This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149692.roa File: AS149692.roa (raw, json) Hash identifier: O7WA9gRlOxe3dd3rzIEN6aMRJKjeqkKDkxVIO7Tfjpw= Subject key identifier: 0F:1F:E7:89:A3:8C:CD:38:DD:2D:BE:DD:0C:A7:4A:2F:67:48:CA:B2 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 045044F60EC327DE31A62BDA866E7348A224100F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149692.roa Signing time: Thu 04 Dec 2025 02:51:10 +0000 ROA not before: Thu 04 Dec 2025 02:46:10 +0000 ROA not after: Thu 03 Dec 2026 02:51:10 +0000 asID: 149692 IP address blocks: 2001:df3:60c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:50:44:f6:0e:c3:27:de:31:a6:2b:da:86:6e:73:48:a2:24:10:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 4 02:46:10 2025 GMT Not After : Dec 3 02:51:10 2026 GMT Subject: CN=0F1FE789A38CCD38DD2DBEDD0CA74A2F6748CAB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e9:51:8b:a3:52:74:a6:78:7d:bc:e6:48:d5: 3a:b1:da:56:c1:74:1a:2b:7f:7b:cb:44:a0:4f:2f: 74:77:53:87:2c:74:8d:b0:ab:4d:84:0e:2e:9b:c3: 27:b4:47:1e:97:e6:13:18:e4:77:8d:3a:c2:0a:97: 22:c5:cb:c1:7f:04:80:a7:20:67:7c:34:5f:43:fa: c1:e4:4c:c3:44:94:4d:61:1e:0b:39:23:91:2f:a6: ab:1a:9d:32:f0:f4:18:00:eb:8b:7d:72:9b:a6:0d: b9:41:4b:f7:05:b8:9f:1e:eb:a8:8a:85:c2:f5:5c: 00:65:6c:1d:a2:1a:a5:e9:76:f7:c5:79:fb:ad:cb: 0a:89:7b:0e:98:0a:bc:aa:7d:07:da:25:d7:f2:ec: 06:31:1f:5b:5e:e3:36:ff:bf:97:0c:a5:f5:a1:8b: cf:f3:1d:ab:03:66:70:ab:98:c1:99:f8:06:b4:6f: 04:40:74:58:28:32:f3:40:46:e2:db:47:88:00:78: d2:04:c3:54:87:44:10:90:7b:db:e0:a2:69:d4:ed: 0b:cd:b1:0a:22:ea:8a:9a:0c:3f:5a:aa:f6:aa:d8: 1c:9f:ea:f2:e4:4f:ec:d1:55:b8:65:d4:17:37:c9: a9:68:ca:d1:00:f9:ca:4d:4e:35:ee:23:d0:f1:e5: 29:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:1F:E7:89:A3:8C:CD:38:DD:2D:BE:DD:0C:A7:4A:2F:67:48:CA:B2 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149692.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:60c0::/48 Signature Algorithm: sha256WithRSAEncryption 00:e6:69:12:f6:d9:b3:d2:8c:11:a9:78:b0:7c:ec:d6:1d:3c: 67:33:12:b9:99:65:a8:25:d4:aa:3a:ee:df:d1:e8:6f:ad:61: a9:df:29:68:96:bb:c9:48:e5:67:df:61:fd:54:11:28:f5:46: bc:63:a7:01:61:1a:65:ea:dc:6c:25:ca:a8:fa:12:31:2a:ee: a6:68:98:39:a7:9b:27:e6:5f:8c:19:3f:7a:ad:fc:a4:17:67: 98:8e:c8:41:5d:0c:b9:b1:86:3b:63:4d:05:f5:7c:90:98:89: 5c:da:6e:45:70:94:3b:f8:05:9b:91:19:ed:54:36:0b:76:73: ba:3e:4e:71:de:69:43:64:87:07:af:fd:6d:ec:ff:2e:a1:0b: 11:b1:db:3c:b5:d0:1d:73:15:71:bc:4e:18:b6:28:30:fa:b7: 75:e3:c3:61:be:40:07:ae:22:22:40:c3:cb:1b:18:aa:66:67: 2a:80:b9:c8:05:9b:fb:b7:77:08:d7:67:5e:da:4e:6b:d5:b9: 2b:73:b6:71:75:da:83:bb:b8:59:3d:8a:fc:36:f5:5b:ae:41: 47:8f:8e:42:07:38:64:29:c0:35:c9:76:4c:9a:07:0c:e8:88: d4:cc:3e:7b:40:c4:8a:56:d5:a5:41:f1:e3:73:d3:c5:02:74: 4c:e2:48:af -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUBFBE9g7DJ94xpivahm5zSKIkEA8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIwNDAyNDYxMFoX DTI2MTIwMzAyNTExMFowMzExMC8GA1UEAxMoMEYxRkU3ODlBMzhDQ0QzOEREMkRC RUREMENBNzRBMkY2NzQ4Q0FCMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ7pUYujUnSmeH285kjVOrHaVsF0Git/e8tEoE8vdHdThyx0jbCrTYQOLpvD J7RHHpfmExjkd406wgqXIsXLwX8EgKcgZ3w0X0P6weRMw0SUTWEeCzkjkS+mqxqd MvD0GADri31ym6YNuUFL9wW4nx7rqIqFwvVcAGVsHaIapel298V5+63LCol7DpgK vKp9B9ol1/LsBjEfW17jNv+/lwyl9aGLz/MdqwNmcKuYwZn4BrRvBEB0WCgy80BG 4ttHiAB40gTDVIdEEJB72+CiadTtC82xCiLqipoMP1qq9qrYHJ/q8uRP7NFVuGXU FzfJqWjK0QD5yk1ONe4j0PHlKV0CAwEAAaOCAdMwggHPMB0GA1UdDgQWBBQPH+eJ o4zNON0tvt0Mp0ovZ0jKsjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTY5Mi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfNgwDANBgkqhkiG9w0BAQsFAAOCAQEAAOZpEvbZs9KMEal4 sHzs1h08ZzMSuZllqCXUqjru39Hob61hqd8paJa7yUjlZ99h/VQRKPVGvGOnAWEa ZercbCXKqPoSMSrupmiYOaebJ+ZfjBk/eq38pBdnmI7IQV0MubGGO2NNBfV8kJiJ XNpuRXCUO/gFm5EZ7VQ2C3Zzuj5Ocd5pQ2SHB6/9bez/LqELEbHbPLXQHXMVcbxO GLYoMPq3dePDYb5AB64iIkDDyxsYqmZnKoC5yAWb+7d3CNdnXtpOa9W5K3O2cXXa g7u4WT2K/Db1W65BR4+OQgc4ZCnANcl2TJoHDOiI1Mw+e0DEilbVpUHx43PTxQJ0 TOJIrw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:51:24 2025 by rpki-client