This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153154.roa File: AS153154.roa (raw, json) Hash identifier: KGIxnQXGOjtW0SACzsRPi9qKIYkGsNZZYfqaXe+vf5s= Subject key identifier: 57:76:E1:13:67:08:40:70:2D:A8:C4:E6:D9:49:99:35:C3:9B:B1:C1 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 09623203381A705A694185029B85461CD18A8D90 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153154.roa Signing time: Thu 20 Nov 2025 02:19:44 +0000 ROA not before: Thu 20 Nov 2025 02:14:44 +0000 ROA not after: Thu 19 Nov 2026 02:19:44 +0000 asID: 153154 IP address blocks: 160.191.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 11:07:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:62:32:03:38:1a:70:5a:69:41:85:02:9b:85:46:1c:d1:8a:8d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Nov 20 02:14:44 2025 GMT Not After : Nov 19 02:19:44 2026 GMT Subject: CN=5776E113670840702DA8C4E6D9499935C39BB1C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:71:56:51:4a:ca:8a:33:f2:b4:09:8d:f3:73: c6:74:3e:39:d3:5d:86:c5:f5:ea:50:41:fc:88:d9: 9f:d3:bf:6f:4f:53:38:ee:bc:38:f9:cc:88:6d:b3: 29:c8:4e:dc:55:de:63:fa:d1:ed:68:d8:6c:f0:1d: 0c:4d:7b:15:1d:ea:cb:e4:2f:e6:1e:18:47:8c:64: 25:f0:13:62:cb:12:a7:70:f5:7c:d8:20:5a:81:4c: 24:d2:5e:a4:ad:88:dd:dc:52:2b:36:2a:56:9c:e6: 8b:3b:a9:f4:a1:f0:37:09:21:97:f7:b3:8e:9a:ac: 4a:89:c7:f0:dc:1a:d3:8e:6f:85:59:e0:04:c7:df: 50:21:87:3b:50:fc:42:03:ad:30:d6:2b:c8:b5:43: 61:7d:d8:b8:7b:ff:5a:50:3c:02:50:e2:7f:06:e7: 2c:0a:92:e8:10:ad:5b:a0:7d:4d:a6:9e:35:5b:23: b7:26:f5:81:c3:6f:03:d5:3a:26:30:3c:95:90:2b: bc:10:04:94:40:82:19:4f:4d:10:dd:c8:3b:85:97: 51:98:e1:fc:f1:1b:1a:58:ac:7e:b7:7d:a6:31:6a: c4:d5:ad:f0:05:5e:25:9f:1b:89:39:6c:43:c4:08: ff:a9:05:39:0b:85:4a:f3:21:d7:5a:f8:b3:50:b0: 31:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:76:E1:13:67:08:40:70:2D:A8:C4:E6:D9:49:99:35:C3:9B:B1:C1 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153154.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.191.171.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:72:1f:dd:45:c0:99:50:f4:33:09:73:95:58:cd:a7:e0:8a: bd:cb:70:76:ac:7b:0f:99:b6:e3:b4:f3:c2:36:e1:f9:86:21: db:6c:c6:05:52:8d:42:74:3d:d9:36:72:b8:0d:9c:9f:21:5b: a0:22:62:af:a2:e6:71:4c:7e:69:ab:b5:47:33:fd:28:e3:f5: ae:5b:c6:04:f2:56:a7:07:13:db:15:1b:a8:ea:c4:b5:5a:99: 3d:c3:14:8d:a0:ee:8a:79:ad:02:ed:5a:d3:4c:6d:17:6c:67: d7:c7:21:fa:31:5c:51:da:8c:db:18:67:f3:2f:05:a8:83:51: 19:65:75:c2:2c:fd:90:fb:bb:35:47:9a:19:c8:d2:95:51:7e: 3d:a6:25:80:a2:5a:2d:cc:e8:0e:ba:44:17:d2:d3:c7:60:9c: 63:16:0f:70:30:3d:af:31:12:c0:6f:b2:c9:c5:7c:04:e4:23: 2d:69:b2:3c:43:03:68:24:53:fb:54:2a:4b:4d:2e:bc:4d:00: 48:b3:00:cd:73:e5:e8:41:45:2c:8a:21:31:9b:87:19:31:b5: 1f:f1:85:a5:1b:c3:67:33:5a:d8:77:8e:0b:9a:d1:aa:d3:6c: 25:70:04:9a:e6:eb:9e:77:d6:e0:3b:45:9d:48:33:f2:f6:4c: 78:14:99:97 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUCWIyAzgacFppQYUCm4VGHNGKjZAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTEyMDAyMTQ0NFoX DTI2MTExOTAyMTk0NFowMzExMC8GA1UEAxMoNTc3NkUxMTM2NzA4NDA3MDJEQThD NEU2RDk0OTk5MzVDMzlCQjFDMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMVxVlFKyooz8rQJjfNzxnQ+OdNdhsX16lBB/IjZn9O/b09TOO68OPnMiG2z KchO3FXeY/rR7WjYbPAdDE17FR3qy+Qv5h4YR4xkJfATYssSp3D1fNggWoFMJNJe pK2I3dxSKzYqVpzmizup9KHwNwkhl/ezjpqsSonH8Nwa045vhVngBMffUCGHO1D8 QgOtMNYryLVDYX3YuHv/WlA8AlDifwbnLAqS6BCtW6B9TaaeNVsjtyb1gcNvA9U6 JjA8lZArvBAElECCGU9NEN3IO4WXUZjh/PEbGlisfrd9pjFqxNWt8AVeJZ8biTls Q8QI/6kFOQuFSvMh11r4s1CwMfsCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRXduET ZwhAcC2oxObZSZk1w5uxwTAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1MzE1NC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKC/qzANBgkqhkiG9w0BAQsFAAOCAQEAHHIf3UXAmVD0MwlzlVjN p+CKvctwdqx7D5m247Tzwjbh+YYh22zGBVKNQnQ92TZyuA2cnyFboCJir6LmcUx+ aau1RzP9KOP1rlvGBPJWpwcT2xUbqOrEtVqZPcMUjaDuinmtAu1a00xtF2xn18ch +jFcUdqM2xhn8y8FqINRGWV1wiz9kPu7NUeaGcjSlVF+PaYlgKJaLczoDrpEF9LT x2CcYxYPcDA9rzESwG+yycV8BOQjLWmyPEMDaCRT+1QqS00uvE0ASLMAzXPl6EFF LIohMZuHGTG1H/GFpRvDZzNa2HeOC5rRqtNsJXAEmubrnnfW4DtFnUgz8vZMeBSZ lw== -----END CERTIFICATE-----Generated at Wed Dec 3 14:54:13 2025 by rpki-client