This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151555.roa
File: AS151555.roa (raw, json)
Hash identifier: 8tkxXfFzAS63UTx/Kg0AtV8OwYukqzbHIc9M3LOVOcc=
Subject key identifier: B1:58:6B:8F:2A:DE:54:63:F0:F7:33:05:6C:90:EB:C0:C8:CC:F0:49
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 6E643388C7D31ADD7BEF9EB7E19B071207E25B03
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151555.roa
Signing time: Thu 06 Nov 2025 05:02:24 +0000
ROA not before: Thu 06 Nov 2025 04:57:24 +0000
ROA not after: Thu 05 Nov 2026 05:02:24 +0000
asID: 151555
IP address blocks: 103.250.130.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 12:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:64:33:88:c7:d3:1a:dd:7b:ef:9e:b7:e1:9b:07:12:07:e2:5b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Nov 6 04:57:24 2025 GMT
Not After : Nov 5 05:02:24 2026 GMT
Subject: CN=B1586B8F2ADE5463F0F733056C90EBC0C8CCF049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:97:94:45:2e:bb:86:12:be:21:98:63:84:a5:
33:cd:c5:60:42:5f:ca:a8:19:bd:72:a4:a3:17:c7:
2a:8d:ea:1d:1e:99:11:57:10:11:bb:32:65:db:43:
fa:c2:e5:1a:18:e2:24:46:6e:a6:66:e8:40:c2:49:
bb:cf:e0:3b:b1:30:9f:bd:54:b5:26:ca:90:eb:7d:
ca:0f:e1:1f:67:39:15:68:a4:93:64:5e:b0:f7:b5:
ed:24:33:27:d8:84:50:98:93:54:4b:22:b2:66:87:
03:00:61:b4:82:d8:f7:35:69:7d:1b:59:54:72:f5:
9c:46:68:f6:45:08:91:34:c2:d1:06:08:27:3c:5d:
fb:2b:c9:6f:c1:7c:03:4e:85:2d:a5:ad:20:e4:67:
1b:82:a1:72:2a:fe:46:69:e9:fc:b0:bc:fd:6c:b6:
79:8d:41:c6:1f:ba:d8:d8:2c:ea:11:b0:87:e8:fc:
8d:5b:de:bf:10:01:f5:bf:d2:00:e7:f6:06:c2:20:
d0:92:1e:c6:94:f9:ed:21:4b:ab:b8:31:56:c8:32:
ed:8f:9a:74:4b:92:4b:76:b6:c0:84:d4:c0:11:58:
41:5e:c0:96:90:fb:df:57:c7:d2:00:66:ac:7d:ee:
b7:49:ea:0a:45:47:3c:0b:36:3d:52:2c:87:1f:8c:
ad:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:58:6B:8F:2A:DE:54:63:F0:F7:33:05:6C:90:EB:C0:C8:CC:F0:49
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151555.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.250.130.0/23
Signature Algorithm: sha256WithRSAEncryption
31:9f:0f:b1:1e:a6:85:ae:02:f1:93:74:fb:9e:07:9e:4a:93:
ca:92:46:52:02:63:2d:89:1c:65:30:d6:32:ab:8d:8b:58:97:
7d:d5:b1:c8:45:7b:79:91:72:df:cc:c0:0b:26:df:4a:68:c4:
35:03:2d:88:4c:57:d7:de:87:a0:ed:ee:ca:07:58:98:fa:ed:
a2:bf:06:2f:ad:a2:a2:04:c8:06:26:82:59:ff:62:9f:ae:f7:
0a:fc:4c:42:ee:dd:ce:84:2e:04:ae:fb:11:ef:3c:5c:5b:c1:
b0:8b:e6:39:2a:45:a6:85:14:ae:e0:e8:96:0a:e5:1f:81:59:
4e:77:dc:7c:f1:22:6e:7c:d5:5d:22:4f:b7:5a:96:b5:ca:2a:
f8:b2:7b:25:5a:1f:5d:34:c8:48:5f:20:ae:25:64:51:54:2e:
a4:7e:c1:94:6a:9b:dd:17:d5:8c:ee:22:82:96:ae:bb:78:60:
47:22:84:a0:f4:3f:f7:90:a7:d1:63:99:7e:58:06:3d:11:6d:
e0:7c:6b:d1:d6:51:86:ec:d2:c3:00:50:dc:ff:87:1d:7a:4a:
ae:f2:55:e2:6c:4f:85:19:06:03:24:42:38:4c:9c:e7:1a:3d:
2b:16:e1:5c:34:ce:32:81:59:1a:25:dd:1f:a1:22:c4:18:77:
c6:43:d3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:15:21 2025 by rpki-client