This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153665.roa File: AS153665.roa (raw, json) Hash identifier: TiN0eLPqv5a2mh39nT1TBvc9BqNvef42VW8qSLzQUG0= Subject key identifier: A8:86:36:A5:5A:57:9D:4D:4F:DC:65:B3:0B:8E:DD:E7:4D:BB:56:C3 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3917839B675036F36DFB87C33F17AD6F44789C1A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153665.roa Signing time: Wed 14 Jan 2026 02:16:05 +0000 ROA not before: Wed 14 Jan 2026 02:11:05 +0000 ROA not after: Wed 13 Jan 2027 02:16:05 +0000 asID: 153665 IP address blocks: 163.61.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:17:83:9b:67:50:36:f3:6d:fb:87:c3:3f:17:ad:6f:44:78:9c:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 14 02:11:05 2026 GMT Not After : Jan 13 02:16:05 2027 GMT Subject: CN=A88636A55A579D4D4FDC65B30B8EDDE74DBB56C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2d:a4:3b:f2:19:1c:fc:c5:db:92:23:9d:01: 99:36:e8:56:5f:22:e8:b5:30:24:4e:18:f3:a8:93: 4c:4c:d5:5c:59:31:c3:d8:8a:1f:00:aa:50:12:fe: c0:c8:64:c9:9f:51:c4:c8:02:d8:93:ab:df:10:70: 04:1f:3c:2d:f2:12:c1:fc:5b:2a:5c:6e:a0:82:a1: 99:84:8b:93:21:f9:db:14:81:c1:e9:c1:95:ed:8d: e2:0d:8a:8e:4e:92:39:09:85:ff:4b:5f:e2:e2:37: 70:1f:e4:7d:52:cb:ed:d3:a4:aa:fc:e4:ed:bf:63: eb:82:de:65:9f:4e:ab:ab:8e:9d:53:c4:2b:99:f5: 2e:ce:a6:35:d6:23:bf:00:ec:7d:b4:65:fa:54:f2: e0:7d:02:59:0e:e8:03:0e:24:d0:91:ed:9b:bc:56: 1e:10:60:4a:5f:b4:be:82:52:30:38:c3:ab:ff:22: 41:6f:73:d6:48:de:d9:81:e3:ef:a2:c9:07:10:3a: 38:64:5a:05:c5:14:21:c5:1f:de:2d:6f:1e:4c:f1: 92:32:6e:68:5c:84:37:63:02:84:90:84:90:20:c4: 02:12:c5:3d:05:cb:f7:57:00:fa:e4:1f:17:17:8f: 76:ad:a8:14:ba:20:b9:48:4e:25:f6:0e:67:b6:e7: 72:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:86:36:A5:5A:57:9D:4D:4F:DC:65:B3:0B:8E:DD:E7:4D:BB:56:C3 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153665.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.61.158.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:c4:e2:54:89:76:9f:2c:33:a0:63:2b:a8:21:9e:23:b1:e9: ae:53:69:18:63:40:ed:01:c1:82:ee:26:b7:c8:6e:4c:6c:51: da:64:63:4b:b9:4f:4a:30:ec:2c:d9:0e:15:3e:a6:82:ed:3e: 25:12:92:10:1d:95:55:a9:57:5a:1e:d6:9d:1d:11:17:f7:68: 67:23:03:03:16:bb:f8:7a:a5:0c:bb:54:34:78:4a:c7:7f:62: 43:2a:c8:7a:03:f8:59:c3:2b:de:22:4e:cf:2c:ed:fb:a2:0d: fb:7f:ca:1e:31:b1:46:34:58:f9:bf:3d:e8:0a:69:ee:d7:5c: 5e:5c:50:8c:96:ae:f5:26:13:4f:18:71:a3:b7:1d:78:42:25: 92:0e:b3:2f:98:cf:96:83:01:08:d9:89:8e:c9:1f:3c:6b:d4: af:88:a8:2f:94:90:5d:45:a2:3a:be:79:b8:16:3e:5b:db:ae: ab:69:19:d2:b1:e8:71:38:06:52:3c:1b:a4:17:67:b6:d2:47: 14:95:90:b0:c9:df:41:66:f9:85:d2:c4:80:95:b4:b3:2b:4e: 2a:3d:f5:f1:49:ab:57:f4:e4:15:e5:30:03:cc:03:e1:81:a3: 36:b8:c8:b2:c4:a5:06:80:a7:df:90:2b:8d:47:26:fc:8f:90: f1:d5:0b:27 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUOReDm2dQNvNt+4fDPxetb0R4nBowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDExNDAyMTEwNVoX DTI3MDExMzAyMTYwNVowMzExMC8GA1UEAxMoQTg4NjM2QTU1QTU3OUQ0RDRGREM2 NUIzMEI4RURERTc0REJCNTZDMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANItpDvyGRz8xduSI50BmTboVl8i6LUwJE4Y86iTTEzVXFkxw9iKHwCqUBL+ wMhkyZ9RxMgC2JOr3xBwBB88LfISwfxbKlxuoIKhmYSLkyH52xSBwenBle2N4g2K jk6SOQmF/0tf4uI3cB/kfVLL7dOkqvzk7b9j64LeZZ9Oq6uOnVPEK5n1Ls6mNdYj vwDsfbRl+lTy4H0CWQ7oAw4k0JHtm7xWHhBgSl+0voJSMDjDq/8iQW9z1kje2YHj 76LJBxA6OGRaBcUUIcUf3i1vHkzxkjJuaFyEN2MChJCEkCDEAhLFPQXL91cA+uQf FxePdq2oFLoguUhOJfYOZ7bncmsCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSohjal WledTU/cZbMLjt3nTbtWwzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MzY2NS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKM9njANBgkqhkiG9w0BAQsFAAOCAQEAjsTiVIl2nywzoGMrqCGe I7HprlNpGGNA7QHBgu4mt8huTGxR2mRjS7lPSjDsLNkOFT6mgu0+JRKSEB2VValX Wh7WnR0RF/doZyMDAxa7+HqlDLtUNHhKx39iQyrIegP4WcMr3iJOzyzt+6IN+3/K HjGxRjRY+b896App7tdcXlxQjJau9SYTTxhxo7cdeEIlkg6zL5jPloMBCNmJjskf PGvUr4ioL5SQXUWiOr55uBY+W9uuq2kZ0rHocTgGUjwbpBdnttJHFJWQsMnfQWb5 hdLEgJW0sytOKj318UmrV/TkFeUwA8wD4YGjNrjIssSlBoCn35ArjUcm/I+Q8dUL Jw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:49:57 2026 by rpki-client