$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149930.roa File: AS149930.roa (raw, json) Hash identifier: BXaLEA8xq2dCs0PbCZNWvVrLxK1229PatyvlEAYMoNg= Subject key identifier: 50:84:74:94:71:A0:AC:90:AD:AB:97:6B:E6:79:02:DD:DB:92:8B:33 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 20E553F30A98D19529F5404602254ED86606B945 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149930.roa Signing time: Mon 13 Apr 2026 07:00:00 +0000 ROA not before: Mon 13 Apr 2026 06:55:00 +0000 ROA not after: Mon 12 Apr 2027 07:00:00 +0000 asID: 149930 IP address blocks: 2001:df2:a940::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 18:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:e5:53:f3:0a:98:d1:95:29:f5:40:46:02:25:4e:d8:66:06:b9:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 13 06:55:00 2026 GMT Not After : Apr 12 07:00:00 2027 GMT Subject: CN=5084749471A0AC90ADAB976BE67902DDDB928B33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:90:33:32:7f:d0:47:42:7b:c9:38:ef:fc:21: 62:de:db:03:ef:f1:6d:e4:99:d3:de:ae:9e:86:14: c3:80:a7:4d:5b:58:f5:bc:87:35:00:86:64:48:06: 2d:0d:2a:a4:05:01:6e:f6:82:f0:41:7f:ca:a0:79: 4a:a9:64:2c:91:71:b0:47:22:db:b1:86:cf:5c:63: 83:e1:be:97:c0:6b:82:d4:47:8b:8e:c1:3d:49:bc: 88:9a:49:55:5f:02:8a:ac:99:d7:25:84:c2:b9:70: 24:82:2b:8b:0e:3d:76:ce:b2:f3:e3:4f:58:05:0d: 6d:24:5e:17:8d:35:e9:1c:21:e9:f7:c2:f3:f6:51: 2d:2c:02:db:db:10:d7:00:24:4d:9d:10:37:07:b9: 83:10:0f:88:0a:a5:fb:d4:0e:59:0b:d1:c1:d0:59: 45:44:4d:55:3c:67:68:c7:e0:06:93:c3:e9:ce:29: da:79:28:98:ce:c5:75:4f:52:b2:5c:e2:d1:4c:07: 4c:fa:1d:4c:b3:a5:e9:cc:05:93:8b:b4:41:6c:8d: 5f:68:d6:38:13:d3:ca:d0:85:dd:ef:9d:4b:dc:7c: 8c:12:3b:fc:67:58:f9:9c:7f:36:77:5c:d5:32:d4: 6c:c6:28:a6:d8:72:89:74:1c:8b:33:9a:03:bc:c0: c0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:84:74:94:71:A0:AC:90:AD:AB:97:6B:E6:79:02:DD:DB:92:8B:33 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:a940::/48 Signature Algorithm: sha256WithRSAEncryption 8a:a3:7d:a0:8a:93:ee:f1:86:c4:30:02:47:31:53:3b:64:b5: 13:34:6d:ab:5d:09:8a:9c:c9:e2:21:eb:8c:66:ba:09:3c:15: f3:b6:cf:35:bb:15:b1:b0:02:10:a8:48:ea:c9:70:53:52:72: 5e:8c:99:9b:4e:e0:a0:01:70:08:27:29:2a:0f:ac:ed:4f:80: 92:ac:f8:69:5d:f5:73:e5:0b:98:d0:d2:31:8c:c2:25:77:4e: 96:84:e0:9f:fd:39:9c:85:76:1b:1f:f8:ce:b9:a7:3d:6f:d6: 08:8c:c6:96:c8:b7:9c:0b:7e:93:75:8f:33:df:f7:63:0a:77: 49:cf:ec:40:1a:5e:10:82:b8:c2:23:ca:a2:82:9a:83:ce:d2: 58:1a:d8:e9:c3:ea:b5:ab:12:4b:68:a3:6e:a8:6f:ab:f4:10: c3:7d:4f:a7:2e:7e:af:8c:1c:96:f5:cf:21:ba:95:a2:e8:eb: cc:b6:bc:a5:76:3e:7d:dc:65:3e:43:b2:b6:51:1d:c5:5d:f6: 3e:38:96:69:4c:44:e5:1a:2f:1d:2c:4c:0e:ad:37:6c:0a:f2: 60:d3:6b:e8:a8:0a:e4:5e:f2:6b:aa:f6:7a:09:8b:cc:72:1a: 79:52:7c:06:a4:f8:9a:ff:c7:15:da:3d:6a:9e:84:a2:91:48: 80:29:9b:cd -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUIOVT8wqY0ZUp9UBGAiVO2GYGuUUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQxMzA2NTUwMFoX DTI3MDQxMjA3MDAwMFowMzExMC8GA1UEAxMoNTA4NDc0OTQ3MUEwQUM5MEFEQUI5 NzZCRTY3OTAyREREQjkyOEIzMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM2QMzJ/0EdCe8k47/whYt7bA+/xbeSZ096unoYUw4CnTVtY9byHNQCGZEgG LQ0qpAUBbvaC8EF/yqB5SqlkLJFxsEci27GGz1xjg+G+l8BrgtRHi47BPUm8iJpJ VV8CiqyZ1yWEwrlwJIIriw49ds6y8+NPWAUNbSReF4016Rwh6ffC8/ZRLSwC29sQ 1wAkTZ0QNwe5gxAPiAql+9QOWQvRwdBZRURNVTxnaMfgBpPD6c4p2nkomM7FdU9S slzi0UwHTPodTLOl6cwFk4u0QWyNX2jWOBPTytCF3e+dS9x8jBI7/GdY+Zx/Nndc 1TLUbMYopthyiXQcizOaA7zAwLkCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBRQhHSU caCskK2rl2vmeQLd25KLMzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTkzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfKpQDANBgkqhkiG9w0BAQsFAAOCAQEAiqN9oIqT7vGGxDAC RzFTO2S1EzRtq10JipzJ4iHrjGa6CTwV87bPNbsVsbACEKhI6slwU1JyXoyZm07g oAFwCCcpKg+s7U+Akqz4aV31c+ULmNDSMYzCJXdOloTgn/05nIV2Gx/4zrmnPW/W CIzGlsi3nAt+k3WPM9/3Ywp3Sc/sQBpeEIK4wiPKooKag87SWBrY6cPqtasSS2ij bqhvq/QQw31Ppy5+r4wclvXPIbqVoujrzLa8pXY+fdxlPkOytlEdxV32PjiWaUxE 5RovHSxMDq03bAryYNNr6KgK5F7ya6r2egmLzHIaeVJ8BqT4mv/HFdo9ap6EopFI gCmbzQ== -----END CERTIFICATE-----Generated at Fri Apr 17 11:11:23 2026 by rpki-client