This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS152406.roa File: AS152406.roa (raw, json) Hash identifier: rmOkXoTemkqL4uPcndpr1Y8CEkLGo1sihlWQzJuypdg= Subject key identifier: F8:95:B3:ED:D1:C6:F9:C9:FF:0B:E2:46:29:71:E5:33:51:07:4F:BD Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 1A0B4D49D78599739722222D2BFE02E6059568C2 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS152406.roa Signing time: Tue 18 Nov 2025 08:03:48 +0000 ROA not before: Tue 18 Nov 2025 07:58:48 +0000 ROA not after: Tue 17 Nov 2026 08:03:48 +0000 asID: 152406 IP address blocks: 138.252.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:0b:4d:49:d7:85:99:73:97:22:22:2d:2b:fe:02:e6:05:95:68:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Nov 18 07:58:48 2025 GMT Not After : Nov 17 08:03:48 2026 GMT Subject: CN=F895B3EDD1C6F9C9FF0BE2462971E53351074FBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cf:9b:ba:e1:20:93:58:61:3b:4f:57:8f:d4: b8:95:4c:8f:f7:8b:e4:2a:83:fa:b9:6e:81:c9:6f: f6:f8:47:13:7f:32:52:5a:36:8a:e6:89:0f:f8:e3: 69:83:a2:69:98:cf:32:e1:7f:33:3d:1c:51:21:20: 50:c0:83:8d:23:2a:47:09:fa:41:58:4b:16:85:dd: 05:3c:85:d9:21:b5:fe:ba:66:5d:49:a7:43:ba:38: 50:6f:8c:86:8c:41:51:2b:23:4a:28:26:a4:94:81: b1:e3:4d:a6:e8:11:bb:2f:c5:26:d3:03:06:54:0d: dc:b6:28:53:06:7c:e9:37:9c:18:14:3c:c4:f0:95: 0b:27:cd:1a:2d:24:a4:42:07:9f:21:93:af:33:e4: 7c:cb:93:7b:7b:29:4a:67:ba:18:73:6b:41:1c:e6: 2c:ea:7a:7d:cc:59:3e:8a:70:84:f2:9a:e6:a8:5d: 7d:d2:9a:32:2a:50:fb:23:95:bd:ed:24:36:77:42: 5d:95:c5:20:d4:70:d6:85:5b:00:06:05:bc:83:aa: 13:7e:9a:bb:e8:6a:f1:08:8e:53:f4:14:2c:9b:73: 82:e3:f6:f8:7f:31:3f:86:45:88:85:a0:50:dc:f6: 16:6d:ff:0a:c9:15:e3:21:b4:0d:41:d4:a3:96:a4: 4c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:95:B3:ED:D1:C6:F9:C9:FF:0B:E2:46:29:71:E5:33:51:07:4F:BD X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS152406.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.252.209.0/24 Signature Algorithm: sha256WithRSAEncryption 48:71:3d:f6:a1:c0:8c:da:21:65:41:cf:03:8e:70:49:e2:72: f7:ee:8d:30:2c:90:c1:e3:68:69:69:86:3b:d8:29:99:0d:26: 11:b4:17:1f:86:4c:19:b8:d7:4d:2e:ca:ee:c6:2b:51:6c:1d: 05:64:7a:d4:33:16:75:3f:21:4c:88:10:dd:1f:00:7f:41:3a: 96:54:6e:5a:55:bb:36:0f:c2:7a:08:b6:08:95:14:09:0c:0d: e1:0d:77:10:99:46:af:35:dc:47:08:e5:b4:2e:e6:2c:0c:98: 33:8f:2c:f5:d8:f3:ab:2e:de:f3:57:62:c6:c3:2d:52:9f:09: 37:3b:d1:bd:5a:87:fd:32:1e:c8:05:96:9e:aa:08:fb:13:e5: 4a:c6:4a:2c:40:5f:7c:2e:24:f4:f8:e2:eb:d9:e5:3c:86:e6: 85:7b:79:61:35:f4:38:de:66:2d:da:5c:9a:0f:8f:70:22:c7: 35:32:dd:87:5f:87:70:57:da:ef:3e:21:d1:9c:15:b5:ee:04: 90:ed:76:bb:08:af:fc:82:3e:9e:5c:ab:39:06:d2:83:d1:e5: f1:97:46:b0:7a:b0:1f:17:7f:90:46:f9:fe:90:e9:63:77:80: fc:d9:31:f2:09:91:42:75:b3:be:87:b1:de:0c:29:b5:91:b1: bf:ac:fc:58 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUGgtNSdeFmXOXIiItK/4C5gWVaMIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTExODA3NTg0OFoX DTI2MTExNzA4MDM0OFowMzExMC8GA1UEAxMoRjg5NUIzRUREMUM2RjlDOUZGMEJF MjQ2Mjk3MUU1MzM1MTA3NEZCRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMvPm7rhIJNYYTtPV4/UuJVMj/eL5CqD+rlugclv9vhHE38yUlo2iuaJD/jj aYOiaZjPMuF/Mz0cUSEgUMCDjSMqRwn6QVhLFoXdBTyF2SG1/rpmXUmnQ7o4UG+M hoxBUSsjSigmpJSBseNNpugRuy/FJtMDBlQN3LYoUwZ86TecGBQ8xPCVCyfNGi0k pEIHnyGTrzPkfMuTe3spSme6GHNrQRzmLOp6fcxZPopwhPKa5qhdfdKaMipQ+yOV ve0kNndCXZXFINRw1oVbAAYFvIOqE36au+hq8QiOU/QULJtzguP2+H8xP4ZFiIWg UNz2Fm3/CskV4yG0DUHUo5akTOsCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBT4lbPt 0cb5yf8L4kYpceUzUQdPvTAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1MjQwNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAIr80TANBgkqhkiG9w0BAQsFAAOCAQEASHE99qHAjNohZUHPA45w SeJy9+6NMCyQweNoaWmGO9gpmQ0mEbQXH4ZMGbjXTS7K7sYrUWwdBWR61DMWdT8h TIgQ3R8Af0E6llRuWlW7Ng/Cegi2CJUUCQwN4Q13EJlGrzXcRwjltC7mLAyYM48s 9djzqy7e81dixsMtUp8JNzvRvVqH/TIeyAWWnqoI+xPlSsZKLEBffC4k9Pji69nl PIbmhXt5YTX0ON5mLdpcmg+PcCLHNTLdh1+HcFfa7z4h0ZwVte4EkO12uwiv/II+ nlyrOQbSg9Hl8ZdGsHqwHxd/kEb5/pDpY3eA/Nkx8gmRQnWzvoex3gwptZGxv6z8 WA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:54:23 2025 by rpki-client