc:99:65:d6:1a:79:ab:60:ce:65:5c:d0:a9:db: f0:6b:22:e8:55:fa:11:5d:ab:2d:bb:86:16:d6:77:08:67:38: 2b:39:12:e0:ab:40:6f:7c:5e:a3:79:20:d6:e0:52:4b:cb:f1: 46:05:b8:e4:63:43:89:1e:62:ea:5e:25:38:2e:50:58:f0:18: 9d:61:00:dd:59:25:07:28:de:6f:31:aa:1b:43:ed:16:db:05: 6f:6b:aa:8e:c5:e0:b9:1e:a5:83:79:4c:32:d2:30:4c:1a:30: 64:ba:53:ec:63:f0:55:01:d9:e9:bc:c8:3d:e8:b8:80:9d:b9: 6e:aa:e9:9f:fb:9f:b3:d8:21:c5:d1:f1:b9:39:40:5e:4e:1d: 4f:44:cc:c6:be:6b:3b:f5:33:20:d1:73:af:ba:77:96:31:53: a4:92:84:aa:e4:76:db:56:d1:da:63:0b:68:42:3e:ab:4a:10: d1:5d:69:df:f6:90:88:d8:ea:b9:00:dc:1b:0b:23:7b:ae:b4: aa:5e:be:4a:57:6b:00:71:f9:da:7f:03:fb:80:5a:19:76:16: d8:7a:5a:ba:41:89:d9:d1:f7:35:d6:ec:c6:e2:f2:08:7b:9a: 7f:fd:5d:1d:98:c1:fb:60:f2:27:97:81:15:b6:48:76:a5:6d: 39:27:6b:65 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIURoR7feWaf6Rd3CVnvOXZPJtX//wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjEwMVoX DTI3MDUwMTA5MjYwMVowMzExMC8GA1UEAxMoRjRFNEM2NEEzQTQ2QzJBM0ExMTJD MzkzMUIzNjAzRDU3QUY1NENDQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMbgjRupOcP1h/X5bGd7mkQK+0C2E9Aqg6jD3UOPAy8U8/qD8uJpJHVLtb4x wds3RfU5/4rBvgCD1MdBQMVIPbNaMeHwG9GmUTt9+cm8+77gGYj4ExFcUjzFj+/z uWfysKmLpRfqfAsCyiZJ3Zu2703GNacbk6GlfcWfUoJxoYck5snk+tsTODUBens4 4HHYYd/amwGQx1dV/UNDUSKRjWOJnlwWSyy4ysMDaDWhJH6J7OoqUD/1PYrNqnO6 RgR3Je/zCWuXKAnUCl502FlfP9NIx+0V0S7xV1AvbhKhOJdSYsKGT83vxd7gkbbT +qTmg7FLz50yjCL5nH12Vph0t8UCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBT05MZK OkbCo6ESw5MbNgPVevVMzDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ5OTEyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN8ydAMA0GCSqGSIb3DQEBCwUAA4IBAQAUwr1fzJll1hp5q2DOZVzQ qdvwayLoVfoRXastu4YW1ncIZzgrORLgq0BvfF6jeSDW4FJLy/FGBbjkY0OJHmLq XiU4LlBY8BidYQDdWSUHKN5vMaobQ+0W2wVva6qOxeC5HqWDeUwy0jBMGjBkulPs Y/BVAdnpvMg96LiAnbluqumf+5+z2CHF0fG5OUBeTh1PRMzGvms79TMg0XOvuneW MVOkkoSq5HbbVtHaYwtoQj6rShDRXWnf9pCI2Oq5ANwbCyN7rrSqXr5KV2sAcfna fwP7gFoZdhbYelq6QYnZ0fc11uzG4vIIe5p//V0dmMH7YPInl4EVtkh2pW05J2tl -----END CERTIFICATE-----Generated at Sun May 3 01:44:42 2026 by rpki-client