This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154331.roa File: AS154331.roa (raw, json) Hash identifier: wHAbkxL27ZyKFF0xEH7K2jJl6Tx4sSOK6euG5Sv9BNc= Subject key identifier: 5B:F8:DE:4C:A5:8C:FE:22:17:9E:FA:96:01:38:B4:F7:C0:69:D9:17 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 65E6A58575297048B96C9DBE91B9E68B16C00AD3 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154331.roa Signing time: Tue 18 Nov 2025 08:25:20 +0000 ROA not before: Tue 18 Nov 2025 08:20:20 +0000 ROA not after: Tue 17 Nov 2026 08:25:20 +0000 asID: 154331 IP address blocks: 138.252.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:e6:a5:85:75:29:70:48:b9:6c:9d:be:91:b9:e6:8b:16:c0:0a:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Nov 18 08:20:20 2025 GMT Not After : Nov 17 08:25:20 2026 GMT Subject: CN=5BF8DE4CA58CFE22179EFA960138B4F7C069D917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:89:ba:88:d7:59:9c:a9:74:a2:b3:b4:15:ea: fb:ef:58:c0:b7:70:6c:bd:35:1d:73:0c:d9:2b:77: 01:30:51:21:b8:b1:b4:88:44:63:5a:22:cf:0b:8d: ad:50:e1:f0:40:0d:cc:b7:28:f9:79:b3:c9:83:b5: 94:dd:f3:06:fc:c8:ff:16:56:d1:b0:56:03:11:e8: a8:14:61:0a:b5:5d:30:d1:57:ec:23:92:05:d9:4b: 9c:7e:a7:3c:88:de:e4:4d:b5:ca:22:5d:ea:d9:6a: 4c:d7:14:59:a9:6e:74:e8:51:ec:38:bf:1a:77:40: 17:35:d4:83:aa:e5:97:35:08:9b:a8:bb:a0:34:ee: 7c:1e:f2:10:aa:95:87:00:4e:a2:3b:d7:dc:c0:f6: 03:ff:22:06:76:92:74:cb:47:70:0d:00:f7:54:d6: f3:87:bb:7d:ed:43:01:0d:ae:7b:ac:5f:65:31:66: ae:90:c1:84:1a:4c:95:94:80:c7:02:35:06:b8:90: b2:a7:4b:3d:19:94:d4:b9:e2:8f:ad:4c:c0:d2:18: 1c:c7:98:cf:9f:1c:d6:98:ce:d6:b6:df:71:28:c3: ce:2e:03:12:a4:24:48:a8:63:2c:33:05:ab:b5:86: 4c:67:d0:1a:1b:0f:a4:55:af:47:ff:b7:b1:48:85: aa:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F8:DE:4C:A5:8C:FE:22:17:9E:FA:96:01:38:B4:F7:C0:69:D9:17 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.252.95.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:34:e0:ba:d0:99:a2:16:85:1e:82:9a:41:e2:45:67:34:a7: 03:1c:f9:6c:16:a9:76:97:ed:77:27:28:fa:20:cd:fb:aa:cb: ba:ae:80:53:87:f1:c8:2f:c7:13:46:15:cf:1a:58:46:ac:c6: e9:f6:4f:39:8b:4a:c4:95:f4:c8:54:6f:81:36:3d:51:3e:d8: 0c:37:d6:7c:95:2d:01:ad:2f:ef:06:cc:17:89:2b:89:cd:77: d2:a0:54:b7:9a:ca:07:f4:31:ee:46:af:71:b8:b5:3f:17:05: cf:be:db:59:c4:1b:de:28:f1:8a:8b:30:5a:8f:5f:49:2e:63: bf:cb:6f:ab:46:cb:a3:2f:81:1a:31:70:85:78:57:c8:88:58: 97:3c:76:4c:93:48:b1:7c:c7:3d:d3:b9:4c:cd:57:ee:86:90: 19:74:93:9d:26:e2:bb:30:86:db:3d:22:20:02:59:97:d9:65: 55:a7:bb:f4:ea:42:64:bd:7f:0d:65:33:86:64:37:ef:63:5f: 42:2b:93:3e:60:0a:ae:03:2b:5b:c0:b7:64:80:74:c0:c8:53: b5:52:cb:5b:0b:98:40:78:56:e9:a7:37:eb:3f:4a:78:fb:82: 01:d1:0f:54:4c:65:68:3c:f4:7c:30:5a:85:44:98:02:8b:f8: d9:67:c8:11 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUZealhXUpcEi5bJ2+kbnmixbACtMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTExODA4MjAyMFoX DTI2MTExNzA4MjUyMFowMzExMC8GA1UEAxMoNUJGOERFNENBNThDRkUyMjE3OUVG QTk2MDEzOEI0RjdDMDY5RDkxNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALGJuojXWZypdKKztBXq++9YwLdwbL01HXMM2St3ATBRIbixtIhEY1oizwuN rVDh8EANzLco+XmzyYO1lN3zBvzI/xZW0bBWAxHoqBRhCrVdMNFX7COSBdlLnH6n PIje5E21yiJd6tlqTNcUWaludOhR7Di/GndAFzXUg6rllzUIm6i7oDTufB7yEKqV hwBOojvX3MD2A/8iBnaSdMtHcA0A91TW84e7fe1DAQ2ue6xfZTFmrpDBhBpMlZSA xwI1BriQsqdLPRmU1Lnij61MwNIYHMeYz58c1pjO1rbfcSjDzi4DEqQkSKhjLDMF q7WGTGfQGhsPpFWvR/+3sUiFqrcCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRb+N5M pYz+Ihee+pYBOLT3wGnZFzAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1NDMzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAIr8XzANBgkqhkiG9w0BAQsFAAOCAQEAXzTgutCZohaFHoKaQeJF ZzSnAxz5bBapdpftdyco+iDN+6rLuq6AU4fxyC/HE0YVzxpYRqzG6fZPOYtKxJX0 yFRvgTY9UT7YDDfWfJUtAa0v7wbMF4kric130qBUt5rKB/Qx7kavcbi1PxcFz77b WcQb3ijxioswWo9fSS5jv8tvq0bLoy+BGjFwhXhXyIhYlzx2TJNIsXzHPdO5TM1X 7oaQGXSTnSbiuzCG2z0iIAJZl9llVae79OpCZL1/DWUzhmQ372NfQiuTPmAKrgMr W8C3ZIB0wMhTtVLLWwuYQHhW6ac36z9KePuCAdEPVExlaDz0fDBahUSYAov42WfI EQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:54:21 2025 by rpki-client