This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147079.roa File: AS147079.roa (raw, json) Hash identifier: /gLhDAuQnDpKotpyy+qkO6GxSPVIF/+4dy9Os3sE4jg= Subject key identifier: 05:64:0B:14:04:DF:58:91:82:FA:18:02:12:44:A3:E6:71:EE:5F:FE Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 12537C30FE5D9350AC838EC003127140DD2C41C9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147079.roa Signing time: Wed 03 Dec 2025 04:00:00 +0000 ROA not before: Wed 03 Dec 2025 03:55:00 +0000 ROA not after: Wed 02 Dec 2026 04:00:00 +0000 asID: 147079 IP address blocks: 2407:ed40::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:53:7c:30:fe:5d:93:50:ac:83:8e:c0:03:12:71:40:dd:2c:41:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 3 03:55:00 2025 GMT Not After : Dec 2 04:00:00 2026 GMT Subject: CN=05640B1404DF589182FA18021244A3E671EE5FFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cf:c0:36:f5:38:ae:5a:1b:1e:ae:9e:ff:3f: d5:d1:13:c8:62:ca:9b:22:bc:cb:45:99:79:d6:1c: 62:87:92:9f:70:58:8d:05:f8:06:e1:cf:bd:70:15: 42:90:68:c2:d4:35:f1:57:8a:f7:04:b0:d3:46:46: 2d:3b:98:c6:78:2d:2e:4a:5c:2d:7d:d6:8e:50:50: a5:66:03:c1:71:82:d4:1b:7d:fa:19:8e:ac:3f:3f: fa:e0:7c:a5:0e:2f:b4:07:b6:58:c7:5a:f0:43:2c: de:d3:5f:89:0c:0f:a6:96:cb:de:ff:94:b6:ab:51: 65:ff:dc:ba:dc:cd:97:e5:dd:38:7e:43:c1:fa:37: 89:a8:c1:d6:bf:3c:d7:5e:3b:6b:ca:fd:42:b8:39: fe:59:86:94:bc:2a:0b:0f:df:39:08:d2:16:e2:03: ec:a7:21:60:cc:ee:c5:e4:fc:01:8d:9c:9a:bb:74: 81:5d:72:df:87:68:a7:4a:72:76:be:76:4f:cc:57: 70:1b:87:a5:5d:17:80:52:0f:83:bc:8b:e4:30:07: 64:76:95:19:6b:5f:3e:80:77:52:b7:30:7c:0b:19: af:e4:a0:f7:eb:7e:da:44:12:79:a1:ea:d9:8e:7c: 69:bf:cf:14:6b:8c:70:4b:29:17:9a:94:66:50:1c: 95:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:64:0B:14:04:DF:58:91:82:FA:18:02:12:44:A3:E6:71:EE:5F:FE X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147079.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:ed40::/32 Signature Algorithm: sha256WithRSAEncryption 57:f1:2b:fb:be:04:57:8a:56:ea:9d:1a:ca:83:b4:43:fa:73: 9b:a8:31:47:46:45:d2:6a:ba:45:48:0b:42:dd:4d:ad:06:c0: 9e:a5:21:a2:5e:67:9f:dc:14:92:d7:1d:9a:e5:91:0e:12:66: 8a:25:3a:40:15:12:7d:1b:59:ea:27:5f:c9:2a:5a:8b:5e:c1: a7:be:9c:3e:07:3d:9d:db:15:fc:71:00:79:47:bb:7d:63:d0: b1:84:70:11:86:da:68:88:77:5c:0b:24:d8:fc:2f:a9:2c:45: 14:5c:d3:90:69:e6:bf:56:ff:b9:32:1b:d8:22:17:5a:45:70: 2d:ff:7b:c0:3d:75:0a:e6:74:c3:57:86:ab:28:68:cd:64:6d: c3:42:78:38:f7:8f:3b:8c:15:54:f6:29:91:1f:25:1f:11:f5: d4:b3:87:67:64:0f:62:96:8a:2d:2f:94:6c:a0:65:77:7a:62: 3e:40:9d:21:46:9c:69:12:36:8a:3d:36:bb:aa:af:a7:e8:78: d3:1c:a9:20:09:13:60:f5:0d:ad:aa:14:ae:05:24:ab:75:1d: ff:23:66:93:6d:20:cf:51:c8:b3:6c:6e:0f:02:00:9d:75:33: 23:ff:0f:f9:69:bf:8e:c8:25:cb:74:8a:71:fb:1a:08:cb:fe: 00:95:c1:6a -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUElN8MP5dk1Csg47AAxJxQN0sQckwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIwMzAzNTUwMFoX DTI2MTIwMjA0MDAwMFowMzExMC8GA1UEAxMoMDU2NDBCMTQwNERGNTg5MTgyRkEx ODAyMTI0NEEzRTY3MUVFNUZGRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMbPwDb1OK5aGx6unv8/1dETyGLKmyK8y0WZedYcYoeSn3BYjQX4BuHPvXAV QpBowtQ18VeK9wSw00ZGLTuYxngtLkpcLX3WjlBQpWYDwXGC1Bt9+hmOrD8/+uB8 pQ4vtAe2WMda8EMs3tNfiQwPppbL3v+UtqtRZf/cutzNl+XdOH5Dwfo3iajB1r88 1147a8r9Qrg5/lmGlLwqCw/fOQjSFuID7KchYMzuxeT8AY2cmrt0gV1y34dop0py dr52T8xXcBuHpV0XgFIPg7yL5DAHZHaVGWtfPoB3UrcwfAsZr+Sg9+t+2kQSeaHq 2Y58ab/PFGuMcEspF5qUZlAcldkCAwEAAaOCAdEwggHNMB0GA1UdDgQWBBQFZAsU BN9YkYL6GAISRKPmce5f/jAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0NzA3OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8w DQQCAAIwBwMFACQH7UAwDQYJKoZIhvcNAQELBQADggEBAFfxK/u+BFeKVuqdGsqD tEP6c5uoMUdGRdJqukVIC0LdTa0GwJ6lIaJeZ5/cFJLXHZrlkQ4SZoolOkAVEn0b WeonX8kqWotewae+nD4HPZ3bFfxxAHlHu31j0LGEcBGG2miId1wLJNj8L6ksRRRc 05Bp5r9W/7kyG9giF1pFcC3/e8A9dQrmdMNXhqsoaM1kbcNCeDj3jzuMFVT2KZEf JR8R9dSzh2dkD2KWii0vlGygZXd6Yj5AnSFGnGkSNoo9Nruqr6foeNMcqSAJE2D1 Da2qFK4FJKt1Hf8jZpNtIM9RyLNsbg8CAJ11MyP/D/lpv47IJct0inH7GgjL/gCV wWo= -----END CERTIFICATE-----Generated at Wed Dec 3 14:41:37 2025 by rpki-client