This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153154.roa File: AS153154.roa (raw, json) Hash identifier: TtlEVYKwyxF6G+EsQUX/JTI8dsXc1aEZEKJAmo8YG2I= Subject key identifier: 50:E9:D8:1F:57:F1:DE:B4:5E:29:49:BA:96:0F:58:94:6A:C7:B3:BD Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7F7614EE045F1FC6CD52E9D4B3D20446A837D0B0 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153154.roa Signing time: Thu 20 Nov 2025 02:21:42 +0000 ROA not before: Thu 20 Nov 2025 02:16:42 +0000 ROA not after: Thu 19 Nov 2026 02:21:42 +0000 asID: 153154 IP address blocks: 2001:df4:8dc0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:76:14:ee:04:5f:1f:c6:cd:52:e9:d4:b3:d2:04:46:a8:37:d0:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 20 02:16:42 2025 GMT Not After : Nov 19 02:21:42 2026 GMT Subject: CN=50E9D81F57F1DEB45E2949BA960F58946AC7B3BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e1:8f:8e:f6:b4:f1:77:4e:d2:b6:20:77:46: 5c:a2:14:49:b9:12:da:28:20:33:26:97:c1:3e:33: 7b:79:ad:32:7a:3b:47:d0:2e:d7:d2:c1:91:ff:0c: 17:f3:84:45:10:6c:1f:08:d8:fc:58:89:bc:56:66: cb:72:d1:c2:4a:fc:e0:e6:2a:b8:63:32:04:51:db: 39:db:a0:7a:d4:b0:4b:5b:90:f5:8d:bb:96:3e:2a: 33:30:d5:85:04:28:53:13:81:00:63:7d:8d:79:cb: 54:05:ef:62:44:03:2d:96:c3:5e:7d:70:2b:46:c5: 48:7f:48:4e:3e:32:1b:2a:0a:99:60:a1:40:ba:57: bd:cc:73:6d:a1:eb:31:f2:c8:ec:67:ea:32:96:38: 88:80:32:30:a5:da:01:46:0a:b5:ba:25:41:3e:63: 2d:bf:b3:07:4e:96:fa:3a:f4:2f:e0:ac:e9:8e:be: 50:93:6c:0b:3b:d3:db:56:71:59:30:3a:04:e5:02: cc:41:89:de:9d:37:01:aa:aa:99:86:9a:c9:29:ed: 2b:57:5c:f5:16:b6:fc:c4:bd:df:64:9c:4d:50:ba: 22:9d:9f:42:dc:64:14:78:a3:d5:9a:59:a2:28:f9: 2b:19:08:dd:df:e7:b7:9e:5e:d1:41:52:d8:f3:58: 3a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:E9:D8:1F:57:F1:DE:B4:5E:29:49:BA:96:0F:58:94:6A:C7:B3:BD X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153154.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:8dc0::/48 Signature Algorithm: sha256WithRSAEncryption 05:79:e5:76:a7:80:a7:60:24:54:e9:cf:70:27:e3:b0:d2:fe: 1b:9b:1c:7d:d0:3d:7e:1b:36:e0:78:77:34:01:e6:7c:88:52: af:97:58:5a:95:e2:e9:dc:e9:ef:7d:fd:db:97:40:04:8f:0b: be:f7:d8:28:9a:fc:eb:1b:42:d1:48:74:ef:d5:cd:4f:fc:94: 38:73:21:a1:d8:8e:8a:f2:e1:d9:48:62:ef:93:0d:f3:c0:d1: 67:d1:a8:3e:64:51:9f:8b:55:62:e4:6b:61:aa:97:a1:2e:79: 65:5a:d7:10:81:4b:f6:a6:d6:1b:cb:09:d3:fb:6b:7c:6d:b7: 13:fd:26:58:99:47:db:66:fe:d7:01:2d:9c:92:f6:c2:54:73: 09:ec:ee:c7:d3:0a:df:69:6b:84:7d:f6:fe:e2:13:07:32:13: fa:a5:d4:dd:b5:9e:a9:44:e9:4d:a0:1f:2f:dd:a2:f1:93:db: 43:c7:3a:8f:ff:e8:a0:ec:ce:70:fa:9b:ad:ab:cb:9c:8b:0a: 58:9f:32:9b:06:09:ce:bd:54:21:c0:3d:38:7c:07:14:56:2a: cd:fe:08:bf:87:40:ad:0a:8f:20:23:89:cc:eb:ec:73:20:6d: f3:84:31:7a:48:47:32:09:95:2d:08:87:45:38:14:ad:4f:c7: 8c:cd:b6:af -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUf3YU7gRfH8bNUunUs9IERqg30LAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTEyMDAyMTY0MloX DTI2MTExOTAyMjE0MlowMzExMC8GA1UEAxMoNTBFOUQ4MUY1N0YxREVCNDVFMjk0 OUJBOTYwRjU4OTQ2QUM3QjNCRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAODhj472tPF3TtK2IHdGXKIUSbkS2iggMyaXwT4ze3mtMno7R9Au19LBkf8M F/OERRBsHwjY/FiJvFZmy3LRwkr84OYquGMyBFHbOdugetSwS1uQ9Y27lj4qMzDV hQQoUxOBAGN9jXnLVAXvYkQDLZbDXn1wK0bFSH9ITj4yGyoKmWChQLpXvcxzbaHr MfLI7GfqMpY4iIAyMKXaAUYKtbolQT5jLb+zB06W+jr0L+Cs6Y6+UJNsCzvT21Zx WTA6BOUCzEGJ3p03AaqqmYaaySntK1dc9Ra2/MS932ScTVC6Ip2fQtxkFHij1ZpZ oij5KxkI3d/nt55e0UFS2PNYOlUCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBRQ6dgf V/HetF4pSbqWD1iUasezvTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MzE1NC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfSNwDANBgkqhkiG9w0BAQsFAAOCAQEABXnldqeAp2AkVOnP cCfjsNL+G5scfdA9fhs24Hh3NAHmfIhSr5dYWpXi6dzp733925dABI8LvvfYKJr8 6xtC0Uh079XNT/yUOHMhodiOivLh2Uhi75MN88DRZ9GoPmRRn4tVYuRrYaqXoS55 ZVrXEIFL9qbWG8sJ0/trfG23E/0mWJlH22b+1wEtnJL2wlRzCezux9MK32lrhH32 /uITBzIT+qXU3bWeqUTpTaAfL92i8ZPbQ8c6j//ooOzOcPqbravLnIsKWJ8ymwYJ zr1UIcA9OHwHFFYqzf4Iv4dArQqPICOJzOvscyBt84QxekhHMgmVLQiHRTgUrU/H jM22rw== -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:36 2025 by rpki-client