This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152050.roa File: AS152050.roa (raw, json) Hash identifier: LUZXRTT2n299J0xEekQvNf4PRsQ/BF85ojGO4LFV8fw= Subject key identifier: 51:EF:D7:B4:8B:D4:84:B5:26:A4:03:1D:61:1A:6C:CF:7E:C4:83:8D Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 52D705D29AF830CB6AB988797DA64446B9E140D9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152050.roa Signing time: Tue 11 Nov 2025 06:00:04 +0000 ROA not before: Tue 11 Nov 2025 05:55:04 +0000 ROA not after: Tue 10 Nov 2026 06:00:04 +0000 asID: 152050 IP address blocks: 210.79.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:d7:05:d2:9a:f8:30:cb:6a:b9:88:79:7d:a6:44:46:b9:e1:40:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 11 05:55:04 2025 GMT Not After : Nov 10 06:00:04 2026 GMT Subject: CN=51EFD7B48BD484B526A4031D611A6CCF7EC4838D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a3:d8:a9:8e:2c:d5:dc:f6:f4:ae:4f:36:d0: e7:d6:e2:a9:ff:58:fb:80:e8:3f:9f:3b:1b:47:c0: e7:86:30:73:64:7a:11:ab:11:7f:46:42:2f:ba:85: c2:7e:ba:20:e1:77:7b:eb:e3:a2:31:7b:bc:d4:9a: e8:4b:93:c1:c6:11:0a:16:c0:9a:18:1a:30:ed:a9: 0d:65:7f:87:2d:dc:62:3f:e8:99:b1:7c:b1:e3:cb: 82:a4:28:c7:95:82:e8:18:e8:2a:66:77:a2:28:d3: 73:b0:be:97:05:0e:6a:db:5b:97:e7:dc:af:7b:21: a5:d4:90:e6:45:27:13:9b:0a:8b:7d:26:4b:87:93: 17:67:16:b9:64:ad:ff:54:3b:d1:89:5a:8b:c9:7b: ba:5f:f2:2a:cc:0b:9e:1e:a8:4c:26:c1:85:85:c5: 11:89:37:f0:ad:fc:98:53:56:58:4d:68:b5:38:dd: 9d:2d:4e:92:3f:a2:37:cb:28:3e:ab:9c:d7:85:1d: 38:0c:be:55:81:e4:df:db:dd:eb:87:3d:87:81:b8: f0:c0:28:ca:82:a1:58:45:ca:a0:78:ab:2a:f9:29: 9b:6d:1a:4d:e6:7e:99:ed:e6:2a:de:0e:4e:bc:e9: f2:46:3c:16:67:b7:a6:65:66:15:72:18:57:b6:06: 7e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:EF:D7:B4:8B:D4:84:B5:26:A4:03:1D:61:1A:6C:CF:7E:C4:83:8D X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152050.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.79.140.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:f7:12:9b:2b:41:29:f0:a4:33:a2:74:c6:53:19:16:18:79: 6d:89:b9:11:04:c4:4d:91:cc:b3:7a:e2:ee:87:fb:07:32:17: 6c:1b:84:01:c8:f9:cc:9d:09:30:b4:6a:50:d0:6d:6f:e7:ff: 70:98:28:6d:30:3c:53:e5:08:61:77:94:01:8f:ac:c9:51:bd: c4:4a:d9:e4:1d:34:d4:19:15:87:60:9e:8d:e9:60:3f:7c:b9: 1c:5c:cd:a2:8b:b6:23:91:56:58:61:3a:ad:06:1e:b3:97:03: 33:0c:8f:cf:c0:84:a3:36:5d:d9:a1:29:c2:d1:05:aa:d3:27: 99:c8:7d:1c:7d:a3:ea:be:e2:98:41:23:85:24:41:d7:c4:d1: 56:da:c0:c7:d9:3e:8e:50:fb:89:20:40:06:c3:4c:46:13:d6: 8e:a1:53:46:60:7d:b9:97:cf:91:ea:8d:ec:9e:2f:ed:c6:bc: 3b:ac:d3:12:83:2c:f4:34:e7:f0:64:0e:cf:d5:e6:1a:9e:09: 95:9d:03:4d:1c:fe:f7:cb:a6:70:1c:2f:86:e1:e3:70:d6:3d: 08:66:bc:b0:00:88:38:e6:d3:d6:3e:91:b1:b8:7e:04:88:2c: af:66:38:4d:a7:73:fd:5c:04:b0:b8:43:01:ed:67:b8:31:d2: d2:84:09:2f -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUUtcF0pr4MMtquYh5faZERrnhQNkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTA1NTUwNFoX DTI2MTExMDA2MDAwNFowMzExMC8GA1UEAxMoNTFFRkQ3QjQ4QkQ0ODRCNTI2QTQw MzFENjExQTZDQ0Y3RUM0ODM4RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKuj2KmOLNXc9vSuTzbQ59biqf9Y+4DoP587G0fA54Ywc2R6EasRf0ZCL7qF wn66IOF3e+vjojF7vNSa6EuTwcYRChbAmhgaMO2pDWV/hy3cYj/ombF8sePLgqQo x5WC6BjoKmZ3oijTc7C+lwUOattbl+fcr3shpdSQ5kUnE5sKi30mS4eTF2cWuWSt /1Q70Ylai8l7ul/yKswLnh6oTCbBhYXFEYk38K38mFNWWE1otTjdnS1Okj+iN8so Pquc14UdOAy+VYHk39vd64c9h4G48MAoyoKhWEXKoHirKvkpm20aTeZ+me3mKt4O Trzp8kY8Fme3pmVmFXIYV7YGfjMCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRR79e0 i9SEtSakAx1hGmzPfsSDjTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MjA1MC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEANJPjDANBgkqhkiG9w0BAQsFAAOCAQEADfcSmytBKfCkM6J0xlMZ Fhh5bYm5EQTETZHMs3ri7of7BzIXbBuEAcj5zJ0JMLRqUNBtb+f/cJgobTA8U+UI YXeUAY+syVG9xErZ5B001BkVh2CejelgP3y5HFzNoou2I5FWWGE6rQYes5cDMwyP z8CEozZd2aEpwtEFqtMnmch9HH2j6r7imEEjhSRB18TRVtrAx9k+jlD7iSBABsNM RhPWjqFTRmB9uZfPkeqN7J4v7ca8O6zTEoMs9DTn8GQOz9XmGp4JlZ0DTRz+98um cBwvhuHjcNY9CGa8sACIOObT1j6Rsbh+BIgsr2Y4Tadz/VwEsLhDAe1nuDHS0oQJ Lw== -----END CERTIFICATE-----Generated at Wed Dec 3 13:55:23 2025 by rpki-client