This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152368.roa File: AS152368.roa (raw, json) Hash identifier: VxRh9Fh7O2Mwqa62U2TxCmgyTU75CbML4N7HjlM2Y7o= Subject key identifier: 9C:76:E0:83:85:55:C5:A3:8D:75:75:07:FD:26:FC:4B:7A:94:10:EA Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1F8C9CE0B097FA9D708CFEE03B6185D2CCE9593F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152368.roa Signing time: Fri 23 Jan 2026 05:00:00 +0000 ROA not before: Fri 23 Jan 2026 04:55:00 +0000 ROA not after: Fri 22 Jan 2027 05:00:00 +0000 asID: 152368 IP address blocks: 163.61.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 17:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:8c:9c:e0:b0:97:fa:9d:70:8c:fe:e0:3b:61:85:d2:cc:e9:59:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 23 04:55:00 2026 GMT Not After : Jan 22 05:00:00 2027 GMT Subject: CN=9C76E0838555C5A38D757507FD26FC4B7A9410EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3f:f1:4b:0e:b4:3b:0d:ed:48:20:1c:06:23: 36:af:31:14:03:e5:e8:48:e8:98:c3:33:ca:9e:ae: 5d:f0:f0:b7:a3:af:d1:7e:01:0a:6b:19:cf:6a:07: 09:fa:68:a7:0e:0b:d6:cb:78:be:96:75:a6:c7:05: f8:8f:93:84:45:5b:d0:13:38:a8:f8:65:d3:09:21: dd:b2:97:2c:fe:25:35:69:39:eb:ca:b3:99:a4:bd: b2:05:fc:6b:6f:50:84:de:5f:9e:97:07:31:09:8b: 5a:d8:8e:a8:57:f5:29:5b:d6:3f:8e:ad:c6:56:93: 06:cd:41:97:04:2a:97:c3:09:fa:af:51:c3:e1:8b: 96:97:4b:4d:cc:7f:51:a8:b4:0e:cc:f1:29:b4:1b: 40:55:b0:b3:19:f8:3b:52:4c:ef:04:4e:b8:57:14: 56:b3:9d:6d:63:fd:fd:2a:cb:3d:39:d7:49:2f:9c: 94:55:cc:78:02:b1:9c:58:ac:76:3d:08:3f:2d:59: 03:cd:cc:f0:d2:0e:e2:92:a9:7f:52:33:b8:ce:d6: d5:a9:f7:86:af:51:ee:fd:b7:4d:4a:fa:f7:76:6c: ab:eb:6f:f4:9a:4b:0c:35:f9:87:82:c6:d1:91:93: 41:b3:e4:b4:76:8b:9f:b9:e2:92:df:45:99:3f:a3: 43:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:76:E0:83:85:55:C5:A3:8D:75:75:07:FD:26:FC:4B:7A:94:10:EA X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152368.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.61.159.0/24 Signature Algorithm: sha256WithRSAEncryption 54:cf:c9:bc:33:2a:85:88:72:8c:6e:13:84:82:79:71:a4:ef: b4:d7:44:2d:32:54:76:8f:94:3e:76:a2:ba:b8:b9:91:61:a2: a5:df:d7:e9:6a:39:8c:2f:f7:d7:8e:33:d4:28:53:89:81:3f: c6:8b:38:8f:f4:b2:e0:9e:fc:4b:b6:d1:ab:e3:8c:12:b9:0f: 69:36:50:85:c5:29:df:94:78:80:a4:b2:ff:d6:84:68:4d:f0: af:40:e2:d5:b3:69:25:53:ef:de:d8:df:35:54:08:22:54:cc: dd:b0:17:58:a4:24:e9:78:80:c1:ac:2b:83:d6:69:5c:7d:1b: 34:a6:52:e0:a6:58:fe:33:26:fb:71:dc:e6:8c:af:26:ab:69: 76:fd:6d:7a:1f:9f:b2:4f:56:b9:1d:03:a6:92:30:ec:d6:9c: 14:cf:22:35:65:d1:69:4b:ba:b5:b8:d2:88:ed:a2:77:6e:bf: f2:83:ae:39:87:69:13:18:25:78:47:19:92:59:f0:fd:eb:86: a8:e1:6c:6c:77:08:85:a7:f7:36:73:e1:86:95:a8:01:dc:1e: 6e:f3:7e:86:83:4a:eb:d5:c2:26:c8:78:fc:8b:e2:c4:96:e9: 4a:89:f8:07:3f:85:7d:8c:a1:dd:0e:95:c6:00:a1:a3:63:cc: ae:e0:3b:55 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUH4yc4LCX+p1wjP7gO2GF0szpWT8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDEyMzA0NTUwMFoX DTI3MDEyMjA1MDAwMFowMzExMC8GA1UEAxMoOUM3NkUwODM4NTU1QzVBMzhENzU3 NTA3RkQyNkZDNEI3QTk0MTBFQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANM/8UsOtDsN7UggHAYjNq8xFAPl6EjomMMzyp6uXfDwt6Ov0X4BCmsZz2oH Cfpopw4L1st4vpZ1pscF+I+ThEVb0BM4qPhl0wkh3bKXLP4lNWk568qzmaS9sgX8 a29QhN5fnpcHMQmLWtiOqFf1KVvWP46txlaTBs1BlwQql8MJ+q9Rw+GLlpdLTcx/ Uai0DszxKbQbQFWwsxn4O1JM7wROuFcUVrOdbWP9/SrLPTnXSS+clFXMeAKxnFis dj0IPy1ZA83M8NIO4pKpf1IzuM7W1an3hq9R7v23TUr693Zsq+tv9JpLDDX5h4LG 0ZGTQbPktHaLn7nikt9FmT+jQ+UCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBScduCD hVXFo411dQf9JvxLepQQ6jAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MjM2OC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKM9nzANBgkqhkiG9w0BAQsFAAOCAQEAVM/JvDMqhYhyjG4ThIJ5 caTvtNdELTJUdo+UPnaiuri5kWGipd/X6Wo5jC/3144z1ChTiYE/xos4j/Sy4J78 S7bRq+OMErkPaTZQhcUp35R4gKSy/9aEaE3wr0Di1bNpJVPv3tjfNVQIIlTM3bAX WKQk6XiAwawrg9ZpXH0bNKZS4KZY/jMm+3Hc5oyvJqtpdv1teh+fsk9WuR0DppIw 7NacFM8iNWXRaUu6tbjSiO2id26/8oOuOYdpExgleEcZklnw/euGqOFsbHcIhaf3 NnPhhpWoAdwebvN+hoNK69XCJsh4/IvixJbpSon4Bz+FfYyh3Q6VxgCho2PMruA7 VQ== -----END CERTIFICATE-----Generated at Tue Jan 27 07:45:51 2026 by rpki-client