This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153141.roa File: AS153141.roa (raw, json) Hash identifier: aFcQY3S052s3jvs05T/QNJ5NFqgefIBeFZ/Jt8nXS54= Subject key identifier: F3:41:26:FE:8C:46:6C:2B:92:18:32:58:1A:66:34:A9:25:55:60:D5 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3AA8CCB65E59F70F89869B9130CFE7E451FD748F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153141.roa Signing time: Mon 22 Dec 2025 03:00:00 +0000 ROA not before: Mon 22 Dec 2025 02:55:00 +0000 ROA not after: Mon 21 Dec 2026 03:00:00 +0000 asID: 153141 IP address blocks: 2001:df4:84c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 13:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:a8:cc:b6:5e:59:f7:0f:89:86:9b:91:30:cf:e7:e4:51:fd:74:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 22 02:55:00 2025 GMT Not After : Dec 21 03:00:00 2026 GMT Subject: CN=F34126FE8C466C2B921832581A6634A9255560D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:90:e7:c3:86:fa:44:8d:6a:85:b1:de:79:bc: ab:4a:f5:2c:3c:9e:7c:46:73:1d:aa:b7:5d:61:86: 9f:2f:21:76:9b:36:7b:0f:44:50:c5:c7:15:ed:32: 6c:f2:fa:23:6f:ef:b4:d4:53:39:ed:e4:c0:53:cb: 83:f9:ec:dd:7b:5c:78:ab:b3:2a:10:3e:2d:01:af: 73:55:f8:b1:44:a6:df:fb:71:49:e8:23:0b:3b:8f: 97:54:bb:44:bf:8d:f2:ca:ac:cf:8b:41:5d:15:bf: 25:92:9a:84:05:b8:4f:b9:a6:c3:8a:87:95:ce:c1: 13:ad:3c:a1:eb:1d:e5:09:72:97:87:41:f6:ad:01: cb:9e:de:0c:e9:e2:9d:4b:ee:d7:d3:2d:0b:91:cf: 5e:66:63:cc:68:d7:6b:1f:91:20:35:da:d3:fb:74: 32:6a:47:19:82:77:68:cb:1d:39:91:f9:6c:7f:bb: 6f:66:7a:82:7f:93:b5:8a:8a:34:05:bc:9b:e5:da: 85:fb:13:3d:fe:9b:e8:56:07:2b:6d:93:3c:ef:bc: 53:45:dc:b1:01:08:5e:02:ff:2e:27:60:ad:ed:58: c1:6c:d2:9c:f6:41:19:a1:4d:23:59:72:a6:cb:7a: 4d:7d:b8:6a:4d:5c:28:c4:43:97:5f:e2:af:a5:7a: 5b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:41:26:FE:8C:46:6C:2B:92:18:32:58:1A:66:34:A9:25:55:60:D5 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153141.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:84c0::/48 Signature Algorithm: sha256WithRSAEncryption 0d:3f:94:57:34:d0:6c:56:0d:f5:2a:12:c1:42:91:2c:83:70: 2c:62:63:ca:c5:24:b9:3a:7d:83:96:d5:e6:f5:39:4a:2a:81: 74:39:ae:3c:d5:26:6d:7d:43:d8:05:18:f1:91:bf:ee:2a:f3: 8c:94:ad:8c:10:82:36:4c:65:20:38:d7:20:05:8f:5b:91:80: 46:e5:a9:dc:99:30:94:2b:bd:e3:11:72:3d:6c:bb:07:a5:08: a5:05:f7:b0:47:55:01:27:ec:d9:86:ec:7a:87:c7:e0:ca:b8: f4:e5:91:f8:1c:7d:27:31:8e:78:3a:c9:99:89:dd:9a:43:63: 42:0a:8b:60:8b:0e:d9:e4:46:e1:a7:ca:3f:1f:d4:8d:85:2e: 0c:ee:8f:09:ba:e2:47:c1:bc:fe:c0:5b:1f:dd:29:62:13:f8: 6d:c9:9f:03:3f:cd:73:eb:b7:fd:5a:42:b8:58:6a:25:5e:9c: ec:1e:c2:b2:34:85:cb:d7:aa:2d:07:0e:e7:d3:e4:7f:ba:99: 1d:97:52:72:fb:14:1b:64:77:d0:3e:5c:ab:4b:89:96:c6:61: 3e:0c:b5:64:67:ff:bb:e4:66:af:15:01:93:24:4c:5f:ee:fd: 3a:54:5f:e6:77:c7:83:e2:5a:07:fc:c0:0f:19:ce:55:6a:29: 93:b1:39:f4 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUOqjMtl5Z9w+JhpuRMM/n5FH9dI8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIyMjAyNTUwMFoX DTI2MTIyMTAzMDAwMFowMzExMC8GA1UEAxMoRjM0MTI2RkU4QzQ2NkMyQjkyMTgz MjU4MUE2NjM0QTkyNTU1NjBENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALyQ58OG+kSNaoWx3nm8q0r1LDyefEZzHaq3XWGGny8hdps2ew9EUMXHFe0y bPL6I2/vtNRTOe3kwFPLg/ns3XtceKuzKhA+LQGvc1X4sUSm3/txSegjCzuPl1S7 RL+N8sqsz4tBXRW/JZKahAW4T7mmw4qHlc7BE608oesd5Qlyl4dB9q0By57eDOni nUvu19MtC5HPXmZjzGjXax+RIDXa0/t0MmpHGYJ3aMsdOZH5bH+7b2Z6gn+TtYqK NAW8m+XahfsTPf6b6FYHK22TPO+8U0XcsQEIXgL/Lidgre1YwWzSnPZBGaFNI1ly pst6TX24ak1cKMRDl1/ir6V6W28CAwEAAaOCAdMwggHPMB0GA1UdDgQWBBTzQSb+ jEZsK5IYMlgaZjSpJVVg1TAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MzE0MS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfSEwDANBgkqhkiG9w0BAQsFAAOCAQEADT+UVzTQbFYN9SoS wUKRLINwLGJjysUkuTp9g5bV5vU5SiqBdDmuPNUmbX1D2AUY8ZG/7irzjJStjBCC NkxlIDjXIAWPW5GARuWp3JkwlCu94xFyPWy7B6UIpQX3sEdVASfs2YbseofH4Mq4 9OWR+Bx9JzGOeDrJmYndmkNjQgqLYIsO2eRG4afKPx/UjYUuDO6PCbriR8G8/sBb H90pYhP4bcmfAz/Nc+u3/VpCuFhqJV6c7B7CsjSFy9eqLQcO59Pkf7qZHZdScvsU G2R30D5cq0uJlsZhPgy1ZGf/u+RmrxUBkyRMX+79OlRf5nfHg+JaB/zADxnOVWop k7E59A== -----END CERTIFICATE-----Generated at Wed Jan 21 13:19:54 2026 by rpki-client