This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153067.roa File: AS153067.roa (raw, json) Hash identifier: 4kP1dTwPJ39Aa9HLoo0iaQUz3Uzh4Q/9HrcS6XVc10c= Subject key identifier: EC:8B:18:1B:16:AD:D1:39:BD:DD:DC:86:9C:45:A1:67:C3:C7:BC:6B Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 19E463ACE0A048DCA17B2095BA2B60EFD5D312E4 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153067.roa Signing time: Thu 08 Jan 2026 11:00:03 +0000 ROA not before: Thu 08 Jan 2026 10:55:03 +0000 ROA not after: Thu 07 Jan 2027 11:00:03 +0000 asID: 153067 IP address blocks: 160.22.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 04:03:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:e4:63:ac:e0:a0:48:dc:a1:7b:20:95:ba:2b:60:ef:d5:d3:12:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jan 8 10:55:03 2026 GMT Not After : Jan 7 11:00:03 2027 GMT Subject: CN=EC8B181B16ADD139BDDDDC869C45A167C3C7BC6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:16:5e:0b:d1:54:c9:58:be:2a:6b:db:8d:48: da:af:88:fb:c5:aa:64:49:fb:fa:a8:fe:e2:47:3e: 37:33:26:31:6f:f0:fe:8c:0e:a1:a6:54:36:a2:6b: 04:5e:85:37:61:ed:fe:7c:58:17:b2:e6:90:f5:db: 50:bc:68:30:62:b2:e4:3f:d2:85:62:47:d2:1e:bf: 6a:50:05:77:3a:be:fa:b0:7d:88:d1:da:5c:09:0f: 0b:62:27:db:b7:87:b9:cb:e4:95:54:63:f0:ff:7d: 2d:fb:af:b4:8d:6b:fa:df:77:ce:50:91:f4:13:61: 91:cb:13:1a:0c:4c:49:62:59:62:8a:26:51:50:84: f7:0a:8e:de:12:f0:ac:a6:72:63:12:3c:63:17:e5: 52:73:c3:1e:df:9c:cd:9d:d4:ca:75:4c:cf:8d:85: e1:0c:06:de:d2:47:ff:13:de:c7:00:77:d1:b4:65: ce:38:38:37:51:90:ec:da:60:c2:4b:e6:c8:71:b3: cb:94:d6:66:fd:ca:af:9b:67:95:97:fe:8f:2f:47: 3d:dc:82:41:a0:0e:d2:f0:4b:fc:51:a6:92:26:33: 31:3b:23:2f:04:15:bd:7e:b7:34:fe:d0:37:d2:09: 70:0b:b7:6e:31:d8:fa:9d:a3:34:16:47:0c:4c:50: e8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:8B:18:1B:16:AD:D1:39:BD:DD:DC:86:9C:45:A1:67:C3:C7:BC:6B X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153067.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.45.0/24 Signature Algorithm: sha256WithRSAEncryption 15:da:cf:90:3c:ed:60:d1:67:66:ac:b6:a8:c4:c8:45:29:7c: d1:d9:f2:36:2d:78:8e:cc:66:06:33:dd:18:ea:6c:1c:66:0d: bc:09:61:a3:39:7c:47:7c:14:d9:17:83:30:aa:95:75:98:4f: e6:a4:ca:98:c6:f0:27:9f:03:46:35:2a:38:56:0c:53:f2:ab: 9c:b1:e5:c0:f7:54:a2:54:69:4f:20:35:b5:23:d1:d2:ce:8c: 1b:72:e7:0a:89:d9:01:f3:5f:c4:ec:57:48:47:a1:32:83:9a: 5d:bb:70:82:e7:19:0a:4c:c3:7a:53:5a:af:79:03:ff:43:1b: 08:c3:a4:ca:d6:8d:1d:33:60:c7:d5:6e:1c:b2:80:fa:db:f6: 37:3b:7f:57:e4:0f:73:d4:65:c6:84:9b:d2:5f:91:83:31:76: ee:b3:74:57:fe:60:72:b3:5a:2e:39:fc:88:bc:f2:25:3c:95: 7b:ac:fd:98:5c:65:45:0b:3d:80:22:03:33:6e:32:d1:b3:0c: 2c:f7:74:e5:5a:bd:22:b7:df:01:a0:23:28:d7:b6:3b:27:30: e5:e9:94:86:80:38:92:e9:ae:0d:f1:9f:51:47:84:d8:55:44: b1:3a:d5:73:0f:a6:f3:1f:ad:ed:6e:f7:20:dd:50:19:de:c7: b0:1e:cd:81 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUGeRjrOCgSNyheyCVuitg79XTEuQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDEwODEwNTUwM1oX DTI3MDEwNzExMDAwM1owMzExMC8GA1UEAxMoRUM4QjE4MUIxNkFERDEzOUJERERE Qzg2OUM0NUExNjdDM0M3QkM2QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKEWXgvRVMlYvipr241I2q+I+8WqZEn7+qj+4kc+NzMmMW/w/owOoaZUNqJr BF6FN2Ht/nxYF7LmkPXbULxoMGKy5D/ShWJH0h6/alAFdzq++rB9iNHaXAkPC2In 27eHucvklVRj8P99LfuvtI1r+t93zlCR9BNhkcsTGgxMSWJZYoomUVCE9wqO3hLw rKZyYxI8YxflUnPDHt+czZ3UynVMz42F4QwG3tJH/xPexwB30bRlzjg4N1GQ7Npg wkvmyHGzy5TWZv3Kr5tnlZf+jy9HPdyCQaAO0vBL/FGmkiYzMTsjLwQVvX63NP7Q N9IJcAu3bjHY+p2jNBZHDExQ6OcCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTsixgb Fq3ROb3d3IacRaFnw8e8azAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1MzA2Ny5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKAWLTANBgkqhkiG9w0BAQsFAAOCAQEAFdrPkDztYNFnZqy2qMTI RSl80dnyNi14jsxmBjPdGOpsHGYNvAlhozl8R3wU2ReDMKqVdZhP5qTKmMbwJ58D RjUqOFYMU/KrnLHlwPdUolRpTyA1tSPR0s6MG3LnConZAfNfxOxXSEehMoOaXbtw gucZCkzDelNar3kD/0MbCMOkytaNHTNgx9VuHLKA+tv2Nzt/V+QPc9RlxoSb0l+R gzF27rN0V/5gcrNaLjn8iLzyJTyVe6z9mFxlRQs9gCIDM24y0bMMLPd05Vq9Irff AaAjKNe2Oycw5emUhoA4kumuDfGfUUeE2FVEsTrVcw+m8x+t7W73IN1QGd7HsB7N gQ== -----END CERTIFICATE-----Generated at Mon Feb 2 17:19:54 2026 by rpki-client