This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153480.roa File: AS153480.roa (raw, json) Hash identifier: zZ+rbRBF3xGBExAMMaoinDUVp1nu2HdbmJVdbxq+/xU= Subject key identifier: 62:83:0C:B5:DB:0E:3C:31:34:8B:8C:D3:4A:CD:B9:9D:FA:06:D5:C7 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 10B58CAA7DB8BB442BB389A1B890042CE8E93816 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153480.roa Signing time: Tue 13 Jan 2026 07:00:00 +0000 ROA not before: Tue 13 Jan 2026 06:55:00 +0000 ROA not after: Tue 12 Jan 2027 07:00:00 +0000 asID: 153480 IP address blocks: 2001:df4:9840::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 13:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:b5:8c:aa:7d:b8:bb:44:2b:b3:89:a1:b8:90:04:2c:e8:e9:38:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 13 06:55:00 2026 GMT Not After : Jan 12 07:00:00 2027 GMT Subject: CN=62830CB5DB0E3C31348B8CD34ACDB99DFA06D5C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:35:85:ab:fe:14:f1:32:ec:01:bd:97:52:6f: 08:d1:cd:0a:70:6c:11:f9:52:f3:4a:1a:aa:86:99: eb:31:b0:91:cd:75:b6:77:ff:21:53:49:c9:9e:a4: cd:12:2d:0d:1b:18:6c:1a:1a:89:7e:d6:40:7b:6f: 2a:31:8e:c6:59:6d:81:ec:ef:0d:ba:96:21:6d:a1: 25:8c:f2:86:cf:87:31:55:18:40:33:c9:cb:97:d7: b6:d1:9a:ff:c8:3e:9b:ce:84:76:16:75:7d:7b:87: 59:f8:e5:7e:46:7e:ed:34:d0:5b:65:c7:61:fe:c1: 66:94:12:a1:aa:0e:9f:ce:48:f7:29:85:e0:2d:38: 97:cf:1e:60:8a:80:1f:20:1e:b9:7f:a3:8b:11:57: 0b:59:a4:ec:16:0e:49:d4:66:c8:52:c6:27:5a:b3: 28:7b:2e:fa:61:ad:a8:eb:82:39:f5:35:34:6f:2c: 40:b8:16:78:94:08:2e:ba:9e:8f:b8:f2:48:44:6f: 33:c4:88:85:aa:4d:aa:8c:3b:00:0d:73:0a:c7:12: 9a:c1:dd:81:26:1e:b5:4f:56:5a:a1:05:da:df:3c: 1f:fe:55:06:4f:ef:97:67:e4:f3:e3:43:34:3d:23: fd:61:e3:4f:0d:a2:c4:c9:1c:c6:e2:5a:b3:85:d1: 8b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:83:0C:B5:DB:0E:3C:31:34:8B:8C:D3:4A:CD:B9:9D:FA:06:D5:C7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153480.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:9840::/48 Signature Algorithm: sha256WithRSAEncryption 37:2c:8d:a5:64:c4:2e:4c:0f:5b:e4:11:a5:cd:7e:dc:06:08: e5:4f:5c:b8:5b:06:4e:bf:60:4d:68:31:2c:67:c6:bc:85:70: e0:48:c6:98:b6:e4:d5:9d:33:36:28:b1:44:69:90:6f:df:1f: 1d:ee:5e:6d:b7:88:e7:26:29:d0:e1:00:26:a5:8b:2d:ad:ee: 95:ed:fc:4c:0f:7c:54:4a:74:8e:48:09:3d:de:22:ac:c8:9e: 13:20:bf:cf:1d:3d:94:eb:77:cd:74:35:a4:cd:08:ad:18:14: 93:4b:7e:c6:b9:73:c8:11:59:1b:a5:87:31:6f:e9:8f:fb:c7: 12:de:94:c6:9f:0c:35:15:4a:a0:a3:cf:e5:19:b6:78:45:69: a8:4d:24:2e:54:2f:18:6b:70:a8:e8:6f:2c:0a:68:55:53:f7: 21:94:d7:2a:dc:d0:3a:ca:26:44:52:0a:95:49:73:81:21:63: 41:dc:fe:3c:ce:23:c0:51:d1:5e:52:ac:8d:39:f0:50:bb:4c: b5:35:62:e4:65:40:62:79:b5:41:12:5f:e5:da:3c:d7:ae:1a: 47:2c:09:9c:b3:bc:5d:bd:03:87:29:4e:ac:75:04:b8:08:75: e9:91:5a:39:d5:97:ae:75:84:a6:2f:18:8f:34:3c:bb:48:33: c2:42:0b:5e -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUELWMqn24u0Qrs4mhuJAELOjpOBYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDExMzA2NTUwMFoX DTI3MDExMjA3MDAwMFowMzExMC8GA1UEAxMoNjI4MzBDQjVEQjBFM0MzMTM0OEI4 Q0QzNEFDREI5OURGQTA2RDVDNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANk1hav+FPEy7AG9l1JvCNHNCnBsEflS80oaqoaZ6zGwkc11tnf/IVNJyZ6k zRItDRsYbBoaiX7WQHtvKjGOxlltgezvDbqWIW2hJYzyhs+HMVUYQDPJy5fXttGa /8g+m86EdhZ1fXuHWfjlfkZ+7TTQW2XHYf7BZpQSoaoOn85I9ymF4C04l88eYIqA HyAeuX+jixFXC1mk7BYOSdRmyFLGJ1qzKHsu+mGtqOuCOfU1NG8sQLgWeJQILrqe j7jySERvM8SIhapNqow7AA1zCscSmsHdgSYetU9WWqEF2t88H/5VBk/vl2fk8+ND ND0j/WHjTw2ixMkcxuJas4XRi6MCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBRigwy1 2w48MTSLjNNKzbmd+gbVxzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MzQ4MC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfSYQDANBgkqhkiG9w0BAQsFAAOCAQEANyyNpWTELkwPW+QR pc1+3AYI5U9cuFsGTr9gTWgxLGfGvIVw4EjGmLbk1Z0zNiixRGmQb98fHe5ebbeI 5yYp0OEAJqWLLa3ule38TA98VEp0jkgJPd4irMieEyC/zx09lOt3zXQ1pM0IrRgU k0t+xrlzyBFZG6WHMW/pj/vHEt6Uxp8MNRVKoKPP5Rm2eEVpqE0kLlQvGGtwqOhv LApoVVP3IZTXKtzQOsomRFIKlUlzgSFjQdz+PM4jwFHRXlKsjTnwULtMtTVi5GVA Ynm1QRJf5do8164aRywJnLO8Xb0DhylOrHUEuAh16ZFaOdWXrnWEpi8YjzQ8u0gz wkILXg== -----END CERTIFICATE-----Generated at Wed Jan 21 13:19:56 2026 by rpki-client