This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS136093.roa File: AS136093.roa (raw, json) Hash identifier: 1c+lPxfPT/Lx3NpoIFY5fWogtMBIk+hmf6IPoojDMek= Subject key identifier: D4:84:6B:58:CE:1E:86:5E:EB:9D:EF:ED:50:60:D9:E7:D0:70:DD:B8 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 45546D751B47571B6F0A1DC1A463607122AD2B1D Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS136093.roa Signing time: Thu 08 Jan 2026 11:00:04 +0000 ROA not before: Thu 08 Jan 2026 10:55:04 +0000 ROA not after: Thu 07 Jan 2027 11:00:04 +0000 asID: 136093 IP address blocks: 157.66.240.0/23 maxlen: 23 157.66.240.0/23 maxlen: 24 157.66.242.0/23 maxlen: 23 157.66.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 13:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:54:6d:75:1b:47:57:1b:6f:0a:1d:c1:a4:63:60:71:22:ad:2b:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jan 8 10:55:04 2026 GMT Not After : Jan 7 11:00:04 2027 GMT Subject: CN=D4846B58CE1E865EEB9DEFED5060D9E7D070DDB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c6:6b:9d:a2:b9:17:cb:32:ab:43:7e:da:bb: 5d:88:46:c7:35:44:1c:7a:d6:37:a7:b6:fe:1d:a4: c9:e0:3e:6b:d8:de:e7:fb:a9:30:bb:ac:be:1a:0d: 4c:ec:95:d9:36:69:68:50:d8:71:10:86:da:12:ba: 7e:44:45:69:80:01:8b:94:27:e0:44:4d:67:86:41: dd:f3:da:4c:08:a0:96:3a:dd:a5:1f:ee:86:f7:09: 43:96:46:de:8d:d1:56:70:bb:f7:93:1d:89:2b:1e: 26:ae:8a:1d:23:28:99:5c:44:58:ca:b4:ab:6c:13: 7a:a4:b5:cb:3a:ff:ab:c6:bf:07:c6:a6:a6:d8:3a: b8:d7:07:f5:3a:05:c4:ef:69:52:be:eb:2e:0b:fa: 49:6e:29:84:95:97:26:26:38:b8:1b:38:00:b8:7d: 0a:f3:34:c8:ec:89:ed:ee:42:71:ad:35:b3:d4:ea: 7e:d8:7a:14:5a:9b:a5:a8:6b:48:3c:b0:9e:db:fe: 10:ad:2b:85:b7:19:77:c1:1c:26:76:2d:0f:64:16: d5:67:55:5f:9d:1c:a7:b6:db:52:4b:2f:d0:71:45: ca:cf:2a:28:9b:69:36:fb:db:85:09:0e:bf:ca:b4: d6:6b:7e:b8:74:46:7a:cd:af:f8:31:1c:b2:15:b9: 77:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:84:6B:58:CE:1E:86:5E:EB:9D:EF:ED:50:60:D9:E7:D0:70:DD:B8 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS136093.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.240.0/22 Signature Algorithm: sha256WithRSAEncryption 5e:51:2a:83:3e:49:89:07:d6:b1:09:ac:a8:04:28:76:81:fd: c6:52:b0:0d:4e:54:97:de:fe:aa:b7:39:0f:fe:ac:be:e1:1d: d8:f7:9e:c5:61:49:9e:58:99:a5:48:a0:94:02:a1:6a:6d:7c: cc:de:99:21:83:84:b4:f8:93:3f:ff:c0:d1:14:14:6f:50:b0: 8c:e9:11:a3:22:5c:b8:79:73:70:7f:b7:8e:29:ae:e5:99:44: 8e:8d:aa:9b:63:4d:1b:64:9f:69:b8:87:ed:42:ed:e7:fc:fd: f8:23:71:f0:fb:0f:9d:0f:33:ea:db:a3:3e:f8:24:27:a4:7d: 77:63:02:3e:20:e1:c9:b3:e3:6f:43:62:78:e3:9d:b9:99:39: 75:25:a5:31:93:77:1c:03:ec:8d:f6:e8:5f:37:56:25:95:b0: 21:f8:9b:a6:9a:a4:aa:9b:4c:c0:a2:e6:77:fc:61:f5:f0:1b: 96:5a:ff:d7:c0:9e:2c:f7:28:19:a4:3b:a0:83:2e:c3:38:35: c5:b7:6c:27:49:60:ed:21:0a:03:95:ed:f5:01:53:8f:a4:ac: ca:5b:7b:03:34:58:29:91:61:e2:eb:15:5e:c3:63:80:04:8e: e5:91:1e:59:08:4a:8a:60:c0:1b:39:ea:9a:2f:44:fc:d9:15: 91:67:83:b8 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIURVRtdRtHVxtvCh3BpGNgcSKtKx0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDEwODEwNTUwNFoX DTI3MDEwNzExMDAwNFowMzExMC8GA1UEAxMoRDQ4NDZCNThDRTFFODY1RUVCOURF RkVENTA2MEQ5RTdEMDcwRERCODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAODGa52iuRfLMqtDftq7XYhGxzVEHHrWN6e2/h2kyeA+a9je5/upMLusvhoN TOyV2TZpaFDYcRCG2hK6fkRFaYABi5Qn4ERNZ4ZB3fPaTAigljrdpR/uhvcJQ5ZG 3o3RVnC795MdiSseJq6KHSMomVxEWMq0q2wTeqS1yzr/q8a/B8amptg6uNcH9ToF xO9pUr7rLgv6SW4phJWXJiY4uBs4ALh9CvM0yOyJ7e5Cca01s9Tqfth6FFqbpahr SDywntv+EK0rhbcZd8EcJnYtD2QW1WdVX50cp7bbUksv0HFFys8qKJtpNvvbhQkO v8q01mt+uHRGes2v+DEcshW5d4sCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTUhGtY zh6GXuud7+1QYNnn0HDduDAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzEzNjA5My5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAp1C8DANBgkqhkiG9w0BAQsFAAOCAQEAXlEqgz5JiQfWsQmsqAQo doH9xlKwDU5Ul97+qrc5D/6svuEd2PeexWFJnliZpUiglAKham18zN6ZIYOEtPiT P//A0RQUb1CwjOkRoyJcuHlzcH+3jimu5ZlEjo2qm2NNG2SfabiH7ULt5/z9+CNx 8PsPnQ8z6tujPvgkJ6R9d2MCPiDhybPjb0NieOOduZk5dSWlMZN3HAPsjfboXzdW JZWwIfibppqkqptMwKLmd/xh9fAbllr/18CeLPcoGaQ7oIMuwzg1xbdsJ0lg7SEK A5Xt9QFTj6Ssylt7AzRYKZFh4usVXsNjgASO5ZEeWQhKimDAGznqmi9E/NkVkWeD uA== -----END CERTIFICATE-----Generated at Wed Jan 21 10:30:33 2026 by rpki-client