This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150464.roa
File: AS150464.roa (raw, json)
Hash identifier: JY+BpD1mS6HvpDTeBxFhV3AkQmgoylEsIZuGAqKMg/0=
Subject key identifier: 7E:2F:0D:E7:2D:0E:EF:D6:E0:C1:A6:A2:42:AA:E8:E9:18:40:F7:20
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 66F03E54545568BFC77B4C31523148C2A8E85816
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150464.roa
Signing time: Tue 04 Feb 2025 09:56:51 +0000
ROA not before: Tue 04 Feb 2025 09:51:51 +0000
ROA not after: Tue 03 Feb 2026 09:56:51 +0000
asID: 150464
IP address blocks: 103.170.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 12:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:f0:3e:54:54:55:68:bf:c7:7b:4c:31:52:31:48:c2:a8:e8:58:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Feb 4 09:51:51 2025 GMT
Not After : Feb 3 09:56:51 2026 GMT
Subject: CN=7E2F0DE72D0EEFD6E0C1A6A242AAE8E91840F720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:88:c0:80:b2:cf:53:16:5d:ec:9a:f2:31:67:
72:fd:b8:d2:d1:ef:05:f0:31:ab:14:97:73:87:b7:
30:58:54:68:52:8f:8f:f4:d4:c2:76:be:f7:7c:77:
ae:d0:f7:dd:2a:66:72:a5:1d:cf:0f:0f:6c:2f:43:
07:a3:7b:96:7e:59:1c:8c:05:8d:3c:9f:8a:9d:29:
99:6b:2a:8d:51:a7:50:ad:85:01:66:c6:58:99:fc:
90:d8:f8:10:97:7f:bb:c5:5f:0b:fe:8d:d6:6c:92:
50:6f:16:07:f0:58:c4:9f:e8:12:22:f5:41:b4:fd:
37:2b:ca:46:80:c3:0e:f4:52:b0:b8:eb:36:c9:5d:
53:90:af:55:78:2e:c9:16:0f:d8:6d:b6:ed:c8:1f:
1d:67:b0:8e:bb:30:77:b4:b2:6b:c7:b5:30:8e:c8:
1b:db:1e:67:d3:82:1b:11:10:6a:06:3c:b5:8b:fc:
ca:74:00:15:54:14:12:8c:5b:3b:7b:ae:93:b4:d7:
59:ce:04:e7:12:7e:8a:ec:38:a9:cc:0e:49:ea:d1:
4a:d1:50:f8:bb:c4:7c:e1:67:53:58:28:22:d0:73:
b4:04:18:a7:2b:c0:12:76:af:a9:2e:fb:0e:0b:4c:
02:46:8f:00:09:ff:5a:8d:97:86:6e:88:9c:09:0e:
25:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2F:0D:E7:2D:0E:EF:D6:E0:C1:A6:A2:42:AA:E8:E9:18:40:F7:20
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150464.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.170.198.0/24
Signature Algorithm: sha256WithRSAEncryption
84:9c:07:e7:62:2f:a3:9a:51:91:9a:aa:d9:c8:8a:e9:1e:0c:
b0:2d:a5:f1:44:f7:d2:9a:f3:9c:f7:86:f2:01:a1:a6:3c:32:
4b:54:d2:da:ce:cd:ed:3e:13:28:bd:56:b7:93:ec:da:dd:7a:
03:20:f7:50:87:4d:cd:3b:9c:db:2d:aa:a6:65:1e:7e:5b:ef:
44:8b:3a:fe:bf:e6:6e:39:ae:46:5d:83:0e:c6:ea:d3:98:09:
ba:04:79:bf:90:ca:e6:e2:13:93:d7:6b:d1:9e:ed:3d:2c:7f:
ec:d0:f4:a7:4d:b5:6f:29:9a:7b:22:01:d5:b5:0d:f0:55:d3:
e3:40:4f:95:87:fd:03:7c:f0:a8:86:82:1c:d8:87:c1:5f:d6:
5e:27:f6:87:92:e1:bf:ce:20:46:a6:6c:e7:31:34:d4:16:4d:
18:af:58:35:66:7b:39:32:1f:c6:a6:f9:50:ae:f7:f2:54:bc:
d0:46:48:4f:3a:6e:fa:e9:43:45:8d:f2:1d:5f:48:2b:d6:69:
f4:08:de:97:16:a7:06:52:0f:37:59:6a:d5:79:a2:c4:b8:c0:
3c:c8:b0:60:8c:fe:be:c6:02:62:93:35:12:60:5d:ff:e2:ce:
3a:96:9f:32:7a:05:e0:ba:33:1f:53:2f:59:12:96:07:27:ea:
4e:5b:98:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:55:26 2025 by rpki-client