This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149712.roa File: AS149712.roa (raw, json) Hash identifier: Oz9Lgtxjy6lwr32lnFRh96hHFpe58CcnzeGrIvNiZLo= Subject key identifier: E2:AE:58:73:1D:BF:A8:31:20:E8:F2:16:3A:91:1A:57:90:1F:1B:3A Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 01C7D2371D7AEE8EB015A7551DB599A5870986EC Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149712.roa Signing time: Tue 09 Dec 2025 08:00:00 +0000 ROA not before: Tue 09 Dec 2025 07:55:00 +0000 ROA not after: Tue 08 Dec 2026 08:00:00 +0000 asID: 149712 IP address blocks: 2001:df1:3d40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 13:15:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:c7:d2:37:1d:7a:ee:8e:b0:15:a7:55:1d:b5:99:a5:87:09:86:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 9 07:55:00 2025 GMT Not After : Dec 8 08:00:00 2026 GMT Subject: CN=E2AE58731DBFA83120E8F2163A911A57901F1B3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2a:74:d2:84:c2:b1:8b:e9:49:ed:f1:8a:72: e9:ca:1f:99:e5:e9:01:d3:4d:2c:8c:c1:d0:e7:3a: a2:8b:6b:2b:89:ec:3d:b2:82:9b:7d:fd:e5:d7:e9: 63:a7:75:e6:cc:c1:47:f5:9a:65:75:b1:a5:50:ee: 61:5c:35:8d:a0:7b:0b:90:a4:c9:79:64:d6:fb:ce: 5a:51:73:dd:f8:33:61:d2:74:92:b0:14:90:22:13: 44:82:0e:cf:87:e3:14:a8:19:de:8e:58:a9:74:0e: b2:b2:52:bf:0e:a4:e9:b1:39:f3:18:8d:6e:b6:75: 61:3e:c8:be:06:36:17:4c:10:d9:bf:5c:27:e7:7b: 11:78:8d:cf:10:a5:4e:03:7b:7c:21:cc:4b:0c:22: 4e:48:31:20:be:58:37:e3:11:a8:ae:2f:25:7c:51: 2e:4a:d1:26:c5:75:d7:b8:79:e7:80:f6:ab:d6:3a: 93:00:ca:3c:4b:3a:05:18:e1:94:a0:da:57:f1:04: ee:a9:d7:cb:09:6d:43:80:6f:0d:6e:f1:c2:99:17: 44:3d:46:4a:ea:c3:2d:21:aa:a9:ba:98:4e:4c:47: f3:be:14:35:39:77:2e:31:7a:a6:0b:b0:7a:e5:f9: 8f:1f:88:c6:59:60:d7:ee:7a:b6:dc:83:24:84:53: 01:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:AE:58:73:1D:BF:A8:31:20:E8:F2:16:3A:91:1A:57:90:1F:1B:3A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149712.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:3d40::/48 Signature Algorithm: sha256WithRSAEncryption 62:46:9a:2a:6c:78:82:a3:af:b5:77:a5:cf:8c:22:09:b8:0d: 61:16:9c:3f:e4:d8:cb:53:02:32:69:68:65:01:c5:65:b6:e8: b7:ec:56:ef:61:80:5c:a3:43:37:90:a8:bb:71:95:d2:6d:a4: 49:60:66:4b:15:30:58:89:95:49:96:1b:9b:50:84:d8:a1:88: 0e:a5:a8:65:87:ba:b1:6a:61:1e:3a:b6:47:09:7d:f4:6a:a3: db:3d:bd:e8:95:30:fc:8b:3d:08:6f:52:1f:6e:e4:d2:ee:1d: 00:21:84:9e:8c:71:ee:82:fe:87:9f:d9:35:3b:86:a4:e2:77: f5:f0:52:21:42:82:6f:25:0c:d0:1b:34:6d:eb:01:fa:f3:f2: a9:e3:67:7d:d4:a6:e6:2c:0d:c0:45:db:e2:d9:0c:56:a9:3d: 17:d8:b9:41:74:67:ae:96:9d:82:65:13:b3:f8:ee:2f:3e:ec: f7:ac:fd:42:3b:7c:71:de:4a:00:d4:f1:23:24:9a:55:2a:1b: 2d:88:31:b5:e9:50:ab:8d:0e:6e:df:eb:0e:f5:06:af:4e:6d: 67:c7:e4:0c:6e:ac:76:4f:12:e8:12:6f:d6:c6:e4:74:99:99: 3a:16:2d:d6:a3:cf:05:1a:4d:c3:d7:16:5c:2c:23:30:8d:6b: 3d:80:6d:2f -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUAcfSNx167o6wFadVHbWZpYcJhuwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIwOTA3NTUwMFoX DTI2MTIwODA4MDAwMFowMzExMC8GA1UEAxMoRTJBRTU4NzMxREJGQTgzMTIwRThG MjE2M0E5MTFBNTc5MDFGMUIzQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM8qdNKEwrGL6Unt8Ypy6cofmeXpAdNNLIzB0Oc6ootrK4nsPbKCm3395dfp Y6d15szBR/WaZXWxpVDuYVw1jaB7C5CkyXlk1vvOWlFz3fgzYdJ0krAUkCITRIIO z4fjFKgZ3o5YqXQOsrJSvw6k6bE58xiNbrZ1YT7IvgY2F0wQ2b9cJ+d7EXiNzxCl TgN7fCHMSwwiTkgxIL5YN+MRqK4vJXxRLkrRJsV117h554D2q9Y6kwDKPEs6BRjh lKDaV/EE7qnXywltQ4BvDW7xwpkXRD1GSurDLSGqqbqYTkxH874UNTl3LjF6pguw euX5jx+Ixllg1+56ttyDJIRTAbECAwEAAaOCAdMwggHPMB0GA1UdDgQWBBTirlhz Hb+oMSDo8hY6kRpXkB8bOjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTcxMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfE9QDANBgkqhkiG9w0BAQsFAAOCAQEAYkaaKmx4gqOvtXel z4wiCbgNYRacP+TYy1MCMmloZQHFZbbot+xW72GAXKNDN5Cou3GV0m2kSWBmSxUw WImVSZYbm1CE2KGIDqWoZYe6sWphHjq2Rwl99Gqj2z296JUw/Is9CG9SH27k0u4d ACGEnoxx7oL+h5/ZNTuGpOJ39fBSIUKCbyUM0Bs0besB+vPyqeNnfdSm5iwNwEXb 4tkMVqk9F9i5QXRnrpadgmUTs/juLz7s96z9Qjt8cd5KANTxIySaVSobLYgxtelQ q40Obt/rDvUGr05tZ8fkDG6sdk8S6BJv1sbkdJmZOhYt1qPPBRpNw9cWXCwjMI1r PYBtLw== -----END CERTIFICATE-----Generated at Sun Dec 14 00:03:21 2025 by rpki-client