This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152370.roa
File: AS152370.roa (raw, json)
Hash identifier: 0bemEVQVk6N7PPdrDehlxIObzTNTes1aocntE28lYpU=
Subject key identifier: CC:22:62:09:13:D3:82:2A:91:8F:99:C9:49:8A:75:E3:8E:0D:42:A9
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 0FA83C2B8C1DB38B6CACE84C7B8502F306FEB20C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152370.roa
Signing time: Wed 14 Jan 2026 09:03:04 +0000
ROA not before: Wed 14 Jan 2026 08:58:04 +0000
ROA not after: Wed 13 Jan 2027 09:03:04 +0000
asID: 152370
IP address blocks: 103.215.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:a8:3c:2b:8c:1d:b3:8b:6c:ac:e8:4c:7b:85:02:f3:06:fe:b2:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jan 14 08:58:04 2026 GMT
Not After : Jan 13 09:03:04 2027 GMT
Subject: CN=CC22620913D3822A918F99C9498A75E38E0D42A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:bf:65:df:a7:a9:94:91:5a:71:20:4c:f4:b8:
42:cb:a9:f2:e4:23:e8:45:e6:03:ba:23:a0:18:71:
19:d1:f3:d7:6f:c5:31:5d:43:df:30:11:78:a0:f1:
78:ed:5b:55:8e:fe:5a:66:f7:36:b8:a6:1d:6d:6d:
07:69:b9:10:89:79:d1:14:e3:2a:6c:81:9c:23:e9:
cf:13:14:14:5d:26:c7:85:39:fb:b7:b6:79:92:45:
4d:80:ce:31:6f:83:70:14:67:87:96:09:ef:38:de:
33:76:68:7a:a9:7f:65:f5:9c:10:ac:2a:c5:a2:51:
bb:33:15:86:c5:31:7b:35:4c:83:5f:09:cf:32:4f:
79:a2:ca:fd:e5:9d:c5:89:4b:6e:08:f5:df:82:6a:
73:1c:20:19:22:d6:10:78:84:ab:98:24:a5:45:9a:
ec:6e:c1:1a:cf:16:62:40:66:4c:0d:14:03:2d:4d:
9d:82:5c:9f:f5:9d:33:47:44:d8:e1:d2:d7:fc:3a:
2f:1b:6b:fe:65:dd:4e:de:a4:7c:78:95:a9:aa:5d:
35:35:86:1e:b9:47:41:4e:16:c2:af:cc:08:0f:b2:
89:6e:86:8a:18:19:46:b9:ea:20:a1:fa:2a:e0:90:
dd:16:31:7c:8a:42:39:21:63:e1:2e:a5:66:7c:78:
bb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:22:62:09:13:D3:82:2A:91:8F:99:C9:49:8A:75:E3:8E:0D:42:A9
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152370.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.215.70.0/24
Signature Algorithm: sha256WithRSAEncryption
79:e6:e9:cb:37:e8:15:83:3b:93:37:62:3c:03:e2:ac:49:49:
eb:88:61:0e:c4:ea:5f:bf:b6:e8:a8:b1:7d:23:95:8d:02:d3:
55:dc:a4:82:1a:9b:9e:89:01:d6:d6:6c:49:f2:75:df:9c:84:
10:27:43:48:cd:9d:9e:77:97:d9:b4:c8:60:dc:30:65:04:fe:
51:34:8a:5f:7d:9b:98:e5:fe:b9:11:ba:77:31:4e:b5:54:8d:
1e:89:e3:14:9f:b4:93:b8:7e:b8:cf:c1:61:85:13:cb:ae:22:
f1:58:d4:a8:82:58:e2:37:01:7c:aa:d4:b7:8f:32:f5:a5:ea:
6b:91:9d:be:15:66:58:de:21:df:b0:fd:fd:e3:b7:0f:84:c5:
ba:ce:8f:bf:3e:b5:30:3d:a8:f8:21:90:34:8b:cd:e8:a3:95:
88:0f:68:97:92:07:15:7e:2d:5f:30:10:70:98:8b:1c:4c:86:
e6:54:49:54:5a:6b:ac:06:e8:5f:48:3c:d4:08:d9:e2:1d:ab:
df:7b:96:13:b9:8a:d0:9e:72:9e:f6:47:69:0c:3e:95:f8:08:
e7:3a:cb:ac:73:8d:14:00:0e:cd:2b:d0:67:89:a5:b3:83:0c:
c0:e5:e3:87:c1:f8:ad:39:44:d4:81:87:be:24:3e:ff:1d:41:
a2:6c:9f:b1
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUD6g8K4wds4tsrOhMe4UC8wb+sgwwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDExNDA4NTgwNFoX
DTI3MDExMzA5MDMwNFowMzExMC8GA1UEAxMoQ0MyMjYyMDkxM0QzODIyQTkxOEY5
OUM5NDk4QTc1RTM4RTBENDJBOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOK/Zd+nqZSRWnEgTPS4Qsup8uQj6EXmA7ojoBhxGdHz12/FMV1D3zAReKDx
eO1bVY7+Wmb3NrimHW1tB2m5EIl50RTjKmyBnCPpzxMUFF0mx4U5+7e2eZJFTYDO
MW+DcBRnh5YJ7zjeM3Zoeql/ZfWcEKwqxaJRuzMVhsUxezVMg18JzzJPeaLK/eWd
xYlLbgj134JqcxwgGSLWEHiEq5gkpUWa7G7BGs8WYkBmTA0UAy1NnYJcn/WdM0dE
2OHS1/w6Lxtr/mXdTt6kfHiVqapdNTWGHrlHQU4Wwq/MCA+yiW6GihgZRrnqIKH6
KuCQ3RYxfIpCOSFj4S6lZnx4u+0CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTMImIJ
E9OCKpGPmclJinXjjg1CqTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MjM3MC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGfXRjANBgkqhkiG9w0BAQsFAAOCAQEAeebpyzfoFYM7kzdiPAPi
rElJ64hhDsTqX7+26KixfSOVjQLTVdykghqbnokB1tZsSfJ135yEECdDSM2dnneX
2bTIYNwwZQT+UTSKX32bmOX+uRG6dzFOtVSNHonjFJ+0k7h+uM/BYYUTy64i8VjU
qIJY4jcBfKrUt48y9aXqa5GdvhVmWN4h37D9/eO3D4TFus6Pvz61MD2o+CGQNIvN
6KOViA9ol5IHFX4tXzAQcJiLHEyG5lRJVFprrAboX0g81AjZ4h2r33uWE7mK0J5y
nvZHaQw+lfgI5zrLrHONFAAOzSvQZ4mls4MMwOXjh8H4rTlE1IGHviQ+/x1Bomyf
sQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:42:02 2026 by rpki-client