This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154336.roa File: AS154336.roa (raw, json) Hash identifier: +/Yfsmql55jsKgo68PYPoo9dIiGKEgxl6ASo1m2d8bo= Subject key identifier: 52:1E:1F:C5:4F:FF:75:8F:E6:45:B8:48:1B:1F:B5:1E:78:43:35:8E Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 140C47A7DCCB28C207A2D9BD8633D2C0A45572E6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154336.roa Signing time: Fri 05 Dec 2025 01:34:19 +0000 ROA not before: Fri 05 Dec 2025 01:29:19 +0000 ROA not after: Fri 04 Dec 2026 01:34:19 +0000 asID: 154336 IP address blocks: 2001:df6:3cc0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:0c:47:a7:dc:cb:28:c2:07:a2:d9:bd:86:33:d2:c0:a4:55:72:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 5 01:29:19 2025 GMT Not After : Dec 4 01:34:19 2026 GMT Subject: CN=521E1FC54FFF758FE645B8481B1FB51E7843358E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:68:5f:ae:02:5e:56:1a:51:2d:41:ef:09:3c: 28:4b:49:a4:11:27:ef:32:b4:67:3e:68:a6:1a:0a: 80:eb:ce:49:81:d9:f1:e0:44:49:d8:fc:96:3a:78: f1:12:89:22:e3:a0:19:15:17:16:49:5c:f7:b8:60: f7:e2:50:72:84:15:34:1d:7b:dd:b0:6a:8c:19:33: c2:b3:88:5f:00:f0:cd:58:59:c4:fd:fd:27:93:72: 30:cb:fb:03:42:2b:2c:f7:16:76:3c:67:73:59:5e: 29:1d:a5:f3:90:b8:96:e9:3a:2d:89:e1:d9:47:e4: 2b:e3:2d:70:f9:08:97:da:bd:86:14:6a:ee:f1:c5: f0:a3:91:de:fd:d4:b4:d5:b9:66:5f:8b:20:c5:87: 8d:04:ce:15:d1:d3:a3:cf:17:18:13:49:4c:3b:84: 51:1e:29:32:5d:79:bf:a0:6c:de:9e:c9:d6:63:bc: c9:52:5b:c4:0b:86:ac:35:8b:c5:da:ff:97:08:cb: 57:5a:a2:fe:37:20:75:25:42:04:1b:21:7d:79:32: 11:d7:ac:ed:d0:37:4a:71:df:bf:6d:52:f0:4d:29: 0e:1c:8e:cd:66:77:fb:74:9d:a9:d0:a9:7e:79:9c: 51:d0:37:d2:22:c2:08:28:22:10:2a:c1:72:8f:6a: cd:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:1E:1F:C5:4F:FF:75:8F:E6:45:B8:48:1B:1F:B5:1E:78:43:35:8E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:3cc0::/48 Signature Algorithm: sha256WithRSAEncryption 5c:91:28:93:b5:0d:f4:15:35:8a:98:9d:ab:c2:9d:61:35:7f: 25:49:74:1c:99:39:ce:83:72:20:f8:8b:ad:8e:3a:9a:cc:f4: dc:1b:a7:ec:a2:9d:42:dd:98:5c:cf:69:be:5e:2b:da:27:a8: d3:5e:df:6a:4b:62:31:ab:a8:ce:39:c8:7f:02:15:73:07:a7: 72:e8:4d:3b:01:0b:06:54:e7:96:bd:7f:d8:75:83:b4:9e:7c: f7:83:8d:40:8f:af:5b:04:7a:b6:ca:40:0f:a4:03:96:21:db: 3e:81:56:75:90:2e:17:90:ef:73:01:19:61:ed:b2:3a:49:34: 4e:0c:48:5a:dd:8e:4d:48:b3:62:eb:bf:85:83:26:0e:cb:8a: d7:f1:87:a7:e3:d0:4b:d3:fc:a4:ab:c9:56:83:9b:10:18:bf: 30:06:42:72:fd:f1:8d:4d:2a:88:5a:40:05:46:36:22:6a:c9: ab:52:d7:50:25:ae:81:a7:fe:ea:9c:9d:c6:c5:a4:97:58:a2: c7:19:28:24:30:ae:d1:d9:5a:fb:e8:78:2b:e0:a3:0f:c6:dc: 62:64:cd:36:30:ac:29:54:92:c3:e1:bb:1f:8e:84:16:ab:62: 0f:b3:0b:ac:b8:18:60:3c:e0:26:22:ec:ec:2a:51:46:20:f9: 75:f1:f2:e3 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUFAxHp9zLKMIHotm9hjPSwKRVcuYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIwNTAxMjkxOVoX DTI2MTIwNDAxMzQxOVowMzExMC8GA1UEAxMoNTIxRTFGQzU0RkZGNzU4RkU2NDVC ODQ4MUIxRkI1MUU3ODQzMzU4RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALNoX64CXlYaUS1B7wk8KEtJpBEn7zK0Zz5ophoKgOvOSYHZ8eBESdj8ljp4 8RKJIuOgGRUXFklc97hg9+JQcoQVNB173bBqjBkzwrOIXwDwzVhZxP39J5NyMMv7 A0IrLPcWdjxnc1leKR2l85C4luk6LYnh2UfkK+MtcPkIl9q9hhRq7vHF8KOR3v3U tNW5Zl+LIMWHjQTOFdHTo88XGBNJTDuEUR4pMl15v6Bs3p7J1mO8yVJbxAuGrDWL xdr/lwjLV1qi/jcgdSVCBBshfXkyEdes7dA3SnHfv21S8E0pDhyOzWZ3+3SdqdCp fnmcUdA30iLCCCgiECrBco9qzfMCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBRSHh/F T/91j+ZFuEgbH7UeeEM1jjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1NDMzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfY8wDANBgkqhkiG9w0BAQsFAAOCAQEAXJEok7UN9BU1ipid q8KdYTV/JUl0HJk5zoNyIPiLrY46msz03Bun7KKdQt2YXM9pvl4r2ieo017fakti MauozjnIfwIVcwencuhNOwELBlTnlr1/2HWDtJ5894ONQI+vWwR6tspAD6QDliHb PoFWdZAuF5DvcwEZYe2yOkk0TgxIWt2OTUizYuu/hYMmDsuK1/GHp+PQS9P8pKvJ VoObEBi/MAZCcv3xjU0qiFpABUY2ImrJq1LXUCWugaf+6pydxsWkl1iixxkoJDCu 0dla++h4K+CjD8bcYmTNNjCsKVSSw+G7H46EFqtiD7MLrLgYYDzgJiLs7CpRRiD5 dfHy4w== -----END CERTIFICATE-----Generated at Sun Dec 7 00:16:12 2025 by rpki-client