This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152061.roa File: AS152061.roa (raw, json) Hash identifier: iRWf5LRClK3WJpk5u58fSBYl7hZXdFm4BsaD+jRWWh8= Subject key identifier: 30:83:7B:00:50:39:F2:C6:FB:06:9C:CD:33:AF:FA:C8:38:4B:D4:0E Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 702A89D16E815FBF65DBD3783C3B818678ECD18D Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152061.roa Signing time: Fri 05 Dec 2025 09:00:00 +0000 ROA not before: Fri 05 Dec 2025 08:55:00 +0000 ROA not after: Fri 04 Dec 2026 09:00:00 +0000 asID: 152061 IP address blocks: 113.192.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:2a:89:d1:6e:81:5f:bf:65:db:d3:78:3c:3b:81:86:78:ec:d1:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 5 08:55:00 2025 GMT Not After : Dec 4 09:00:00 2026 GMT Subject: CN=30837B005039F2C6FB069CCD33AFFAC8384BD40E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0c:5b:de:45:43:96:da:48:1e:d0:eb:50:92: 6f:b8:e3:31:d3:6b:70:e7:05:0b:0d:0b:0b:3e:bc: 34:2c:bf:36:64:a5:0b:98:2a:0f:12:48:e7:2a:8f: 4e:9a:07:5a:db:cb:32:b4:23:34:ff:c0:23:eb:b7: 52:ac:f4:c1:45:e1:d1:0d:e0:e3:9b:70:4e:94:ff: 26:b7:55:ed:e3:34:3f:5f:f2:9b:e2:ca:c7:cd:cc: c4:5a:41:43:80:67:02:54:39:9b:49:54:75:32:cc: 0e:98:a5:f5:b4:af:0b:4c:22:89:37:2c:c4:c2:04: 25:a0:9c:40:67:96:8e:47:10:3d:26:d8:8b:7d:95: 8b:b6:7e:c7:aa:81:a7:8a:f1:5e:08:38:af:29:33: 73:56:a7:7e:4c:53:cc:c0:89:ce:af:f2:9e:77:d7: d2:3e:93:66:b6:0e:47:cd:0a:48:56:1f:39:27:db: cd:86:91:d3:21:7f:92:25:ef:86:2d:11:29:ae:55: e6:09:25:d2:36:d5:7f:a2:37:29:01:6d:f5:69:a0: 88:f1:96:79:2f:58:b9:a5:ed:e5:27:a4:8f:14:2f: 8a:b3:d6:c5:31:e9:9f:78:2f:3b:be:67:13:85:5a: 0e:69:9e:89:d5:25:07:55:e4:ae:8e:c7:71:c3:f8: b9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:83:7B:00:50:39:F2:C6:FB:06:9C:CD:33:AF:FA:C8:38:4B:D4:0E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152061.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 113.192.2.0/24 Signature Algorithm: sha256WithRSAEncryption 15:47:48:a9:69:28:cb:cd:ab:c3:b3:b2:b8:08:ce:23:e6:14: 2e:94:d8:ea:05:5c:d7:9f:19:ed:02:b9:bc:2f:c7:bf:bb:84: 7d:e4:21:91:ca:76:1a:bf:56:38:de:1d:ce:a3:07:c6:b5:6e: 20:d4:bd:8f:1c:ba:e9:da:1a:d5:4d:3e:79:e7:ae:dc:e1:4e: 22:44:65:22:ba:ff:dd:2b:79:1d:fe:78:56:4a:0e:43:c6:e6: 0f:e7:54:b7:c3:a0:e3:6d:71:75:d8:ea:c5:1d:95:34:5a:07: 14:d3:25:59:42:88:5b:0e:2b:95:a9:55:c7:c4:7e:ed:6c:83: 37:50:77:27:05:26:b1:b6:ac:fe:96:72:23:3b:7c:f4:d5:a5: 94:cb:d5:97:7f:62:a7:23:26:68:af:57:bb:b9:00:da:4b:ca: ba:5e:87:ef:70:17:cf:f2:64:9d:80:02:87:e2:b5:b4:57:91: 71:f3:8e:4e:1b:d4:4a:d3:56:df:f6:ec:57:bd:f0:0a:4a:93: a4:cf:f4:f5:e4:37:1a:1f:f1:b7:1f:77:f6:c4:65:32:2b:a7: e7:24:0a:77:da:87:e4:52:6d:33:af:3f:a0:92:89:37:52:55: 42:88:b2:89:fa:73:00:f3:65:14:a3:c6:e0:c5:01:98:de:12: 4f:db:69:13 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUcCqJ0W6BX79l29N4PDuBhnjs0Y0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIwNTA4NTUwMFoX DTI2MTIwNDA5MDAwMFowMzExMC8GA1UEAxMoMzA4MzdCMDA1MDM5RjJDNkZCMDY5 Q0NEMzNBRkZBQzgzODRCRDQwRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKgMW95FQ5baSB7Q61CSb7jjMdNrcOcFCw0LCz68NCy/NmSlC5gqDxJI5yqP TpoHWtvLMrQjNP/AI+u3Uqz0wUXh0Q3g45twTpT/JrdV7eM0P1/ym+LKx83MxFpB Q4BnAlQ5m0lUdTLMDpil9bSvC0wiiTcsxMIEJaCcQGeWjkcQPSbYi32Vi7Z+x6qB p4rxXgg4rykzc1anfkxTzMCJzq/ynnfX0j6TZrYOR80KSFYfOSfbzYaR0yF/kiXv hi0RKa5V5gkl0jbVf6I3KQFt9WmgiPGWeS9YuaXt5SekjxQvirPWxTHpn3gvO75n E4VaDmmeidUlB1Xkro7HccP4uUMCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQwg3sA UDnyxvsGnM0zr/rIOEvUDjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MjA2MS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAHHAAjANBgkqhkiG9w0BAQsFAAOCAQEAFUdIqWkoy82rw7OyuAjO I+YULpTY6gVc158Z7QK5vC/Hv7uEfeQhkcp2Gr9WON4dzqMHxrVuINS9jxy66doa 1U0+eeeu3OFOIkRlIrr/3St5Hf54VkoOQ8bmD+dUt8Og421xddjqxR2VNFoHFNMl WUKIWw4rlalVx8R+7WyDN1B3JwUmsbas/pZyIzt89NWllMvVl39ipyMmaK9Xu7kA 2kvKul6H73AXz/JknYACh+K1tFeRcfOOThvUStNW3/bsV73wCkqTpM/09eQ3Gh/x tx939sRlMiun5yQKd9qH5FJtM68/oJKJN1JVQoiyifpzAPNlFKPG4MUBmN4ST9tp Ew== -----END CERTIFICATE-----Generated at Sat Dec 6 22:52:00 2025 by rpki-client