This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154440.roa File: AS154440.roa (raw, json) Hash identifier: EUT9FtOBPiWFvzbSAw4Scr2/UhVQLoQerFvjjSJZVro= Subject key identifier: 41:9F:0C:FF:17:BA:BD:5E:F5:F5:A2:D0:68:13:6F:38:FA:F8:D0:7C Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 1B05CFD8519AF553A53D81408C0EF0DA8F9875D0 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154440.roa Signing time: Mon 12 Jan 2026 08:18:54 +0000 ROA not before: Mon 12 Jan 2026 08:13:54 +0000 ROA not after: Mon 11 Jan 2027 08:18:54 +0000 asID: 154440 IP address blocks: 144.79.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 13:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:05:cf:d8:51:9a:f5:53:a5:3d:81:40:8c:0e:f0:da:8f:98:75:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jan 12 08:13:54 2026 GMT Not After : Jan 11 08:18:54 2027 GMT Subject: CN=419F0CFF17BABD5EF5F5A2D068136F38FAF8D07C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:85:9d:62:c2:b9:79:ef:6b:75:54:15:41:13: ae:9c:97:fe:c1:74:58:9b:42:63:72:3e:30:86:41: 97:82:15:a6:a4:6b:ed:57:b9:be:40:72:1d:5d:93: eb:b5:da:06:12:b7:b7:3f:c6:67:ee:57:e8:05:17: 7b:60:de:db:80:bd:bf:a2:47:f5:c2:aa:9e:ae:7f: d8:d3:01:93:d9:b4:fd:32:af:2b:84:cc:a7:66:72: c7:9c:06:ac:a2:6d:7a:a9:dd:32:9a:61:8f:91:82: 72:fb:b3:81:73:73:34:1c:cd:85:0d:2d:e2:ad:eb: fc:8a:6c:d0:0f:00:42:ca:cb:4f:2b:ed:c7:3d:19: 28:c1:c1:90:6f:aa:76:f8:0a:ab:bf:a3:93:c8:d8: 95:80:67:44:d4:af:40:d7:27:47:29:03:6e:42:0d: fd:df:73:f5:ae:73:c7:4c:9f:b8:eb:f8:6a:b7:e0: 01:a2:44:a6:dc:3a:e5:2c:30:42:fd:df:a0:6a:5c: ff:95:ff:59:c6:b8:f6:77:9f:2f:a4:96:83:ba:7b: d4:bf:07:c9:00:43:8d:99:4c:04:da:36:a0:6c:7e: 7a:f0:f8:72:d5:64:90:6c:53:bb:06:39:17:d2:a7: dd:7e:93:78:96:fe:12:0c:33:2a:dd:31:99:99:47: 26:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:9F:0C:FF:17:BA:BD:5E:F5:F5:A2:D0:68:13:6F:38:FA:F8:D0:7C X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154440.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.79.64.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:63:70:e4:da:92:c7:74:ce:21:43:68:0c:8d:59:71:7d:04: 46:5f:ec:4e:6b:f0:23:43:77:24:ca:df:e8:ed:3d:32:16:79: 21:5e:3a:95:59:66:41:47:55:e1:67:b2:bf:bf:14:e2:ba:62: b6:e2:c1:90:da:84:a6:2e:2c:72:24:90:e2:14:71:2c:66:77: dd:0c:76:fa:0d:43:1f:1b:4f:55:9c:9a:2b:32:66:39:3c:16: 84:24:81:03:c1:04:98:a3:5a:d2:46:d3:6a:a4:f3:01:d4:f2: 22:93:43:10:62:bb:41:d7:fb:42:18:3c:14:f7:cd:86:7c:8c: f8:cd:92:d1:12:bb:59:01:3e:c8:5e:82:a6:df:be:18:a9:e9: f9:18:72:2b:cf:2c:be:52:69:9f:d1:6f:c3:44:40:83:5d:5e: 38:4e:88:5e:4b:35:6d:3f:36:54:f5:06:de:b5:02:a0:36:6d: f2:23:9d:e0:7f:f7:b2:a8:6d:29:9c:bb:85:a4:2b:47:ea:99: 6c:fa:9b:f6:b2:68:49:8b:f7:63:d0:6e:3c:cc:66:9d:e0:3e: 62:36:d6:99:a1:7b:12:31:6a:3b:6a:1a:ef:ff:0c:fe:98:44: 27:e7:1d:18:51:26:46:ab:1d:56:43:ae:23:9c:5e:a2:32:37: b3:a5:da:f4 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUGwXP2FGa9VOlPYFAjA7w2o+YddAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDExMjA4MTM1NFoX DTI3MDExMTA4MTg1NFowMzExMC8GA1UEAxMoNDE5RjBDRkYxN0JBQkQ1RUY1RjVB MkQwNjgxMzZGMzhGQUY4RDA3QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKKFnWLCuXnva3VUFUETrpyX/sF0WJtCY3I+MIZBl4IVpqRr7Ve5vkByHV2T 67XaBhK3tz/GZ+5X6AUXe2De24C9v6JH9cKqnq5/2NMBk9m0/TKvK4TMp2Zyx5wG rKJteqndMpphj5GCcvuzgXNzNBzNhQ0t4q3r/Ips0A8AQsrLTyvtxz0ZKMHBkG+q dvgKq7+jk8jYlYBnRNSvQNcnRykDbkIN/d9z9a5zx0yfuOv4arfgAaJEptw65Sww Qv3foGpc/5X/Wca49nefL6SWg7p71L8HyQBDjZlMBNo2oGx+evD4ctVkkGxTuwY5 F9Kn3X6TeJb+EgwzKt0xmZlHJuUCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRBnwz/ F7q9XvX1otBoE284+vjQfDAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1NDQ0MC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAJBPQDANBgkqhkiG9w0BAQsFAAOCAQEAOmNw5NqSx3TOIUNoDI1Z cX0ERl/sTmvwI0N3JMrf6O09MhZ5IV46lVlmQUdV4Weyv78U4rpituLBkNqEpi4s ciSQ4hRxLGZ33Qx2+g1DHxtPVZyaKzJmOTwWhCSBA8EEmKNa0kbTaqTzAdTyIpND EGK7Qdf7Qhg8FPfNhnyM+M2S0RK7WQE+yF6Cpt++GKnp+RhyK88svlJpn9Fvw0RA g11eOE6IXks1bT82VPUG3rUCoDZt8iOd4H/3sqhtKZy7haQrR+qZbPqb9rJoSYv3 Y9BuPMxmneA+YjbWmaF7EjFqO2oa7/8M/phEJ+cdGFEmRqsdVkOuI5xeojI3s6Xa 9A== -----END CERTIFICATE-----Generated at Wed Jan 21 10:27:57 2026 by rpki-client