This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS150187.roa File: AS150187.roa (raw, json) Hash identifier: JBEwmIw/T8orkwTiK2Vvv19ZqqGtwCv0795MbCFVGu4= Subject key identifier: 58:DB:3B:E0:F4:57:77:F8:6E:63:1B:83:F2:02:58:39:BF:D7:50:FF Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 6ED8BCBCDCFF2E8EEDD3A0C77226AF6F27B38AA0 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS150187.roa Signing time: Thu 08 Jan 2026 11:00:08 +0000 ROA not before: Thu 08 Jan 2026 10:55:08 +0000 ROA not after: Thu 07 Jan 2027 11:00:08 +0000 asID: 150187 IP address blocks: 157.15.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 13:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:d8:bc:bc:dc:ff:2e:8e:ed:d3:a0:c7:72:26:af:6f:27:b3:8a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jan 8 10:55:08 2026 GMT Not After : Jan 7 11:00:08 2027 GMT Subject: CN=58DB3BE0F45777F86E631B83F2025839BFD750FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:99:9e:82:26:05:d0:c4:22:30:a1:5b:72:39: c2:59:5d:8e:02:7d:d9:7d:dd:ec:9a:5e:43:c0:91: 23:14:ac:c6:6e:eb:8e:53:fd:a8:bd:78:49:14:ef: 79:72:9d:ea:2d:ba:58:f1:4e:de:17:03:28:75:7c: 12:1d:08:30:56:86:bb:b0:4a:e2:77:a5:78:5e:56: d0:11:cd:ff:5b:ac:ad:e6:8e:64:6c:c6:02:13:fd: fe:35:1f:17:8b:49:82:5b:8a:9c:8b:32:4d:e5:2e: 3d:6f:c4:6a:ff:4d:0d:a9:2b:6f:e1:d9:60:2a:89: 7a:b2:ae:e2:63:6c:68:35:f8:95:cb:52:78:cb:7d: 59:4c:66:12:31:86:7b:ea:5a:08:2c:56:43:75:db: 6c:64:b0:fa:ad:29:90:de:af:57:5a:d2:a6:51:0c: 57:b8:99:a6:6e:93:08:3d:13:08:ba:a1:b3:75:6c: 4d:42:80:90:da:d6:81:21:fa:0f:6f:9f:04:20:6a: 61:50:57:4c:8c:9a:89:26:49:a5:a1:8c:fb:22:0b: 10:0a:00:9f:87:83:9f:71:dd:5b:33:1e:81:60:70: 62:68:e0:ff:f8:d9:43:9d:d0:5b:8f:54:33:cc:7f: f7:c1:c2:2b:0f:15:59:f6:47:47:ed:ef:71:a7:77: 44:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:DB:3B:E0:F4:57:77:F8:6E:63:1B:83:F2:02:58:39:BF:D7:50:FF X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS150187.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.73.0/24 Signature Algorithm: sha256WithRSAEncryption 91:2e:bc:b1:3f:6e:0f:6d:d0:2a:8a:21:e8:13:49:e2:c7:ba: 60:31:fe:1f:68:7c:fe:3e:66:46:cf:04:46:0c:b9:e2:3e:7b: 50:ae:23:35:ba:f3:0d:11:b0:9c:c5:da:8b:55:d1:fe:27:82: 4a:d7:93:ac:bb:db:28:80:a9:ca:82:81:b7:4b:a7:1e:dd:27: 3f:ff:3a:95:2d:bd:91:39:38:4a:e5:9f:4b:d2:f5:ff:1e:a5: f4:9d:a5:c2:9e:2a:d0:5b:da:96:14:77:0d:ce:fa:f1:f5:0a: 68:22:c1:1d:35:3b:18:77:1e:6f:11:7a:4c:49:4b:e4:ba:76: e6:52:b3:e0:54:41:cb:08:a1:d8:57:54:17:9c:f9:bd:0f:e9: 16:1b:d3:1a:f1:fe:db:a7:cd:c7:36:c9:0f:c2:bc:0b:57:55: ef:97:d6:79:3a:90:51:8a:fc:be:d3:eb:e5:45:4c:fa:ea:08: 83:45:8b:39:29:b8:ed:13:4d:98:15:ec:34:62:85:a0:92:4f: 9f:49:64:a3:cd:29:45:89:d4:df:09:c1:a2:6b:fe:60:20:c7: 09:83:81:77:a1:be:7c:e7:86:36:3b:ec:21:fa:50:8f:7c:1c: 73:64:b7:76:46:fc:40:dd:c6:ef:e6:7f:03:14:77:3a:85:10: fb:8d:10:6d -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUbti8vNz/Lo7t06DHciavbyeziqAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDEwODEwNTUwOFoX DTI3MDEwNzExMDAwOFowMzExMC8GA1UEAxMoNThEQjNCRTBGNDU3NzdGODZFNjMx QjgzRjIwMjU4MzlCRkQ3NTBGRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANiZnoImBdDEIjChW3I5wlldjgJ92X3d7JpeQ8CRIxSsxm7rjlP9qL14SRTv eXKd6i26WPFO3hcDKHV8Eh0IMFaGu7BK4neleF5W0BHN/1usreaOZGzGAhP9/jUf F4tJgluKnIsyTeUuPW/Eav9NDakrb+HZYCqJerKu4mNsaDX4lctSeMt9WUxmEjGG e+paCCxWQ3XbbGSw+q0pkN6vV1rSplEMV7iZpm6TCD0TCLqhs3VsTUKAkNrWgSH6 D2+fBCBqYVBXTIyaiSZJpaGM+yILEAoAn4eDn3HdWzMegWBwYmjg//jZQ53QW49U M8x/98HCKw8VWfZHR+3vcad3RGcCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRY2zvg 9Fd3+G5jG4PyAlg5v9dQ/zAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1MDE4Ny5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAJ0PSTANBgkqhkiG9w0BAQsFAAOCAQEAkS68sT9uD23QKooh6BNJ 4se6YDH+H2h8/j5mRs8ERgy54j57UK4jNbrzDRGwnMXai1XR/ieCSteTrLvbKICp yoKBt0unHt0nP/86lS29kTk4SuWfS9L1/x6l9J2lwp4q0FvalhR3Dc768fUKaCLB HTU7GHcebxF6TElL5Lp25lKz4FRBywih2FdUF5z5vQ/pFhvTGvH+26fNxzbJD8K8 C1dV75fWeTqQUYr8vtPr5UVM+uoIg0WLOSm47RNNmBXsNGKFoJJPn0lko80pRYnU 3wnBomv+YCDHCYOBd6G+fOeGNjvsIfpQj3wcc2S3dkb8QN3G7+Z/AxR3OoUQ+40Q bQ== -----END CERTIFICATE-----Generated at Wed Jan 21 10:30:14 2026 by rpki-client