This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153707.roa File: AS153707.roa (raw, json) Hash identifier: b/iLdOn509PuC7gLHhn1tPpqebqmLSjjgcL26/UyubM= Subject key identifier: 3C:63:11:DC:CB:95:85:EB:C7:FD:9E:76:3E:53:9A:E5:97:F9:E4:CE Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5D269CA1FB4EAB95A10C42EAEADC375756BB20F8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153707.roa Signing time: Thu 27 Nov 2025 02:47:02 +0000 ROA not before: Thu 27 Nov 2025 02:42:02 +0000 ROA not after: Thu 26 Nov 2026 02:47:02 +0000 asID: 153707 IP address blocks: 163.223.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:26:9c:a1:fb:4e:ab:95:a1:0c:42:ea:ea:dc:37:57:56:bb:20:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 27 02:42:02 2025 GMT Not After : Nov 26 02:47:02 2026 GMT Subject: CN=3C6311DCCB9585EBC7FD9E763E539AE597F9E4CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:24:db:f5:7b:43:31:fe:3b:74:eb:ee:a1:a3: d5:6f:78:13:f6:c5:f9:01:86:68:f1:ec:3e:a4:df: 46:6f:55:42:40:f1:bc:e4:5a:26:56:02:c6:cd:dd: cf:36:88:8f:34:e2:0b:f9:c9:d5:cb:e6:7c:57:f6: e5:e9:38:65:7b:3f:73:3b:e2:88:84:b5:92:8a:67: 10:ff:e9:aa:24:63:33:bc:fd:d5:be:f8:e6:64:b7: a2:72:6b:c5:0b:6f:1d:41:0f:8c:0c:53:6b:4a:b8: 1d:9f:ed:53:b7:c4:ff:d4:66:d3:25:92:ee:83:48: d4:6f:9a:17:6b:f8:16:e0:0d:28:6c:ee:9d:22:41: c2:88:ad:c2:9a:41:90:2e:5e:03:b3:68:34:e6:d1: 67:38:b0:09:7c:5d:37:9f:47:ae:cb:47:0e:f1:d6: 41:38:fa:52:1e:ef:d8:4e:a7:8c:7a:bf:02:ff:89: 11:74:39:2a:30:7d:e6:13:f7:0c:7b:9e:1d:77:f8: 06:ce:7c:39:08:e5:30:dd:d2:11:7d:b3:b6:5f:3c: 6d:99:30:5a:12:18:20:76:3e:51:50:a9:d5:9a:ba: 3f:f3:31:29:6f:c0:72:3c:d2:4a:63:61:f0:5d:c7: 30:ba:42:b8:e2:da:6c:5c:4e:b5:38:b1:02:52:8a: 20:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:63:11:DC:CB:95:85:EB:C7:FD:9E:76:3E:53:9A:E5:97:F9:E4:CE X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153707.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.223.19.0/24 Signature Algorithm: sha256WithRSAEncryption 21:2f:f7:3f:05:c9:e3:40:e0:8d:da:c7:09:5b:fa:79:19:bd: 06:fe:a0:fe:ea:60:c4:9a:f5:ef:2c:32:85:5d:f1:6d:0b:36: e6:d5:f0:05:98:41:dd:85:8e:bb:a7:85:eb:5a:80:e4:99:74: 39:85:0f:a4:d2:4c:4e:6e:d9:5c:ee:0a:27:68:0a:a3:4b:fb: f6:9a:ee:7c:2e:13:02:cf:b8:eb:e6:05:07:f1:4d:65:cb:7b: 00:55:a7:e2:57:39:f0:dd:58:09:8b:89:73:da:05:e6:4d:4b: eb:e8:c2:6d:71:3f:72:4f:49:3f:5d:9b:3f:ff:73:de:bf:45: 53:0f:d0:17:45:06:16:c7:64:c6:ed:b6:5b:97:f3:51:0a:02: f4:4a:4b:08:66:8f:17:8b:00:99:44:2b:63:4c:73:eb:62:5c: 65:96:db:8e:d7:29:6e:e7:76:89:64:3e:2e:42:b4:b0:22:22: b2:c9:95:e7:fc:a3:d1:6c:59:b6:98:a9:cd:80:c6:81:0a:eb: 9f:6b:e9:57:c4:9d:59:4f:47:81:74:40:51:48:af:ef:04:12: 8b:14:c7:7c:b4:dc:25:b4:b7:06:35:17:34:bd:68:96:8b:a5: b5:33:28:06:6d:17:6d:8e:b1:83:fa:04:a2:0e:60:9e:eb:ff: 0c:7c:10:8a -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUXSacoftOq5WhDELq6tw3V1a7IPgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTEyNzAyNDIwMloX DTI2MTEyNjAyNDcwMlowMzExMC8GA1UEAxMoM0M2MzExRENDQjk1ODVFQkM3RkQ5 RTc2M0U1MzlBRTU5N0Y5RTRDRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMAk2/V7QzH+O3Tr7qGj1W94E/bF+QGGaPHsPqTfRm9VQkDxvORaJlYCxs3d zzaIjzTiC/nJ1cvmfFf25ek4ZXs/czviiIS1kopnEP/pqiRjM7z91b745mS3onJr xQtvHUEPjAxTa0q4HZ/tU7fE/9Rm0yWS7oNI1G+aF2v4FuANKGzunSJBwoitwppB kC5eA7NoNObRZziwCXxdN59HrstHDvHWQTj6Uh7v2E6njHq/Av+JEXQ5KjB95hP3 DHueHXf4Bs58OQjlMN3SEX2ztl88bZkwWhIYIHY+UVCp1Zq6P/MxKW/AcjzSSmNh 8F3HMLpCuOLabFxOtTixAlKKINUCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQ8YxHc y5WF68f9nnY+U5rll/nkzjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MzcwNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKPfEzANBgkqhkiG9w0BAQsFAAOCAQEAIS/3PwXJ40DgjdrHCVv6 eRm9Bv6g/upgxJr17ywyhV3xbQs25tXwBZhB3YWOu6eF61qA5Jl0OYUPpNJMTm7Z XO4KJ2gKo0v79prufC4TAs+46+YFB/FNZct7AFWn4lc58N1YCYuJc9oF5k1L6+jC bXE/ck9JP12bP/9z3r9FUw/QF0UGFsdkxu22W5fzUQoC9EpLCGaPF4sAmUQrY0xz 62JcZZbbjtcpbud2iWQ+LkK0sCIissmV5/yj0WxZtpipzYDGgQrrn2vpV8SdWU9H gXRAUUiv7wQSixTHfLTcJbS3BjUXNL1oloultTMoBm0XbY6xg/oEog5gnuv/DHwQ ig== -----END CERTIFICATE-----Generated at Wed Dec 3 14:54:51 2025 by rpki-client