$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149934.roa File: AS149934.roa (raw, json) Hash identifier: FPboyZxOrwshOylWuvLIv55KrOvdxo2UNk+i1eRwkus= Subject key identifier: 3C:EF:81:93:39:FE:C3:AF:82:AC:9E:65:D3:8D:FA:72:AB:B0:08:9E Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 29586F1FC285614BA493A4AC7F76028A912CEC40 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149934.roa Signing time: Wed 11 Feb 2026 01:00:00 +0000 ROA not before: Wed 11 Feb 2026 00:55:00 +0000 ROA not after: Wed 10 Feb 2027 01:00:00 +0000 asID: 149934 IP address blocks: 2401:4a60::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:58:6f:1f:c2:85:61:4b:a4:93:a4:ac:7f:76:02:8a:91:2c:ec:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 11 00:55:00 2026 GMT Not After : Feb 10 01:00:00 2027 GMT Subject: CN=3CEF819339FEC3AF82AC9E65D38DFA72ABB0089E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d2:95:da:fb:74:87:b1:dd:ca:1c:16:f8:4e: 8a:75:1d:d7:b7:16:f7:5f:8c:c4:ad:bf:69:ce:d7: 87:d0:c8:9b:a6:16:ca:cf:7e:54:c7:9b:3b:a9:a9: aa:e0:ee:81:69:35:66:a0:fd:eb:60:7f:5e:f5:d6: 2c:ab:3e:dd:2c:77:64:9a:d2:09:98:ea:f7:5e:e5: ac:22:ad:fc:c9:6b:c5:bd:db:88:c0:3f:95:3a:d9: 2c:88:a5:de:db:a1:76:0e:d1:67:a9:8b:61:72:fa: 7d:6f:fa:85:c0:32:50:49:7c:58:d6:85:fa:bc:f6: 71:fd:86:5e:0e:10:ea:54:a3:34:53:e7:cf:99:aa: a8:a1:ce:0f:d8:0b:fa:e9:e6:8f:ca:af:e9:d6:48: f0:f2:3a:66:9d:2f:c6:f5:5f:8b:52:9e:ea:b6:c8: f8:82:2f:d3:b2:d7:0b:c6:23:ec:ec:ec:1e:80:bd: fc:22:b4:3a:f5:1d:b0:c8:8b:45:81:37:0d:6e:8d: 0c:41:c3:fa:4c:30:0b:7e:e9:f8:e6:96:c8:90:d1: 3d:38:1e:8a:9c:ad:22:44:aa:7d:f8:b8:3c:03:80: fe:13:96:d2:fb:2b:3e:ec:7b:67:3e:32:7f:96:ef: dd:b0:70:29:70:44:57:df:28:8e:a1:27:b5:38:f6: f0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:EF:81:93:39:FE:C3:AF:82:AC:9E:65:D3:8D:FA:72:AB:B0:08:9E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:4a60::/32 Signature Algorithm: sha256WithRSAEncryption 79:7c:93:d0:86:92:d6:92:1e:fc:00:90:17:f6:90:ab:cc:3e: 4e:0a:02:88:78:4d:9d:8b:99:0c:f5:fc:16:5f:a0:34:dc:1e: 83:5b:4a:4e:a3:ce:13:52:54:a4:01:fa:03:26:37:aa:f6:2e: 7f:63:85:bb:28:ea:07:04:83:10:d6:23:a4:a2:cc:a2:76:bb: a6:85:cb:91:81:a2:d3:7c:e3:e5:f2:ac:84:40:7a:9b:06:b8: 4d:50:c6:14:e0:6e:d8:06:24:18:c0:73:02:6e:43:f8:68:81: 8c:52:23:0d:84:7f:1f:71:82:b9:37:60:81:a4:2f:4d:c2:20: d8:61:62:63:30:cd:ce:ea:73:46:73:fb:55:5e:d7:49:45:76: d9:1c:4a:30:35:a9:b3:bb:67:69:d2:4d:12:da:a7:ea:4c:9d: b5:5c:7e:28:ff:a0:eb:9a:61:55:c3:45:bf:7c:64:f8:9d:2e: 9e:10:49:1e:73:8c:45:96:c5:70:04:8b:5b:15:03:f1:b0:e3: ac:24:a5:d3:27:32:24:69:3a:4c:9b:fc:82:0f:74:5b:ec:2e: ee:2a:06:b2:af:e9:bb:d4:e6:c8:cc:d2:d9:47:95:c9:d7:98: 9e:b7:6b:dc:dc:5f:cb:21:49:41:81:07:5c:74:14:ae:a3:64: 69:5a:d1:77 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUKVhvH8KFYUukk6Ssf3YCipEs7EAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIxMTAwNTUwMFoX DTI3MDIxMDAxMDAwMFowMzExMC8GA1UEAxMoM0NFRjgxOTMzOUZFQzNBRjgyQUM5 RTY1RDM4REZBNzJBQkIwMDg5RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALXSldr7dIex3cocFvhOinUd17cW91+MxK2/ac7Xh9DIm6YWys9+VMebO6mp quDugWk1ZqD962B/XvXWLKs+3Sx3ZJrSCZjq917lrCKt/Mlrxb3biMA/lTrZLIil 3tuhdg7RZ6mLYXL6fW/6hcAyUEl8WNaF+rz2cf2GXg4Q6lSjNFPnz5mqqKHOD9gL +unmj8qv6dZI8PI6Zp0vxvVfi1Ke6rbI+IIv07LXC8Yj7OzsHoC9/CK0OvUdsMiL RYE3DW6NDEHD+kwwC37p+OaWyJDRPTgeipytIkSqffi4PAOA/hOW0vsrPux7Zz4y f5bv3bBwKXBEV98ojqEntTj28BMCAwEAAaOCAdEwggHNMB0GA1UdDgQWBBQ874GT Of7Dr4KsnmXTjfpyq7AInjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTkzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8w DQQCAAIwBwMFACQBSmAwDQYJKoZIhvcNAQELBQADggEBAHl8k9CGktaSHvwAkBf2 kKvMPk4KAoh4TZ2LmQz1/BZfoDTcHoNbSk6jzhNSVKQB+gMmN6r2Ln9jhbso6gcE gxDWI6SizKJ2u6aFy5GBotN84+XyrIRAepsGuE1QxhTgbtgGJBjAcwJuQ/hogYxS Iw2Efx9xgrk3YIGkL03CINhhYmMwzc7qc0Zz+1Ve10lFdtkcSjA1qbO7Z2nSTRLa p+pMnbVcfij/oOuaYVXDRb98ZPidLp4QSR5zjEWWxXAEi1sVA/Gw46wkpdMnMiRp Okyb/IIPdFvsLu4qBrKv6bvU5sjM0tlHlcnXmJ63a9zcX8shSUGBB1x0FK6jZGla 0Xc= -----END CERTIFICATE-----Generated at Mon Mar 2 03:01:52 2026 by rpki-client