This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS152394.roa File: AS152394.roa (raw, json) Hash identifier: EiN5m/a1l6913XbPw51LuVrAy9stSKWB9IkaYLSl8WU= Subject key identifier: 30:A7:13:85:05:F8:5A:F1:F1:DD:E0:38:E0:12:87:D0:1A:36:A6:22 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 11B23ABF5001D0F2AE0A093CD2D6D56D8B4491FF Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS152394.roa Signing time: Thu 08 Jan 2026 11:00:07 +0000 ROA not before: Thu 08 Jan 2026 10:55:07 +0000 ROA not after: Thu 07 Jan 2027 11:00:07 +0000 asID: 152394 IP address blocks: 157.20.46.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 08:04:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:b2:3a:bf:50:01:d0:f2:ae:0a:09:3c:d2:d6:d5:6d:8b:44:91:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jan 8 10:55:07 2026 GMT Not After : Jan 7 11:00:07 2027 GMT Subject: CN=30A7138505F85AF1F1DDE038E01287D01A36A622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6b:bc:da:61:93:dc:f8:42:19:d8:8f:d3:95: 42:a7:8d:95:1e:d6:f7:01:1d:27:a6:d3:15:f2:5e: 95:dd:88:47:b9:f8:cb:86:33:38:65:a8:f0:b5:73: 33:42:ac:0c:07:f7:96:6c:6f:99:ea:8a:c3:d0:86: 84:76:09:c9:3f:af:6e:ce:39:93:7c:fd:32:9c:f6: 17:43:da:8e:44:b1:55:17:17:46:30:ef:7e:21:05: 6c:5d:a8:ce:cb:52:bb:17:b9:08:01:69:c1:15:17: 1a:f6:8d:cf:76:93:4b:8f:db:80:c9:db:5e:b7:50: 8f:b7:8a:8a:0c:bc:02:c0:60:35:07:f7:10:f8:aa: 2b:74:1a:0a:4f:a2:5a:a7:11:c4:08:3f:a7:e4:47: 23:6d:28:4f:56:5d:82:24:7f:fa:1f:ec:58:d0:27: c3:93:c5:62:c0:9e:6a:28:40:42:58:15:d5:d2:dd: 27:b0:5d:0e:49:2a:3f:3a:d4:64:e0:77:d8:4e:63: 2c:14:13:82:8f:28:a0:18:ab:8d:1d:db:7a:c6:e6: 7e:f9:ae:68:54:db:33:3a:b2:0c:93:78:6b:ed:0c: a8:83:27:0c:07:2c:08:0a:72:3d:d8:14:a6:f7:f9: 2d:d8:c6:34:36:d2:e7:29:17:9f:b8:d4:fb:83:8a: 95:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A7:13:85:05:F8:5A:F1:F1:DD:E0:38:E0:12:87:D0:1A:36:A6:22 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS152394.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.46.0/23 Signature Algorithm: sha256WithRSAEncryption 71:e5:c6:ee:3c:05:8e:02:7a:2e:c8:79:37:f9:3c:39:d9:24: b6:55:7f:b0:0d:9f:b2:16:7e:37:b0:a5:f9:b6:78:b7:02:73: 03:53:71:29:2d:55:fb:de:f7:69:a4:d4:17:67:bc:21:be:6f: a3:3a:ce:30:f3:80:91:c2:f5:00:9a:24:a5:89:bf:95:4f:65: 1e:4d:97:1b:0a:a9:aa:9c:a2:69:c3:93:e5:83:19:eb:7a:20: 0c:e4:cd:b3:1c:60:84:ba:4e:2f:37:49:7f:2b:df:95:14:df: 6d:da:7e:22:75:7e:6b:34:5b:c2:2f:2b:f4:3e:fd:58:53:7c: 50:7e:19:38:5d:8e:7d:da:49:ef:a3:dd:69:1e:3b:6c:e6:d1: de:47:77:6a:af:f3:24:7e:31:55:82:7d:91:72:f0:48:d2:8e: f7:b5:1f:86:68:b0:be:ad:8c:28:d2:97:88:9d:3a:ae:7f:ce: 8b:3e:2a:4c:43:7a:e1:be:54:6b:70:23:d4:aa:76:bc:a7:2d: 88:db:02:c8:7f:1f:e6:8e:24:a5:13:64:cb:3f:b7:a4:61:76: b4:38:d1:f0:56:0f:6f:d0:63:30:2d:1b:81:c0:7f:39:46:ed: a3:14:f8:41:3a:1d:74:f7:dd:75:bc:70:a6:3c:d7:72:6a:30: e9:b5:a6:05 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUEbI6v1AB0PKuCgk80tbVbYtEkf8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDEwODEwNTUwN1oX DTI3MDEwNzExMDAwN1owMzExMC8GA1UEAxMoMzBBNzEzODUwNUY4NUFGMUYxRERF MDM4RTAxMjg3RDAxQTM2QTYyMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALNrvNphk9z4QhnYj9OVQqeNlR7W9wEdJ6bTFfJeld2IR7n4y4YzOGWo8LVz M0KsDAf3lmxvmeqKw9CGhHYJyT+vbs45k3z9Mpz2F0PajkSxVRcXRjDvfiEFbF2o zstSuxe5CAFpwRUXGvaNz3aTS4/bgMnbXrdQj7eKigy8AsBgNQf3EPiqK3QaCk+i WqcRxAg/p+RHI20oT1ZdgiR/+h/sWNAnw5PFYsCeaihAQlgV1dLdJ7BdDkkqPzrU ZOB32E5jLBQTgo8ooBirjR3besbmfvmuaFTbMzqyDJN4a+0MqIMnDAcsCApyPdgU pvf5LdjGNDbS5ykXn7jU+4OKldsCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQwpxOF Bfha8fHd4DjgEofQGjamIjAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1MjM5NC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAZ0ULjANBgkqhkiG9w0BAQsFAAOCAQEAceXG7jwFjgJ6Lsh5N/k8 OdkktlV/sA2fshZ+N7Cl+bZ4twJzA1NxKS1V+973aaTUF2e8Ib5vozrOMPOAkcL1 AJokpYm/lU9lHk2XGwqpqpyiacOT5YMZ63ogDOTNsxxghLpOLzdJfyvflRTfbdp+ InV+azRbwi8r9D79WFN8UH4ZOF2OfdpJ76PdaR47bObR3kd3aq/zJH4xVYJ9kXLw SNKO97Ufhmiwvq2MKNKXiJ06rn/Oiz4qTEN64b5Ua3Aj1Kp2vKctiNsCyH8f5o4k pRNkyz+3pGF2tDjR8FYPb9BjMC0bgcB/OUbtoxT4QToddPfddbxwpjzXcmow6bWm BQ== -----END CERTIFICATE-----Generated at Tue Jan 20 06:05:40 2026 by rpki-client