This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147088.roa File: AS147088.roa (raw, json) Hash identifier: g1WqxoM/BTEU4s1vmmbLkRJzqQE0V+CBLMSflEd+QWc= Subject key identifier: 6D:C0:6F:E3:84:19:74:26:37:33:52:BB:E0:FF:2E:C8:C5:1B:F4:78 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3701C40B12D6AE9D35C0998F650A12F690A6862D Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147088.roa Signing time: Tue 11 Nov 2025 06:00:06 +0000 ROA not before: Tue 11 Nov 2025 05:55:06 +0000 ROA not after: Tue 10 Nov 2026 06:00:06 +0000 asID: 147088 IP address blocks: 103.172.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:01:c4:0b:12:d6:ae:9d:35:c0:99:8f:65:0a:12:f6:90:a6:86:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 11 05:55:06 2025 GMT Not After : Nov 10 06:00:06 2026 GMT Subject: CN=6DC06FE384197426373352BBE0FF2EC8C51BF478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1c:b7:6f:ed:c8:0b:79:ba:55:bf:10:1e:53: 20:67:40:f3:e0:6d:70:2f:69:49:ef:fb:f6:47:b9: c2:6c:5c:70:64:30:00:4f:fe:3d:c6:2c:65:a1:2e: 7d:63:b5:6a:0e:2c:62:e0:d6:08:7f:4e:d5:2b:fd: c1:86:56:13:81:7c:75:9d:15:89:7a:3d:75:73:48: 09:aa:c8:ce:ca:9e:ce:4c:c4:c5:d0:2f:87:75:65: ef:ec:b3:22:81:91:5e:ad:dc:10:ca:b3:0a:e7:c3: 3b:ad:33:4a:2b:86:22:15:71:45:5c:a8:99:8b:49: 55:e3:82:c4:dd:f3:9a:49:17:08:2f:78:16:97:2a: f8:89:1a:cd:f3:d9:c7:77:fd:d3:2e:77:5f:03:b9: 93:0d:1b:2e:3b:c3:b5:85:d8:74:0e:77:89:f8:6d: 05:8d:83:51:2b:dc:a8:48:66:61:94:20:a8:97:9f: 3e:2a:48:ee:9f:c7:42:22:f9:a2:6d:96:02:37:54: 06:69:02:ac:b7:73:3d:4a:bb:55:68:30:f8:3b:df: 50:40:fc:c9:6c:93:c7:be:c7:61:d4:ef:a7:db:3f: 4b:93:96:60:65:53:09:e3:7b:1d:27:07:37:b7:d6: 2d:b9:aa:45:1d:55:b5:a6:05:75:84:71:58:42:3f: 4d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C0:6F:E3:84:19:74:26:37:33:52:BB:E0:FF:2E:C8:C5:1B:F4:78 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147088.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.172.0/24 Signature Algorithm: sha256WithRSAEncryption 87:9d:89:07:c9:c7:89:f7:09:6e:75:4e:e8:23:a1:48:e6:03: eb:4e:11:51:eb:0a:7c:ff:b6:dc:5b:d3:5d:f0:53:c0:39:49: e2:7e:f4:22:4a:78:37:44:05:6a:2a:5d:ad:51:bd:00:33:26: 29:32:e4:b2:47:be:57:6b:83:56:a0:ff:b1:d1:fd:5a:f8:b2: 1f:05:d4:e2:86:1f:87:b7:83:3e:35:cb:08:f2:7a:79:03:a8: d7:45:99:32:dc:48:c2:90:48:2b:c9:a7:26:97:c1:93:11:52: 34:da:88:e6:77:ea:5a:cc:c8:67:85:38:c2:18:7a:43:15:eb: 61:19:4c:1a:55:1f:74:24:d0:17:73:44:a1:41:fe:4b:3d:6f: 83:4d:12:3e:0e:a1:02:24:9d:99:6e:6d:b3:58:83:1f:89:8e: 80:47:5d:1f:74:54:5e:5c:8a:0f:b0:c0:66:64:a3:83:26:6a: 1d:60:cc:b8:66:42:9f:ce:f6:3c:41:19:6d:0f:b0:3d:62:2f: 2d:14:e4:46:8a:3d:47:df:58:be:4f:08:ca:26:74:38:63:6c: f8:ed:b0:3e:25:e4:0c:7e:7e:3d:86:21:5b:e9:99:b9:31:ce: 68:94:fb:c7:26:1e:83:a7:2b:3b:b4:a1:a7:24:76:a1:bc:95: 10:24:56:6b -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUNwHECxLWrp01wJmPZQoS9pCmhi0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTA1NTUwNloX DTI2MTExMDA2MDAwNlowMzExMC8GA1UEAxMoNkRDMDZGRTM4NDE5NzQyNjM3MzM1 MkJCRTBGRjJFQzhDNTFCRjQ3ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALUct2/tyAt5ulW/EB5TIGdA8+BtcC9pSe/79ke5wmxccGQwAE/+PcYsZaEu fWO1ag4sYuDWCH9O1Sv9wYZWE4F8dZ0ViXo9dXNICarIzsqezkzExdAvh3Vl7+yz IoGRXq3cEMqzCufDO60zSiuGIhVxRVyomYtJVeOCxN3zmkkXCC94Fpcq+IkazfPZ x3f90y53XwO5kw0bLjvDtYXYdA53ifhtBY2DUSvcqEhmYZQgqJefPipI7p/HQiL5 om2WAjdUBmkCrLdzPUq7VWgw+DvfUED8yWyTx77HYdTvp9s/S5OWYGVTCeN7HScH N7fWLbmqRR1VtaYFdYRxWEI/TQcCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRtwG/j hBl0JjczUrvg/y7IxRv0eDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0NzA4OC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGesrDANBgkqhkiG9w0BAQsFAAOCAQEAh52JB8nHifcJbnVO6COh SOYD604RUesKfP+23FvTXfBTwDlJ4n70Ikp4N0QFaipdrVG9ADMmKTLkske+V2uD VqD/sdH9WviyHwXU4oYfh7eDPjXLCPJ6eQOo10WZMtxIwpBIK8mnJpfBkxFSNNqI 5nfqWszIZ4U4whh6QxXrYRlMGlUfdCTQF3NEoUH+Sz1vg00SPg6hAiSdmW5ts1iD H4mOgEddH3RUXlyKD7DAZmSjgyZqHWDMuGZCn872PEEZbQ+wPWIvLRTkRoo9R99Y vk8IyiZ0OGNs+O2wPiXkDH5+PYYhW+mZuTHOaJT7xyYeg6crO7ShpyR2obyVECRW aw== -----END CERTIFICATE-----Generated at Wed Dec 3 13:15:57 2025 by rpki-client