$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149690.roa File: AS149690.roa (raw, json) Hash identifier: yX8e+1GQ5KRuo1BCIINBEw7mkBhimbUmk1M4tCGO54o= Subject key identifier: 6A:33:19:8F:9C:27:8A:3B:9E:69:3E:EE:72:E2:91:42:60:D9:28:09 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 654AEC6A664F8EBDE7D88D16D2331017E31A92FE Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149690.roa Signing time: Tue 07 Apr 2026 04:00:00 +0000 ROA not before: Tue 07 Apr 2026 03:55:00 +0000 ROA not after: Tue 06 Apr 2027 04:00:00 +0000 asID: 149690 IP address blocks: 2001:df1:1340::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 05:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:4a:ec:6a:66:4f:8e:bd:e7:d8:8d:16:d2:33:10:17:e3:1a:92:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 7 03:55:00 2026 GMT Not After : Apr 6 04:00:00 2027 GMT Subject: CN=6A33198F9C278A3B9E693EEE72E2914260D92809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ff:00:9d:50:85:9f:bc:24:da:1a:c6:a9:3e: 8d:cd:e3:75:34:a7:56:a3:b0:30:71:9b:3e:a1:4b: f6:d9:38:53:06:fd:a1:75:fd:02:cb:fb:15:32:9c: 5b:dd:1c:c1:1b:f5:e0:45:ac:66:03:d2:04:32:c8: f2:f6:ce:a5:3e:40:20:36:31:d1:a6:7f:d2:ff:d0: 0b:c3:bb:67:d1:17:b9:20:15:9f:a7:39:ed:28:e7: 21:41:a4:78:b6:71:3e:ba:46:1f:09:a8:50:fe:6e: 39:a9:57:dc:59:ea:fb:72:24:10:d8:5b:5d:b9:b7: 6f:f5:c6:13:b0:12:01:75:42:70:ec:00:fd:56:96: d9:62:dc:ca:26:9c:84:06:53:a3:a4:78:75:7f:78: 32:a3:86:e0:e5:51:76:c4:84:cd:26:10:88:99:ce: d9:14:38:20:21:ad:f0:2d:e9:4a:5d:1d:b7:1e:f6: 25:ac:64:8c:01:d6:df:a9:f2:40:29:13:f6:51:3b: 7e:9b:6c:25:3e:a8:ee:91:83:11:9d:b7:8b:36:c0: 0c:ac:de:6d:a9:32:b3:51:95:f1:20:50:94:85:92: cf:23:f3:ef:3a:5d:86:58:84:5b:21:7e:df:6b:e9: 6c:df:1f:21:d8:11:5d:33:d9:04:3e:19:b8:5a:99: 5c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:33:19:8F:9C:27:8A:3B:9E:69:3E:EE:72:E2:91:42:60:D9:28:09 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149690.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:1340::/48 Signature Algorithm: sha256WithRSAEncryption 61:44:5b:eb:79:b0:28:84:4c:5d:b0:3d:2a:35:02:86:97:f1: 4b:92:7b:94:4a:06:d5:b1:25:e9:91:cf:d8:91:36:bc:4e:bf: a1:a1:4a:88:eb:92:26:eb:39:a4:10:7e:65:2d:11:55:12:35: 79:64:0d:65:15:56:57:78:0c:68:c6:bd:fb:ab:33:56:99:9e: a0:9c:98:42:66:9f:14:89:22:73:d8:a4:98:0f:df:eb:fc:ff: e4:fd:28:26:92:57:90:b3:c6:5b:c5:de:47:29:d7:b5:61:e1: 94:0d:4e:e8:46:15:36:4e:59:74:77:10:d5:31:fb:98:a4:58: b9:b1:70:70:62:30:7f:ae:d6:3b:de:84:a5:07:54:c4:90:0a: 55:a8:fb:e1:f5:67:2d:76:b9:c1:e4:1a:f5:30:8f:07:53:11: a3:03:0f:24:8a:4f:c7:50:f2:27:f2:6c:8f:42:62:91:88:9e: c1:02:c9:ed:a7:cd:c4:d0:09:bd:97:43:89:5c:11:c4:b9:ec: 8e:77:ec:e9:aa:46:a7:3e:2b:5a:cf:10:28:f3:4e:1d:87:11: 73:c1:e6:7b:18:09:f0:a6:b2:95:af:d1:b9:d4:a0:f2:f3:4e: 98:f6:0a:ed:94:83:be:20:af:e5:78:dc:28:ea:2e:fb:62:d6: 38:93:11:2d -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUZUrsamZPjr3n2I0W0jMQF+Makv4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQwNzAzNTUwMFoX DTI3MDQwNjA0MDAwMFowMzExMC8GA1UEAxMoNkEzMzE5OEY5QzI3OEEzQjlFNjkz RUVFNzJFMjkxNDI2MEQ5MjgwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN//AJ1QhZ+8JNoaxqk+jc3jdTSnVqOwMHGbPqFL9tk4Uwb9oXX9Asv7FTKc W90cwRv14EWsZgPSBDLI8vbOpT5AIDYx0aZ/0v/QC8O7Z9EXuSAVn6c57SjnIUGk eLZxPrpGHwmoUP5uOalX3Fnq+3IkENhbXbm3b/XGE7ASAXVCcOwA/VaW2WLcyiac hAZTo6R4dX94MqOG4OVRdsSEzSYQiJnO2RQ4ICGt8C3pSl0dtx72JaxkjAHW36ny QCkT9lE7fptsJT6o7pGDEZ23izbADKzebakys1GV8SBQlIWSzyPz7zpdhliEWyF+ 32vpbN8fIdgRXTPZBD4ZuFqZXBECAwEAAaOCAdMwggHPMB0GA1UdDgQWBBRqMxmP nCeKO55pPu5y4pFCYNkoCTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTY5MC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfETQDANBgkqhkiG9w0BAQsFAAOCAQEAYURb63mwKIRMXbA9 KjUChpfxS5J7lEoG1bEl6ZHP2JE2vE6/oaFKiOuSJus5pBB+ZS0RVRI1eWQNZRVW V3gMaMa9+6szVpmeoJyYQmafFIkic9ikmA/f6/z/5P0oJpJXkLPGW8XeRynXtWHh lA1O6EYVNk5ZdHcQ1TH7mKRYubFwcGIwf67WO96EpQdUxJAKVaj74fVnLXa5weQa 9TCPB1MRowMPJIpPx1DyJ/Jsj0JikYiewQLJ7afNxNAJvZdDiVwRxLnsjnfs6apG pz4rWs8QKPNOHYcRc8HmexgJ8Kayla/RudSg8vNOmPYK7ZSDviCv5XjcKOou+2LW OJMRLQ== -----END CERTIFICATE-----Generated at Fri Apr 17 08:16:22 2026 by rpki-client