This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154023.roa File: AS154023.roa (raw, json) Hash identifier: 4VETdDoWsUUulWE0VZFQkI2vRcApUJQ0bUoEX9l4wGE= Subject key identifier: C4:CD:F7:B0:BF:9F:E4:8C:96:33:F1:24:FF:93:C8:C0:A5:75:8D:98 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 3E731A7FA37EA47531C7F848A1D74A1725279D0E Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154023.roa Signing time: Mon 21 Jul 2025 03:25:57 +0000 ROA not before: Mon 21 Jul 2025 03:20:57 +0000 ROA not after: Mon 20 Jul 2026 03:25:57 +0000 asID: 154023 IP address blocks: 165.101.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 11:07:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:73:1a:7f:a3:7e:a4:75:31:c7:f8:48:a1:d7:4a:17:25:27:9d:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jul 21 03:20:57 2025 GMT Not After : Jul 20 03:25:57 2026 GMT Subject: CN=C4CDF7B0BF9FE48C9633F124FF93C8C0A5758D98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0a:3b:1f:22:c2:1b:e9:e2:e3:04:17:23:4d: 96:26:60:75:2f:ce:e8:d6:67:d1:ba:13:07:0f:b9: ac:66:20:1e:86:d9:16:3e:7d:cb:b5:18:e5:e1:9e: 19:10:59:a6:60:cb:5d:f3:64:9e:37:65:28:c7:dc: e7:cb:d4:98:d6:c2:07:12:18:2d:d3:dc:bc:c3:a1: b0:65:3c:63:ec:9b:db:7c:a3:fa:9d:69:0c:36:70: 54:a1:dc:e7:3e:78:d8:68:16:53:f1:cd:d6:b4:47: f2:6e:68:b0:76:2f:c0:4d:fe:cd:f5:f3:4d:0a:7d: db:2c:e1:a3:97:d0:f0:37:d3:62:44:2e:d2:c9:c1: 21:03:44:95:13:a5:0e:a0:7b:2c:61:aa:3b:b3:96: 43:a7:ed:13:9b:85:02:18:20:27:09:71:77:5e:22: f4:4c:80:c2:29:3b:88:15:0d:e3:d6:b8:81:f1:98: 6d:9b:f4:43:47:bf:50:32:2d:6b:35:df:fd:64:65: 72:fa:cf:b8:5a:b0:b1:a0:18:f3:29:f2:ec:fd:2f: 63:ea:1e:d0:79:f0:67:a1:64:48:81:70:b6:35:11: 48:37:fb:6e:08:96:5d:a7:27:b9:f5:19:30:e7:3d: 76:9b:b3:bd:1d:d1:82:57:0f:dd:f4:3b:05:6d:8a: 07:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:CD:F7:B0:BF:9F:E4:8C:96:33:F1:24:FF:93:C8:C0:A5:75:8D:98 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154023.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 165.101.82.0/24 Signature Algorithm: sha256WithRSAEncryption 37:fd:e4:99:07:ce:93:f9:8f:74:8c:64:84:f8:11:bf:ca:98: 5d:72:c5:1d:c6:b3:5c:00:33:ca:7c:0a:94:20:5f:4c:02:9d: 73:f5:be:bf:fe:bd:ca:fa:e8:3b:09:65:63:57:83:b3:ba:92: 40:60:6c:67:24:f0:ff:73:ff:f4:a6:42:d0:76:e5:20:24:4e: 5e:6d:4e:01:c7:0e:54:2c:1f:65:6e:87:ad:71:05:9d:06:80: 9c:df:c2:76:f6:4b:85:6b:31:46:bb:13:9a:97:3b:c6:f7:81: 12:9f:64:20:a5:d1:ec:7c:c3:45:f7:9a:3f:42:3c:df:a3:d0: 18:be:6b:54:58:3a:9a:b8:4f:b3:75:87:74:de:c9:29:49:72: 74:8b:b8:f7:36:85:fc:88:c8:e8:be:ce:62:a2:a9:d8:5d:4c: a3:3e:96:29:92:c8:82:0d:ed:74:f7:8c:49:9d:cc:45:77:f2: cc:74:be:83:86:f5:19:7e:cb:e8:66:f7:72:00:09:ff:ec:37: 6c:49:ad:58:a0:ea:06:55:d1:50:ee:e1:e9:8f:ad:b3:87:28: 73:31:a2:8b:c4:3e:1a:cb:ce:4c:1f:83:97:a5:b9:01:af:93: 9a:e8:d5:58:e1:23:a1:c9:47:2b:0c:da:de:23:1d:64:74:fd: 9a:f3:ff:d8 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUPnMaf6N+pHUxx/hIoddKFyUnnQ4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDcyMTAzMjA1N1oX DTI2MDcyMDAzMjU1N1owMzExMC8GA1UEAxMoQzRDREY3QjBCRjlGRTQ4Qzk2MzNG MTI0RkY5M0M4QzBBNTc1OEQ5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANAKOx8iwhvp4uMEFyNNliZgdS/O6NZn0boTBw+5rGYgHobZFj59y7UY5eGe GRBZpmDLXfNknjdlKMfc58vUmNbCBxIYLdPcvMOhsGU8Y+yb23yj+p1pDDZwVKHc 5z542GgWU/HN1rRH8m5osHYvwE3+zfXzTQp92yzho5fQ8DfTYkQu0snBIQNElROl DqB7LGGqO7OWQ6ftE5uFAhggJwlxd14i9EyAwik7iBUN49a4gfGYbZv0Q0e/UDIt azXf/WRlcvrPuFqwsaAY8yny7P0vY+oe0HnwZ6FkSIFwtjURSDf7bgiWXacnufUZ MOc9dpuzvR3RglcP3fQ7BW2KB60CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTEzfew v5/kjJYz8ST/k8jApXWNmDAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1NDAyMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKVlUjANBgkqhkiG9w0BAQsFAAOCAQEAN/3kmQfOk/mPdIxkhPgR v8qYXXLFHcazXAAzynwKlCBfTAKdc/W+v/69yvroOwllY1eDs7qSQGBsZyTw/3P/ 9KZC0HblICROXm1OAccOVCwfZW6HrXEFnQaAnN/CdvZLhWsxRrsTmpc7xveBEp9k IKXR7HzDRfeaP0I836PQGL5rVFg6mrhPs3WHdN7JKUlydIu49zaF/IjI6L7OYqKp 2F1Moz6WKZLIgg3tdPeMSZ3MRXfyzHS+g4b1GX7L6Gb3cgAJ/+w3bEmtWKDqBlXR UO7h6Y+ts4coczGii8Q+GsvOTB+Dl6W5Aa+TmujVWOEjoclHKwza3iMdZHT9mvP/ 2A== -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:38 2025 by rpki-client