This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149912.roa
File: AS149912.roa (raw, json)
Hash identifier: VE/jFWKreoKvwiWXAJnfEdN4De6LTkDHnbSRVsfW190=
Subject key identifier: 50:A8:FA:69:96:8F:AB:03:01:8B:A8:56:CB:9D:D2:CC:95:02:07:3E
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 16549D17D84FDF36F9DA8371B01BD9DC557B08C7
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149912.roa
Signing time: Thu 15 Jan 2026 05:00:00 +0000
ROA not before: Thu 15 Jan 2026 04:55:00 +0000
ROA not after: Thu 14 Jan 2027 05:00:00 +0000
asID: 149912
IP address blocks: 2001:df3:2740::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:54:9d:17:d8:4f:df:36:f9:da:83:71:b0:1b:d9:dc:55:7b:08:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jan 15 04:55:00 2026 GMT
Not After : Jan 14 05:00:00 2027 GMT
Subject: CN=50A8FA69968FAB03018BA856CB9DD2CC9502073E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a1:31:fb:72:8a:e7:59:2e:47:21:38:ed:79:
62:68:58:92:bb:8e:25:73:00:09:ed:ac:96:cb:79:
4d:ab:78:89:b0:c2:ad:bc:2c:a9:77:97:22:ba:ba:
b1:04:e7:fd:11:68:4f:14:62:24:40:22:34:de:ef:
de:41:2d:72:77:a9:d9:1c:f6:fc:ea:db:3d:67:1c:
ed:dd:a8:fa:dc:b4:ea:eb:ed:12:a7:7b:da:78:81:
23:ca:c8:e2:5d:7d:6e:3a:f2:36:be:af:b0:9e:e7:
cd:99:91:ef:2b:b0:a0:b7:cc:2b:24:78:0d:02:78:
f0:58:45:33:6a:4f:3b:8a:b3:26:4c:88:55:36:cd:
96:d5:68:4d:ed:15:8e:4c:bb:f5:68:67:d2:14:49:
8f:cf:e1:32:8c:2c:8d:87:b6:30:ea:5d:0b:2a:31:
20:53:9a:01:8c:8c:02:e1:83:55:1a:82:55:03:0c:
f7:ed:98:0b:1a:61:c2:3f:6f:f0:a8:24:eb:4b:2d:
9e:8a:4e:4e:78:53:e8:a2:13:39:b8:2f:18:70:2c:
2d:ac:c2:dd:56:08:f9:22:27:5e:2e:70:48:36:95:
a0:7d:03:a0:12:8b:b1:be:8f:24:99:8f:1e:f5:49:
00:09:21:f2:c7:33:13:42:4c:25:12:5b:05:c7:ee:
f0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A8:FA:69:96:8F:AB:03:01:8B:A8:56:CB:9D:D2:CC:95:02:07:3E
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149912.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:2740::/48
Signature Algorithm: sha256WithRSAEncryption
53:ce:59:8d:14:d1:36:ba:5d:1a:34:cc:6e:c1:94:44:0a:87:
f5:42:16:3b:67:26:2e:0c:80:b0:76:db:7f:d5:a9:e2:8c:87:
0d:ae:f4:00:fd:c1:92:e8:e5:b0:21:9b:1a:e1:b1:e4:2f:98:
3d:14:31:4c:13:22:ae:db:5a:30:00:7a:23:04:eb:38:60:38:
1c:45:bd:6e:25:09:df:25:d7:f2:e1:8b:31:e5:3e:43:9f:29:
99:83:74:d8:74:6a:dc:70:c5:01:b5:f9:86:9d:3c:fd:5b:ae:
fd:66:55:f5:1d:01:61:6a:b8:81:7a:e5:f2:9c:d0:21:2c:a4:
29:b5:a7:38:6e:f0:be:f5:38:26:55:89:cb:a6:68:e7:11:b7:
66:f4:d0:d7:7b:1b:9c:50:e5:b6:c7:c6:0c:ae:19:bd:3f:be:
80:1e:c2:63:e0:39:bc:9e:ca:34:6b:63:bb:2c:0f:f9:31:8b:
9a:4b:85:8c:2d:9b:10:eb:ac:ef:99:24:72:62:6b:45:d8:45:
ad:43:52:ac:31:79:d1:73:62:21:e6:ee:45:ce:9f:46:a7:e8:
a7:cf:fc:da:d8:fd:42:01:89:a3:cf:6f:9a:4f:4c:cd:bf:62:
b4:3e:94:46:7a:00:c8:0b:5e:53:ba:ee:65:9b:3b:ab:f7:5a:
3d:64:26:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:24:50 2026 by rpki-client