This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133352.roa File: AS133352.roa (raw, json) Hash identifier: nQPo5bHSmskfqmEU9p8gt3uYpnHyLrutm98NN/UZR40= Subject key identifier: E4:84:EB:21:7A:3D:64:A9:30:8C:72:43:CD:B8:E9:65:39:EA:2D:6E Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 46202B2B0904B58C8EFFC2C80C84717E4889F528 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133352.roa Signing time: Thu 13 Feb 2025 07:00:00 +0000 ROA not before: Thu 13 Feb 2025 06:55:00 +0000 ROA not after: Thu 12 Feb 2026 07:00:00 +0000 asID: 133352 IP address blocks: 43.250.76.0/22 maxlen: 24 43.250.76.0/24 maxlen: 24 43.250.77.0/24 maxlen: 24 43.250.78.0/24 maxlen: 24 43.250.79.0/24 maxlen: 24 103.231.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:20:2b:2b:09:04:b5:8c:8e:ff:c2:c8:0c:84:71:7e:48:89:f5:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 13 06:55:00 2025 GMT Not After : Feb 12 07:00:00 2026 GMT Subject: CN=E484EB217A3D64A9308C7243CDB8E96539EA2D6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ea:1a:6c:7a:6b:2e:1a:0b:95:c1:75:79:93: b8:62:cc:f8:65:22:bd:fc:01:9c:32:cb:d2:a8:90: 93:9e:66:79:f9:61:44:6d:23:3b:d2:87:aa:c0:d0: 7d:42:d1:90:4a:47:c4:2c:7d:43:18:2b:9e:41:9c: dd:ec:b4:c4:5e:00:aa:f9:45:e1:3d:f9:40:1e:4d: 4d:40:91:5c:a0:8d:1d:22:59:f4:1e:44:ea:f1:3a: 7c:5e:1d:b7:82:5e:d1:bf:77:7e:f4:3b:98:27:64: 19:fb:37:05:20:12:24:a2:17:d9:4a:9f:25:e6:1a: b8:d6:ad:90:80:35:cd:f3:be:98:be:ee:40:82:cf: 0e:8b:dd:9d:35:e5:65:4c:31:72:12:0f:70:10:f3: 54:36:e5:66:73:bb:fd:b5:49:4e:a6:8e:86:cd:df: a0:a8:8a:2d:e2:a7:9f:f3:af:2e:3e:06:58:b5:5e: 41:a6:b5:82:db:85:d9:2e:36:3e:a6:2f:e2:78:ba: 3a:1f:d4:6f:6e:43:11:50:b3:0a:5a:0b:8d:fb:05: df:8c:c7:21:c9:08:8c:e3:84:47:49:ae:93:fd:e8: 4a:f6:cd:6e:f5:00:15:94:8a:90:b5:30:d5:e7:ce: 2a:85:74:3e:b6:32:cb:e3:61:04:b9:2b:d0:5f:23: 40:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:84:EB:21:7A:3D:64:A9:30:8C:72:43:CD:B8:E9:65:39:EA:2D:6E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133352.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.250.76.0/22 103.231.200.0/22 Signature Algorithm: sha256WithRSAEncryption 0f:f8:8e:1b:f8:3f:93:04:e1:a5:80:b1:db:74:16:2b:dc:d3: eb:bd:a1:7c:ab:79:9f:a8:b9:d7:95:6a:79:c7:01:e9:28:31: bf:74:f4:88:0b:30:ba:9e:05:a3:f2:37:05:dd:b3:c3:9e:20: ca:b6:cb:80:d8:c5:56:09:6f:46:88:8b:74:01:92:d7:80:6c: 73:82:9d:8d:75:9e:eb:5f:c9:1d:c9:f1:a8:71:57:53:da:23: 0f:4c:d1:3f:08:f8:5b:85:9c:62:37:3e:a9:41:11:f0:b1:c6: 93:08:5e:b1:86:3f:1a:72:99:cc:f9:37:70:2c:d5:41:2f:59: 90:d9:9f:8e:45:5f:1c:5a:11:6c:76:1a:7a:54:fd:12:a6:dc: 0f:01:d6:eb:f5:55:ed:c5:50:5b:d5:8f:9b:db:47:98:f2:cf: 73:34:85:08:2d:64:39:31:98:52:3e:ce:9f:97:1f:a3:b8:69: 33:8d:b1:c0:2e:9c:cb:07:1d:25:2c:ed:2b:4f:87:f9:9f:35: 72:3a:a6:81:28:17:fe:0c:99:e2:72:a5:16:08:4d:1d:4d:b1: 55:ca:84:67:d1:27:12:f0:4a:8d:9d:4f:1b:47:47:34:db:59: 00:23:80:10:ea:6a:11:8c:10:63:08:6b:b6:aa:82:5c:27:0f: 47:1c:13:0d -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIURiArKwkEtYyO/8LIDIRxfkiJ9SgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDIxMzA2NTUwMFoX DTI2MDIxMjA3MDAwMFowMzExMC8GA1UEAxMoRTQ4NEVCMjE3QTNENjRBOTMwOEM3 MjQzQ0RCOEU5NjUzOUVBMkQ2RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMHqGmx6ay4aC5XBdXmTuGLM+GUivfwBnDLL0qiQk55meflhRG0jO9KHqsDQ fULRkEpHxCx9QxgrnkGc3ey0xF4AqvlF4T35QB5NTUCRXKCNHSJZ9B5E6vE6fF4d t4Je0b93fvQ7mCdkGfs3BSASJKIX2UqfJeYauNatkIA1zfO+mL7uQILPDovdnTXl ZUwxchIPcBDzVDblZnO7/bVJTqaOhs3foKiKLeKnn/OvLj4GWLVeQaa1gtuF2S42 PqYv4ni6Oh/Ub25DEVCzCloLjfsF34zHIckIjOOER0muk/3oSvbNbvUAFZSKkLUw 1efOKoV0PrYyy+NhBLkr0F8jQF0CAwEAAaOCAdYwggHSMB0GA1UdDgQWBBTkhOsh ej1kqTCMckPNuOllOeotbjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzMzM1Mi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAiv6TAMEAmfnyDANBgkqhkiG9w0BAQsFAAOCAQEAD/iOG/g/kwTh pYCx23QWK9zT672hfKt5n6i515VqeccB6Sgxv3T0iAswup4Fo/I3Bd2zw54gyrbL gNjFVglvRoiLdAGS14Bsc4KdjXWe61/JHcnxqHFXU9ojD0zRPwj4W4WcYjc+qUER 8LHGkwhesYY/GnKZzPk3cCzVQS9ZkNmfjkVfHFoRbHYaelT9EqbcDwHW6/VV7cVQ W9WPm9tHmPLPczSFCC1kOTGYUj7On5cfo7hpM42xwC6cywcdJSztK0+H+Z81cjqm gSgX/gyZ4nKlFghNHU2xVcqEZ9EnEvBKjZ1PG0dHNNtZACOAEOpqEYwQYwhrtqqC XCcPRxwTDQ== -----END CERTIFICATE-----Generated at Wed Dec 3 13:55:26 2025 by rpki-client