This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151505.roa
File: AS151505.roa (raw, json)
Hash identifier: YopZtl629jqhxe/fg2Pur1cnZoqgxH2C8uCFFF524Ls=
Subject key identifier: 0B:36:FD:C1:C7:3B:C1:B2:9E:6D:3E:9E:D7:30:2F:FA:1C:CE:73:98
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 16D22B60A5D7C785CF65C5D53A92F10E3A394EC3
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151505.roa
Signing time: Fri 05 Dec 2025 05:00:00 +0000
ROA not before: Fri 05 Dec 2025 04:55:00 +0000
ROA not after: Fri 04 Dec 2026 05:00:00 +0000
asID: 151505
IP address blocks: 103.222.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:d2:2b:60:a5:d7:c7:85:cf:65:c5:d5:3a:92:f1:0e:3a:39:4e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Dec 5 04:55:00 2025 GMT
Not After : Dec 4 05:00:00 2026 GMT
Subject: CN=0B36FDC1C73BC1B29E6D3E9ED7302FFA1CCE7398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:82:b9:8e:91:d9:44:b3:78:4b:fa:f0:09:6d:
5f:c1:fa:bb:59:bf:85:aa:45:90:48:4e:95:6b:5b:
ae:3e:1a:ab:60:da:f1:1f:08:aa:66:a1:a7:ba:5c:
53:f5:de:2a:a9:d6:b4:30:9c:d9:ef:f1:c8:6a:a1:
e5:b7:d6:47:cd:87:17:1f:60:15:0f:13:cd:5b:4b:
36:d3:75:4e:ba:10:0a:56:3a:2d:a1:7f:39:44:54:
b0:16:7f:6f:c8:35:9a:ab:36:74:fe:0b:06:4b:43:
db:88:bd:d3:75:07:60:94:d2:d8:d6:34:09:3f:1c:
7e:60:53:da:d7:4d:bb:9e:39:29:a6:19:d7:0d:fb:
68:81:fd:a7:ae:18:42:f3:bd:4a:89:39:df:7f:77:
0e:e0:3b:60:8e:09:40:fd:d6:0f:ca:fb:18:a9:ed:
3b:e1:44:f1:0b:27:06:9b:b4:7f:1e:c3:1d:6f:49:
9e:ef:ae:d5:40:14:80:15:e4:21:05:ed:fc:e8:f8:
a9:1f:c2:e1:52:5c:63:60:d2:37:72:63:03:e1:49:
b5:d1:9e:e1:ba:95:41:b1:2f:38:f6:be:52:95:1d:
1b:81:1b:7a:a9:85:0e:84:2e:3f:a6:54:70:63:ec:
4d:df:24:76:6c:bd:90:37:3c:77:bd:0b:07:d2:6c:
dc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:36:FD:C1:C7:3B:C1:B2:9E:6D:3E:9E:D7:30:2F:FA:1C:CE:73:98
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151505.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.222.255.0/24
Signature Algorithm: sha256WithRSAEncryption
28:2e:5d:81:e3:03:fe:e0:ad:92:66:4f:8b:6e:97:4a:e9:cd:
ed:a8:ed:d0:f1:30:40:b5:8d:65:94:9f:1f:c3:4b:3a:46:c5:
96:e8:d6:08:a9:59:a0:db:bd:f2:0f:c2:c5:9a:6d:10:79:d7:
cd:7d:7a:50:05:37:c6:25:2a:60:b3:8b:5a:d0:dc:c8:ac:f2:
c6:f4:4e:4b:1c:b9:8d:51:e8:48:ea:11:0f:75:ad:16:74:62:
e7:62:74:56:dc:df:d6:ed:47:81:b8:0c:a6:10:74:a7:dd:d3:
6a:fb:96:8f:8f:e4:4d:86:e0:de:28:cd:6c:5d:98:d4:94:90:
03:06:60:c3:ce:7e:95:31:d4:49:f7:76:e1:1c:85:1a:fb:19:
b6:dd:6d:c2:3a:ac:b3:34:2a:b1:64:84:a2:b2:94:a9:11:dd:
7c:4c:eb:84:b5:6f:c5:d9:bc:a7:a9:39:c9:33:c5:64:3a:d2:
05:a9:f6:77:76:96:f7:1c:fa:24:89:dd:52:45:b1:46:16:7e:
6a:c1:0b:74:14:42:ac:29:e0:85:24:61:f3:e9:4a:8f:53:cd:
43:5e:05:b9:8c:6d:f5:4c:e9:bc:63:35:2a:dd:58:6c:f0:dd:
12:66:e8:52:7f:e9:8c:27:c5:06:2a:3e:38:d5:7f:3a:2d:b6:
83:34:c1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:52:33 2025 by rpki-client