This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154444.roa
File: AS154444.roa (raw, json)
Hash identifier: 7hRg9gzdL/gCU3E185YG7rH78G6gqgG/7Nd4AspA+BU=
Subject key identifier: 4C:75:F0:82:23:A7:0D:62:E0:86:0B:A3:FC:00:FC:29:B8:8C:24:DA
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 5493F5460534B6A089BBB31747F0225ED01EFBB9
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154444.roa
Signing time: Wed 17 Dec 2025 01:15:16 +0000
ROA not before: Wed 17 Dec 2025 01:10:16 +0000
ROA not after: Wed 16 Dec 2026 01:15:16 +0000
asID: 154444
IP address blocks: 144.79.94.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Dec 2025 09:41:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:93:f5:46:05:34:b6:a0:89:bb:b3:17:47:f0:22:5e:d0:1e:fb:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Validity
Not Before: Dec 17 01:10:16 2025 GMT
Not After : Dec 16 01:15:16 2026 GMT
Subject: CN=4C75F08223A70D62E0860BA3FC00FC29B88C24DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9c:ef:61:2a:da:ee:f6:6e:84:ed:63:f1:71:
ce:ee:8a:4c:34:28:bc:0f:e6:f8:7c:04:4a:34:31:
20:1a:7e:68:42:f7:69:fc:e9:5d:e8:d9:b2:26:6d:
32:0d:ab:3e:0e:74:03:15:41:6d:af:c7:69:ce:b2:
2b:cd:6d:7f:16:f9:00:e1:85:f6:98:03:e6:6e:ff:
c7:3a:d0:6b:28:78:e3:b6:08:44:83:87:49:83:e8:
1e:9e:b3:ef:56:b1:84:10:6e:4f:02:20:3a:62:33:
91:49:03:f7:40:fb:ca:a8:8e:a7:5e:e7:6a:67:24:
5b:3b:05:36:2d:2a:d3:d0:cb:85:58:0b:75:8b:95:
e9:86:c0:e7:aa:40:fa:43:0c:13:74:a8:00:b7:05:
b9:55:18:f5:07:29:9f:9f:62:3e:c4:44:c3:4a:ef:
ae:45:b9:e1:50:44:80:fe:96:3f:52:f0:9e:c2:c7:
ab:8f:de:2e:73:c3:ef:de:f2:c7:64:f5:1c:8a:09:
92:0a:d1:a6:e5:1c:39:4d:10:34:35:e9:99:71:bf:
3c:3b:71:41:75:b7:1f:e8:3e:2f:34:d7:db:89:1c:
44:66:78:57:1b:78:10:65:91:14:ae:f0:40:f9:67:
0e:a7:6d:80:0b:f4:88:d8:4c:26:f3:67:b0:e6:a7:
63:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:75:F0:82:23:A7:0D:62:E0:86:0B:A3:FC:00:FC:29:B8:8C:24:DA
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154444.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.79.94.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:93:4e:70:10:53:ae:03:df:d5:1c:1e:b9:fd:5b:61:4b:59:
3f:d1:f4:8f:f6:09:c0:82:b2:c7:3e:f8:8b:95:84:1d:e7:87:
3b:fe:cd:48:d3:d6:40:87:c4:79:35:91:a5:62:f6:f4:f9:bf:
c4:84:8b:b4:70:fb:06:0c:8d:0b:0f:66:ae:4e:a7:3d:e0:0f:
41:77:9f:22:50:99:2c:3e:6b:8a:11:c8:71:50:b3:77:df:17:
0d:fb:22:ec:4a:10:e6:d5:1a:24:65:69:73:87:e6:aa:95:8e:
14:ef:88:18:58:7c:33:6b:90:97:5f:d9:4d:15:21:ce:18:3f:
f7:9b:18:0c:b9:49:09:d1:08:12:28:ce:8d:31:42:14:18:77:
6c:0e:90:ed:e9:a1:da:37:9f:ad:00:46:dd:85:a4:17:03:8b:
22:58:e0:5f:21:46:d6:47:2b:9f:7b:af:18:eb:81:05:b4:cc:
c5:e1:25:c0:f0:5c:23:6e:25:af:70:cd:e4:84:ed:a9:a5:aa:
dc:51:25:ee:d6:c5:0b:e8:14:b2:e3:fb:ca:db:28:04:1f:4f:
9a:18:8f:19:75:0f:34:3c:56:45:51:78:7d:f3:98:de:79:a2:
8f:e3:8b:ee:26:13:f0:06:5d:bd:33:69:b3:03:12:b4:46:c6:
10:7a:ee:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 20:07:27 2025 by rpki-client