$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149930.roa File: AS149930.roa (raw, json) Hash identifier: zY2NQG9AP8+9mQo/fuX3dQuYi8Po0CwuSeHufuYyGeM= Subject key identifier: EA:B7:55:94:07:18:DA:6F:FF:ED:1C:24:17:17:F8:D8:45:2D:2E:A9 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 79BFFFFBB95C186B69050FDE6AB1A4C1CA295E45 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149930.roa Signing time: Sat 02 May 2026 08:34:41 +0000 ROA not before: Sat 02 May 2026 08:29:41 +0000 ROA not after: Sat 01 May 2027 08:34:41 +0000 asID: 149930 IP address blocks: 2001:df2:a940::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:bf:ff:fb:b9:5c:18:6b:69:05:0f:de:6a:b1:a4:c1:ca:29:5e:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:29:41 2026 GMT Not After : May 1 08:34:41 2027 GMT Subject: CN=EAB755940718DA6FFFED1C241717F8D8452D2EA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:db:d7:6d:de:be:d0:92:83:17:ad:00:cd:ed: 4e:41:7d:1e:48:25:de:5b:e2:14:66:67:1a:f9:ae: 88:f1:d2:6e:f1:26:13:de:b8:ee:9b:db:16:65:c3: e2:13:31:66:7f:6b:fc:f8:93:b9:be:dd:2b:29:1d: 8d:83:b9:51:da:24:6d:c4:f7:6e:a9:3c:3b:bd:fc: 91:2f:9c:e0:9c:d5:01:eb:b0:97:3f:7d:6d:64:35: 9e:e1:f7:23:98:37:b8:ca:49:d0:8a:6f:c3:e5:7b: 0c:bc:eb:57:7f:4d:09:d6:2b:f9:6a:40:fb:6f:ea: 6e:d7:55:46:35:88:a9:f3:8e:ef:bf:62:58:30:62: c1:92:3b:6e:d4:c8:13:a1:90:a6:f8:c4:3f:dd:01: 58:f0:c0:60:15:88:09:35:ee:26:a4:cd:8c:bb:a2: 69:e6:6b:1d:d9:55:83:ad:aa:7f:1c:ff:6b:1e:4e: dd:03:a9:52:29:59:80:12:14:0d:c9:ee:6f:db:e3: af:50:a9:ad:28:40:9d:80:67:98:30:9b:77:b7:4c: 45:24:6c:dd:05:9b:c7:9f:5f:e7:f1:bb:6c:dc:03: a4:0d:d3:51:04:66:43:13:7e:64:34:c6:db:9f:c2: e4:02:fc:22:95:c4:d4:d1:7a:e7:d3:1e:68:92:cb: 06:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B7:55:94:07:18:DA:6F:FF:ED:1C:24:17:17:F8:D8:45:2D:2E:A9 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:a940::/48 Signature Algorithm: sha256WithRSAEncryption 7e:d7:c2:66:c1:aa:42:ba:f6:ef:2c:81:8c:6c:6e:f8:90:54: be:99:42:0f:85:d9:7d:39:80:77:57:91:a8:14:b0:0c:49:32: e5:a3:f6:48:f1:6f:fe:13:1d:b0:ff:2e:ce:04:1a:59:1f:4a: 3e:0c:ec:c9:b1:a4:3b:f3:85:21:28:1b:fa:11:92:8f:65:54: f9:1c:b2:db:01:9f:e7:45:80:a0:dd:9f:c1:99:64:11:cf:31: 6b:82:cd:4e:7e:23:a8:83:1e:bf:1c:8c:8f:b6:73:db:03:86: 7d:c0:24:a6:f2:1f:cf:f6:06:b2:ec:ba:ab:4f:75:73:8a:13: ad:56:3a:dd:a1:23:ae:10:d1:1c:7f:ee:91:60:2f:76:53:92: 07:a2:69:19:07:51:98:5b:6b:b6:fc:4f:9b:54:ad:e7:3f:77: 0e:0d:db:26:4d:e5:84:69:ee:69:86:25:83:b2:0a:8b:76:51: 8d:56:6d:df:55:60:cf:16:2d:48:74:b4:1f:cb:5c:6c:94:52: fd:45:03:61:92:30:ed:65:7b:33:f6:42:7d:88:c2:73:4a:79: 3c:e2:ba:84:be:36:2d:58:c3:a8:17:53:a7:82:90:65:e2:aa: 0e:f9:40:db:bc:1f:b5:c3:62:36:1b:0d:fe:60:d3:21:3d:3a: 4e:69:2e:b4 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUeb//+7lcGGtpBQ/earGkwcopXkUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4Mjk0MVoX DTI3MDUwMTA4MzQ0MVowMzExMC8GA1UEAxMoRUFCNzU1OTQwNzE4REE2RkZGRUQx QzI0MTcxN0Y4RDg0NTJEMkVBOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMvb123evtCSgxetAM3tTkF9Hkgl3lviFGZnGvmuiPHSbvEmE9647pvbFmXD 4hMxZn9r/PiTub7dKykdjYO5UdokbcT3bqk8O738kS+c4JzVAeuwlz99bWQ1nuH3 I5g3uMpJ0Ipvw+V7DLzrV39NCdYr+WpA+2/qbtdVRjWIqfOO779iWDBiwZI7btTI E6GQpvjEP90BWPDAYBWICTXuJqTNjLuiaeZrHdlVg62qfxz/ax5O3QOpUilZgBIU Dcnub9vjr1CprShAnYBnmDCbd7dMRSRs3QWbx59f5/G7bNwDpA3TUQRmQxN+ZDTG 25/C5AL8IpXE1NF659MeaJLLBicCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBTqt1WU Bxjab//tHCQXF/jYRS0uqTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ5OTMwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN8qlAMA0GCSqGSIb3DQEBCwUAA4IBAQB+18JmwapCuvbvLIGMbG74 kFS+mUIPhdl9OYB3V5GoFLAMSTLlo/ZI8W/+Ex2w/y7OBBpZH0o+DOzJsaQ784Uh KBv6EZKPZVT5HLLbAZ/nRYCg3Z/BmWQRzzFrgs1OfiOogx6/HIyPtnPbA4Z9wCSm 8h/P9gay7LqrT3VzihOtVjrdoSOuENEcf+6RYC92U5IHomkZB1GYW2u2/E+bVK3n P3cODdsmTeWEae5phiWDsgqLdlGNVm3fVWDPFi1IdLQfy1xslFL9RQNhkjDtZXsz 9kJ9iMJzSnk84rqEvjYtWMOoF1OngpBl4qoO+UDbvB+1w2I2Gw3+YNMhPTpOaS60 -----END CERTIFICATE-----Generated at Sun May 3 00:41:13 2026 by rpki-client