$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149915.roa File: AS149915.roa (raw, json) Hash identifier: V2oMEolJEyZ3xv41PbZH5sQf/RYQSvRlg6mQSKIy2wo= Subject key identifier: 40:C3:93:9E:DA:1D:1F:6F:AA:9C:EA:0C:70:F2:1B:32:0F:95:BD:27 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 30B1B0BBFBA59961BA338F3664FA1EF6F2C36875 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149915.roa Signing time: Sat 02 May 2026 09:26:00 +0000 ROA not before: Sat 02 May 2026 09:21:00 +0000 ROA not after: Sat 01 May 2027 09:26:00 +0000 asID: 149915 IP address blocks: 2001:df3:fac0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:b1:b0:bb:fb:a5:99:61:ba:33:8f:36:64:fa:1e:f6:f2:c3:68:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:21:00 2026 GMT Not After : May 1 09:26:00 2027 GMT Subject: CN=40C3939EDA1D1F6FAA9CEA0C70F21B320F95BD27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:19:9a:03:95:84:98:39:1b:80:1f:d5:8e:e2: 5a:f3:49:91:26:4e:25:28:bf:9d:f4:90:88:4e:d5: 9e:22:c4:74:d6:88:b0:4d:2b:63:11:91:69:ea:bf: 12:7b:4f:52:c1:3e:37:10:b1:6c:6c:2a:30:e2:1a: 36:9e:e0:27:69:e0:25:17:79:ce:a3:cd:a0:f3:b9: 33:e6:5e:da:da:50:bd:e3:79:3e:ad:a7:48:74:7d: 9e:42:e3:6d:74:69:e6:93:ac:11:f5:a3:c9:be:96: 21:aa:2e:0f:ea:d2:92:41:4c:a6:41:5b:fc:89:54: 7b:d5:57:3e:20:af:41:e0:3a:a2:ec:ef:12:60:0e: 65:69:11:1d:51:37:fb:f5:e6:7f:ae:e7:c0:48:90: 8f:93:70:95:bd:32:3f:91:e2:17:a8:85:ad:88:99: 4e:22:96:cd:a8:5f:38:9b:1d:69:d1:07:5b:72:66: c4:5c:29:8f:02:0c:ab:a9:e7:43:82:70:52:df:ad: 3d:6e:78:91:28:3d:f4:f8:56:a4:79:a9:27:d7:74: b6:39:73:3c:50:7c:2c:b7:2c:ed:c6:04:f6:89:3b: c2:7c:fe:58:a1:4a:a9:fd:8b:a3:e8:88:99:ce:d7: 6c:5f:8b:16:29:5b:21:e1:91:a3:ef:e0:07:02:1a: cb:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C3:93:9E:DA:1D:1F:6F:AA:9C:EA:0C:70:F2:1B:32:0F:95:BD:27 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149915.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:fac0::/48 Signature Algorithm: sha256WithRSAEncryption 90:16:97:39:19:32:c8:8a:52:5f:28:39:5a:2e:27:61:b9:a0: ec:50:4a:4a:f5:0f:07:6c:35:71:64:6d:88:84:4d:f5:a7:03: 80:50:1e:89:4e:d6:9e:d0:2e:a5:ee:e9:6a:45:5f:d6:26:0d: 71:db:16:82:94:a5:d2:a5:71:d0:27:ca:ce:30:ce:1f:ed:ce: 87:59:ec:be:12:90:23:9b:ce:5a:fa:10:ea:1c:83:d6:8e:5f: d3:98:d4:06:d6:f1:29:f1:31:08:5c:c8:5a:cc:4a:42:6e:ea: ad:9b:5a:c2:0a:35:a1:0d:71:f6:41:ab:5e:ba:32:2a:85:c9: df:f7:fa:f1:67:bf:b2:98:b1:6a:8d:3f:ec:d4:78:e7:f2:6e: 72:ed:8c:e8:17:4e:5a:60:66:22:14:ca:d7:13:5b:d0:ce:1f: 87:a9:40:86:77:d5:a3:0f:9e:7c:df:1e:a6:c6:68:97:73:c5: 8b:8b:3d:f1:3c:2c:68:3a:fe:33:39:a0:47:2d:24:dc:6a:24: c5:eb:b8:45:d2:f8:85:5a:a4:db:1b:e7:b3:56:da:72:f9:0e: b1:68:1c:71:2a:8b:b1:79:86:96:d6:61:a1:2d:ab:bc:77:c9: 3c:19:b0:e1:3a:68:68:f8:56:dd:48:d3:03:bf:cd:9e:ac:41: 45:2e:04:7d -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUMLGwu/ulmWG6M482ZPoe9vLDaHUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjEwMFoX DTI3MDUwMTA5MjYwMFowMzExMC8GA1UEAxMoNDBDMzkzOUVEQTFEMUY2RkFBOUNF QTBDNzBGMjFCMzIwRjk1QkQyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKIZmgOVhJg5G4Af1Y7iWvNJkSZOJSi/nfSQiE7VniLEdNaIsE0rYxGRaeq/ EntPUsE+NxCxbGwqMOIaNp7gJ2ngJRd5zqPNoPO5M+Ze2tpQveN5Pq2nSHR9nkLj bXRp5pOsEfWjyb6WIaouD+rSkkFMpkFb/IlUe9VXPiCvQeA6ouzvEmAOZWkRHVE3 +/Xmf67nwEiQj5Nwlb0yP5HiF6iFrYiZTiKWzahfOJsdadEHW3JmxFwpjwIMq6nn Q4JwUt+tPW54kSg99PhWpHmpJ9d0tjlzPFB8LLcs7cYE9ok7wnz+WKFKqf2Lo+iI mc7XbF+LFilbIeGRo+/gBwIay8kCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBRAw5Oe 2h0fb6qc6gxw8hsyD5W9JzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ5OTE1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN8/rAMA0GCSqGSIb3DQEBCwUAA4IBAQCQFpc5GTLIilJfKDlaLidh uaDsUEpK9Q8HbDVxZG2IhE31pwOAUB6JTtae0C6l7ulqRV/WJg1x2xaClKXSpXHQ J8rOMM4f7c6HWey+EpAjm85a+hDqHIPWjl/TmNQG1vEp8TEIXMhazEpCbuqtm1rC CjWhDXH2QateujIqhcnf9/rxZ7+ymLFqjT/s1Hjn8m5y7YzoF05aYGYiFMrXE1vQ zh+HqUCGd9WjD5583x6mxmiXc8WLiz3xPCxoOv4zOaBHLSTcaiTF67hF0viFWqTb G+ezVtpy+Q6xaBxxKouxeYaW1mGhLau8d8k8GbDhOmho+FbdSNMDv82erEFFLgR9 -----END CERTIFICATE-----Generated at Sun May 3 00:42:16 2026 by rpki-client