This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149969.roa File: AS149969.roa (raw, json) Hash identifier: FjCnz/XTUoawS3cuLi5c5KJufAmEuLoJn/JGTsS0GlE= Subject key identifier: 5B:F6:41:C2:DC:F4:84:DB:2C:3B:79:D3:83:E9:3F:87:8B:09:AB:1C Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7D0572E4597C6AC723B08BA3002517C86E1132ED Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149969.roa Signing time: Tue 02 Dec 2025 02:00:00 +0000 ROA not before: Tue 02 Dec 2025 01:55:00 +0000 ROA not after: Tue 01 Dec 2026 02:00:00 +0000 asID: 149969 IP address blocks: 103.23.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:05:72:e4:59:7c:6a:c7:23:b0:8b:a3:00:25:17:c8:6e:11:32:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 2 01:55:00 2025 GMT Not After : Dec 1 02:00:00 2026 GMT Subject: CN=5BF641C2DCF484DB2C3B79D383E93F878B09AB1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:01:f9:bd:2c:46:49:99:c6:e3:7e:11:ff:0b: b6:09:7f:a7:a7:13:37:8e:23:7f:62:25:61:32:90: 0e:f5:2c:b9:90:03:54:51:ee:be:d2:21:32:f3:00: bb:be:37:35:11:68:cf:26:e6:2f:55:d4:5d:78:62: 1f:4d:95:51:9b:49:df:fd:38:24:a0:8a:58:ee:71: 78:9e:12:cd:0b:26:c6:4d:79:50:85:49:17:73:d2: 28:72:84:c2:2d:a1:73:71:2b:4e:b0:a8:2e:5e:aa: e3:fd:86:d2:62:3d:c1:af:29:ed:c7:51:4d:30:7d: b9:69:25:19:74:f5:c3:a9:00:d9:20:a7:3a:af:66: b6:f3:d2:5c:75:3d:a5:06:f8:4b:a1:f0:79:b5:d7: f5:43:70:28:36:7b:5d:dc:87:9c:57:2a:62:94:83: bd:54:38:1d:48:de:03:7d:1d:6c:44:47:33:ae:df: 96:39:ce:f2:1c:77:b6:dc:22:da:93:ef:56:8c:23: 18:3b:0d:99:c9:d9:4f:bd:c2:8a:74:d7:79:97:5c: cf:e5:a2:7e:7c:e8:d7:8a:90:c6:d0:7c:52:5a:2a: ca:8d:f2:c9:2b:49:70:b8:57:65:f1:dd:76:a5:e4: 46:ef:59:ab:22:65:13:09:1a:5a:cc:59:2b:eb:01: 94:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F6:41:C2:DC:F4:84:DB:2C:3B:79:D3:83:E9:3F:87:8B:09:AB:1C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149969.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.23.28.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:84:68:bb:8e:88:98:a5:8b:6c:8f:34:db:13:3b:69:f7:d0: d1:5a:21:f7:85:10:4d:fe:ae:97:c5:ea:6c:7a:8e:18:ba:9f: 25:58:5d:f0:9b:ca:6d:5f:e6:3a:e4:d6:17:a3:31:ee:76:67: b9:2f:a6:e5:96:b7:db:fd:82:77:ad:fc:31:4b:3e:90:b5:e7: b0:0f:09:e7:15:aa:eb:6e:79:2a:1b:69:3c:a9:b2:9b:48:30: 58:df:bf:30:b6:d4:77:5d:6f:83:ca:4b:7a:6b:b8:9c:19:b9: e8:b0:af:a3:9c:2f:dc:1d:00:e7:bc:67:7e:c1:7e:c5:f5:af: de:18:04:20:3c:8f:dc:8a:22:af:a5:69:4e:31:f3:bd:bc:e5: 83:7d:63:ce:62:38:13:98:68:97:ac:d0:bd:60:a1:01:a8:20: f4:ca:46:6c:5d:3b:f0:ad:e4:4f:e8:fd:0c:f1:55:a6:e0:12: ac:8d:62:86:de:27:c8:fc:5a:60:e4:c1:7a:40:8d:92:fe:97: 43:8c:d2:33:8d:25:32:58:ad:a2:32:2e:2e:2b:c9:5d:91:af: 66:30:ee:77:81:07:00:56:c8:ed:df:b1:5b:6d:03:f7:ef:7f: c2:4e:67:77:af:49:d4:e7:ef:59:3f:07:b9:d9:ed:52:78:a1: 79:8d:f1:82 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUfQVy5Fl8ascjsIujACUXyG4RMu0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIwMjAxNTUwMFoX DTI2MTIwMTAyMDAwMFowMzExMC8GA1UEAxMoNUJGNjQxQzJEQ0Y0ODREQjJDM0I3 OUQzODNFOTNGODc4QjA5QUIxQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM4B+b0sRkmZxuN+Ef8Ltgl/p6cTN44jf2IlYTKQDvUsuZADVFHuvtIhMvMA u743NRFozybmL1XUXXhiH02VUZtJ3/04JKCKWO5xeJ4SzQsmxk15UIVJF3PSKHKE wi2hc3ErTrCoLl6q4/2G0mI9wa8p7cdRTTB9uWklGXT1w6kA2SCnOq9mtvPSXHU9 pQb4S6HwebXX9UNwKDZ7XdyHnFcqYpSDvVQ4HUjeA30dbERHM67fljnO8hx3ttwi 2pPvVowjGDsNmcnZT73CinTXeZdcz+Wifnzo14qQxtB8Uloqyo3yyStJcLhXZfHd dqXkRu9ZqyJlEwkaWsxZK+sBlDsCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRb9kHC 3PSE2yw7edOD6T+HiwmrHDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTk2OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGcXHDANBgkqhkiG9w0BAQsFAAOCAQEAK4Rou46ImKWLbI802xM7 affQ0Voh94UQTf6ul8XqbHqOGLqfJVhd8JvKbV/mOuTWF6Mx7nZnuS+m5Za32/2C d638MUs+kLXnsA8J5xWq6255KhtpPKmym0gwWN+/MLbUd11vg8pLemu4nBm56LCv o5wv3B0A57xnfsF+xfWv3hgEIDyP3Ioir6VpTjHzvbzlg31jzmI4E5hol6zQvWCh Aagg9MpGbF078K3kT+j9DPFVpuASrI1iht4nyPxaYOTBekCNkv6XQ4zSM40lMlit ojIuLivJXZGvZjDud4EHAFbI7d+xW20D9+9/wk5nd69J1OfvWT8HudntUniheY3x gg== -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:52 2025 by rpki-client