$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149697.roa File: AS149697.roa (raw, json) Hash identifier: IB0bXfanTbg9JZcN53HgZ4CqlA5UvJQe1uP4ftZwR/A= Subject key identifier: 8D:6B:4E:B4:B7:77:C2:4A:D5:2E:B2:93:C9:D5:69:82:D8:58:DA:BB Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0274C5BEEB1E63FD1E099FB935AC5E83DEF27305 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149697.roa Signing time: Fri 17 Apr 2026 04:02:46 +0000 ROA not before: Fri 17 Apr 2026 03:57:46 +0000 ROA not after: Fri 16 Apr 2027 04:02:46 +0000 asID: 149697 IP address blocks: 2401:f60::/32 maxlen: 48 2401:f60:1::/48 maxlen: 48 2401:f60:2::/48 maxlen: 48 2401:f60:92::/48 maxlen: 48 2401:f60:93::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 18:15:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:74:c5:be:eb:1e:63:fd:1e:09:9f:b9:35:ac:5e:83:de:f2:73:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 17 03:57:46 2026 GMT Not After : Apr 16 04:02:46 2027 GMT Subject: CN=8D6B4EB4B777C24AD52EB293C9D56982D858DABB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:05:a2:a3:b9:5b:a3:88:50:ac:56:d7:01:56: 5d:f2:c4:cf:95:67:60:7f:c4:ac:e1:44:0a:50:37: e9:e5:f7:a2:46:88:ba:af:a6:2e:3c:84:ca:e4:4d: 5a:f3:fc:28:2d:69:49:f2:c6:44:22:99:16:1e:45: e4:f0:0a:26:dd:45:46:d9:da:91:66:dd:a4:51:b8: 25:18:c2:a4:26:2a:87:12:c0:03:a2:84:2a:8d:86: fe:65:43:ba:77:77:7c:5b:2d:ec:22:6a:ab:aa:ce: 73:31:03:50:a7:68:50:25:44:06:1b:a3:a6:df:45: 67:31:69:ac:c1:7f:10:44:b0:47:0e:8f:c7:c8:07: 67:17:8a:c4:5b:9b:24:25:8a:07:cc:69:81:71:2b: cc:07:38:2d:01:21:f4:2d:ca:16:92:e6:0d:ec:0f: d1:34:6c:fb:61:3b:ff:2b:ce:9b:0a:cd:1c:11:d1: 5a:29:f4:d3:e9:5e:90:aa:4f:67:54:88:2b:c7:5e: 2b:b7:36:f7:26:c2:38:e2:f6:85:a5:a9:5e:ea:85: 6e:9f:c7:80:15:b3:c3:14:33:b0:c4:71:09:82:d6: bf:d6:8a:4f:ee:f1:f8:46:87:55:00:b8:bb:05:6e: 37:3d:28:44:fc:75:14:2c:ab:4e:b2:d2:28:b5:5b: b9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:6B:4E:B4:B7:77:C2:4A:D5:2E:B2:93:C9:D5:69:82:D8:58:DA:BB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149697.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:f60::/32 Signature Algorithm: sha256WithRSAEncryption 0b:12:b4:45:55:2a:bb:41:06:6e:da:46:8c:b7:4d:92:1f:fe: e9:aa:53:27:fd:81:aa:4c:9b:85:e2:27:df:aa:1c:42:25:58: c6:1a:dc:94:46:84:e5:81:ca:e6:81:75:7f:09:54:d4:ba:6e: 48:b5:0e:d5:34:46:5c:9f:fc:5b:7e:c9:ca:86:d2:1d:ae:88: 21:6b:e9:fc:77:2d:f3:3a:16:fd:e1:91:28:84:67:8a:e7:a2: 81:fd:76:6c:24:d4:68:0b:1d:36:c2:1a:4c:87:dd:28:9e:b4: 91:80:52:92:a9:95:b5:93:55:0a:48:e1:39:2f:b2:aa:32:f2: f7:4c:bc:0f:7b:5b:cf:8d:4e:4f:9b:99:6c:1e:4d:55:07:43: 0d:df:3b:b5:b6:a7:aa:1f:d8:15:2a:d1:70:5b:69:63:6b:68: 70:c6:16:9f:70:2d:a7:2c:8e:85:86:58:88:ae:72:51:e4:a1: 29:a3:8c:5f:3b:b4:14:df:5e:6e:bb:6b:30:39:47:b4:c9:57: 09:7b:42:19:d9:81:80:68:24:03:74:c4:51:87:2d:f7:e2:43: 1f:96:d0:3a:1a:73:35:6b:14:26:4e:fe:de:a9:d4:9d:99:1a: 94:b3:5c:25:72:10:01:1f:c4:77:da:1b:71:c6:34:aa:7f:95: 2c:02:7b:1b -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUAnTFvuseY/0eCZ+5Naxeg97ycwUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQxNzAzNTc0NloX DTI3MDQxNjA0MDI0NlowMzExMC8GA1UEAxMoOEQ2QjRFQjRCNzc3QzI0QUQ1MkVC MjkzQzlENTY5ODJEODU4REFCQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALkFoqO5W6OIUKxW1wFWXfLEz5VnYH/ErOFEClA36eX3okaIuq+mLjyEyuRN WvP8KC1pSfLGRCKZFh5F5PAKJt1FRtnakWbdpFG4JRjCpCYqhxLAA6KEKo2G/mVD und3fFst7CJqq6rOczEDUKdoUCVEBhujpt9FZzFprMF/EESwRw6Px8gHZxeKxFub JCWKB8xpgXErzAc4LQEh9C3KFpLmDewP0TRs+2E7/yvOmwrNHBHRWin00+lekKpP Z1SIK8deK7c29ybCOOL2haWpXuqFbp/HgBWzwxQzsMRxCYLWv9aKT+7x+EaHVQC4 uwVuNz0oRPx1FCyrTrLSKLVbuQcCAwEAAaOCAdEwggHNMB0GA1UdDgQWBBSNa060 t3fCStUuspPJ1WmC2FjauzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTY5Ny5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8w DQQCAAIwBwMFACQBD2AwDQYJKoZIhvcNAQELBQADggEBAAsStEVVKrtBBm7aRoy3 TZIf/umqUyf9gapMm4XiJ9+qHEIlWMYa3JRGhOWByuaBdX8JVNS6bki1DtU0Rlyf /Ft+ycqG0h2uiCFr6fx3LfM6Fv3hkSiEZ4rnooH9dmwk1GgLHTbCGkyH3SietJGA UpKplbWTVQpI4Tkvsqoy8vdMvA97W8+NTk+bmWweTVUHQw3fO7W2p6of2BUq0XBb aWNraHDGFp9wLacsjoWGWIiuclHkoSmjjF87tBTfXm67azA5R7TJVwl7QhnZgYBo JAN0xFGHLffiQx+W0DoaczVrFCZO/t6p1J2ZGpSzXCVyEAEfxHfaG3HGNKp/lSwC exs= -----END CERTIFICATE-----Generated at Fri Apr 17 13:33:56 2026 by rpki-client