This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147078.roa File: AS147078.roa (raw, json) Hash identifier: y0gydyztjh3Mot978cT4h5kF7Cg3QGEud6TEU4y3QcM= Subject key identifier: 3A:D8:E3:BF:D7:58:B4:DE:10:61:E0:C5:FF:C5:E3:B0:2F:B1:EA:1A Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2E440C65438266BAB0B008517EE12E06E2E7D0C5 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147078.roa Signing time: Tue 02 Dec 2025 02:00:00 +0000 ROA not before: Tue 02 Dec 2025 01:55:00 +0000 ROA not after: Tue 01 Dec 2026 02:00:00 +0000 asID: 147078 IP address blocks: 2001:df3:b9c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:44:0c:65:43:82:66:ba:b0:b0:08:51:7e:e1:2e:06:e2:e7:d0:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 2 01:55:00 2025 GMT Not After : Dec 1 02:00:00 2026 GMT Subject: CN=3AD8E3BFD758B4DE1061E0C5FFC5E3B02FB1EA1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f3:15:c0:81:5e:88:81:d9:7a:19:ca:91:87: 9f:c4:18:5b:19:72:a8:02:1b:a4:93:ee:39:4c:44: ad:f0:d0:78:e5:18:0a:a7:9c:d6:c4:ef:e0:91:c3: 90:e7:35:87:d5:7a:32:8c:9b:b6:4f:e2:8b:bf:33: a9:61:c3:fe:a3:35:6c:6f:4f:47:ed:76:cc:09:9d: fd:15:47:59:e8:8c:7b:6c:01:66:04:23:e8:9b:17: 90:7b:36:df:c4:3d:bf:04:88:9d:62:3e:bf:0c:5f: 6b:75:6f:d5:d1:16:c1:5c:2a:41:31:b3:cc:f5:d4: 7f:d3:0d:dc:22:c0:21:65:9d:fc:27:0a:c5:a8:f6: 4e:59:b8:f9:8e:d5:d2:a1:63:40:1e:6c:68:bf:e0: 3d:4e:64:90:fb:2c:98:27:47:a0:f2:16:17:0b:04: 83:e8:d6:b9:21:41:d4:a4:94:f6:45:01:2b:fc:ec: 2a:0a:b7:36:90:d7:56:85:12:58:e6:da:60:3a:c2: 70:d5:85:3d:b9:55:3f:c8:b5:24:bc:04:40:bf:1d: 2a:a7:bf:6f:ee:12:59:ad:ba:c1:40:a9:97:f3:b7: 01:42:c3:d7:a6:6f:83:b6:9d:d8:79:1b:f1:ef:43: 4e:c3:83:1f:55:9f:d6:57:a1:1d:d0:a4:b7:a5:0f: 9f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D8:E3:BF:D7:58:B4:DE:10:61:E0:C5:FF:C5:E3:B0:2F:B1:EA:1A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147078.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:b9c0::/48 Signature Algorithm: sha256WithRSAEncryption 7f:a9:e1:29:38:af:33:bd:aa:35:5c:5a:03:2b:03:7f:60:bd: 8e:2d:99:64:27:ec:66:92:78:b9:8f:52:b4:40:54:f1:30:18: f8:f5:75:3b:dd:9d:53:5d:c1:32:cc:03:c1:b0:ff:c9:84:ab: 58:0a:75:de:05:a6:54:6e:b8:f3:b0:39:fe:05:7d:aa:76:87: b0:38:67:59:33:50:01:da:0f:d0:85:a1:19:3c:9c:c8:2d:a4: e1:85:47:42:22:fa:97:88:8e:38:74:9f:41:f3:7f:5c:2b:8c: 7a:c5:a1:9a:1c:f7:1e:02:97:4f:f0:9a:f4:8d:2d:4b:24:fb: 89:d4:cc:99:5d:4f:42:6c:db:20:44:d4:55:5b:44:b1:96:b4: 78:e6:b3:91:ef:d5:2f:4b:71:cb:2f:73:04:87:1c:04:6f:20: 87:1b:ce:24:87:f2:9a:10:f3:f7:1d:ca:4c:16:83:09:2e:47: 36:95:78:56:cb:2f:03:85:b1:9a:67:69:36:34:5c:68:c0:2e: 86:fd:92:2c:24:17:34:32:15:f1:96:aa:ac:8f:b6:50:06:32: 89:3d:0b:48:53:b2:4b:4d:cb:85:c1:1a:ac:4e:44:47:2c:ff: 5b:b0:23:7b:21:3b:cd:21:2c:b8:f0:31:25:af:82:e1:cf:00: bf:bf:ff:4a -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIULkQMZUOCZrqwsAhRfuEuBuLn0MUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIwMjAxNTUwMFoX DTI2MTIwMTAyMDAwMFowMzExMC8GA1UEAxMoM0FEOEUzQkZENzU4QjRERTEwNjFF MEM1RkZDNUUzQjAyRkIxRUExQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL/zFcCBXoiB2XoZypGHn8QYWxlyqAIbpJPuOUxErfDQeOUYCqec1sTv4JHD kOc1h9V6Moybtk/ii78zqWHD/qM1bG9PR+12zAmd/RVHWeiMe2wBZgQj6JsXkHs2 38Q9vwSInWI+vwxfa3Vv1dEWwVwqQTGzzPXUf9MN3CLAIWWd/CcKxaj2Tlm4+Y7V 0qFjQB5saL/gPU5kkPssmCdHoPIWFwsEg+jWuSFB1KSU9kUBK/zsKgq3NpDXVoUS WObaYDrCcNWFPblVP8i1JLwEQL8dKqe/b+4SWa26wUCpl/O3AULD16Zvg7ad2Hkb 8e9DTsODH1Wf1lehHdCkt6UPnycCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBQ62OO/ 11i03hBh4MX/xeOwL7HqGjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0NzA3OC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfO5wDANBgkqhkiG9w0BAQsFAAOCAQEAf6nhKTivM72qNVxa AysDf2C9ji2ZZCfsZpJ4uY9StEBU8TAY+PV1O92dU13BMswDwbD/yYSrWAp13gWm VG6487A5/gV9qnaHsDhnWTNQAdoP0IWhGTycyC2k4YVHQiL6l4iOOHSfQfN/XCuM esWhmhz3HgKXT/Ca9I0tSyT7idTMmV1PQmzbIETUVVtEsZa0eOazke/VL0txyy9z BIccBG8ghxvOJIfymhDz9x3KTBaDCS5HNpV4VssvA4WxmmdpNjRcaMAuhv2SLCQX NDIV8ZaqrI+2UAYyiT0LSFOyS03LhcEarE5ERyz/W7AjeyE7zSEsuPAxJa+C4c8A v7//Sg== -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:51 2025 by rpki-client