This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153636.roa File: AS153636.roa (raw, json) Hash identifier: EZfrxS1Tnr8kMV5PIOLy5+f+Te9M2+mI2EI1t746NTc= Subject key identifier: D7:84:28:2F:64:B0:E7:9B:7F:73:26:9D:66:EB:4B:20:36:C4:25:7F Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0F420C22FCE01856503EEC090E1166182D5F653F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153636.roa Signing time: Wed 26 Mar 2025 06:24:47 +0000 ROA not before: Wed 26 Mar 2025 06:19:47 +0000 ROA not after: Wed 25 Mar 2026 06:24:47 +0000 asID: 153636 IP address blocks: 163.61.50.0/23 maxlen: 24 2001:df5:940::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:42:0c:22:fc:e0:18:56:50:3e:ec:09:0e:11:66:18:2d:5f:65:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 26 06:19:47 2025 GMT Not After : Mar 25 06:24:47 2026 GMT Subject: CN=D784282F64B0E79B7F73269D66EB4B2036C4257F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:13:93:84:60:27:4c:4d:b7:65:81:09:bc:4f: b1:41:6c:a2:71:5f:20:95:04:4d:b9:0a:22:10:81: bc:66:ce:d0:3d:87:0c:0f:94:a0:e7:5b:1b:e8:00: 3f:51:67:5d:bb:f8:52:61:aa:94:21:69:ac:62:f7: 70:16:55:a8:7c:7b:74:f4:89:a3:3a:c0:7a:7f:37: dd:88:f8:87:af:eb:a0:e3:f1:d9:ba:b6:0a:aa:19: 34:eb:34:62:5f:dc:b0:8f:e0:8b:4c:77:85:81:a9: dc:b9:c9:ab:23:e1:90:91:65:6b:a6:92:0b:1c:bf: a2:59:c2:e6:6f:f0:33:32:b6:5c:2f:43:f0:9b:90: 12:6a:d8:84:f1:e3:fa:ce:07:c9:16:45:7d:5e:71: f4:04:e3:8f:8b:de:12:00:e4:f3:80:73:3d:85:5e: e0:3b:71:df:72:4c:1f:91:d3:f1:c6:27:73:95:62: 4f:3a:7c:8b:70:03:53:c0:2c:b4:ec:9b:88:1e:94: c6:29:f9:be:6b:c8:d9:0c:5c:15:f8:18:98:9b:ad: 03:09:cb:bd:a9:c5:aa:3a:bc:7a:9c:e5:96:26:19: af:e6:93:a0:50:f5:3f:0e:92:34:3d:a6:6e:40:17: fc:9c:5b:f5:a1:a5:10:b5:a5:b4:c9:a3:10:d5:87: 24:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:84:28:2F:64:B0:E7:9B:7F:73:26:9D:66:EB:4B:20:36:C4:25:7F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.61.50.0/23 IPv6: 2001:df5:940::/48 Signature Algorithm: sha256WithRSAEncryption 30:13:21:c5:5c:99:21:36:a4:04:a7:eb:da:7a:e2:c1:57:9a: bb:b4:9b:54:a2:b6:70:7c:ec:0c:25:22:8a:9e:8f:71:1f:10: cc:87:86:1b:01:c1:86:4c:25:6b:53:6b:16:be:b1:70:4c:35: 7e:2a:5f:6a:30:90:4b:0a:8c:c2:68:3f:e5:a0:1c:ea:63:32: 46:41:fd:81:c8:b3:ec:18:43:35:20:aa:dc:a4:a5:1d:55:c5: 8e:5b:5f:79:8a:58:07:26:74:c2:ed:f9:20:96:17:e0:2e:23: 44:77:1d:4d:4e:a3:38:1d:8b:83:57:22:ee:42:42:0e:f2:b0: cf:d5:3e:2a:b2:ee:68:72:07:71:fd:17:53:2d:0e:ab:3e:4e: a9:67:f4:a4:c2:b6:6a:02:e9:02:f1:a2:92:f0:62:5c:56:37: e0:bb:b3:01:44:46:8d:08:d1:b7:23:6c:89:e9:6f:2b:ab:4f: 58:64:10:65:ec:35:8f:49:d2:b0:68:99:44:49:c2:d3:38:d1: 29:10:13:b7:47:69:c3:db:d8:a9:41:5d:63:38:0c:c6:1a:3a: 75:73:02:a5:23:03:ab:38:51:31:f0:59:d4:33:08:49:c1:13: 36:1a:6e:28:df:8e:8e:c5:57:5b:12:31:c0:f0:92:46:02:3b: 99:ce:a1:57 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUD0IMIvzgGFZQPuwJDhFmGC1fZT8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDMyNjA2MTk0N1oX DTI2MDMyNTA2MjQ0N1owMzExMC8GA1UEAxMoRDc4NDI4MkY2NEIwRTc5QjdGNzMy NjlENjZFQjRCMjAzNkM0MjU3RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALgTk4RgJ0xNt2WBCbxPsUFsonFfIJUETbkKIhCBvGbO0D2HDA+UoOdbG+gA P1FnXbv4UmGqlCFprGL3cBZVqHx7dPSJozrAen833Yj4h6/roOPx2bq2CqoZNOs0 Yl/csI/gi0x3hYGp3LnJqyPhkJFla6aSCxy/olnC5m/wMzK2XC9D8JuQEmrYhPHj +s4HyRZFfV5x9ATjj4veEgDk84BzPYVe4Dtx33JMH5HT8cYnc5ViTzp8i3ADU8As tOybiB6Uxin5vmvI2QxcFfgYmJutAwnLvanFqjq8epzlliYZr+aToFD1Pw6SND2m bkAX/Jxb9aGlELWltMmjENWHJLsCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBTXhCgv ZLDnm39zJp1m60sgNsQlfzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MzYzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAaM9MjAPBAIAAjAJAwcAIAEN9QlAMA0GCSqGSIb3DQEBCwUAA4IB AQAwEyHFXJkhNqQEp+vaeuLBV5q7tJtUorZwfOwMJSKKno9xHxDMh4YbAcGGTCVr U2sWvrFwTDV+Kl9qMJBLCozCaD/loBzqYzJGQf2ByLPsGEM1IKrcpKUdVcWOW195 ilgHJnTC7fkglhfgLiNEdx1NTqM4HYuDVyLuQkIO8rDP1T4qsu5ocgdx/RdTLQ6r Pk6pZ/SkwrZqAukC8aKS8GJcVjfgu7MBREaNCNG3I2yJ6W8rq09YZBBl7DWPSdKw aJlEScLTONEpEBO3R2nD29ipQV1jOAzGGjp1cwKlIwOrOFEx8FnUMwhJwRM2Gm4o 346OxVdbEjHA8JJGAjuZzqFX -----END CERTIFICATE-----Generated at Sat Dec 6 21:54:06 2025 by rpki-client