This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154337.roa File: AS154337.roa (raw, json) Hash identifier: hMAnlxFO4OIOjL/s1DJvs/+xHyY4tU3Uj80cyf3bOzI= Subject key identifier: CE:4A:E4:44:01:2D:20:28:EC:F1:D4:92:0E:15:C4:CC:53:53:59:62 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 1C22A45209699D5B685C5176D770673CA0130A31 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154337.roa Signing time: Thu 13 Nov 2025 04:32:14 +0000 ROA not before: Thu 13 Nov 2025 04:27:14 +0000 ROA not after: Thu 12 Nov 2026 04:32:14 +0000 asID: 154337 IP address blocks: 138.252.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 11:07:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:22:a4:52:09:69:9d:5b:68:5c:51:76:d7:70:67:3c:a0:13:0a:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Nov 13 04:27:14 2025 GMT Not After : Nov 12 04:32:14 2026 GMT Subject: CN=CE4AE444012D2028ECF1D4920E15C4CC53535962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:13:34:2a:ad:fe:04:6c:83:1d:ff:0c:3c:2e: e5:0b:09:8f:40:88:7f:6f:d7:9d:3e:f9:3f:ba:63: e0:62:bf:96:ba:15:25:d6:d9:35:dd:70:91:b2:ef: 52:af:25:a6:2e:47:a9:d3:ed:bc:89:0b:27:b0:52: b4:d5:47:79:12:16:91:b6:fc:d2:6b:13:2d:b0:38: 7b:e6:bd:f0:03:bf:61:99:30:42:3e:a5:24:dd:9e: 71:0c:d3:37:0b:ee:d6:4c:4b:95:a0:f6:67:d3:13: 13:a7:2b:04:d5:b8:2d:1e:ad:e1:a1:30:67:3f:ef: 70:33:d6:88:ae:8d:71:ae:f2:17:0c:17:c9:23:c9: 42:7c:cc:29:78:a6:92:92:8d:10:6e:61:76:f1:64: bc:34:e6:82:c7:db:8e:bc:c3:0d:12:04:73:c5:53: b9:95:bb:53:63:06:74:8c:d9:6a:aa:32:eb:40:76: 1f:ba:8e:98:01:1b:ea:aa:3e:65:93:74:d0:9b:a6: 8e:d1:e0:c4:ad:39:ef:71:13:d0:7e:82:70:9d:0b: 85:2f:75:50:e1:6e:f6:1d:73:e6:71:4f:38:14:d2: f9:f9:a5:b3:f9:22:db:09:64:ae:61:e7:9f:52:28: f3:73:11:8a:b9:ca:2d:8a:77:20:1e:79:cf:4a:03: c8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:4A:E4:44:01:2D:20:28:EC:F1:D4:92:0E:15:C4:CC:53:53:59:62 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.252.91.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:87:e5:a5:76:62:32:fa:59:e9:24:25:3c:92:21:93:59:c1: 02:dc:af:21:7c:dd:3b:51:72:82:bf:b2:17:60:05:bf:3f:0e: 6f:7e:73:3a:a9:e0:8a:3e:ec:5b:12:8b:8c:5f:3f:cc:3f:74: 43:e5:56:3c:ba:26:4d:8d:3d:b1:ac:82:19:f8:61:d8:45:e0: 32:1d:f7:de:05:e6:f4:54:c8:ec:7c:78:73:7c:9b:7f:b9:79: f7:17:c3:44:4e:43:59:be:86:12:3b:ae:4c:2b:71:d0:f6:77: 7b:68:7b:fb:ce:81:1a:95:2c:32:32:1c:ab:2d:87:f4:f7:3b: 98:06:e6:c4:08:5f:8b:a4:d3:63:2a:c5:bf:7c:cd:b7:0b:74: 7b:95:92:8c:ff:d1:3d:fc:66:37:2a:aa:10:12:d2:1b:3b:e3: fd:a4:80:c3:d8:67:bd:19:96:03:39:19:9e:0a:58:f6:fb:bc: 9f:64:52:9a:23:07:f6:f9:29:32:49:b9:79:72:74:5c:a3:b5: 43:d6:df:d6:3d:a2:55:d3:75:f8:90:30:80:10:b7:e0:22:84: 03:77:81:e0:83:fa:9f:db:5a:9b:41:e4:95:f8:14:fb:58:23: bc:cf:81:2b:e0:37:80:bd:aa:37:46:21:24:73:f8:aa:49:2c: 37:45:3f:08 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUHCKkUglpnVtoXFF213BnPKATCjEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTExMzA0MjcxNFoX DTI2MTExMjA0MzIxNFowMzExMC8GA1UEAxMoQ0U0QUU0NDQwMTJEMjAyOEVDRjFE NDkyMEUxNUM0Q0M1MzUzNTk2MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALATNCqt/gRsgx3/DDwu5QsJj0CIf2/XnT75P7pj4GK/lroVJdbZNd1wkbLv Uq8lpi5HqdPtvIkLJ7BStNVHeRIWkbb80msTLbA4e+a98AO/YZkwQj6lJN2ecQzT Nwvu1kxLlaD2Z9MTE6crBNW4LR6t4aEwZz/vcDPWiK6Nca7yFwwXySPJQnzMKXim kpKNEG5hdvFkvDTmgsfbjrzDDRIEc8VTuZW7U2MGdIzZaqoy60B2H7qOmAEb6qo+ ZZN00JumjtHgxK0573ET0H6CcJ0LhS91UOFu9h1z5nFPOBTS+fmls/ki2wlkrmHn n1Io83MRirnKLYp3IB55z0oDyPcCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTOSuRE AS0gKOzx1JIOFcTMU1NZYjAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1NDMzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAIr8WzANBgkqhkiG9w0BAQsFAAOCAQEAjIflpXZiMvpZ6SQlPJIh k1nBAtyvIXzdO1Fygr+yF2AFvz8Ob35zOqngij7sWxKLjF8/zD90Q+VWPLomTY09 sayCGfhh2EXgMh333gXm9FTI7Hx4c3ybf7l59xfDRE5DWb6GEjuuTCtx0PZ3e2h7 +86BGpUsMjIcqy2H9Pc7mAbmxAhfi6TTYyrFv3zNtwt0e5WSjP/RPfxmNyqqEBLS Gzvj/aSAw9hnvRmWAzkZngpY9vu8n2RSmiMH9vkpMkm5eXJ0XKO1Q9bf1j2iVdN1 +JAwgBC34CKEA3eB4IP6n9tam0HklfgU+1gjvM+BK+A3gL2qN0YhJHP4qkksN0U/ CA== -----END CERTIFICATE-----Generated at Wed Dec 3 16:34:22 2025 by rpki-client