This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152407.roa File: AS152407.roa (raw, json) Hash identifier: xAL/m9KLD2XJmRzt8d6lntPmDQ+CsKPbK6QFs2GzDQU= Subject key identifier: 22:7F:DC:44:DE:0D:69:B9:B5:92:12:62:A1:EE:CD:55:F5:10:94:AC Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3770B301F3B591C84C6453D00C84D5BA97A8F312 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152407.roa Signing time: Thu 15 Jan 2026 03:11:23 +0000 ROA not before: Thu 15 Jan 2026 03:06:23 +0000 ROA not after: Thu 14 Jan 2027 03:11:23 +0000 asID: 152407 IP address blocks: 2001:df6:86c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:70:b3:01:f3:b5:91:c8:4c:64:53:d0:0c:84:d5:ba:97:a8:f3:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 15 03:06:23 2026 GMT Not After : Jan 14 03:11:23 2027 GMT Subject: CN=227FDC44DE0D69B9B5921262A1EECD55F51094AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e2:95:6a:37:1d:c7:3a:6d:ae:1f:da:ec:02: 37:94:a9:63:fd:b6:6b:e0:32:75:16:92:13:e4:4c: a1:9e:ee:1b:fe:b0:ab:30:94:cf:ba:e9:54:8a:29: fe:c5:7d:eb:f0:e3:84:9d:b0:a0:11:5a:68:08:c7: 0c:6f:f1:3c:57:bd:32:39:fb:3f:97:2a:47:26:b7: 3f:c2:42:3e:79:d7:b6:ec:14:0a:f1:25:12:16:2d: 4d:1d:54:30:08:44:70:49:1c:80:82:44:cd:a4:c8: d9:26:c8:e5:08:b5:6a:c4:60:9b:c9:0c:a1:4e:5b: 55:cc:38:f0:3b:2a:1a:b7:d5:e5:62:d1:ac:19:00: e9:fe:7b:cd:c1:2d:15:d2:e7:64:85:14:25:59:af: ff:2c:69:ef:14:4a:c5:48:b7:5b:76:b3:db:fe:9a: 20:23:6d:f7:b8:a6:46:63:e0:95:2c:38:76:2b:28: 6f:f3:e0:a5:0a:34:b8:74:e0:11:4c:0e:ec:ec:b5: 20:66:08:78:19:2f:02:27:d9:47:94:83:4e:90:a0: ec:ea:9f:fd:e9:e9:5a:16:5f:4c:8f:66:b4:c6:86: 69:b8:22:33:29:75:00:ba:90:62:f0:6a:d7:08:dc: 63:07:ed:af:93:3e:23:ab:3d:48:76:3a:99:9c:f3: 6d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:7F:DC:44:DE:0D:69:B9:B5:92:12:62:A1:EE:CD:55:F5:10:94:AC X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152407.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:86c0::/48 Signature Algorithm: sha256WithRSAEncryption 99:08:7f:d5:05:eb:95:e2:57:05:ad:2d:60:2c:a4:d3:93:94: 54:c2:c0:dc:72:8b:f5:79:72:a5:e7:d8:76:65:05:44:84:71: 85:e6:c4:23:f1:03:05:3d:a6:c2:10:80:5b:d7:04:c2:6c:86: 6a:63:e1:ab:55:ce:0c:02:cb:c3:05:73:8d:bc:83:fd:4e:2f: b0:f0:18:6d:d0:54:46:34:5e:85:5e:cf:46:16:97:f6:f3:30: 15:fe:22:8a:ff:20:d2:2c:60:b9:0a:67:ce:1d:eb:7f:4b:0f: 8d:45:1c:65:be:c8:89:43:ba:69:3e:94:8c:a6:7a:ba:92:d1: 87:a5:2d:2a:88:58:a7:82:59:05:fa:a1:03:2f:3f:13:79:75: 05:11:06:19:91:31:7c:34:c5:58:8a:d8:21:00:c3:6c:bd:55: 02:30:b1:b3:2f:4e:4b:e5:b5:65:57:5a:d7:bb:e3:5d:4a:53: 2f:a6:bf:ca:ad:83:81:05:45:10:06:ce:16:5d:56:2a:f0:05: b7:19:e8:45:57:a5:01:bf:bf:98:10:a1:82:2f:ed:64:e1:14: 33:13:df:ab:09:cb:46:ab:52:7b:7b:9c:36:97:5c:7c:5a:77: 53:c6:07:98:cc:9a:98:e6:51:2c:6b:18:84:62:33:a7:a1:ad: d3:fb:61:73 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUN3CzAfO1kchMZFPQDITVupeo8xIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDExNTAzMDYyM1oX DTI3MDExNDAzMTEyM1owMzExMC8GA1UEAxMoMjI3RkRDNDRERTBENjlCOUI1OTIx MjYyQTFFRUNENTVGNTEwOTRBQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAODilWo3Hcc6ba4f2uwCN5SpY/22a+AydRaSE+RMoZ7uG/6wqzCUz7rpVIop /sV96/DjhJ2woBFaaAjHDG/xPFe9Mjn7P5cqRya3P8JCPnnXtuwUCvElEhYtTR1U MAhEcEkcgIJEzaTI2SbI5Qi1asRgm8kMoU5bVcw48DsqGrfV5WLRrBkA6f57zcEt FdLnZIUUJVmv/yxp7xRKxUi3W3az2/6aICNt97imRmPglSw4disob/PgpQo0uHTg EUwO7Oy1IGYIeBkvAifZR5SDTpCg7Oqf/enpWhZfTI9mtMaGabgiMyl1ALqQYvBq 1wjcYwftr5M+I6s9SHY6mZzzbXsCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBQif9xE 3g1pubWSEmKh7s1V9RCUrDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MjQwNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfaGwDANBgkqhkiG9w0BAQsFAAOCAQEAmQh/1QXrleJXBa0t YCyk05OUVMLA3HKL9XlypefYdmUFRIRxhebEI/EDBT2mwhCAW9cEwmyGamPhq1XO DALLwwVzjbyD/U4vsPAYbdBURjRehV7PRhaX9vMwFf4iiv8g0ixguQpnzh3rf0sP jUUcZb7IiUO6aT6UjKZ6upLRh6UtKohYp4JZBfqhAy8/E3l1BREGGZExfDTFWIrY IQDDbL1VAjCxsy9OS+W1ZVda17vjXUpTL6a/yq2DgQVFEAbOFl1WKvAFtxnoRVel Ab+/mBChgi/tZOEUMxPfqwnLRqtSe3ucNpdcfFp3U8YHmMyamOZRLGsYhGIzp6Gt 0/thcw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:49:56 2026 by rpki-client