This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150925.roa File: AS150925.roa (raw, json) Hash identifier: kplzkYNgs955BOGqinEbF2V5+8a8Z4mnt6e1CmrQIK0= Subject key identifier: 5B:E9:E3:6B:31:EC:CB:48:3A:B5:89:42:C2:C5:FD:AB:75:2A:BB:11 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 27F92C49879A0A62DC7131FA4E24C18D3066075B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150925.roa Signing time: Fri 09 Jan 2026 10:32:23 +0000 ROA not before: Fri 09 Jan 2026 10:27:23 +0000 ROA not after: Fri 08 Jan 2027 10:32:23 +0000 asID: 150925 IP address blocks: 103.102.16.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:f9:2c:49:87:9a:0a:62:dc:71:31:fa:4e:24:c1:8d:30:66:07:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 10:27:23 2026 GMT Not After : Jan 8 10:32:23 2027 GMT Subject: CN=5BE9E36B31ECCB483AB58942C2C5FDAB752ABB11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b0:85:0b:20:7e:54:0c:65:f7:a2:80:e8:1c: 16:84:de:30:dc:bb:46:de:12:f9:4d:14:52:1d:9d: 37:e8:49:b3:23:94:3f:12:c1:67:05:93:eb:86:90: 9a:54:64:83:98:cb:a1:f1:51:02:5b:22:db:0a:fc: 03:b1:46:65:73:6c:72:53:46:66:db:e9:49:2c:62: e4:fb:75:29:e2:63:35:68:15:3c:d5:bf:5b:b1:77: c6:40:dc:e9:3f:ce:52:ee:6a:ce:b3:a9:01:6c:d8: 32:f4:eb:f2:f4:4d:f8:01:b1:53:01:af:73:20:b4: 30:e2:39:c1:32:7a:eb:3e:6f:d3:2c:b3:ea:24:37: e3:16:51:07:8b:4a:d3:c2:84:99:a9:24:37:c7:d7: 33:99:3e:9f:cd:29:ec:d6:87:94:ff:75:69:b1:09: a6:de:a3:2b:15:8a:85:ff:9c:4a:af:e4:23:66:af: 27:7b:8f:f9:e3:8c:df:b3:b6:42:05:e5:45:79:ad: 38:af:b8:e3:55:07:88:d6:ca:f0:16:dd:5b:fe:a5: 85:97:eb:d2:83:ad:67:da:76:72:89:26:90:a8:27: 34:0d:02:3c:80:78:15:0d:f2:73:a6:fa:03:d5:2b: fa:a3:df:d7:33:45:e8:47:24:bb:a1:ee:24:0b:47: aa:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:E9:E3:6B:31:EC:CB:48:3A:B5:89:42:C2:C5:FD:AB:75:2A:BB:11 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150925.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.102.16.0/23 Signature Algorithm: sha256WithRSAEncryption 06:4c:1f:88:88:f7:03:24:d8:45:32:c7:c0:bc:a2:78:60:53: c3:c4:19:a3:5e:7d:c1:2a:84:ca:00:56:d9:07:1a:9e:db:9a: 28:f7:d5:ff:38:b2:f5:62:77:33:64:b9:9b:9a:62:86:1e:be: 67:50:c1:32:fc:5f:79:4b:31:99:7f:de:a0:c2:1c:1e:4b:9d: 70:f9:1d:a2:8e:31:e2:9e:90:a7:86:0c:3e:97:0b:07:19:da: 81:f2:0d:05:3e:0d:bc:6b:3e:72:a2:53:97:45:4d:bd:74:e9: 86:13:1e:9c:7e:c1:2a:e2:bd:4d:cf:34:35:31:4e:af:d8:95: c6:f6:26:87:d5:b3:a3:19:fb:56:5e:38:6a:1d:d6:0a:36:6d: 66:e1:61:08:3e:db:61:38:ad:e5:e3:c0:81:1f:37:87:33:e0: 47:1c:59:ee:d6:9c:a2:3e:14:e1:99:82:98:b1:e2:d6:47:77: 2b:ba:c3:1e:0a:c6:9b:25:fe:21:4b:40:86:d6:3c:28:de:95: 44:90:58:55:26:cf:4f:fe:e1:2f:70:30:d4:b7:dd:6f:34:45: 31:a6:73:6d:73:28:61:cc:cb:50:b9:44:a3:36:53:21:5b:78: 1c:84:b0:60:be:e4:c7:5e:17:cf:dc:db:cc:b4:f0:9b:7d:81: c6:1e:53:6a -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUJ/ksSYeaCmLccTH6TiTBjTBmB1swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDEwOTEwMjcyM1oX DTI3MDEwODEwMzIyM1owMzExMC8GA1UEAxMoNUJFOUUzNkIzMUVDQ0I0ODNBQjU4 OTQyQzJDNUZEQUI3NTJBQkIxMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALmwhQsgflQMZfeigOgcFoTeMNy7Rt4S+U0UUh2dN+hJsyOUPxLBZwWT64aQ mlRkg5jLofFRAlsi2wr8A7FGZXNsclNGZtvpSSxi5Pt1KeJjNWgVPNW/W7F3xkDc 6T/OUu5qzrOpAWzYMvTr8vRN+AGxUwGvcyC0MOI5wTJ66z5v0yyz6iQ34xZRB4tK 08KEmakkN8fXM5k+n80p7NaHlP91abEJpt6jKxWKhf+cSq/kI2avJ3uP+eOM37O2 QgXlRXmtOK+441UHiNbK8BbdW/6lhZfr0oOtZ9p2cokmkKgnNA0CPIB4FQ3yc6b6 A9Ur+qPf1zNF6Ecku6HuJAtHqsMCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRb6eNr MezLSDq1iULCxf2rdSq7ETAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDkyNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWdmEDANBgkqhkiG9w0BAQsFAAOCAQEABkwfiIj3AyTYRTLHwLyi eGBTw8QZo159wSqEygBW2QcantuaKPfV/ziy9WJ3M2S5m5pihh6+Z1DBMvxfeUsx mX/eoMIcHkudcPkdoo4x4p6Qp4YMPpcLBxnagfINBT4NvGs+cqJTl0VNvXTphhMe nH7BKuK9Tc80NTFOr9iVxvYmh9Wzoxn7Vl44ah3WCjZtZuFhCD7bYTit5ePAgR83 hzPgRxxZ7tacoj4U4ZmCmLHi1kd3K7rDHgrGmyX+IUtAhtY8KN6VRJBYVSbPT/7h L3Aw1LfdbzRFMaZzbXMoYczLULlEozZTIVt4HISwYL7kx14Xz9zbzLTwm32Bxh5T ag== -----END CERTIFICATE-----Generated at Mon Feb 2 08:12:06 2026 by rpki-client