This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149661.roa File: AS149661.roa (raw, json) Hash identifier: BGKQIt1B4SVBsWl+yOvWb7W96YyuX2akvuVYnNgP/UU= Subject key identifier: BD:D3:92:7C:B1:AB:2C:93:DD:AE:24:04:79:5A:B3:AE:AB:1D:57:05 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0BB2F6CB6BF602B87FF94EBA6795136DB326D964 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149661.roa Signing time: Mon 17 Nov 2025 04:36:37 +0000 ROA not before: Mon 17 Nov 2025 04:31:37 +0000 ROA not after: Mon 16 Nov 2026 04:36:37 +0000 asID: 149661 IP address blocks: 163.227.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:b2:f6:cb:6b:f6:02:b8:7f:f9:4e:ba:67:95:13:6d:b3:26:d9:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 17 04:31:37 2025 GMT Not After : Nov 16 04:36:37 2026 GMT Subject: CN=BDD3927CB1AB2C93DDAE2404795AB3AEAB1D5705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d0:13:f1:fb:32:82:82:c7:37:6b:93:77:04: 6e:93:f1:0f:90:6b:a3:9b:d1:ad:e6:74:22:80:a9: c8:97:23:c3:6e:56:47:36:f6:51:b3:79:b6:8e:de: 2e:22:33:86:8e:ef:eb:66:2d:8f:48:1b:f9:ad:20: a2:a0:00:d5:e8:41:b3:4b:2a:b8:ec:0e:f2:69:ef: 4d:62:69:4f:ec:60:00:27:50:b4:04:01:22:b8:6f: 03:c4:71:c8:6d:a6:8c:f3:a7:53:48:13:03:31:12: 31:a0:9e:83:15:8f:b1:34:37:77:84:99:46:74:c3: 51:4b:7b:dd:f6:8b:6a:1d:de:57:e3:c6:74:9e:1d: a5:ae:61:0f:aa:e8:64:1f:83:7c:4f:47:f7:d2:77: d1:ac:44:95:07:76:fc:c6:e8:ee:d2:a3:39:c7:be: 08:25:d8:cf:f8:07:1f:56:0d:0b:e8:13:bf:c3:73: 92:d8:8d:19:9e:12:51:27:54:cc:c8:99:82:f7:90: 1a:0e:81:89:ac:42:80:db:c3:05:1d:97:bb:51:44: 6a:d4:7b:ef:05:9b:f8:d5:ee:f7:df:48:40:0f:72: b1:ce:2a:f7:94:78:20:e3:f8:1d:ea:45:5d:92:25: 57:3c:81:97:e8:2f:1e:b5:2d:1b:0a:2f:a6:d2:30: 0d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D3:92:7C:B1:AB:2C:93:DD:AE:24:04:79:5A:B3:AE:AB:1D:57:05 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149661.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.227.177.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:03:30:c1:f7:71:ab:ff:15:b8:3e:e9:56:5b:8c:08:c8:c4: 6f:2a:36:d9:0f:b3:97:21:c5:d6:b0:7a:61:bf:8c:85:27:ce: 33:d9:ef:4b:94:c0:49:b7:6a:2f:2c:2d:06:50:ec:08:86:f2: 89:61:45:10:1d:8c:6f:66:43:7a:7c:f2:a7:5e:fc:fa:23:90: e1:d9:95:d3:93:f5:a3:54:be:32:85:7c:3c:d6:35:e5:38:da: 28:ed:14:ee:3f:d8:b9:60:d6:90:e3:de:c6:22:33:ad:e7:09: d6:be:ba:ba:4e:c5:03:7b:dd:27:33:d8:91:b6:fa:b5:71:28: 27:24:5e:be:0a:d7:d9:0d:5d:02:57:c9:e3:89:6f:bd:90:db: 2f:55:31:20:16:f4:7b:a5:c0:df:54:fb:89:f1:ae:11:84:59: d5:0b:d4:72:d5:af:7e:8c:ee:1a:98:05:73:2c:ae:57:7b:9f: b8:7a:45:e0:92:a3:07:36:01:6a:41:7b:94:bb:1d:b2:1c:ce: 21:c2:59:42:f8:d8:d3:02:b3:38:44:29:a4:37:f6:4e:5a:53: d0:aa:b6:47:2a:d5:fc:3c:1c:19:51:7c:ac:e8:41:0e:ef:35: 81:25:f1:ec:10:58:e4:d1:6c:75:ce:f4:27:ed:9e:dd:5d:8a: 40:0f:6d:cb -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUC7L2y2v2Arh/+U66Z5UTbbMm2WQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExNzA0MzEzN1oX DTI2MTExNjA0MzYzN1owMzExMC8GA1UEAxMoQkREMzkyN0NCMUFCMkM5M0REQUUy NDA0Nzk1QUIzQUVBQjFENTcwNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMjQE/H7MoKCxzdrk3cEbpPxD5Bro5vRreZ0IoCpyJcjw25WRzb2UbN5to7e LiIzho7v62Ytj0gb+a0goqAA1ehBs0squOwO8mnvTWJpT+xgACdQtAQBIrhvA8Rx yG2mjPOnU0gTAzESMaCegxWPsTQ3d4SZRnTDUUt73faLah3eV+PGdJ4dpa5hD6ro ZB+DfE9H99J30axElQd2/Mbo7tKjOce+CCXYz/gHH1YNC+gTv8NzktiNGZ4SUSdU zMiZgveQGg6BiaxCgNvDBR2Xu1FEatR77wWb+NXu999IQA9ysc4q95R4IOP4HepF XZIlVzyBl+gvHrUtGwovptIwDdUCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBS905J8 sassk92uJAR5WrOuqx1XBTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTY2MS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKPjsTANBgkqhkiG9w0BAQsFAAOCAQEAHAMwwfdxq/8VuD7pVluM CMjEbyo22Q+zlyHF1rB6Yb+MhSfOM9nvS5TASbdqLywtBlDsCIbyiWFFEB2Mb2ZD enzyp178+iOQ4dmV05P1o1S+MoV8PNY15TjaKO0U7j/YuWDWkOPexiIzrecJ1r66 uk7FA3vdJzPYkbb6tXEoJyRevgrX2Q1dAlfJ44lvvZDbL1UxIBb0e6XA31T7ifGu EYRZ1QvUctWvfozuGpgFcyyuV3ufuHpF4JKjBzYBakF7lLsdshzOIcJZQvjY0wKz OEQppDf2TlpT0Kq2RyrV/DwcGVF8rOhBDu81gSXx7BBY5NFsdc70J+2e3V2KQA9t yw== -----END CERTIFICATE-----Generated at Wed Dec 3 14:50:03 2025 by rpki-client