This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149366.roa File: AS149366.roa (raw, json) Hash identifier: Ec+mGtuRHXQ5RN+AxuJUMX1GgkzOqyuDlggzSR65Bqg= Subject key identifier: 33:FB:63:B2:76:D0:51:15:6E:17:FD:81:5E:3D:BB:54:2A:AE:1C:84 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7BA0BCD759C62B267556FA91B1F447493CA5180F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149366.roa Signing time: Fri 28 Nov 2025 05:00:00 +0000 ROA not before: Fri 28 Nov 2025 04:55:00 +0000 ROA not after: Fri 27 Nov 2026 05:00:00 +0000 asID: 149366 IP address blocks: 103.180.189.0/24 maxlen: 24 2001:df0:6140::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:a0:bc:d7:59:c6:2b:26:75:56:fa:91:b1:f4:47:49:3c:a5:18:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 28 04:55:00 2025 GMT Not After : Nov 27 05:00:00 2026 GMT Subject: CN=33FB63B276D051156E17FD815E3DBB542AAE1C84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:89:5e:57:bb:d6:75:b6:72:cc:d3:52:dc:b7: d7:60:f0:32:21:25:c1:0f:0c:7a:af:81:42:20:d7: e1:b5:f6:02:39:59:f1:93:5f:06:74:69:36:63:81: a6:58:4a:f4:19:74:4f:57:6c:09:0e:22:14:5e:63: 00:77:2f:86:c9:94:b7:86:e7:b9:cc:04:48:56:ae: 9b:a6:b6:78:60:52:2f:c9:4b:2d:b1:2c:74:9d:89: db:9a:0b:12:10:e1:2d:94:c7:0b:17:62:e6:c1:d6: ef:f6:13:f8:28:ac:e4:46:c5:7b:f1:8a:b1:7b:9c: f0:b1:da:e2:1c:79:ac:9a:0e:fb:2e:3f:07:b2:a5: c6:3d:fc:b5:64:4e:7b:5d:a4:9a:85:4f:fb:e1:53: fc:d8:d1:70:77:75:17:ea:8c:0e:c9:5f:8a:8c:a2: dc:6b:55:61:ea:00:a9:5c:b3:56:23:16:59:54:32: 27:7a:49:e6:06:fb:0e:2e:4a:97:31:a0:61:9d:33: a6:18:04:86:e6:6b:c6:e8:7b:d9:fe:0f:cf:60:cc: ae:ed:fe:30:e4:7b:61:29:6a:eb:07:35:ae:78:b9: 2e:25:ce:22:72:bb:a7:c8:fe:df:97:df:e9:dd:3e: a8:f8:c5:c0:bd:27:30:97:51:56:b0:6b:1f:ba:83: 35:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FB:63:B2:76:D0:51:15:6E:17:FD:81:5E:3D:BB:54:2A:AE:1C:84 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149366.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.180.189.0/24 IPv6: 2001:df0:6140::/48 Signature Algorithm: sha256WithRSAEncryption 40:6e:f3:68:64:92:d6:6d:5b:2f:58:c3:b4:ac:64:d6:6c:9c: ce:42:db:3a:44:19:18:52:38:79:9e:7b:62:cf:b7:f2:c1:9f: 93:32:25:e2:4f:51:f4:f2:e8:3d:8d:f6:4e:ae:a7:33:80:ed: 9c:77:ef:46:bc:c4:03:38:e5:a0:a7:93:5f:b9:06:67:17:50: 02:4f:b7:72:ee:03:ad:16:7b:43:96:89:e5:75:b4:c5:42:cf: 4d:3e:96:2d:01:7b:85:11:99:75:1d:62:b8:a6:53:70:a1:c3: e7:5f:57:0b:0f:eb:75:bd:de:c5:ea:5d:6b:ea:03:0d:d8:fe: 66:8f:b8:c7:e5:4b:eb:ea:fe:78:3d:89:9f:12:36:e5:0c:82: 53:74:9b:a3:1f:8c:5a:96:78:90:28:3e:78:91:93:b8:b1:be: d7:75:ef:85:a7:e2:88:54:d7:32:0e:43:2a:58:73:f7:ae:a5: 9c:72:5f:7a:be:51:b0:9a:db:5a:ae:69:f9:9a:f0:fd:ac:2e: 0b:be:5f:89:e1:fe:20:a1:6d:53:b3:35:50:ff:f2:b8:7a:ad: bc:77:b6:b3:2c:c9:3f:d2:bd:8e:9c:1f:a8:8a:33:2f:ee:a0: 39:42:44:d1:61:0b:f9:35:51:34:14:8c:73:bc:15:2e:7e:77: d0:51:6e:c6 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUe6C811nGKyZ1VvqRsfRHSTylGA8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTEyODA0NTUwMFoX DTI2MTEyNzA1MDAwMFowMzExMC8GA1UEAxMoMzNGQjYzQjI3NkQwNTExNTZFMTdG RDgxNUUzREJCNTQyQUFFMUM4NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOqJXle71nW2cszTUty312DwMiElwQ8Meq+BQiDX4bX2AjlZ8ZNfBnRpNmOB plhK9Bl0T1dsCQ4iFF5jAHcvhsmUt4bnucwESFaum6a2eGBSL8lLLbEsdJ2J25oL EhDhLZTHCxdi5sHW7/YT+Cis5EbFe/GKsXuc8LHa4hx5rJoO+y4/B7Klxj38tWRO e12kmoVP++FT/NjRcHd1F+qMDslfioyi3GtVYeoAqVyzViMWWVQyJ3pJ5gb7Di5K lzGgYZ0zphgEhuZrxuh72f4Pz2DMru3+MOR7YSlq6wc1rni5LiXOInK7p8j+35ff 6d0+qPjFwL0nMJdRVrBrH7qDNcsCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBQz+2Oy dtBRFW4X/YFePbtUKq4chDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTM2Ni5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAGe0vTAPBAIAAjAJAwcAIAEN8GFAMA0GCSqGSIb3DQEBCwUAA4IB AQBAbvNoZJLWbVsvWMO0rGTWbJzOQts6RBkYUjh5nntiz7fywZ+TMiXiT1H08ug9 jfZOrqczgO2cd+9GvMQDOOWgp5NfuQZnF1ACT7dy7gOtFntDlonldbTFQs9NPpYt AXuFEZl1HWK4plNwocPnX1cLD+t1vd7F6l1r6gMN2P5mj7jH5Uvr6v54PYmfEjbl DIJTdJujH4xalniQKD54kZO4sb7Xde+Fp+KIVNcyDkMqWHP3rqWccl96vlGwmtta rmn5mvD9rC4Lvl+J4f4goW1TszVQ//K4eq28d7azLMk/0r2OnB+oijMv7qA5QkTR YQv5NVE0FIxzvBUufnfQUW7G -----END CERTIFICATE-----Generated at Wed Dec 3 13:55:10 2025 by rpki-client