This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153877.roa
File: AS153877.roa (raw, json)
Hash identifier: XRDuYoHl5SeKsROsmRWpXnPtkUJtxfKCFaPTUzni/gg=
Subject key identifier: F7:3E:45:02:37:1C:C4:89:43:38:86:58:35:4D:5F:57:6E:3F:2C:F8
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 7B4FCEE0EAD6D76A32D41B5476C4BAC423EEC87A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153877.roa
Signing time: Mon 16 Jun 2025 06:29:57 +0000
ROA not before: Mon 16 Jun 2025 06:24:57 +0000
ROA not after: Mon 15 Jun 2026 06:29:57 +0000
asID: 153877
IP address blocks: 2001:df5:8440::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 12:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:4f:ce:e0:ea:d6:d7:6a:32:d4:1b:54:76:c4:ba:c4:23:ee:c8:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jun 16 06:24:57 2025 GMT
Not After : Jun 15 06:29:57 2026 GMT
Subject: CN=F73E4502371CC48943388658354D5F576E3F2CF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:76:3b:27:75:fa:97:1e:3f:51:ab:5c:cd:df:
28:a0:89:51:c6:fd:e3:24:e9:37:2e:7f:67:c7:e1:
44:49:02:6f:d1:20:67:ca:d2:b6:2f:1f:03:f1:20:
85:bc:4f:dc:0d:ba:4d:00:37:50:5d:e2:3a:8d:18:
65:47:b0:7b:40:18:81:e9:97:bd:54:a1:32:70:57:
bb:a7:90:0b:17:8b:73:84:d7:5c:50:39:1a:51:85:
d4:fb:65:e9:1f:c4:a7:e9:bc:f9:bd:6c:09:13:c4:
09:87:12:85:d6:64:76:05:b0:03:3f:1d:7c:5e:18:
b1:aa:0e:a1:1c:16:29:23:4e:ca:85:3d:ac:c1:f8:
a7:c7:f2:4f:b5:79:48:8d:76:43:d4:4c:98:2e:3e:
24:c8:64:1d:1b:7c:26:8a:18:f5:8e:16:22:db:07:
e0:0f:e4:c8:5e:49:e5:e1:0a:51:1c:17:22:7c:f8:
18:8e:b2:b1:f9:7f:61:94:e1:b2:e5:d9:99:9d:fe:
e6:8c:09:98:88:05:42:71:06:13:5c:23:21:db:6b:
62:40:24:03:1c:c0:c9:0c:c4:e2:cf:cf:93:53:d7:
fd:8f:ba:48:fa:4a:6a:8f:96:ca:42:f1:b8:05:6d:
1b:01:f0:9d:00:68:c8:1a:b5:b7:ad:a3:28:54:ae:
0f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:3E:45:02:37:1C:C4:89:43:38:86:58:35:4D:5F:57:6E:3F:2C:F8
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153877.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:8440::/48
Signature Algorithm: sha256WithRSAEncryption
74:15:f4:1a:40:45:16:0d:a0:ff:b2:26:06:e6:5e:22:87:25:
eb:fc:91:c1:a8:66:3a:81:4a:11:f9:a9:2c:2f:4f:db:52:18:
8c:23:db:bb:1f:1f:dd:62:82:4b:aa:be:f7:b7:00:59:b5:d1:
a2:98:5c:52:96:7b:32:ea:10:f9:63:ee:ac:a3:8a:0a:22:e6:
b1:7b:3a:3d:3d:17:c9:d2:f3:5a:48:35:32:ac:75:9c:49:e5:
bd:11:72:bb:f1:ef:47:33:a1:12:68:8b:42:44:c8:cc:b0:27:
e9:98:6e:c0:ad:af:f6:96:b6:1a:e7:55:92:dd:d8:56:50:74:
2d:e7:f8:50:a6:da:7b:99:12:ba:fa:94:76:ae:23:c8:89:9b:
42:da:26:c9:9a:a6:08:e6:ee:e9:0b:ce:66:9f:0f:65:88:d5:
4a:66:dd:cd:62:ed:15:95:de:d8:8a:e3:8a:2f:d7:a3:d5:36:
56:06:0e:10:67:0f:87:68:56:04:04:33:50:59:4e:14:fe:29:
2e:46:3b:e5:b2:2a:e3:fc:b7:1c:65:60:14:cb:69:cc:a9:cd:
ef:9d:e5:78:3b:ea:4c:55:8e:83:d9:c5:5c:03:cd:b2:62:fe:
79:e8:33:e9:40:b4:79:29:fd:32:f8:fc:56:a8:5c:64:9c:bc:
3f:5d:a7:84
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUe0/O4OrW12oy1BtUdsS6xCPuyHowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYxNjA2MjQ1N1oX
DTI2MDYxNTA2Mjk1N1owMzExMC8GA1UEAxMoRjczRTQ1MDIzNzFDQzQ4OTQzMzg4
NjU4MzU0RDVGNTc2RTNGMkNGODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALR2Oyd1+pceP1GrXM3fKKCJUcb94yTpNy5/Z8fhREkCb9EgZ8rSti8fA/Eg
hbxP3A26TQA3UF3iOo0YZUewe0AYgemXvVShMnBXu6eQCxeLc4TXXFA5GlGF1Ptl
6R/Ep+m8+b1sCRPECYcShdZkdgWwAz8dfF4YsaoOoRwWKSNOyoU9rMH4p8fyT7V5
SI12Q9RMmC4+JMhkHRt8JooY9Y4WItsH4A/kyF5J5eEKURwXInz4GI6ysfl/YZTh
suXZmZ3+5owJmIgFQnEGE1wjIdtrYkAkAxzAyQzE4s/Pk1PX/Y+6SPpKao+WykLx
uAVtGwHwnQBoyBq1t62jKFSuD+8CAwEAAaOCAdMwggHPMB0GA1UdDgQWBBT3PkUC
NxzEiUM4hlg1TV9Xbj8s+DAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1Mzg3Ny5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACABDfWEQDANBgkqhkiG9w0BAQsFAAOCAQEAdBX0GkBFFg2g/7Im
BuZeIocl6/yRwahmOoFKEfmpLC9P21IYjCPbux8f3WKCS6q+97cAWbXRophcUpZ7
MuoQ+WPurKOKCiLmsXs6PT0XydLzWkg1Mqx1nEnlvRFyu/HvRzOhEmiLQkTIzLAn
6ZhuwK2v9pa2GudVkt3YVlB0Lef4UKbae5kSuvqUdq4jyImbQtomyZqmCObu6QvO
Zp8PZYjVSmbdzWLtFZXe2Irjii/Xo9U2VgYOEGcPh2hWBAQzUFlOFP4pLkY75bIq
4/y3HGVgFMtpzKnN753leDvqTFWOg9nFXAPNsmL+eegz6UC0eSn9Mvj8VqhcZJy8
P12nhA==
-----END CERTIFICATE-----
Generated at Wed Dec 3 13:15:30 2025 by rpki-client