This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152769.roa File: AS152769.roa (raw, json) Hash identifier: CZUY0TqOL5tzsxsPYPX65ZaD3QW7UkEYW+AzaUOQ6uE= Subject key identifier: DE:FC:C0:43:23:22:2C:0D:40:E2:2F:BC:91:4D:62:BC:8A:0C:F1:57 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0818F3DA409998A5FAA2DBFEF8AB1E50913584D2 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152769.roa Signing time: Fri 16 Jan 2026 10:00:00 +0000 ROA not before: Fri 16 Jan 2026 09:55:00 +0000 ROA not after: Fri 15 Jan 2027 10:00:00 +0000 asID: 152769 IP address blocks: 117.18.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:18:f3:da:40:99:98:a5:fa:a2:db:fe:f8:ab:1e:50:91:35:84:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 16 09:55:00 2026 GMT Not After : Jan 15 10:00:00 2027 GMT Subject: CN=DEFCC04323222C0D40E22FBC914D62BC8A0CF157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:96:6f:58:ac:3e:89:76:ec:76:1e:5a:b3:91: c3:36:fc:f4:e1:0b:be:49:b3:ef:a0:bf:2a:83:4d: 4e:86:06:fd:14:4e:dc:5f:ee:72:73:37:3c:3f:df: 76:65:84:e0:20:22:a7:94:40:35:65:3b:3c:80:52: 12:4b:f1:a6:be:7e:12:d5:ae:b2:14:40:fd:9f:2c: 1d:54:7a:43:aa:2a:b6:1e:85:11:8c:41:0d:8b:73: b4:d0:ab:d3:1e:b9:93:8f:3e:d5:3a:54:d7:29:ad: b7:a3:b4:69:44:ad:61:58:97:75:5d:28:be:2a:87: f6:6b:20:98:fb:52:9d:3b:7b:a7:0e:dd:46:9a:1d: 6b:8a:fe:78:46:26:6b:66:65:58:98:5a:04:44:68: de:9b:1e:e9:2d:c6:ec:bf:fc:34:87:a5:c6:d7:fc: 82:23:17:63:db:3e:31:41:be:4d:ca:55:50:b1:ec: de:d9:93:57:18:f8:c2:95:77:e3:8c:be:70:f9:e2: f2:c6:dd:67:88:33:33:4b:d0:55:84:35:ef:eb:0d: c0:3f:08:a1:1e:6d:dc:fe:2b:57:bd:00:5d:65:62: 48:72:0b:ab:75:2a:2c:2e:c9:15:85:51:92:85:a9: ec:d6:42:7a:cf:59:3d:9a:42:f9:a2:b0:24:9e:ac: 11:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:FC:C0:43:23:22:2C:0D:40:E2:2F:BC:91:4D:62:BC:8A:0C:F1:57 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152769.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.18.16.0/22 Signature Algorithm: sha256WithRSAEncryption 0e:38:f3:67:85:79:dc:f8:30:06:9e:18:cd:a2:95:c9:a2:78: 54:75:29:60:64:40:15:53:ab:0a:4a:45:ea:ac:c4:05:85:d2: 22:18:99:3b:97:fe:e8:79:be:d3:20:c1:37:5a:8e:b4:0d:39: 11:7d:79:26:02:3b:6c:09:ac:67:7a:17:9d:60:4b:80:da:0e: ee:4f:42:b7:8f:11:de:ba:13:22:59:4e:a1:46:72:bd:44:14: f5:ab:6f:5b:d5:e2:80:0f:c4:19:14:5d:64:0e:e8:2f:6b:3d: 98:20:1b:70:bd:6e:8c:5b:98:ba:da:23:e2:c1:44:a5:9f:68: c8:d9:e8:ad:96:d2:25:4b:2a:c8:ad:6b:9e:ee:24:51:e5:38: 02:f0:51:c6:ad:4d:88:60:6c:99:c3:5f:66:a3:f3:eb:05:ea: c3:f5:7a:e9:a5:04:b5:4a:f8:db:8c:3d:e5:1f:a8:c0:80:b1: cc:cf:c1:5d:6c:6a:8d:9e:fd:74:58:3c:77:36:6f:eb:c3:98: 5e:f8:56:4f:77:58:c7:b9:92:57:3f:9f:f3:66:dc:b4:9b:ab: fe:82:77:2f:cf:68:02:a2:aa:9f:21:31:5d:58:9a:05:77:0b: 7d:df:2c:66:f1:34:7b:46:5d:f5:ea:3b:ed:a2:8b:6d:c6:dc: ac:09:69:86 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUCBjz2kCZmKX6otv++KseUJE1hNIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDExNjA5NTUwMFoX DTI3MDExNTEwMDAwMFowMzExMC8GA1UEAxMoREVGQ0MwNDMyMzIyMkMwRDQwRTIy RkJDOTE0RDYyQkM4QTBDRjE1NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOyWb1isPol27HYeWrORwzb89OELvkmz76C/KoNNToYG/RRO3F/ucnM3PD/f dmWE4CAip5RANWU7PIBSEkvxpr5+EtWushRA/Z8sHVR6Q6oqth6FEYxBDYtztNCr 0x65k48+1TpU1ymtt6O0aUStYViXdV0oviqH9msgmPtSnTt7pw7dRpoda4r+eEYm a2ZlWJhaBERo3pse6S3G7L/8NIelxtf8giMXY9s+MUG+TcpVULHs3tmTVxj4wpV3 44y+cPni8sbdZ4gzM0vQVYQ17+sNwD8IoR5t3P4rV70AXWViSHILq3UqLC7JFYVR koWp7NZCes9ZPZpC+aKwJJ6sEUkCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTe/MBD IyIsDUDiL7yRTWK8igzxVzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1Mjc2OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAnUSEDANBgkqhkiG9w0BAQsFAAOCAQEADjjzZ4V53PgwBp4YzaKV yaJ4VHUpYGRAFVOrCkpF6qzEBYXSIhiZO5f+6Hm+0yDBN1qOtA05EX15JgI7bAms Z3oXnWBLgNoO7k9Ct48R3roTIllOoUZyvUQU9atvW9XigA/EGRRdZA7oL2s9mCAb cL1ujFuYutoj4sFEpZ9oyNnorZbSJUsqyK1rnu4kUeU4AvBRxq1NiGBsmcNfZqPz 6wXqw/V66aUEtUr424w95R+owICxzM/BXWxqjZ79dFg8dzZv68OYXvhWT3dYx7mS Vz+f82bctJur/oJ3L89oAqKqnyExXViaBXcLfd8sZvE0e0Zd9eo77aKLbcbcrAlp hg== -----END CERTIFICATE-----Generated at Sun Jan 25 21:42:04 2026 by rpki-client