This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153609.roa File: AS153609.roa (raw, json) Hash identifier: QF+mAWch8ggQsamYz1nb256V0KWaf8joVDWTql95g5M= Subject key identifier: 7B:E0:C2:57:67:5F:74:D0:EE:CD:37:5E:FF:13:BE:83:33:54:9A:0E Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 03D5B6D90A5F0450F8D42E283EAFB75C1C611C13 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153609.roa Signing time: Tue 20 Jan 2026 05:00:00 +0000 ROA not before: Tue 20 Jan 2026 04:55:00 +0000 ROA not after: Tue 19 Jan 2027 05:00:00 +0000 asID: 153609 IP address blocks: 163.61.49.0/24 maxlen: 24 2001:df5:8c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:d5:b6:d9:0a:5f:04:50:f8:d4:2e:28:3e:af:b7:5c:1c:61:1c:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 20 04:55:00 2026 GMT Not After : Jan 19 05:00:00 2027 GMT Subject: CN=7BE0C257675F74D0EECD375EFF13BE8333549A0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0a:1c:71:1c:50:b8:69:68:d4:59:10:be:07: 7f:a0:ea:0b:7f:56:4e:f3:eb:65:28:6a:6f:0d:20: 90:de:67:ea:94:27:db:65:20:e2:12:30:7a:1e:a1: c3:f4:74:84:ef:dc:90:a0:47:1e:cd:6a:17:38:62: d8:91:0a:6e:18:44:82:7b:61:6a:f9:4a:13:54:1c: 57:57:46:75:af:cf:57:2a:4d:c3:ee:3b:d0:57:85: 64:83:e1:d9:aa:34:cb:32:e1:ef:a8:a0:88:36:ff: 10:7d:5a:8b:d5:3e:ee:f9:ed:61:49:10:78:4c:d8: 4f:a2:cb:38:9c:cb:77:85:a1:2a:26:d8:ca:e2:2f: ba:35:76:da:89:c9:c1:e3:f7:18:98:11:20:d9:74: c4:f0:76:71:98:04:44:05:77:5b:dd:02:f3:8b:9a: 7e:62:b8:35:67:28:e3:fe:21:a2:6a:a9:d3:d5:96: 85:6e:e3:d1:96:ca:ce:97:fc:bd:42:21:c5:46:82: 45:cc:82:1e:d1:32:5c:63:89:1a:14:bd:8c:65:2b: 50:31:63:5a:77:1d:1e:4c:52:86:99:fd:0a:08:60: 09:1f:31:a9:1f:a3:7c:a6:b8:59:27:59:9a:45:8c: 56:75:ec:b7:95:58:55:f3:ce:7a:6a:b5:f8:03:f6: 01:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E0:C2:57:67:5F:74:D0:EE:CD:37:5E:FF:13:BE:83:33:54:9A:0E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153609.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.61.49.0/24 IPv6: 2001:df5:8c0::/48 Signature Algorithm: sha256WithRSAEncryption 46:42:fc:46:10:1f:a0:d8:e8:f2:bd:36:07:e1:b0:6d:86:15: 57:76:f0:e8:34:66:5a:8f:d1:9d:f8:7d:0c:c5:39:2a:a6:e7: 90:8b:5e:27:66:0f:61:d6:44:cd:07:88:88:e0:4a:68:31:80: ca:2f:fa:cf:d7:46:d9:fc:ee:c2:ed:5d:01:da:f2:b7:e3:7d: 9b:56:03:b1:74:bf:bd:a8:94:cf:17:82:cd:27:35:33:ed:df: 0f:0c:08:76:1b:50:7a:a2:e9:12:cf:f2:a5:fc:b4:6d:4d:4e: dc:ad:d0:cd:a9:0d:64:94:05:f8:4f:8b:f4:ca:eb:92:9c:f2: 79:77:50:00:e2:95:78:06:05:c8:36:fc:94:a6:72:99:2d:f2: 95:57:36:f9:fb:58:f1:14:aa:16:40:fb:82:38:97:14:8e:1b: ab:b1:64:10:a1:63:db:61:ed:68:9f:11:98:bc:d7:39:a2:89: 35:61:c5:51:39:b2:b0:2f:47:da:b1:6b:d5:10:c7:47:29:b5: 87:2c:ad:54:6d:ea:7a:b4:3b:4a:e2:17:52:59:62:b9:ec:21: d8:a8:e5:31:06:1a:ad:7e:8a:dd:57:2f:0e:93:84:e1:5a:29: ab:d7:cd:95:d4:58:ed:9a:24:2c:e1:af:7b:48:e7:31:60:39: ce:f6:05:a4 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUA9W22QpfBFD41C4oPq+3XBxhHBMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDEyMDA0NTUwMFoX DTI3MDExOTA1MDAwMFowMzExMC8GA1UEAxMoN0JFMEMyNTc2NzVGNzREMEVFQ0Qz NzVFRkYxM0JFODMzMzU0OUEwRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKEKHHEcULhpaNRZEL4Hf6DqC39WTvPrZShqbw0gkN5n6pQn22Ug4hIweh6h w/R0hO/ckKBHHs1qFzhi2JEKbhhEgnthavlKE1QcV1dGda/PVypNw+470FeFZIPh 2ao0yzLh76igiDb/EH1ai9U+7vntYUkQeEzYT6LLOJzLd4WhKibYyuIvujV22onJ weP3GJgRINl0xPB2cZgERAV3W90C84uafmK4NWco4/4homqp09WWhW7j0ZbKzpf8 vUIhxUaCRcyCHtEyXGOJGhS9jGUrUDFjWncdHkxShpn9CghgCR8xqR+jfKa4WSdZ mkWMVnXst5VYVfPOemq1+AP2ARsCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBR74MJX Z1900O7NN17/E76DM1SaDjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MzYwOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAKM9MTAPBAIAAjAJAwcAIAEN9QjAMA0GCSqGSIb3DQEBCwUAA4IB AQBGQvxGEB+g2OjyvTYH4bBthhVXdvDoNGZaj9Gd+H0MxTkqpueQi14nZg9h1kTN B4iI4EpoMYDKL/rP10bZ/O7C7V0B2vK3432bVgOxdL+9qJTPF4LNJzUz7d8PDAh2 G1B6oukSz/Kl/LRtTU7crdDNqQ1klAX4T4v0yuuSnPJ5d1AA4pV4BgXINvyUpnKZ LfKVVzb5+1jxFKoWQPuCOJcUjhursWQQoWPbYe1onxGYvNc5ook1YcVRObKwL0fa sWvVEMdHKbWHLK1Ubep6tDtK4hdSWWK57CHYqOUxBhqtfordVy8Ok4ThWimr182V 1FjtmiQs4a97SOcxYDnO9gWk -----END CERTIFICATE-----Generated at Sun Jan 25 21:42:11 2026 by rpki-client