This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153580.roa File: AS153580.roa (raw, json) Hash identifier: 6KKzgugOXu+3jr4pBdWcA5vUawP/5tfep5yq8vxyHYY= Subject key identifier: B1:D9:8F:ED:23:69:A4:12:4E:AD:13:2D:A2:96:97:08:10:A3:13:CD Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 142DE9F0E559272EBABBD0F890A38EFCB4A6A56F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153580.roa Signing time: Fri 30 Jan 2026 04:00:00 +0000 ROA not before: Fri 30 Jan 2026 03:55:00 +0000 ROA not after: Fri 29 Jan 2027 04:00:00 +0000 asID: 153580 IP address blocks: 163.61.52.0/23 maxlen: 24 2001:df5:9c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 14:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:2d:e9:f0:e5:59:27:2e:ba:bb:d0:f8:90:a3:8e:fc:b4:a6:a5:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 30 03:55:00 2026 GMT Not After : Jan 29 04:00:00 2027 GMT Subject: CN=B1D98FED2369A4124EAD132DA296970810A313CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f8:94:79:8c:0b:9c:70:d6:77:14:6c:93:1f: 16:fc:c1:d9:e5:85:b7:2c:eb:52:df:51:2e:7c:ea: 42:a9:44:ae:70:4f:53:1a:84:7c:77:8d:2c:3c:c6: 36:bc:39:98:63:b5:9f:bd:c6:1e:0e:a9:17:a8:8c: cd:db:54:c8:7c:b4:e0:76:3c:4c:e2:a0:37:b9:14: e7:1d:0a:63:88:9a:86:8d:e7:ed:ec:d3:d7:be:67: c6:ac:d6:8d:8a:ea:a2:78:6a:3e:01:58:4a:b1:6a: 29:a9:41:52:af:6a:d4:96:4c:b3:4d:8f:85:56:af: b4:4c:96:5c:9f:a6:8c:a9:4e:0e:74:f2:d9:1e:d7: 86:85:99:70:fb:53:8b:87:72:60:2e:39:19:eb:d9: 7b:ef:0d:13:f0:1e:f3:ae:98:08:f4:e4:b9:ef:20: 6a:22:a5:0e:31:c4:a4:b6:c9:7e:1c:8e:b2:93:9c: 54:3d:49:9d:cb:ce:83:c4:45:a8:f9:03:e5:95:7a: 9e:42:e1:04:69:98:74:ea:77:5a:40:a1:11:ca:88: fc:cd:7f:37:9a:1a:e0:cb:a2:b0:f2:8f:0b:4f:0d: 5d:b8:e5:4a:1e:b1:27:89:7e:2c:89:fa:a5:4f:49: 6e:fc:27:be:f3:79:b9:a4:74:48:fb:93:4d:2b:fd: 60:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D9:8F:ED:23:69:A4:12:4E:AD:13:2D:A2:96:97:08:10:A3:13:CD X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153580.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.61.52.0/23 IPv6: 2001:df5:9c0::/48 Signature Algorithm: sha256WithRSAEncryption 52:39:cb:39:7c:18:d5:9c:36:de:9d:11:75:79:1c:d2:c7:89: 32:1c:b1:8a:69:80:ca:5d:24:11:55:5b:70:85:8e:ad:ad:84: dc:b0:86:76:e9:31:92:0f:71:d5:c8:19:e0:68:9c:b6:72:f6: 4b:42:32:79:b5:fa:e9:de:5b:52:f1:8b:20:b6:d2:ae:15:76: d8:f9:37:0a:5a:af:ef:e4:d6:ee:1c:7a:82:ca:16:2d:c2:1a: ad:4b:37:bf:a5:9d:8c:df:33:94:58:9c:b7:02:83:5e:7b:9b: 1e:6d:4b:cd:83:45:92:5b:2d:66:70:49:81:dd:c7:a1:20:ec: b2:93:18:b7:32:fb:86:4c:4a:20:3c:69:8c:00:31:d0:ae:5e: 63:c6:b8:1b:66:80:9f:36:bc:ef:81:dc:f2:f3:eb:eb:63:c8: 22:1a:df:76:1e:82:2e:25:29:a8:39:b8:49:43:08:c0:ad:f8: 2c:f6:dc:fe:bb:d9:33:35:d3:b9:43:fc:ae:e4:d5:5f:9d:07: 7a:a3:be:01:70:17:51:e0:c0:96:fe:de:3a:ba:85:7f:0b:65: 46:97:d5:ac:5c:50:57:92:cd:df:8b:ae:20:48:8c:3d:dd:2c: 9d:30:d4:23:56:db:35:8b:81:a2:49:c1:b5:e3:5b:3d:e4:67: 30:3d:ff:67 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUFC3p8OVZJy66u9D4kKOO/LSmpW8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDEzMDAzNTUwMFoX DTI3MDEyOTA0MDAwMFowMzExMC8GA1UEAxMoQjFEOThGRUQyMzY5QTQxMjRFQUQx MzJEQTI5Njk3MDgxMEEzMTNDRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOH4lHmMC5xw1ncUbJMfFvzB2eWFtyzrUt9RLnzqQqlErnBPUxqEfHeNLDzG Nrw5mGO1n73GHg6pF6iMzdtUyHy04HY8TOKgN7kU5x0KY4iaho3n7ezT175nxqzW jYrqonhqPgFYSrFqKalBUq9q1JZMs02PhVavtEyWXJ+mjKlODnTy2R7XhoWZcPtT i4dyYC45GevZe+8NE/Ae866YCPTkue8gaiKlDjHEpLbJfhyOspOcVD1JncvOg8RF qPkD5ZV6nkLhBGmYdOp3WkChEcqI/M1/N5oa4MuisPKPC08NXbjlSh6xJ4l+LIn6 pU9JbvwnvvN5uaR0SPuTTSv9YG8CAwEAAaOCAeEwggHdMB0GA1UdDgQWBBSx2Y/t I2mkEk6tEy2ilpcIEKMTzTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MzU4MC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAaM9NDAPBAIAAjAJAwcAIAEN9QnAMA0GCSqGSIb3DQEBCwUAA4IB AQBSOcs5fBjVnDbenRF1eRzSx4kyHLGKaYDKXSQRVVtwhY6trYTcsIZ26TGSD3HV yBngaJy2cvZLQjJ5tfrp3ltS8YsgttKuFXbY+TcKWq/v5NbuHHqCyhYtwhqtSze/ pZ2M3zOUWJy3AoNee5sebUvNg0WSWy1mcEmB3cehIOyykxi3MvuGTEogPGmMADHQ rl5jxrgbZoCfNrzvgdzy8+vrY8giGt92HoIuJSmoObhJQwjArfgs9tz+u9kzNdO5 Q/yu5NVfnQd6o74BcBdR4MCW/t46uoV/C2VGl9WsXFBXks3fi64gSIw93SydMNQj Vts1i4GiScG141s95GcwPf9n -----END CERTIFICATE-----Generated at Mon Feb 2 08:11:00 2026 by rpki-client