This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153155.roa File: AS153155.roa (raw, json) Hash identifier: LKd/rvhcY+SilQN71HlE6TNfjFtaWmbyZdXD6cnZbx4= Subject key identifier: 69:71:BF:18:38:61:00:22:68:00:73:E1:64:C1:6A:1E:3E:74:FF:47 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 38CF8B5D2275607C38F1110AA8596C218E3903C1 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153155.roa Signing time: Tue 02 Dec 2025 02:00:00 +0000 ROA not before: Tue 02 Dec 2025 01:55:00 +0000 ROA not after: Tue 01 Dec 2026 02:00:00 +0000 asID: 153155 IP address blocks: 2001:df4:8fc0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:cf:8b:5d:22:75:60:7c:38:f1:11:0a:a8:59:6c:21:8e:39:03:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 2 01:55:00 2025 GMT Not After : Dec 1 02:00:00 2026 GMT Subject: CN=6971BF1838610022680073E164C16A1E3E74FF47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c1:42:d9:14:77:b9:37:a0:53:98:26:6b:27: 21:4a:df:d9:cc:df:cb:89:36:b0:70:6d:45:67:05: a5:ff:32:dc:fe:bb:6a:16:9e:49:01:92:2c:09:de: 56:23:b9:5d:8e:c8:de:55:98:b9:c9:cc:04:10:45: b1:11:c9:10:f3:c2:d7:c4:30:4e:5b:f3:56:9d:65: 26:bb:05:d4:f5:e8:8d:1f:18:6a:c3:33:52:f2:71: a0:00:22:fe:83:9a:2b:a9:cb:13:f7:f0:ed:d4:9a: e2:de:42:72:99:d1:60:a9:33:87:e8:c0:8f:93:d8: 5f:1b:3e:c3:fd:61:40:7c:2a:95:2d:76:22:bb:b8: 05:6c:a5:42:3f:0a:cd:aa:e4:4a:18:ab:84:39:2c: c8:15:d2:42:a5:46:c3:95:c3:ff:85:fe:e7:a3:ba: e9:25:67:11:55:75:07:86:3d:90:fd:11:d1:24:09: 5c:8f:48:23:6e:29:75:56:f3:7e:21:2d:8d:0f:fa: b2:7c:f0:15:55:34:b9:d2:68:95:08:c9:f2:55:ca: f6:63:60:b9:bf:13:e2:1e:6d:82:18:4d:93:b0:73: bd:14:e9:be:7e:06:b6:9f:2a:31:ca:ac:98:0d:e7: fb:5a:bd:28:b5:3e:28:02:cf:68:09:a3:35:85:dc: 8f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:71:BF:18:38:61:00:22:68:00:73:E1:64:C1:6A:1E:3E:74:FF:47 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153155.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:8fc0::/48 Signature Algorithm: sha256WithRSAEncryption 01:7e:3f:8e:71:0f:2f:88:f3:2f:8e:96:d5:e8:a5:28:e8:55: be:d6:d6:1a:e7:17:3f:72:59:26:9e:08:e3:d3:44:15:b1:84: 10:89:64:42:69:25:99:c4:37:ae:6c:81:72:16:f6:fd:03:46: 02:ac:e8:ed:e1:41:16:17:61:70:8d:49:9d:b0:dc:0b:72:39: 1d:30:b3:e7:fb:d2:bf:00:7b:46:bd:e8:6e:12:5e:1d:f7:bd: b7:e6:2b:b4:79:61:a7:f2:e2:d2:1a:dc:38:35:5e:b3:df:0b: 27:13:87:01:21:74:50:16:c3:ee:9b:ef:33:90:0b:f7:0d:0a: 38:7e:89:9f:fd:de:c9:8f:0c:5a:8f:0b:c3:d8:42:5d:46:61: 3c:5d:c0:9e:31:89:2f:fa:86:53:92:b4:60:10:3e:0a:a0:5c: 6f:30:3c:58:c5:57:34:e4:4d:f4:9b:e1:61:35:1b:9c:3d:02: 8c:07:eb:29:cc:2f:b2:95:66:78:9c:b6:60:92:3d:c5:e7:3b: 07:23:b0:8c:57:57:b9:64:05:db:ec:2d:1a:2d:2b:4d:ee:6d: b8:17:96:5e:2d:ae:dc:29:b0:17:de:ba:a6:f0:eb:90:0c:43: f6:1d:34:93:c6:6b:0c:6f:6b:93:27:17:ca:b0:a8:62:3a:7c: f3:8f:4f:ce -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUOM+LXSJ1YHw48REKqFlsIY45A8EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIwMjAxNTUwMFoX DTI2MTIwMTAyMDAwMFowMzExMC8GA1UEAxMoNjk3MUJGMTgzODYxMDAyMjY4MDA3 M0UxNjRDMTZBMUUzRTc0RkY0NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL/BQtkUd7k3oFOYJmsnIUrf2czfy4k2sHBtRWcFpf8y3P67ahaeSQGSLAne ViO5XY7I3lWYucnMBBBFsRHJEPPC18QwTlvzVp1lJrsF1PXojR8YasMzUvJxoAAi /oOaK6nLE/fw7dSa4t5CcpnRYKkzh+jAj5PYXxs+w/1hQHwqlS12Iru4BWylQj8K zarkShirhDksyBXSQqVGw5XD/4X+56O66SVnEVV1B4Y9kP0R0SQJXI9II24pdVbz fiEtjQ/6snzwFVU0udJolQjJ8lXK9mNgub8T4h5tghhNk7BzvRTpvn4Gtp8qMcqs mA3n+1q9KLU+KALPaAmjNYXcjycCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBRpcb8Y OGEAImgAc+FkwWoePnT/RzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MzE1NS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfSPwDANBgkqhkiG9w0BAQsFAAOCAQEAAX4/jnEPL4jzL46W 1eilKOhVvtbWGucXP3JZJp4I49NEFbGEEIlkQmklmcQ3rmyBchb2/QNGAqzo7eFB FhdhcI1JnbDcC3I5HTCz5/vSvwB7Rr3obhJeHfe9t+YrtHlhp/Li0hrcODVes98L JxOHASF0UBbD7pvvM5AL9w0KOH6Jn/3eyY8MWo8Lw9hCXUZhPF3AnjGJL/qGU5K0 YBA+CqBcbzA8WMVXNORN9JvhYTUbnD0CjAfrKcwvspVmeJy2YJI9xec7ByOwjFdX uWQF2+wtGi0rTe5tuBeWXi2u3CmwF966pvDrkAxD9h00k8ZrDG9rkycXyrCoYjp8 849Pzg== -----END CERTIFICATE-----Generated at Wed Dec 3 13:16:02 2025 by rpki-client