This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150515.roa
File: AS150515.roa (raw, json)
Hash identifier: PDjFxwaGlPQ3fBHfCqZu/H90XWcHI7FyU5/Tr8JNnVM=
Subject key identifier: E9:97:62:2D:0E:18:26:1F:14:AD:40:AC:72:79:A5:CE:C0:09:E6:C0
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 4ECCD75DA17D20B6C136A489F0656FA2A84D9C5B
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150515.roa
Signing time: Tue 02 Dec 2025 03:00:00 +0000
ROA not before: Tue 02 Dec 2025 02:55:00 +0000
ROA not after: Tue 01 Dec 2026 03:00:00 +0000
asID: 150515
IP address blocks: 103.61.6.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 12:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:cc:d7:5d:a1:7d:20:b6:c1:36:a4:89:f0:65:6f:a2:a8:4d:9c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Dec 2 02:55:00 2025 GMT
Not After : Dec 1 03:00:00 2026 GMT
Subject: CN=E997622D0E18261F14AD40AC7279A5CEC009E6C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:08:6b:b0:a9:b0:25:fe:90:9c:54:f4:9f:70:
18:b0:65:6f:9c:6e:f9:be:5d:8a:79:a4:87:b8:38:
a7:ff:a3:50:78:6d:05:46:b0:56:24:71:d4:4e:1a:
dd:d4:4f:07:39:3e:c5:2c:aa:3d:c6:82:17:f5:27:
eb:5c:a4:d2:b7:5a:94:9c:d8:e4:0f:d3:93:0c:ab:
84:62:aa:90:07:00:82:83:86:cc:b0:a4:1c:f0:fa:
48:a6:60:85:b7:0a:a2:79:fc:ef:63:1e:9a:25:02:
6b:2f:39:53:43:e6:a0:4f:de:86:2f:07:b6:5e:e6:
33:a9:b7:99:56:a7:ec:3b:ac:9c:a8:7e:e5:c9:70:
56:76:52:56:f4:b1:6f:20:52:51:a8:4b:01:33:d5:
d0:28:de:14:a4:70:14:e6:71:00:be:a0:dd:f8:60:
92:51:b5:cb:aa:35:c0:9e:ca:29:f3:94:40:fc:8a:
fc:46:bc:f7:06:33:0f:32:f6:e3:07:32:fe:c8:a0:
32:6f:91:fa:7e:81:00:05:c3:ab:ed:01:68:1a:03:
05:7f:d8:92:5d:1e:50:0e:02:8a:95:92:b3:8e:5d:
9f:e0:ee:71:62:a9:4a:2d:65:cb:dd:b1:80:23:ba:
f0:07:2e:93:96:fa:6f:19:6f:57:2f:b3:59:62:ab:
85:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:97:62:2D:0E:18:26:1F:14:AD:40:AC:72:79:A5:CE:C0:09:E6:C0
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150515.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.61.6.0/23
Signature Algorithm: sha256WithRSAEncryption
78:5a:42:93:11:84:38:5c:66:0b:f1:34:44:3d:99:47:84:1c:
65:e9:e5:f9:c6:91:c9:53:75:ae:2c:17:8e:96:88:49:ca:c3:
c7:3b:38:78:5e:8d:f8:77:75:11:a7:17:17:75:97:ac:d3:23:
63:4c:f1:3a:6d:f7:91:70:a0:86:b5:5f:f3:91:c7:4f:c5:39:
9f:be:90:3b:56:c4:59:39:7f:5e:d9:15:f5:4d:26:1e:11:a1:
8c:9b:5c:5b:a7:99:d0:06:d8:4d:15:0b:96:0f:15:44:53:43:
03:3d:5c:32:64:43:71:b3:25:55:47:13:b4:52:78:35:c6:b2:
26:05:94:b5:46:17:46:63:9f:e4:05:31:73:55:6f:ee:bb:50:
91:1d:e5:e6:51:14:95:c4:87:d4:5e:72:4c:a1:23:5a:78:3a:
b8:9c:5a:60:98:41:43:9a:09:67:13:16:0c:82:05:08:10:08:
aa:93:c8:3f:16:54:53:52:00:f0:42:81:bc:b4:b8:ec:eb:bc:
d7:3a:56:b0:44:ff:ac:8b:c6:ae:ad:72:92:36:5f:99:a7:ae:
53:55:f4:d4:01:56:f7:cd:df:83:40:c0:a7:2d:fb:99:88:25:
6e:45:b1:fd:e3:5f:65:8e:c6:ea:1f:d1:c7:a7:f6:de:68:33:
ba:96:eb:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:55:22 2025 by rpki-client