This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152025.roa File: AS152025.roa (raw, json) Hash identifier: 8kuwbhJXIJiG4z5DT3sL49xDffyROQLQC2c7SlxznGI= Subject key identifier: F9:B1:4B:2E:3D:DA:F8:D7:AB:E6:A2:92:DD:C6:E6:9F:70:95:C4:9D Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3517A5B78A6600E4F016E58FD02968F0C5E8368F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152025.roa Signing time: Fri 02 Jan 2026 01:43:20 +0000 ROA not before: Fri 02 Jan 2026 01:38:20 +0000 ROA not after: Fri 01 Jan 2027 01:43:20 +0000 asID: 152025 IP address blocks: 2001:df6:7e40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:17:a5:b7:8a:66:00:e4:f0:16:e5:8f:d0:29:68:f0:c5:e8:36:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 2 01:38:20 2026 GMT Not After : Jan 1 01:43:20 2027 GMT Subject: CN=F9B14B2E3DDAF8D7ABE6A292DDC6E69F7095C49D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:7e:a3:ce:aa:58:cb:29:60:59:0f:75:b1:77: 57:bf:85:9f:a6:82:f9:cd:1d:43:b7:fd:6f:24:ef: 21:cf:64:79:f2:4d:0d:d3:3a:d9:de:c9:94:a7:24: 1c:a6:5d:e5:f7:0d:89:bb:c2:7d:71:96:f4:6e:4d: 72:71:e0:eb:1e:81:35:54:20:c3:02:46:54:ca:2e: 26:82:7a:a3:27:c1:57:91:5f:3f:a4:a8:e1:ee:d8: 10:03:ee:af:d3:31:c5:b3:18:1c:0f:20:02:52:b6: 04:87:d5:d3:4c:2a:fb:33:41:a6:bd:85:91:0f:88: 96:63:ff:fb:51:c4:a8:fb:57:0b:db:d1:f5:b5:89: 17:6c:93:96:f8:1d:63:76:0c:b7:71:43:51:c3:9a: 62:1d:be:11:4c:6e:a5:91:df:db:69:bc:fe:22:67: 2e:32:98:97:d5:bd:fa:bf:ac:a3:02:7a:da:c5:83: 21:d8:58:ec:89:75:e7:02:d0:86:3b:b4:a6:f9:64: 2e:ec:c2:6c:8f:ce:4b:94:39:77:ee:20:61:28:c9: 3b:2e:60:0b:7f:25:27:8a:fd:39:b1:d0:e7:d2:5e: ea:a1:56:ba:04:69:fb:c9:88:52:78:79:19:61:a3: 3e:a1:c9:43:17:15:72:90:df:58:d7:60:b0:87:25: 89:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:B1:4B:2E:3D:DA:F8:D7:AB:E6:A2:92:DD:C6:E6:9F:70:95:C4:9D X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152025.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:7e40::/48 Signature Algorithm: sha256WithRSAEncryption 44:8f:2d:71:07:76:f2:5d:f3:e6:d5:35:e5:85:1e:16:aa:54: 65:f7:09:9e:1e:cb:24:ce:c9:4b:e4:65:17:79:e1:72:ee:6b: 2c:e8:ae:6e:31:05:eb:35:83:b6:af:e6:c5:0b:f4:23:fe:38: 26:b5:57:9c:4d:b4:93:e2:ed:73:c6:d7:e5:d0:19:de:13:9e: 54:f9:72:e7:56:ed:21:71:a7:76:01:4a:a4:8c:d2:e5:c8:88: 7c:82:8e:74:0d:70:45:77:3c:4f:fc:c7:57:a1:e3:13:09:af: 4a:6a:6a:4f:d1:1b:59:88:40:ba:c9:c8:c6:29:d8:4c:8f:49: 4c:0c:0d:1e:cd:8d:d2:66:2c:26:e8:ae:ff:7c:bf:0f:fe:08: b2:5b:da:51:91:6b:2e:ef:e1:05:f1:e8:3a:f2:a3:d9:01:25: 36:c8:bd:44:01:05:f7:dc:e8:25:33:01:29:f6:b9:f3:31:6b: d5:51:af:85:e8:a9:8b:f0:e9:7b:9a:c6:63:af:10:2b:89:d3: b0:0e:36:c7:ca:82:c3:a7:94:94:de:5f:47:82:61:0b:4d:81: 71:46:4a:3d:c5:a2:cb:e9:9c:7c:3a:cb:94:c3:71:11:12:04: ba:68:21:63:65:13:f7:f0:79:97:91:90:5b:69:a1:fc:f7:68: cc:4c:c9:13 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUNRelt4pmAOTwFuWP0Clo8MXoNo8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDEwMjAxMzgyMFoX DTI3MDEwMTAxNDMyMFowMzExMC8GA1UEAxMoRjlCMTRCMkUzRERBRjhEN0FCRTZB MjkyRERDNkU2OUY3MDk1QzQ5RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPJ+o86qWMspYFkPdbF3V7+Fn6aC+c0dQ7f9byTvIc9kefJNDdM62d7JlKck HKZd5fcNibvCfXGW9G5NcnHg6x6BNVQgwwJGVMouJoJ6oyfBV5FfP6So4e7YEAPu r9MxxbMYHA8gAlK2BIfV00wq+zNBpr2FkQ+IlmP/+1HEqPtXC9vR9bWJF2yTlvgd Y3YMt3FDUcOaYh2+EUxupZHf22m8/iJnLjKYl9W9+r+sowJ62sWDIdhY7Il15wLQ hju0pvlkLuzCbI/OS5Q5d+4gYSjJOy5gC38lJ4r9ObHQ59Je6qFWugRp+8mIUnh5 GWGjPqHJQxcVcpDfWNdgsIcliXMCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBT5sUsu Pdr416vmopLdxuafcJXEnTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MjAyNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfZ+QDANBgkqhkiG9w0BAQsFAAOCAQEARI8tcQd28l3z5tU1 5YUeFqpUZfcJnh7LJM7JS+RlF3nhcu5rLOiubjEF6zWDtq/mxQv0I/44JrVXnE20 k+Ltc8bX5dAZ3hOeVPly51btIXGndgFKpIzS5ciIfIKOdA1wRXc8T/zHV6HjEwmv SmpqT9EbWYhAusnIxinYTI9JTAwNHs2N0mYsJuiu/3y/D/4IslvaUZFrLu/hBfHo OvKj2QElNsi9RAEF99zoJTMBKfa58zFr1VGvheipi/Dpe5rGY68QK4nTsA42x8qC w6eUlN5fR4JhC02BcUZKPcWiy+mcfDrLlMNxERIEumghY2UT9/B5l5GQW2mh/Pdo zEzJEw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:49:56 2026 by rpki-client