This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150524.roa
File: AS150524.roa (raw, json)
Hash identifier: O1DUVygLvVBDiAA6Bj+pygcJVUK80HxXPidUogUQY+w=
Subject key identifier: 16:4F:2A:71:A0:79:04:F1:DF:0A:36:FB:EF:27:27:5B:CD:05:62:8E
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 78595EB54C9896FE295A758504D9EE1B94BB37FA
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150524.roa
Signing time: Thu 15 Jan 2026 03:34:55 +0000
ROA not before: Thu 15 Jan 2026 03:29:55 +0000
ROA not after: Thu 14 Jan 2027 03:34:55 +0000
asID: 150524
IP address blocks: 103.112.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:59:5e:b5:4c:98:96:fe:29:5a:75:85:04:d9:ee:1b:94:bb:37:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jan 15 03:29:55 2026 GMT
Not After : Jan 14 03:34:55 2027 GMT
Subject: CN=164F2A71A07904F1DF0A36FBEF27275BCD05628E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:15:21:9d:33:f3:ce:ed:3f:30:d9:35:93:e1:
c5:f4:08:64:12:38:f8:2e:e4:63:8d:cc:ff:33:51:
55:79:f9:2c:fd:e0:de:0a:83:cc:df:e4:f9:43:75:
03:e7:50:ba:98:02:b8:b0:52:fd:67:c9:52:3b:62:
73:8a:12:ea:cd:83:c7:ad:30:b3:a6:ec:b3:e3:43:
ac:40:ac:cf:2f:a5:ab:39:b7:e5:b9:ec:e5:ff:11:
f9:3f:0d:88:81:c7:df:c8:cf:66:88:a9:94:1d:55:
5f:00:ac:b6:6b:52:fa:20:e7:31:80:6d:5b:ec:f6:
ea:da:04:50:89:0f:28:47:50:e0:6c:f0:77:69:b2:
43:2a:d0:af:74:7a:d1:35:53:9e:5e:9b:2c:3f:e1:
d9:43:61:91:17:44:cc:97:6d:95:f0:24:84:cf:2d:
ca:33:90:4c:2b:00:33:94:75:07:2c:ce:21:ec:31:
8e:1f:c1:17:ee:c4:86:36:ac:66:b7:6b:9c:9c:1b:
2e:82:ed:29:45:45:a0:e1:00:99:0d:e1:7a:74:7d:
16:87:2b:2c:c9:36:02:29:cc:83:33:77:ac:95:47:
f5:8b:82:c6:f7:96:51:ca:44:0e:d8:7e:0b:89:2c:
e2:e7:f0:65:ca:fc:04:5f:12:c1:88:83:50:89:e7:
9d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4F:2A:71:A0:79:04:F1:DF:0A:36:FB:EF:27:27:5B:CD:05:62:8E
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150524.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.112.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:c9:ca:f6:37:86:a0:f9:fb:4f:e9:5c:56:89:67:43:f8:65:
ce:71:fb:f4:ee:55:79:64:2d:a2:a3:85:83:fb:3d:fa:f3:b7:
52:da:a2:59:68:cb:99:69:ef:7e:18:7c:0e:65:3a:8b:7f:55:
89:87:ef:d3:81:3b:c8:0b:4a:13:25:09:ff:ae:95:76:75:2c:
5f:2b:c9:de:c2:c7:f4:d5:85:4a:a1:17:a1:38:00:5f:19:c9:
b8:f4:c7:8f:59:07:7e:05:4b:db:d5:a8:f2:34:8a:8a:eb:6c:
fa:93:cd:d1:23:14:3e:b6:c2:3a:f4:35:63:a5:2d:34:2f:df:
e0:83:99:f8:a0:cb:47:fa:ff:89:6d:ce:b6:0a:59:71:82:47:
97:4c:41:de:81:58:2f:a1:af:5f:a4:b3:54:3d:a9:41:5d:fd:
bf:04:09:32:24:e4:cb:bf:ce:6a:f6:7a:e7:c8:04:bf:a0:78:
29:44:47:0d:03:2a:91:06:49:96:cf:b9:0c:c0:e6:13:7c:98:
4b:36:5d:a5:de:e4:2e:6a:5d:38:43:c1:9f:3f:45:98:89:de:
73:c9:80:0a:10:67:f2:ed:f9:78:ac:47:1d:4c:6d:0a:25:c4:
52:3f:f1:5e:68:1f:00:f6:36:f7:54:54:78:c5:eb:cb:e8:e0:
d2:1d:51:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:49:54 2026 by rpki-client