This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153135.roa File: AS153135.roa (raw, json) Hash identifier: xWo9hKiao9pSIst3mFh5lZq0bPXLJ5HgFWp8ONAcjmU= Subject key identifier: 96:B5:4D:8A:50:94:B0:55:A0:1C:09:AE:FA:05:50:69:7F:40:63:C7 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 30AEFFE4FA6F98E404CAF058D685A7789B619D71 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153135.roa Signing time: Tue 16 Dec 2025 07:19:33 +0000 ROA not before: Tue 16 Dec 2025 07:14:33 +0000 ROA not after: Tue 15 Dec 2026 07:19:33 +0000 asID: 153135 IP address blocks: 144.79.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 09:41:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:ae:ff:e4:fa:6f:98:e4:04:ca:f0:58:d6:85:a7:78:9b:61:9d:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Dec 16 07:14:33 2025 GMT Not After : Dec 15 07:19:33 2026 GMT Subject: CN=96B54D8A5094B055A01C09AEFA0550697F4063C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0e:c0:df:03:96:ea:88:cd:08:2a:55:a7:52: 19:9e:f6:da:21:f4:ac:3f:b0:06:0e:f0:b5:96:4e: eb:9e:c7:12:ab:6b:91:4d:07:b2:ae:5c:50:b3:f6: c6:2a:d7:79:8e:96:f1:11:e8:b5:22:fe:c2:9d:2b: 31:13:bf:a3:62:52:70:81:cf:ea:b8:f5:19:60:21: 90:e6:31:b9:d0:26:45:93:e7:86:2c:83:7a:1c:5b: d5:75:49:d0:cc:37:e3:04:ba:47:5e:d4:ff:e4:f8: 33:e8:c5:ae:78:04:3b:ac:69:e8:54:c2:09:b0:69: 43:33:75:d4:4a:d1:96:18:22:c1:58:ad:51:20:c0: a0:e9:da:6f:76:1a:63:28:c1:21:35:4a:f3:45:89: be:79:a8:a9:50:c0:00:2d:0c:a8:d0:00:cb:73:d5: 25:88:3b:09:46:ab:fa:32:9a:f1:ae:24:43:7f:e1: cb:6e:14:c6:13:94:02:89:25:18:d9:e7:a4:a4:74: d5:c5:37:ca:1a:b7:ef:55:49:2c:53:da:35:20:40: 20:32:6d:e1:e5:e8:4d:ec:dc:26:85:56:18:5d:cc: 9d:a7:e7:5b:3a:35:54:11:48:a3:f3:93:fa:59:97: eb:7f:67:dc:5e:81:18:b0:d0:4b:40:45:3e:1a:1d: 97:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B5:4D:8A:50:94:B0:55:A0:1C:09:AE:FA:05:50:69:7F:40:63:C7 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.79.37.0/24 Signature Algorithm: sha256WithRSAEncryption 95:eb:67:34:db:00:e5:9b:ab:b2:cf:c9:f7:3d:bc:ba:1b:f9: 2b:18:d1:c0:3d:48:49:0a:84:19:68:9c:ee:90:be:aa:c5:49: 30:83:70:f5:21:5d:05:f9:28:5d:61:3c:a5:5f:f2:b6:d7:3c: de:d8:15:cd:d3:76:48:fc:f1:fb:69:8d:23:02:5a:4f:e7:24: d2:11:51:25:10:4e:e2:e1:f1:59:79:98:2b:3a:59:09:46:19: de:24:e8:d3:68:98:00:1f:6a:43:0b:d2:ac:27:1f:46:ac:09: e2:54:7f:3f:fe:da:78:e8:75:ba:ac:27:53:14:4e:f0:1a:4e: c3:0b:20:ac:8c:3c:a2:81:2f:7b:f0:68:5d:83:10:aa:15:48: 08:8e:e3:3d:4f:34:4d:8f:16:37:d1:97:84:18:2e:65:51:27: 75:2a:e5:81:0a:b7:fc:83:4b:bc:8d:5f:c4:94:6d:af:45:07: 50:53:ab:af:30:91:c5:9d:15:94:46:08:d7:87:dd:91:63:64: f2:72:f7:36:52:34:47:32:66:4f:9f:c0:34:62:7e:60:b0:19: 04:0f:3b:45:5b:2b:62:96:9c:2e:66:0a:c1:ce:7e:cc:65:72: a4:1d:f7:70:af:2f:c3:87:cc:77:d6:6b:ac:c5:82:9f:c7:7d: 41:1a:db:38 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUMK7/5PpvmOQEyvBY1oWneJthnXEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTIxNjA3MTQzM1oX DTI2MTIxNTA3MTkzM1owMzExMC8GA1UEAxMoOTZCNTREOEE1MDk0QjA1NUEwMUMw OUFFRkEwNTUwNjk3RjQwNjNDNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL0OwN8DluqIzQgqVadSGZ722iH0rD+wBg7wtZZO657HEqtrkU0Hsq5cULP2 xirXeY6W8RHotSL+wp0rMRO/o2JScIHP6rj1GWAhkOYxudAmRZPnhiyDehxb1XVJ 0Mw34wS6R17U/+T4M+jFrngEO6xp6FTCCbBpQzN11ErRlhgiwVitUSDAoOnab3Ya YyjBITVK80WJvnmoqVDAAC0MqNAAy3PVJYg7CUar+jKa8a4kQ3/hy24UxhOUAokl GNnnpKR01cU3yhq371VJLFPaNSBAIDJt4eXoTezcJoVWGF3MnafnWzo1VBFIo/OT +lmX639n3F6BGLDQS0BFPhodlwUCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSWtU2K UJSwVaAcCa76BVBpf0BjxzAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1MzEzNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAJBPJTANBgkqhkiG9w0BAQsFAAOCAQEAletnNNsA5Zurss/J9z28 uhv5KxjRwD1ISQqEGWic7pC+qsVJMINw9SFdBfkoXWE8pV/yttc83tgVzdN2SPzx +2mNIwJaT+ck0hFRJRBO4uHxWXmYKzpZCUYZ3iTo02iYAB9qQwvSrCcfRqwJ4lR/ P/7aeOh1uqwnUxRO8BpOwwsgrIw8ooEve/BoXYMQqhVICI7jPU80TY8WN9GXhBgu ZVEndSrlgQq3/INLvI1fxJRtr0UHUFOrrzCRxZ0VlEYI14fdkWNk8nL3NlI0RzJm T5/ANGJ+YLAZBA87RVsrYpacLmYKwc5+zGVypB33cK8vw4fMd9ZrrMWCn8d9QRrb OA== -----END CERTIFICATE-----Generated at Wed Dec 17 20:45:24 2025 by rpki-client