This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS151849.roa File: AS151849.roa (raw, json) Hash identifier: g/AcPimY54Wiuee8DzRrpY5J2CUsSpyttCo3Xu2I6vc= Subject key identifier: 57:34:AC:14:6A:A6:4B:FA:C6:8E:91:55:41:6A:6D:61:95:7E:89:5A Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 7C7C4CAFA864861F11BB44F900ED0A7A4FBFC213 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS151849.roa Signing time: Tue 30 Dec 2025 02:28:14 +0000 ROA not before: Tue 30 Dec 2025 02:23:14 +0000 ROA not after: Tue 29 Dec 2026 02:28:14 +0000 asID: 151849 IP address blocks: 144.79.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 13:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:7c:4c:af:a8:64:86:1f:11:bb:44:f9:00:ed:0a:7a:4f:bf:c2:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Dec 30 02:23:14 2025 GMT Not After : Dec 29 02:28:14 2026 GMT Subject: CN=5734AC146AA64BFAC68E9155416A6D61957E895A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a9:a2:fc:a9:fd:a5:05:a3:ee:86:ed:ca:07: 5a:5f:af:c5:75:bc:28:fd:43:4e:31:56:b1:12:5d: ac:21:bc:4d:31:6c:be:04:6d:ed:af:de:6a:88:11: 64:a1:ea:49:22:53:7b:e5:7c:b1:bb:40:fa:d6:62: 2e:aa:9d:37:6b:74:71:22:35:f2:0d:1e:c3:59:78: 2e:8d:ea:c6:0e:c3:6f:ae:d3:35:7f:ea:57:c5:b8: a4:cf:1d:51:d4:c2:95:f4:b3:18:cc:03:63:45:34: ce:db:c4:97:1e:22:bd:7d:03:93:aa:fa:4b:91:4b: 21:8d:f2:0d:db:c9:b6:15:16:b4:a5:f8:50:0d:25: 5a:ef:58:ca:cd:61:88:00:cc:3f:42:95:bd:84:de: c8:51:cb:46:01:ce:a7:00:5d:18:c5:7b:a7:b0:01: f8:3b:22:75:f0:fa:e9:7f:d8:0f:e7:0e:af:c9:95: e2:56:f6:57:ba:0c:db:e4:e7:ea:11:7e:50:ee:85: 57:bd:34:0c:31:bb:4b:67:4b:c9:28:d8:e9:2b:c1: 47:7e:c5:0d:da:9a:8b:8e:49:26:b1:2b:ae:1f:6c: 9b:cc:fe:83:e3:ce:c1:51:fa:70:81:c3:fb:1c:53: 27:72:f6:2a:3f:39:c0:b4:00:54:b1:e9:23:7c:a9: 8f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:34:AC:14:6A:A6:4B:FA:C6:8E:91:55:41:6A:6D:61:95:7E:89:5A X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS151849.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.79.72.0/24 Signature Algorithm: sha256WithRSAEncryption 65:24:cf:53:a1:19:e1:f7:ff:1b:24:bc:7a:f4:d2:14:6b:06: da:dc:1d:9f:15:76:31:66:9d:ce:71:ba:54:47:db:da:32:3b: 95:98:af:67:7b:3d:91:6b:d1:03:8e:df:78:e5:fd:d2:4a:e7: 36:f1:97:28:21:29:de:2d:f6:8e:8d:74:49:e8:b4:5e:af:76: 45:65:cb:bf:91:62:21:d1:e1:61:d1:3e:6f:5f:29:81:6e:6b: 54:1d:36:3c:ab:13:2b:1b:60:10:89:7a:8e:b6:06:0e:15:48: 5c:a9:7f:3c:92:d1:b3:fe:31:5c:1d:54:71:f3:9f:3f:2f:d9: c8:bf:eb:2f:ff:7d:55:2b:f1:e8:73:e2:52:c8:b9:d0:1c:3a: 90:fc:35:91:16:6d:91:85:6d:28:8f:c0:12:e3:d0:e1:0a:0b: d1:59:4c:9f:2f:17:b1:4d:20:42:f1:62:9f:fb:4d:e5:45:cf: e9:f1:81:3a:d4:a5:7e:09:6a:87:46:a5:41:d6:1f:78:87:a1: 1f:89:47:ed:48:ca:d2:ae:f5:f0:72:e1:9f:33:ac:66:9c:8c: 02:5e:7c:59:bd:d3:25:88:55:9e:ba:03:5c:71:79:98:87:a5: 48:0f:fc:d6:fe:b7:16:45:1b:13:b8:c6:3d:50:c0:fb:42:2a: f7:d5:e3:75 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUfHxMr6hkhh8Ru0T5AO0Kek+/whMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTIzMDAyMjMxNFoX DTI2MTIyOTAyMjgxNFowMzExMC8GA1UEAxMoNTczNEFDMTQ2QUE2NEJGQUM2OEU5 MTU1NDE2QTZENjE5NTdFODk1QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJGpovyp/aUFo+6G7coHWl+vxXW8KP1DTjFWsRJdrCG8TTFsvgRt7a/eaogR ZKHqSSJTe+V8sbtA+tZiLqqdN2t0cSI18g0ew1l4Lo3qxg7Db67TNX/qV8W4pM8d UdTClfSzGMwDY0U0ztvElx4ivX0Dk6r6S5FLIY3yDdvJthUWtKX4UA0lWu9Yys1h iADMP0KVvYTeyFHLRgHOpwBdGMV7p7AB+DsidfD66X/YD+cOr8mV4lb2V7oM2+Tn 6hF+UO6FV700DDG7S2dLySjY6SvBR37FDdqai45JJrErrh9sm8z+g+POwVH6cIHD +xxTJ3L2Kj85wLQAVLHpI3ypj0MCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRXNKwU aqZL+saOkVVBam1hlX6JWjAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1MTg0OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAJBPSDANBgkqhkiG9w0BAQsFAAOCAQEAZSTPU6EZ4ff/GyS8evTS FGsG2twdnxV2MWadznG6VEfb2jI7lZivZ3s9kWvRA47feOX90krnNvGXKCEp3i32 jo10Sei0Xq92RWXLv5FiIdHhYdE+b18pgW5rVB02PKsTKxtgEIl6jrYGDhVIXKl/ PJLRs/4xXB1UcfOfPy/ZyL/rL/99VSvx6HPiUsi50Bw6kPw1kRZtkYVtKI/AEuPQ 4QoL0VlMny8XsU0gQvFin/tN5UXP6fGBOtSlfglqh0alQdYfeIehH4lH7UjK0q71 8HLhnzOsZpyMAl58Wb3TJYhVnroDXHF5mIelSA/81v63FkUbE7jGPVDA+0Iq99Xj dQ== -----END CERTIFICATE-----Generated at Wed Jan 21 10:27:56 2026 by rpki-client