This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154369.roa File: AS154369.roa (raw, json) Hash identifier: A60tWVefB0nfLgUW1dmEX6/FNnpf6FYx+whHcK2nyZU= Subject key identifier: 8F:D8:C8:FB:12:73:BE:06:68:77:E0:AE:A3:EF:4D:49:1B:0B:F9:3E Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 429AC2AFC50562CE68AEB503C1D36C6FA79AF434 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154369.roa Signing time: Wed 19 Nov 2025 10:01:45 +0000 ROA not before: Wed 19 Nov 2025 09:56:45 +0000 ROA not after: Wed 18 Nov 2026 10:01:45 +0000 asID: 154369 IP address blocks: 138.252.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 11:07:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:9a:c2:af:c5:05:62:ce:68:ae:b5:03:c1:d3:6c:6f:a7:9a:f4:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Nov 19 09:56:45 2025 GMT Not After : Nov 18 10:01:45 2026 GMT Subject: CN=8FD8C8FB1273BE066877E0AEA3EF4D491B0BF93E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c1:79:bf:c2:de:cf:24:cd:0f:75:be:b5:df: d8:4d:e3:71:da:e7:92:bd:03:1b:d1:44:25:d8:ad: 94:e9:0d:b6:68:19:20:d5:a5:2b:56:49:f6:4c:00: 22:f2:93:e3:57:da:c6:f3:90:ed:7a:8d:e1:27:c3: bd:93:12:7a:37:fa:18:95:8e:a6:54:c1:36:f1:03: 21:fd:44:83:11:fd:b9:2f:3b:2a:8d:e3:36:ce:41: a5:d2:25:c8:a7:c1:2e:4d:80:7b:04:ac:ea:93:59: 73:96:44:db:15:bc:03:51:7b:42:b4:90:20:db:66: da:96:ae:d4:09:4f:76:dc:7f:3d:1e:67:d4:2f:19: 46:4d:79:ab:e0:8d:c3:6a:f0:8f:70:ed:53:da:d0: f4:e0:c7:a7:51:b6:ea:fa:43:54:81:c4:84:6a:87: 5d:06:ff:4b:cf:70:8e:81:ea:82:d9:16:c5:3c:1e: 1b:88:f9:22:8a:eb:57:00:41:8a:fa:de:e5:1b:5d: 8a:17:48:28:ae:f3:ba:a2:3a:ed:de:13:5d:a2:f9: a1:12:9e:ec:a1:06:ff:3d:f3:96:5f:51:bb:63:8f: 9a:0c:7d:4f:df:a8:73:d9:bb:6e:20:0f:7a:cd:01: b9:ea:99:17:6b:ea:e7:3e:87:69:bd:1a:ca:dc:71: c3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D8:C8:FB:12:73:BE:06:68:77:E0:AE:A3:EF:4D:49:1B:0B:F9:3E X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154369.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.252.193.0/24 Signature Algorithm: sha256WithRSAEncryption 89:b4:14:8b:1b:b4:c5:26:7d:1a:8e:ce:17:d8:66:b4:41:03: e3:b8:9c:b5:4e:cd:b4:52:29:44:5e:b3:86:ef:55:b5:78:27: 8d:28:10:93:5e:b2:29:75:9b:50:63:7c:8f:08:31:38:f0:08: 56:db:67:c4:aa:a4:6a:bc:7a:48:34:7f:04:3a:ce:c2:84:35: b7:ec:36:fb:1a:c5:7f:de:51:a2:b3:98:e0:03:8c:98:bd:5b: 33:36:43:dc:bc:9b:cf:26:e8:82:4c:ff:c1:6c:64:d0:bd:ba: 1c:66:3a:5f:89:67:12:55:53:86:e9:ce:7c:a2:f2:1e:96:cd: 4f:8c:6d:ba:a5:0b:77:73:1b:0a:f8:49:7e:02:96:7a:55:e1: fe:79:69:0c:eb:cf:60:06:62:dc:8b:0c:78:c9:79:6b:79:6b: f0:68:f0:29:68:f9:7e:67:fe:60:f3:8a:e8:80:40:2f:7f:98: b2:5e:8c:25:47:3a:51:46:bc:3c:c9:ce:b3:64:c2:aa:6d:49: 98:ca:b2:52:96:b6:c7:03:bc:09:5a:22:6e:12:5c:67:b6:c8: b3:fc:ea:cc:6c:ed:05:5e:fc:d9:1f:81:1c:cd:aa:80:a5:b6: 29:91:bb:53:96:4c:f0:ab:2f:d0:39:0e:74:87:cf:86:1c:e8: 7b:62:b6:1b -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUQprCr8UFYs5orrUDwdNsb6ea9DQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTExOTA5NTY0NVoX DTI2MTExODEwMDE0NVowMzExMC8GA1UEAxMoOEZEOEM4RkIxMjczQkUwNjY4NzdF MEFFQTNFRjRENDkxQjBCRjkzRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALbBeb/C3s8kzQ91vrXf2E3jcdrnkr0DG9FEJditlOkNtmgZINWlK1ZJ9kwA IvKT41faxvOQ7XqN4SfDvZMSejf6GJWOplTBNvEDIf1EgxH9uS87Ko3jNs5BpdIl yKfBLk2AewSs6pNZc5ZE2xW8A1F7QrSQINtm2pau1AlPdtx/PR5n1C8ZRk15q+CN w2rwj3DtU9rQ9ODHp1G26vpDVIHEhGqHXQb/S89wjoHqgtkWxTweG4j5IorrVwBB ivre5RtdihdIKK7zuqI67d4TXaL5oRKe7KEG/z3zll9Ru2OPmgx9T9+oc9m7biAP es0BueqZF2vq5z6Hab0aytxxw+0CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSP2Mj7 EnO+Bmh34K6j701JGwv5PjAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1NDM2OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAIr8wTANBgkqhkiG9w0BAQsFAAOCAQEAibQUixu0xSZ9Go7OF9hm tEED47ictU7NtFIpRF6zhu9VtXgnjSgQk16yKXWbUGN8jwgxOPAIVttnxKqkarx6 SDR/BDrOwoQ1t+w2+xrFf95RorOY4AOMmL1bMzZD3Lybzybogkz/wWxk0L26HGY6 X4lnElVThunOfKLyHpbNT4xtuqULd3MbCvhJfgKWelXh/nlpDOvPYAZi3IsMeMl5 a3lr8GjwKWj5fmf+YPOK6IBAL3+Ysl6MJUc6UUa8PMnOs2TCqm1JmMqyUpa2xwO8 CVoibhJcZ7bIs/zqzGztBV782R+BHM2qgKW2KZG7U5ZM8Ksv0DkOdIfPhhzoe2K2 Gw== -----END CERTIFICATE-----Generated at Wed Dec 3 16:05:10 2025 by rpki-client