This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153615.roa
File: AS153615.roa (raw, json)
Hash identifier: F+k55+P7fyxNYZi4nqiANcPKslOEkX8W0xBh27navl8=
Subject key identifier: 92:79:15:AF:2E:78:77:4A:F8:10:67:97:96:86:E8:AF:E4:E5:88:69
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 34A3D3833700D741B1036BB4D3FB230C30A8DA20
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153615.roa
Signing time: Fri 23 Jan 2026 05:00:00 +0000
ROA not before: Fri 23 Jan 2026 04:55:00 +0000
ROA not after: Fri 22 Jan 2027 05:00:00 +0000
asID: 153615
IP address blocks: 163.61.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:a3:d3:83:37:00:d7:41:b1:03:6b:b4:d3:fb:23:0c:30:a8:da:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jan 23 04:55:00 2026 GMT
Not After : Jan 22 05:00:00 2027 GMT
Subject: CN=927915AF2E78774AF81067979686E8AFE4E58869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:70:ee:35:6d:1b:01:3b:c3:4e:bd:1c:4e:5e:
cb:09:b5:ce:00:c3:17:f8:dd:ad:29:1c:f7:b9:1f:
f4:fe:e7:ae:10:69:54:f2:e8:36:ef:53:fb:fe:7b:
fd:c4:ed:d3:70:50:a0:ef:b9:e5:cb:11:c4:8e:92:
67:f4:c2:00:e2:d6:bd:99:48:d1:c8:59:51:e0:8f:
34:45:2e:d3:5f:c8:55:96:23:cf:49:be:16:16:4e:
c4:f1:e8:7d:70:6b:19:bf:4e:c3:30:3f:cc:66:17:
8b:18:a9:e7:45:ba:94:37:66:7d:88:1b:1a:71:93:
de:eb:20:bd:be:c0:d9:78:3c:7e:65:78:d7:67:3d:
9e:8c:a2:04:1d:98:b8:e6:31:95:1c:19:ad:14:2b:
7d:4d:ab:c8:2a:c9:10:17:f4:ba:05:1f:43:1b:09:
b1:a3:27:ca:d7:fd:85:85:c8:69:fe:09:8a:68:d2:
fc:86:16:5d:e6:13:30:4b:10:c6:cd:48:ce:b8:23:
55:25:80:5d:ea:cb:a8:ed:04:1a:7d:76:db:b7:03:
b8:e9:41:2b:10:10:93:db:5e:40:8f:cb:66:d5:1f:
17:64:74:a8:70:8f:fb:26:f2:ff:cb:8a:d7:04:f1:
88:76:a3:37:2e:03:44:4a:34:dd:5f:be:9c:3a:28:
e1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:79:15:AF:2E:78:77:4A:F8:10:67:97:96:86:E8:AF:E4:E5:88:69
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153615.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.61.134.0/24
Signature Algorithm: sha256WithRSAEncryption
80:61:a3:d9:bb:70:d6:69:9f:85:cf:bb:40:dd:a8:77:f2:f8:
4c:2e:a5:93:b3:55:b7:33:c4:20:41:44:a9:42:a4:1a:ee:8f:
20:bb:83:f9:15:46:98:91:3f:db:b5:69:2f:ed:d4:d1:1f:42:
22:a6:ff:bc:5d:5d:a4:f6:f3:c7:12:c8:09:fd:fc:1d:fe:6f:
c1:a1:4d:90:69:48:40:b1:6f:a4:c7:b1:89:ab:28:97:15:51:
08:18:95:16:73:7a:b2:7d:e5:55:22:13:48:c8:98:89:31:47:
2a:4a:23:0d:ee:c1:f4:cd:76:91:29:2b:a6:d5:f6:cb:30:47:
fb:0a:59:32:5c:a5:3c:cd:91:64:f3:1f:c6:3a:04:aa:57:c2:
14:fe:c8:4d:03:30:d3:5e:fa:07:a1:d9:73:f2:d2:6a:9c:59:
4b:f3:91:5e:b6:49:ee:a7:e0:fc:4e:a6:81:4a:3a:05:9b:31:
87:96:13:99:92:1b:03:79:2e:ff:1e:b2:48:2f:f2:42:20:1a:
a7:44:4e:52:b9:85:aa:bd:c2:88:35:40:03:60:0d:16:81:18:
7a:08:61:af:c9:d1:09:e1:2d:74:ef:56:dd:04:a9:f5:1b:b9:
9f:0b:01:9e:b7:0f:51:65:e6:91:c6:48:d3:03:0c:1e:67:cf:
a2:6e:5c:b6
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUNKPTgzcA10GxA2u00/sjDDCo2iAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDEyMzA0NTUwMFoX
DTI3MDEyMjA1MDAwMFowMzExMC8GA1UEAxMoOTI3OTE1QUYyRTc4Nzc0QUY4MTA2
Nzk3OTY4NkU4QUZFNEU1ODg2OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK1w7jVtGwE7w069HE5eywm1zgDDF/jdrSkc97kf9P7nrhBpVPLoNu9T+/57
/cTt03BQoO+55csRxI6SZ/TCAOLWvZlI0chZUeCPNEUu01/IVZYjz0m+FhZOxPHo
fXBrGb9OwzA/zGYXixip50W6lDdmfYgbGnGT3usgvb7A2Xg8fmV412c9noyiBB2Y
uOYxlRwZrRQrfU2ryCrJEBf0ugUfQxsJsaMnytf9hYXIaf4JimjS/IYWXeYTMEsQ
xs1IzrgjVSWAXerLqO0EGn1227cDuOlBKxAQk9teQI/LZtUfF2R0qHCP+yby/8uK
1wTxiHajNy4DREo03V++nDoo4esCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSSeRWv
Lnh3SvgQZ5eWhuiv5OWIaTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MzYxNS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAKM9hjANBgkqhkiG9w0BAQsFAAOCAQEAgGGj2btw1mmfhc+7QN2o
d/L4TC6lk7NVtzPEIEFEqUKkGu6PILuD+RVGmJE/27VpL+3U0R9CIqb/vF1dpPbz
xxLICf38Hf5vwaFNkGlIQLFvpMexiasolxVRCBiVFnN6sn3lVSITSMiYiTFHKkoj
De7B9M12kSkrptX2yzBH+wpZMlylPM2RZPMfxjoEqlfCFP7ITQMw0176B6HZc/LS
apxZS/ORXrZJ7qfg/E6mgUo6BZsxh5YTmZIbA3ku/x6ySC/yQiAap0ROUrmFqr3C
iDVAA2ANFoEYeghhr8nRCeEtdO9W3QSp9Ru5nwsBnrcPUWXmkcZI0wMMHmfPom5c
tg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:41:55 2026 by rpki-client