This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153577.roa File: AS153577.roa (raw, json) Hash identifier: ozcI2zX0tCsc39OM8uLdZhUqZNfF9fTl1TXQ+K6gzfA= Subject key identifier: F4:64:5D:22:70:1B:CC:02:34:28:40:5D:C2:87:CC:44:2E:62:A0:9A Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 33929BEE10F5E11B7EE308271967D3DE101093A9 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153577.roa Signing time: Wed 31 Dec 2025 06:08:22 +0000 ROA not before: Wed 31 Dec 2025 06:03:22 +0000 ROA not after: Wed 30 Dec 2026 06:08:22 +0000 asID: 153577 IP address blocks: 144.79.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 13:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:92:9b:ee:10:f5:e1:1b:7e:e3:08:27:19:67:d3:de:10:10:93:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Dec 31 06:03:22 2025 GMT Not After : Dec 30 06:08:22 2026 GMT Subject: CN=F4645D22701BCC023428405DC287CC442E62A09A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c4:24:7e:f6:c7:6e:76:78:15:a4:5d:16:e9: ef:05:34:ec:e4:78:93:a1:68:05:46:92:7a:3a:ed: 72:f4:91:97:f1:c4:21:a7:8a:e0:b0:cf:50:3a:45: af:14:9f:34:ac:03:3f:ad:d0:02:3f:fb:a4:45:e5: d3:4d:31:ba:f5:e8:58:7d:d3:3d:f2:0b:62:27:79: 58:8a:d8:6d:3f:ff:9e:0b:f2:4f:cc:ad:40:2a:da: 6b:62:18:84:d8:6c:83:83:11:ad:2a:17:9f:73:d6: d6:72:39:c3:99:5f:13:9c:9c:b0:07:21:a7:ef:d2: 58:e6:65:a0:09:c0:bf:66:95:e0:17:29:20:32:ad: a9:d7:43:0c:59:75:5a:11:2b:aa:4d:30:99:2f:6c: 4c:78:5e:0b:70:d2:8d:be:9e:45:1b:fd:f1:9e:1e: 18:f4:cd:aa:10:23:0d:c2:6b:91:08:98:00:6b:e2: ee:7a:14:7a:5c:c7:d7:32:56:b1:44:96:44:97:38: eb:ec:fa:48:30:a6:a9:c8:28:d6:0e:32:a1:1a:44: a6:be:fe:7c:cc:8f:92:54:52:71:2b:47:e0:0a:1c: 68:22:8e:a4:8e:95:f4:8a:dd:c9:5c:27:7f:2e:dd: 8d:50:8f:1f:b9:ad:6f:2a:09:15:f9:f9:7e:a1:2f: b3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:64:5D:22:70:1B:CC:02:34:28:40:5D:C2:87:CC:44:2E:62:A0:9A X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153577.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.79.240.0/24 Signature Algorithm: sha256WithRSAEncryption 53:38:a4:f0:46:32:be:73:a9:04:14:e0:80:1d:83:89:d4:ac: 06:a6:77:54:69:3b:3e:2b:b5:b1:53:de:a0:fb:40:68:07:18: 4c:10:7c:75:f0:dc:51:ff:45:2a:c2:29:81:c6:c8:09:ec:13: 2b:4e:36:83:97:5d:7b:2c:a3:a8:7e:37:01:d3:73:d5:a5:f9: 17:54:83:8b:1b:01:b5:ec:2e:c2:c0:13:cf:02:cd:d5:7e:44: 0e:c1:2f:58:84:2d:71:69:5d:e6:20:21:6a:a3:12:85:ee:b6: 22:c4:d0:65:62:6b:3a:c5:e2:51:fc:48:a8:92:99:db:b2:60: 1d:94:6e:38:b1:ad:ea:5c:6a:60:ca:6f:3d:d1:22:dc:8f:b6: 41:a8:75:e2:10:d9:98:ef:8e:f9:ea:23:59:39:ae:fa:f4:79: f4:10:a8:06:32:a3:6c:5d:9d:01:53:42:2d:94:83:53:60:f4: 25:99:b5:f4:56:8d:b2:10:42:7c:67:e5:87:cb:d5:8b:ad:ad: de:32:d6:2d:00:4b:02:24:a5:72:a7:79:34:e8:3e:a5:9d:1b: 66:7d:0f:ac:de:07:67:9f:c0:92:89:c3:8b:4a:a6:04:01:b9: 27:cf:d7:d6:a2:1b:73:96:81:92:fb:8a:ce:e0:2e:2e:67:64: 03:04:61:b8 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUM5Kb7hD14Rt+4wgnGWfT3hAQk6kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTIzMTA2MDMyMloX DTI2MTIzMDA2MDgyMlowMzExMC8GA1UEAxMoRjQ2NDVEMjI3MDFCQ0MwMjM0Mjg0 MDVEQzI4N0NDNDQyRTYyQTA5QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALjEJH72x252eBWkXRbp7wU07OR4k6FoBUaSejrtcvSRl/HEIaeK4LDPUDpF rxSfNKwDP63QAj/7pEXl000xuvXoWH3TPfILYid5WIrYbT//ngvyT8ytQCraa2IY hNhsg4MRrSoXn3PW1nI5w5lfE5ycsAchp+/SWOZloAnAv2aV4BcpIDKtqddDDFl1 WhErqk0wmS9sTHheC3DSjb6eRRv98Z4eGPTNqhAjDcJrkQiYAGvi7noUelzH1zJW sUSWRJc46+z6SDCmqcgo1g4yoRpEpr7+fMyPklRScStH4AocaCKOpI6V9IrdyVwn fy7djVCPH7mtbyoJFfn5fqEvs40CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBT0ZF0i cBvMAjQoQF3Ch8xELmKgmjAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1MzU3Ny5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAJBP8DANBgkqhkiG9w0BAQsFAAOCAQEAUzik8EYyvnOpBBTggB2D idSsBqZ3VGk7Piu1sVPeoPtAaAcYTBB8dfDcUf9FKsIpgcbICewTK042g5ddeyyj qH43AdNz1aX5F1SDixsBtewuwsATzwLN1X5EDsEvWIQtcWld5iAhaqMShe62IsTQ ZWJrOsXiUfxIqJKZ27JgHZRuOLGt6lxqYMpvPdEi3I+2Qah14hDZmO+O+eojWTmu +vR59BCoBjKjbF2dAVNCLZSDU2D0JZm19FaNshBCfGflh8vVi62t3jLWLQBLAiSl cqd5NOg+pZ0bZn0PrN4HZ5/AkonDi0qmBAG5J8/X1qIbc5aBkvuKzuAuLmdkAwRh uA== -----END CERTIFICATE-----Generated at Wed Jan 21 10:27:58 2026 by rpki-client