This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154365.roa File: AS154365.roa (raw, json) Hash identifier: WUA9RKV5JH47vupGkxgWXCnUUjH1iI5NQqNMeQnGw1E= Subject key identifier: 21:D9:08:28:A6:1E:5C:F6:BF:17:2B:23:4B:10:97:FF:D5:DD:BE:E7 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 717B11DA7AC9DB1CF56B4376F0BE9505E6C01AF0 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154365.roa Signing time: Fri 12 Dec 2025 09:04:28 +0000 ROA not before: Fri 12 Dec 2025 08:59:28 +0000 ROA not after: Fri 11 Dec 2026 09:04:28 +0000 asID: 154365 IP address blocks: 138.252.160.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 09:41:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:7b:11:da:7a:c9:db:1c:f5:6b:43:76:f0:be:95:05:e6:c0:1a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Dec 12 08:59:28 2025 GMT Not After : Dec 11 09:04:28 2026 GMT Subject: CN=21D90828A61E5CF6BF172B234B1097FFD5DDBEE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:38:33:f7:c1:31:24:94:c9:a2:11:9a:c5:5a: 9f:9f:7c:00:db:1b:52:b7:cb:07:28:4c:25:7a:8f: 86:c0:cb:a9:c1:68:ac:bb:79:f3:76:f3:28:e9:bd: fe:db:e7:de:41:5a:2b:2a:39:b2:d8:f3:91:dd:26: e8:9d:31:2b:6c:e2:3f:cd:ef:2c:4e:0b:26:bd:6d: 58:79:90:cd:08:84:77:5b:69:58:d1:1a:6d:b1:d7: c3:89:89:f8:bd:70:29:52:03:78:bd:ba:48:32:6d: fa:24:10:5d:8c:a4:ac:d1:db:cb:8c:ad:ee:30:45: 0d:4e:87:01:6b:5d:b4:45:63:48:17:30:20:ae:b8: 24:00:7f:98:43:1d:11:03:fa:31:72:c1:d3:57:36: ce:c7:e2:60:80:3d:7d:c7:28:53:cc:83:28:c2:0d: f6:57:1d:0f:06:fe:b1:bc:6c:1e:17:3b:67:b2:90: 0c:8b:4a:bf:6a:aa:a1:ac:e8:91:7b:d0:5c:46:f6: 6f:33:16:b9:09:fa:6c:34:4e:eb:6a:c8:04:73:2f: 03:32:90:27:07:16:70:7b:ae:80:c5:3d:9c:53:3a: 7c:62:bf:54:7b:a6:7c:14:2a:ad:8a:ef:a9:39:af: e2:14:e6:b5:32:c1:de:a5:93:2f:be:da:3b:9e:b0: 9e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D9:08:28:A6:1E:5C:F6:BF:17:2B:23:4B:10:97:FF:D5:DD:BE:E7 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154365.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.252.160.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:3a:1c:9c:eb:9a:d7:31:e5:7c:6c:02:92:a6:e9:67:b6:99: b8:c1:c1:a9:19:c3:c5:64:18:1d:27:ad:41:c4:93:d6:4c:3d: 4f:a3:c5:a0:2f:e2:95:e1:ff:9d:0d:71:6e:c9:62:c7:d6:7a: 26:ae:b2:0c:bc:85:80:b6:bc:a9:3a:d4:64:21:2e:6d:d4:a2: b6:6f:97:ea:3e:44:e2:21:40:9d:8d:6d:78:e7:41:0d:94:5b: 52:46:d4:b1:1a:d9:1a:a8:96:d9:0c:74:21:a3:15:3f:c2:61: d7:cb:7f:21:71:37:08:0c:d2:5c:b4:3f:41:c8:9c:ab:3e:47: 0c:28:06:6a:f8:04:6e:e2:f0:4e:79:bd:b3:83:91:50:f6:67: 3c:51:c2:2d:f0:29:44:2d:bb:35:76:23:9a:3f:f4:8a:4f:9f: 33:79:07:3d:e3:eb:cf:9e:39:79:bd:4f:d2:be:54:21:3b:a1: 5f:b5:e2:4f:46:ef:1a:19:6a:ca:ab:cc:12:ac:e4:16:50:5b: 2d:ee:34:f0:59:32:d3:44:7c:f7:95:2c:93:ef:45:24:3b:20: bc:07:65:a8:60:7a:b4:07:5e:30:80:42:6d:14:b8:43:93:95: be:c6:a6:49:69:58:96:f3:89:f3:58:cb:4b:55:97:89:74:09: ae:40:3c:42 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUcXsR2nrJ2xz1a0N28L6VBebAGvAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTIxMjA4NTkyOFoX DTI2MTIxMTA5MDQyOFowMzExMC8GA1UEAxMoMjFEOTA4MjhBNjFFNUNGNkJGMTcy QjIzNEIxMDk3RkZENUREQkVFNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKU4M/fBMSSUyaIRmsVan598ANsbUrfLByhMJXqPhsDLqcForLt583bzKOm9 /tvn3kFaKyo5stjzkd0m6J0xK2ziP83vLE4LJr1tWHmQzQiEd1tpWNEabbHXw4mJ +L1wKVIDeL26SDJt+iQQXYykrNHby4yt7jBFDU6HAWtdtEVjSBcwIK64JAB/mEMd EQP6MXLB01c2zsfiYIA9fccoU8yDKMIN9lcdDwb+sbxsHhc7Z7KQDItKv2qqoazo kXvQXEb2bzMWuQn6bDRO62rIBHMvAzKQJwcWcHuugMU9nFM6fGK/VHumfBQqrYrv qTmv4hTmtTLB3qWTL77aO56wnjMCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQh2Qgo ph5c9r8XKyNLEJf/1d2+5zAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1NDM2NS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAYr8oDANBgkqhkiG9w0BAQsFAAOCAQEAHDocnOua1zHlfGwCkqbp Z7aZuMHBqRnDxWQYHSetQcST1kw9T6PFoC/ileH/nQ1xbslix9Z6Jq6yDLyFgLa8 qTrUZCEubdSitm+X6j5E4iFAnY1teOdBDZRbUkbUsRrZGqiW2Qx0IaMVP8Jh18t/ IXE3CAzSXLQ/Qcicqz5HDCgGavgEbuLwTnm9s4ORUPZnPFHCLfApRC27NXYjmj/0 ik+fM3kHPePrz545eb1P0r5UITuhX7XiT0bvGhlqyqvMEqzkFlBbLe408Fky00R8 95Usk+9FJDsgvAdlqGB6tAdeMIBCbRS4Q5OVvsamSWlYlvOJ81jLS1WXiXQJrkA8 Qg== -----END CERTIFICATE-----Generated at Wed Dec 17 20:07:27 2025 by rpki-client