This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152066.roa File: AS152066.roa (raw, json) Hash identifier: BcdIPx89FjrZq8osk2uSgqCs2xQzY9/oF1LA1CahTAE= Subject key identifier: 5D:EB:DC:58:A2:03:3E:D5:EB:87:45:CB:00:D0:0F:3A:67:AA:90:53 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 75BEF995E993CCF26017BD95926027734D6F854B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152066.roa Signing time: Tue 09 Dec 2025 05:00:00 +0000 ROA not before: Tue 09 Dec 2025 04:55:00 +0000 ROA not after: Tue 08 Dec 2026 05:00:00 +0000 asID: 152066 IP address blocks: 36.50.222.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 07:43:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:be:f9:95:e9:93:cc:f2:60:17:bd:95:92:60:27:73:4d:6f:85:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 9 04:55:00 2025 GMT Not After : Dec 8 05:00:00 2026 GMT Subject: CN=5DEBDC58A2033ED5EB8745CB00D00F3A67AA9053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:50:7e:6d:f9:8a:38:a5:51:13:19:76:85:4c: b9:e8:fc:fd:7a:d2:31:4c:44:86:63:ab:90:41:63: 4c:29:18:e2:a8:01:91:1a:40:0d:dd:a6:e2:20:60: d1:30:94:bf:2d:e4:27:55:86:a7:72:08:d0:d4:a1: 28:2c:38:29:30:67:8d:79:24:39:91:2c:b1:5a:e7: 8d:e6:fc:6d:83:37:52:8c:96:11:4f:25:a0:97:f8: dd:3b:56:19:16:89:0a:bd:8e:03:eb:c2:2f:28:67: e7:03:be:69:4b:fc:0e:c7:3f:66:b5:6a:f7:16:bb: 82:78:63:61:77:24:81:b7:c9:31:d7:17:d0:fc:03: ae:98:74:f5:46:9d:22:d5:74:b0:df:b5:10:a7:c3: 56:c1:ca:82:5b:4b:b7:e6:a8:99:c9:c2:60:e3:6f: a7:f3:4a:4d:9d:2f:bf:95:d3:43:78:c6:15:94:9e: bc:9d:96:4e:9a:a8:b6:c5:4d:9a:9c:f4:75:63:3b: 12:2c:b9:b8:cf:dd:c6:5c:73:93:d7:0d:a8:bf:c6: 8d:b6:d0:de:a1:b1:57:4a:00:af:23:b3:7d:e1:94: 86:e1:c4:1d:e1:74:7b:6c:d6:99:fb:f9:d3:e9:4b: 97:69:f4:60:25:9b:cf:0d:b5:b4:96:01:bb:a0:fe: 2b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:EB:DC:58:A2:03:3E:D5:EB:87:45:CB:00:D0:0F:3A:67:AA:90:53 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152066.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 36.50.222.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:72:1e:8f:ea:04:7f:c7:71:1b:ab:af:8d:28:f2:4c:93:a4: 77:62:d5:7a:d9:fc:99:02:37:b9:5d:97:b6:80:46:b3:ad:a2: e2:9d:f3:f9:75:15:be:0b:4b:16:26:ad:5f:ba:c8:d6:bf:6c: e9:39:0b:a9:b5:ce:13:64:b1:6c:2b:99:f3:d6:85:69:ce:c9: 40:1d:88:a8:57:0a:fa:7e:f5:48:9d:9b:40:97:68:41:73:0d: 04:f0:08:94:26:36:4e:87:45:46:6f:6e:61:79:78:54:1a:32: 4c:a9:16:db:d7:0d:17:bc:ff:d9:1a:9b:cd:96:31:55:a7:28: 44:42:6e:4e:90:cb:48:82:c8:18:e6:5d:ad:9b:51:f3:ea:37: 11:4e:53:fe:e0:49:ed:5d:27:ce:bd:e6:66:d6:a6:db:15:5b: 81:a3:11:3a:a5:c8:dd:3e:32:f6:2f:cf:47:c8:85:92:e8:e2: 32:52:32:78:38:c0:e6:d0:d6:7e:46:45:43:d9:2c:5d:ab:07: 55:ba:af:b6:73:ce:78:dd:2d:23:17:72:fd:54:db:12:76:bc: 52:ed:19:d4:80:e7:5b:28:1d:3d:72:c5:84:59:49:1b:97:93: 8b:d8:3c:e9:0b:c2:f6:8f:30:5f:93:bc:0f:9f:a5:96:2c:ac: dc:9a:4d:eb -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUdb75lemTzPJgF72VkmAnc01vhUswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIwOTA0NTUwMFoX DTI2MTIwODA1MDAwMFowMzExMC8GA1UEAxMoNURFQkRDNThBMjAzM0VENUVCODc0 NUNCMDBEMDBGM0E2N0FBOTA1MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANpQfm35ijilURMZdoVMuej8/XrSMUxEhmOrkEFjTCkY4qgBkRpADd2m4iBg 0TCUvy3kJ1WGp3II0NShKCw4KTBnjXkkOZEssVrnjeb8bYM3UoyWEU8loJf43TtW GRaJCr2OA+vCLyhn5wO+aUv8Dsc/ZrVq9xa7gnhjYXckgbfJMdcX0PwDrph09Uad ItV0sN+1EKfDVsHKgltLt+aomcnCYONvp/NKTZ0vv5XTQ3jGFZSevJ2WTpqotsVN mpz0dWM7Eiy5uM/dxlxzk9cNqL/GjbbQ3qGxV0oAryOzfeGUhuHEHeF0e2zWmfv5 0+lLl2n0YCWbzw21tJYBu6D+K+cCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRd69xY ogM+1euHRcsA0A86Z6qQUzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MjA2Ni5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEASQy3jANBgkqhkiG9w0BAQsFAAOCAQEAHHIej+oEf8dxG6uvjSjy TJOkd2LVetn8mQI3uV2XtoBGs62i4p3z+XUVvgtLFiatX7rI1r9s6TkLqbXOE2Sx bCuZ89aFac7JQB2IqFcK+n71SJ2bQJdoQXMNBPAIlCY2TodFRm9uYXl4VBoyTKkW 29cNF7z/2RqbzZYxVacoREJuTpDLSILIGOZdrZtR8+o3EU5T/uBJ7V0nzr3mZtam 2xVbgaMROqXI3T4y9i/PR8iFkujiMlIyeDjA5tDWfkZFQ9ksXasHVbqvtnPOeN0t Ixdy/VTbEna8Uu0Z1IDnWygdPXLFhFlJG5eTi9g86QvC9o8wX5O8D5+lliys3JpN 6w== -----END CERTIFICATE-----Generated at Tue Dec 16 00:30:32 2025 by rpki-client