This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154400.roa File: AS154400.roa (raw, json) Hash identifier: aGVwE+YFT8hJWkaPJRKAUS1PBpi2hGcl+awVkL9t8Zg= Subject key identifier: 3A:4B:9D:67:9F:35:DF:06:E3:E7:89:7A:3C:0D:A2:10:C4:79:0C:BB Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 4245F3166C83ADD04D0D3083C2A4BD5E251CC3F6 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154400.roa Signing time: Tue 09 Dec 2025 09:59:25 +0000 ROA not before: Tue 09 Dec 2025 09:54:25 +0000 ROA not after: Tue 08 Dec 2026 09:59:25 +0000 asID: 154400 IP address blocks: 144.79.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 09:41:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:45:f3:16:6c:83:ad:d0:4d:0d:30:83:c2:a4:bd:5e:25:1c:c3:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Dec 9 09:54:25 2025 GMT Not After : Dec 8 09:59:25 2026 GMT Subject: CN=3A4B9D679F35DF06E3E7897A3C0DA210C4790CBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:83:35:be:e1:df:93:7d:2f:a6:e6:62:f4:f4: 50:ac:5f:62:95:30:86:31:ce:b2:a2:e8:cc:f1:6f: 69:33:d2:fb:a0:de:2f:d2:c9:ac:ec:fe:d3:da:3b: 23:75:e9:2a:0d:ea:fe:67:0a:87:61:eb:60:fc:2d: b3:f0:e4:b8:0e:43:a2:45:5d:d6:3c:8a:27:94:73: 2f:46:e3:5e:23:86:f6:b2:79:ac:5b:70:9a:fe:6b: 9c:c1:30:65:d9:bd:e8:60:32:af:72:b8:ab:c2:bf: a4:73:1c:6a:b3:36:66:fc:53:38:cc:25:f6:c4:57: 46:4d:d9:bc:ae:e7:f7:82:75:0f:c0:20:1b:34:1c: 73:1d:7a:0f:68:b5:3c:82:0a:63:2f:fb:da:e8:bc: 8f:c4:10:a6:3f:b3:bd:f6:74:95:71:65:06:78:9c: 21:de:67:5a:3b:e5:eb:55:c8:c1:76:94:47:d2:4c: 41:52:af:6e:36:63:79:b4:a2:c6:a0:2c:38:60:c5: c8:8a:83:65:88:2b:c0:6d:bc:23:56:ec:f7:18:12: cd:5a:14:4c:63:41:01:b8:17:0a:61:eb:5d:fa:8a: fb:e3:60:de:98:c2:55:81:4e:10:3f:88:3b:fb:a2: 38:f5:90:07:f7:64:18:27:80:a6:0b:17:d4:93:2a: 23:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:4B:9D:67:9F:35:DF:06:E3:E7:89:7A:3C:0D:A2:10:C4:79:0C:BB X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154400.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.79.9.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:42:da:9e:47:4a:73:fd:0a:22:d0:3a:42:de:b2:b6:04:f8: f3:cc:d7:66:42:d5:01:a0:6f:3b:aa:46:78:79:71:7c:b1:a3: 6f:61:72:4f:86:65:16:6f:b3:ec:61:b9:75:14:6e:4d:94:ed: 96:f4:3d:39:64:a9:74:86:64:91:3f:f3:bf:6b:34:c1:74:81: f7:fd:fc:9e:ea:47:6f:7c:f2:7c:0b:a6:25:ce:5e:a7:41:d1: ca:40:ac:11:a4:4d:d5:6d:73:c8:5d:95:3c:e5:07:61:34:34: 84:e8:78:75:e3:3a:af:b1:6c:fa:45:83:52:f7:5a:29:19:69: a5:89:fe:b1:ad:a0:54:92:63:4f:bf:38:c9:4b:d8:5a:f3:b5: 74:65:35:01:cc:5e:67:86:78:50:29:99:d0:b6:25:39:58:34: bf:ea:a1:e3:c4:72:4a:93:5f:8e:98:45:ce:e0:d7:47:e9:3e: ff:33:cc:ce:e6:e5:d9:42:1c:ca:2d:a5:60:96:47:59:64:e7: 78:7e:de:0f:27:52:bc:11:24:3c:8f:42:f6:5d:6d:d1:71:d1: 87:3b:d3:4c:d2:b3:ea:4d:b9:af:86:63:43:ec:19:15:ba:8b: 55:ba:24:02:be:34:f2:01:c0:53:b4:51:72:81:d1:a5:7f:a2: 7d:e8:9b:45 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUQkXzFmyDrdBNDTCDwqS9XiUcw/YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTIwOTA5NTQyNVoX DTI2MTIwODA5NTkyNVowMzExMC8GA1UEAxMoM0E0QjlENjc5RjM1REYwNkUzRTc4 OTdBM0MwREEyMTBDNDc5MENCQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALuDNb7h35N9L6bmYvT0UKxfYpUwhjHOsqLozPFvaTPS+6DeL9LJrOz+09o7 I3XpKg3q/mcKh2HrYPwts/DkuA5DokVd1jyKJ5RzL0bjXiOG9rJ5rFtwmv5rnMEw Zdm96GAyr3K4q8K/pHMcarM2ZvxTOMwl9sRXRk3ZvK7n94J1D8AgGzQccx16D2i1 PIIKYy/72ui8j8QQpj+zvfZ0lXFlBnicId5nWjvl61XIwXaUR9JMQVKvbjZjebSi xqAsOGDFyIqDZYgrwG28I1bs9xgSzVoUTGNBAbgXCmHrXfqK++Ng3pjCVYFOED+I O/uiOPWQB/dkGCeApgsX1JMqIwcCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQ6S51n nzXfBuPniXo8DaIQxHkMuzAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1NDQwMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAJBPCTANBgkqhkiG9w0BAQsFAAOCAQEADkLankdKc/0KItA6Qt6y tgT488zXZkLVAaBvO6pGeHlxfLGjb2FyT4ZlFm+z7GG5dRRuTZTtlvQ9OWSpdIZk kT/zv2s0wXSB9/38nupHb3zyfAumJc5ep0HRykCsEaRN1W1zyF2VPOUHYTQ0hOh4 deM6r7Fs+kWDUvdaKRlppYn+sa2gVJJjT784yUvYWvO1dGU1AcxeZ4Z4UCmZ0LYl OVg0v+qh48RySpNfjphFzuDXR+k+/zPMzubl2UIcyi2lYJZHWWTneH7eDydSvBEk PI9C9l1t0XHRhzvTTNKz6k25r4ZjQ+wZFbqLVbokAr408gHAU7RRcoHRpX+ifeib RQ== -----END CERTIFICATE-----Generated at Wed Dec 17 20:07:28 2025 by rpki-client