$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149688.roa File: AS149688.roa (raw, json) Hash identifier: YoJFR18/Zuj0iAYwijbEUk+T30iAMtwe9h3A8ZP7SCQ= Subject key identifier: 8D:99:88:AF:C1:1A:29:48:79:F3:28:6D:09:D1:BC:08:B8:20:89:51 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7E15AE19102129D0647895A1149BB8D1A3DB24F1 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149688.roa Signing time: Wed 22 Oct 2025 07:00:00 +0000 ROA not before: Wed 22 Oct 2025 06:55:00 +0000 ROA not after: Wed 21 Oct 2026 07:00:00 +0000 asID: 149688 IP address blocks: 2401:5920::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:15:ae:19:10:21:29:d0:64:78:95:a1:14:9b:b8:d1:a3:db:24:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 22 06:55:00 2025 GMT Not After : Oct 21 07:00:00 2026 GMT Subject: CN=8D9988AFC11A294879F3286D09D1BC08B8208951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:21:8c:f2:79:61:72:4a:e2:d4:68:b1:f7:ee: 18:4b:e4:bb:80:d0:5d:7d:27:d7:ab:72:dd:3b:63: 00:be:7c:69:e0:81:37:bf:62:06:31:97:99:3d:b0: 66:0a:01:84:c6:a0:b3:8c:8c:35:37:e7:10:03:df: a5:80:e8:93:83:2b:d9:4b:fd:6f:71:3e:a0:c6:b5: f5:0b:63:30:e0:ea:a9:43:39:06:3e:0b:46:67:9e: e6:0f:89:25:c3:5e:8c:08:80:cf:6f:e1:38:dd:91: 41:3f:ab:1b:d2:52:48:e3:c0:b4:fb:a5:b7:29:e9: 0f:ea:ca:a4:95:6f:34:15:93:04:bf:79:4a:b8:4f: 9f:a9:06:72:40:be:46:0a:49:18:9a:02:9d:f7:03: 59:ed:b3:5f:cf:b2:c8:7a:bd:46:4c:bb:a3:e2:e7: b9:90:e4:d7:9c:67:9d:08:a2:ac:c3:3e:0a:5c:5f: 6d:4e:53:5c:c8:ac:8f:5b:41:16:13:40:d1:e6:8c: 0e:42:62:6f:f3:75:c7:31:dd:71:83:b9:58:94:52: c8:5e:7b:25:d3:36:4a:49:01:ab:9f:47:cd:e8:4b: 42:bb:6c:4f:06:c0:b1:1c:46:68:37:ef:c9:ba:95: 9b:95:95:ef:c5:50:dc:01:ea:43:3a:a1:25:df:d5: 2f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:99:88:AF:C1:1A:29:48:79:F3:28:6D:09:D1:BC:08:B8:20:89:51 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149688.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:5920::/32 Signature Algorithm: sha256WithRSAEncryption 8b:7a:29:8c:8c:2e:98:ba:91:55:58:61:75:d7:50:44:31:6c: 4d:c8:a4:95:dd:05:32:39:a5:d7:fd:1d:33:a2:76:f4:ee:cd: 45:1a:41:c8:04:ff:b5:4e:9d:83:64:77:87:80:c8:42:fc:b2: 84:d5:5c:52:91:84:60:33:6b:cd:20:38:42:b6:13:06:07:65: 5f:0b:9f:27:a9:f6:d9:4a:79:4d:ba:4d:0a:35:81:0d:f1:a5: a2:42:61:62:35:04:08:7a:d1:ac:de:22:80:45:97:6b:f3:85: 55:f2:b2:a4:ff:99:cc:ad:7b:29:88:ed:50:29:1b:5d:33:49: 22:50:98:03:25:14:d5:2d:67:9e:67:7b:2d:84:77:ef:c6:45: 34:00:49:1f:8a:00:01:45:e0:c6:c6:bb:1c:30:c8:f2:af:a5: 1e:7c:47:45:e7:19:75:d7:d0:16:22:8a:cc:7a:4d:f7:58:89: ec:4b:d9:55:88:46:0d:95:ed:3c:5c:d0:ec:dd:aa:57:43:0f: 8e:4c:6b:1d:69:79:48:c8:e0:6c:a9:57:93:46:97:e2:76:88: 99:66:6e:63:8a:c7:c8:eb:5f:ee:a1:a0:c9:3d:11:4d:07:8d: 49:e3:4c:70:fb:a8:00:9a:e8:2b:eb:27:4a:0c:67:a0:92:29: 45:0a:0c:a8 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUfhWuGRAhKdBkeJWhFJu40aPbJPEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAyMjA2NTUwMFoX DTI2MTAyMTA3MDAwMFowMzExMC8GA1UEAxMoOEQ5OTg4QUZDMTFBMjk0ODc5RjMy ODZEMDlEMUJDMDhCODIwODk1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALghjPJ5YXJK4tRosffuGEvku4DQXX0n16ty3TtjAL58aeCBN79iBjGXmT2w ZgoBhMags4yMNTfnEAPfpYDok4Mr2Uv9b3E+oMa19QtjMODqqUM5Bj4LRmee5g+J JcNejAiAz2/hON2RQT+rG9JSSOPAtPultynpD+rKpJVvNBWTBL95SrhPn6kGckC+ RgpJGJoCnfcDWe2zX8+yyHq9Rky7o+LnuZDk15xnnQiirMM+ClxfbU5TXMisj1tB FhNA0eaMDkJib/N1xzHdcYO5WJRSyF57JdM2SkkBq59HzehLQrtsTwbAsRxGaDfv ybqVm5WV78VQ3AHqQzqhJd/VL/MCAwEAAaOCAdEwggHNMB0GA1UdDgQWBBSNmYiv wRopSHnzKG0J0bwIuCCJUTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTY4OC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8w DQQCAAIwBwMFACQBWSAwDQYJKoZIhvcNAQELBQADggEBAIt6KYyMLpi6kVVYYXXX UEQxbE3IpJXdBTI5pdf9HTOidvTuzUUaQcgE/7VOnYNkd4eAyEL8soTVXFKRhGAz a80gOEK2EwYHZV8Lnyep9tlKeU26TQo1gQ3xpaJCYWI1BAh60azeIoBFl2vzhVXy sqT/mcyteymI7VApG10zSSJQmAMlFNUtZ55ney2Ed+/GRTQASR+KAAFF4MbGuxww yPKvpR58R0XnGXXX0BYiisx6TfdYiexL2VWIRg2V7Txc0OzdqldDD45Max1peUjI 4GypV5NGl+J2iJlmbmOKx8jrX+6hoMk9EU0HjUnjTHD7qACa6CvrJ0oMZ6CSKUUK DKg= -----END CERTIFICATE-----Generated at Mon Nov 3 19:31:56 2025 by rpki-client