This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152020.roa File: AS152020.roa (raw, json) Hash identifier: 1ErZdKS4soFQAqFrGoGJOwSGFm+QTeu4uvufpw58MO4= Subject key identifier: 97:90:E6:11:6A:85:07:5C:7C:B3:22:A2:F8:DE:A1:D5:4A:EA:40:12 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3ED29F6BAA4CF173E668FD59A3D88D57E9C4E435 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152020.roa Signing time: Wed 05 Nov 2025 04:00:00 +0000 ROA not before: Wed 05 Nov 2025 03:55:00 +0000 ROA not after: Wed 04 Nov 2026 04:00:00 +0000 asID: 152020 IP address blocks: 27.124.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:d2:9f:6b:aa:4c:f1:73:e6:68:fd:59:a3:d8:8d:57:e9:c4:e4:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 5 03:55:00 2025 GMT Not After : Nov 4 04:00:00 2026 GMT Subject: CN=9790E6116A85075C7CB322A2F8DEA1D54AEA4012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c8:50:8f:40:55:e1:30:3b:63:e5:ed:ab:50: d6:f1:0f:ae:27:2b:b2:d1:b1:0d:37:df:e7:54:a9: 6e:61:b2:27:72:02:78:9f:13:34:62:0f:c3:ec:e8: a8:61:c8:6f:54:02:fc:5d:25:de:5c:9e:de:40:58: 7c:1d:c8:26:16:b0:7f:00:e5:a1:8c:1b:5f:c1:40: 4c:79:81:2b:09:22:02:ae:2b:d8:d4:e7:f1:ab:f9: 13:5d:c4:7d:99:38:02:31:1a:8f:54:ea:52:f7:74: a2:1f:23:93:f3:96:aa:ef:9c:1e:ed:6d:a6:20:5a: bf:f3:bc:7c:e8:c7:b4:fb:fb:8d:71:90:fb:d1:5c: 42:71:67:6c:4a:67:62:9d:96:92:a3:ac:a0:ee:2f: 75:fa:9d:75:85:12:e0:e8:ca:29:1a:8d:ba:3f:e1: 07:5d:3f:92:7f:6c:64:7d:05:a7:7a:f5:50:f5:a6: fc:da:e6:b3:f3:a5:ac:d0:c3:03:f6:bc:fc:8e:be: b5:ff:ca:f5:b4:9b:db:2b:68:ab:61:a5:7d:7f:0f: 3a:b1:a4:0f:95:77:8c:43:7a:f0:31:4d:7c:7f:68: 25:5d:67:c9:0f:62:03:85:ce:81:ba:7f:81:0a:bd: e1:b3:89:28:da:4e:1b:b1:a7:72:76:4d:b8:4c:34: 9b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:90:E6:11:6A:85:07:5C:7C:B3:22:A2:F8:DE:A1:D5:4A:EA:40:12 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152020.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.124.79.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:34:ff:2a:64:a8:67:3b:07:be:80:63:b1:71:ff:86:39:c7: 4c:e8:3e:8b:73:9b:84:ce:0e:c1:5b:36:9f:70:0b:b2:01:44: 5b:ee:1d:e5:f7:08:ad:2c:6e:70:3b:86:78:19:ad:e5:3e:d3: 8e:28:da:bf:93:ca:cd:24:8d:d8:fb:16:80:cb:e3:5d:15:b3: 17:67:5e:53:ca:70:c3:13:66:ea:80:7d:77:bb:1b:f5:46:e0: be:34:93:fc:c4:9b:57:ea:2b:88:93:c8:61:6c:20:d4:44:42: 83:39:ee:1a:0b:2b:31:2c:33:e2:dd:ea:09:a9:75:d1:71:c7: 12:20:b1:c4:9b:2e:fc:d6:02:56:07:48:29:08:8c:68:db:9d: 41:75:7f:90:db:b6:ad:ca:ed:91:0f:47:43:ca:ab:87:93:11: 4d:49:00:22:50:b1:e4:ef:14:cc:bd:95:bb:92:06:d5:30:6c: f3:a4:ff:5d:42:66:cb:0c:92:b9:e6:e1:96:dc:1e:e7:da:eb: 0f:dd:30:4a:bd:72:d4:e2:22:63:21:8b:b8:29:e0:79:c7:7f: cf:35:04:a9:a0:f8:85:6d:43:31:e9:64:93:60:c4:51:b1:7e: 52:da:fd:bb:c4:08:8d:61:b9:de:89:bc:dd:ea:48:1e:a6:2d: a7:00:92:2d -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUPtKfa6pM8XPmaP1Zo9iNV+nE5DUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTEwNTAzNTUwMFoX DTI2MTEwNDA0MDAwMFowMzExMC8GA1UEAxMoOTc5MEU2MTE2QTg1MDc1QzdDQjMy MkEyRjhERUExRDU0QUVBNDAxMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM3IUI9AVeEwO2Pl7atQ1vEPricrstGxDTff51SpbmGyJ3ICeJ8TNGIPw+zo qGHIb1QC/F0l3lye3kBYfB3IJhawfwDloYwbX8FATHmBKwkiAq4r2NTn8av5E13E fZk4AjEaj1TqUvd0oh8jk/OWqu+cHu1tpiBav/O8fOjHtPv7jXGQ+9FcQnFnbEpn Yp2WkqOsoO4vdfqddYUS4OjKKRqNuj/hB10/kn9sZH0Fp3r1UPWm/Nrms/OlrNDD A/a8/I6+tf/K9bSb2ytoq2GlfX8POrGkD5V3jEN68DFNfH9oJV1nyQ9iA4XOgbp/ gQq94bOJKNpOG7GncnZNuEw0mwkCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSXkOYR aoUHXHyzIqL43qHVSupAEjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MjAyMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEABt8TzANBgkqhkiG9w0BAQsFAAOCAQEAPjT/KmSoZzsHvoBjsXH/ hjnHTOg+i3ObhM4OwVs2n3ALsgFEW+4d5fcIrSxucDuGeBmt5T7Tjijav5PKzSSN 2PsWgMvjXRWzF2deU8pwwxNm6oB9d7sb9UbgvjST/MSbV+oriJPIYWwg1ERCgznu GgsrMSwz4t3qCal10XHHEiCxxJsu/NYCVgdIKQiMaNudQXV/kNu2rcrtkQ9HQ8qr h5MRTUkAIlCx5O8UzL2Vu5IG1TBs86T/XUJmywySuebhltwe59rrD90wSr1y1OIi YyGLuCngecd/zzUEqaD4hW1DMelkk2DEUbF+Utr9u8QIjWG53om83epIHqYtpwCS LQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:40:53 2025 by rpki-client