This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS149379.roa File: AS149379.roa (raw, json) Hash identifier: EVVJvFS9UbE/BDUvgHewYr1ztrEPLYo9UAtiGzn5p1o= Subject key identifier: 91:8D:68:6E:13:92:08:3C:69:46:F2:FD:D8:35:5B:71:4E:EE:4A:0C Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 71B649ED97AB6388CB1EC97C7E9F990ECF491592 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS149379.roa Signing time: Fri 21 Nov 2025 08:56:23 +0000 ROA not before: Fri 21 Nov 2025 08:51:23 +0000 ROA not after: Fri 20 Nov 2026 08:56:23 +0000 asID: 149379 IP address blocks: 165.99.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 11:07:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:b6:49:ed:97:ab:63:88:cb:1e:c9:7c:7e:9f:99:0e:cf:49:15:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Nov 21 08:51:23 2025 GMT Not After : Nov 20 08:56:23 2026 GMT Subject: CN=918D686E1392083C6946F2FDD8355B714EEE4A0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e5:37:fd:9a:f2:3d:48:06:97:21:b4:e9:de: ab:47:9e:c9:9c:ec:29:81:f2:4f:2c:3b:f9:0f:da: 0b:b9:82:4a:46:61:71:7b:3b:c1:cb:ce:cf:f9:6c: e5:c7:b2:79:f2:e1:ee:48:70:2b:4c:c2:23:eb:4d: bf:d0:32:d7:f0:03:02:47:03:a7:9d:5b:64:aa:c2: 58:00:0d:e4:55:a5:bc:7b:2b:b0:b1:86:09:e7:f0: 8c:ed:38:0d:b7:16:a5:62:f8:01:68:38:d6:17:e5: aa:ff:b8:74:c8:df:c0:74:fc:9a:49:d9:8b:d9:6a: 33:83:6d:1d:b6:4e:d4:90:f4:ec:0a:6f:df:76:bd: a0:ff:47:24:e6:43:ae:86:65:9d:27:84:68:65:45: 28:62:66:f1:7c:64:dd:f2:1e:e6:df:a3:38:9a:fc: 37:73:81:6b:1e:1f:d0:ac:74:fe:3d:8c:8b:e8:5b: d3:09:67:50:91:de:8b:b3:df:54:c6:cc:85:78:04: 36:b1:31:c2:d9:79:89:15:45:d7:72:9b:cb:cd:34: d9:91:d1:cf:f9:50:ac:85:aa:13:9e:44:40:25:b9: 21:53:0e:b9:64:02:7a:6c:92:84:43:0f:4c:47:20: f1:80:1e:e3:6e:5c:d7:6c:b2:db:ed:cd:56:57:61: e6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:8D:68:6E:13:92:08:3C:69:46:F2:FD:D8:35:5B:71:4E:EE:4A:0C X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS149379.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 165.99.49.0/24 Signature Algorithm: sha256WithRSAEncryption 72:11:c7:0d:d3:14:d4:aa:55:eb:f6:f3:4d:21:a9:bf:71:9a: b6:0c:43:d4:bc:e2:76:6b:49:35:14:46:3f:5a:f0:cb:11:d1: 0c:01:35:64:bf:0e:7b:c3:4d:df:ef:ce:c1:ae:5e:87:88:6f: 49:f9:2c:16:41:fd:14:6e:0f:82:14:5c:e9:1d:df:b4:88:24: 92:49:dd:d6:65:45:df:7e:4f:d7:68:97:19:86:ac:ec:e9:27: 86:61:1b:8f:14:24:63:0e:17:5b:e6:0f:80:2a:09:c6:52:1b: 58:ce:7d:d9:87:a7:7a:ed:67:ac:48:f0:14:b0:3d:34:3f:7e: 28:cd:a3:24:f5:9e:fc:d2:d1:b0:12:23:a9:60:7f:2f:9c:4c: 9b:07:b7:a0:c9:62:b7:90:80:38:8c:59:44:69:73:b1:31:0f: 1a:32:69:a4:87:a6:f8:bd:e2:78:24:87:77:57:19:23:32:00: fd:db:51:b2:e3:43:08:9d:9c:5a:5b:e8:d2:8d:7e:3b:67:69: 63:13:be:b5:11:52:73:ad:e3:6e:fb:97:9f:05:36:b8:04:94: 28:ac:80:6f:6b:14:d5:c7:f7:6d:7f:c8:c6:5d:ae:fe:62:cd: b1:21:2a:82:39:e6:f5:9c:fc:3b:93:46:a0:d5:b9:57:92:02: 53:e6:8b:5d -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUcbZJ7ZerY4jLHsl8fp+ZDs9JFZIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTEyMTA4NTEyM1oX DTI2MTEyMDA4NTYyM1owMzExMC8GA1UEAxMoOTE4RDY4NkUxMzkyMDgzQzY5NDZG MkZERDgzNTVCNzE0RUVFNEEwQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKblN/2a8j1IBpchtOneq0eeyZzsKYHyTyw7+Q/aC7mCSkZhcXs7wcvOz/ls 5ceyefLh7khwK0zCI+tNv9Ay1/ADAkcDp51bZKrCWAAN5FWlvHsrsLGGCefwjO04 DbcWpWL4AWg41hflqv+4dMjfwHT8mknZi9lqM4NtHbZO1JD07Apv33a9oP9HJOZD roZlnSeEaGVFKGJm8Xxk3fIe5t+jOJr8N3OBax4f0Kx0/j2Mi+hb0wlnUJHei7Pf VMbMhXgENrExwtl5iRVF13Kby8002ZHRz/lQrIWqE55EQCW5IVMOuWQCemyShEMP TEcg8YAe425c12yy2+3NVldh5kUCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSRjWhu E5IIPGlG8v3YNVtxTu5KDDAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE0OTM3OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKVjMTANBgkqhkiG9w0BAQsFAAOCAQEAchHHDdMU1KpV6/bzTSGp v3GatgxD1LzidmtJNRRGP1rwyxHRDAE1ZL8Oe8NN3+/Owa5eh4hvSfksFkH9FG4P ghRc6R3ftIgkkknd1mVF335P12iXGYas7OknhmEbjxQkYw4XW+YPgCoJxlIbWM59 2Yeneu1nrEjwFLA9ND9+KM2jJPWe/NLRsBIjqWB/L5xMmwe3oMlit5CAOIxZRGlz sTEPGjJppIem+L3ieCSHd1cZIzIA/dtRsuNDCJ2cWlvo0o1+O2dpYxO+tRFSc63j bvuXnwU2uASUKKyAb2sU1cf3bX/Ixl2u/mLNsSEqgjnm9Zz8O5NGoNW5V5ICU+aL XQ== -----END CERTIFICATE-----Generated at Wed Dec 3 16:41:32 2025 by rpki-client