This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153887.roa File: AS153887.roa (raw, json) Hash identifier: fAoWpqLsVhIWpN32ZFhOD9DU8WKxFo2ijtxVSJSSOoA= Subject key identifier: 37:8C:AC:80:AB:79:85:47:D6:8E:37:59:9E:8F:96:D3:62:63:B0:BF Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4281E8B6E3FCE5A0B6BEC5B77D1409DA55D1CAAA Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153887.roa Signing time: Mon 14 Jul 2025 02:38:23 +0000 ROA not before: Mon 14 Jul 2025 02:33:23 +0000 ROA not after: Mon 13 Jul 2026 02:38:23 +0000 asID: 153887 IP address blocks: 163.227.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:81:e8:b6:e3:fc:e5:a0:b6:be:c5:b7:7d:14:09:da:55:d1:ca:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 14 02:33:23 2025 GMT Not After : Jul 13 02:38:23 2026 GMT Subject: CN=378CAC80AB798547D68E37599E8F96D36263B0BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3b:06:c7:a9:1f:1e:fa:79:68:28:55:5b:a3: 52:4b:ff:31:fa:50:bd:39:50:05:38:6d:ce:a7:09: c0:f3:03:34:a3:cf:05:54:79:cc:17:96:02:1f:62: 8f:02:5e:16:05:2f:d9:88:cc:a0:d4:65:e7:6a:82: 60:c8:c4:2e:58:33:0a:27:37:88:7d:d3:33:04:45: 19:9b:5b:4b:97:43:a6:40:26:dc:ab:78:01:c9:b0: 62:0c:6f:2e:f0:80:26:24:91:f2:67:09:f4:fc:09: bd:67:bb:d9:da:1f:ba:36:e7:a8:d3:9e:7d:12:74: 34:e1:a0:ab:35:a9:9a:8f:44:b4:77:48:b5:17:df: c5:eb:a8:52:6a:2a:a3:ac:e7:e2:21:fb:91:4e:d9: ca:7c:d1:2b:4e:71:70:1b:a4:d4:0a:28:8d:a9:bf: c8:e9:f4:8c:59:11:c2:3c:04:e6:ff:e2:65:91:e8: b7:49:fb:07:20:76:88:51:99:fe:cd:ad:4b:10:05: aa:0e:b2:f4:9b:40:76:3c:fe:01:f4:f2:30:71:29: 02:21:4b:d8:fe:75:f6:36:73:32:fd:8e:8f:8c:cc: e9:07:21:b5:6d:66:ba:ab:e6:3f:f9:3b:f0:a2:65: a0:94:16:d7:dc:77:1e:79:0f:cc:cb:20:21:fa:56: c3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:8C:AC:80:AB:79:85:47:D6:8E:37:59:9E:8F:96:D3:62:63:B0:BF X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153887.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.227.252.0/24 Signature Algorithm: sha256WithRSAEncryption 72:ec:74:4f:c9:f6:a3:a9:e7:93:86:58:3e:29:66:c4:8d:bd: 78:e1:98:97:75:01:af:88:cc:35:89:4e:aa:f9:5e:60:fa:f4: 0f:b2:d3:c3:ba:3b:47:dd:b9:bb:63:98:f1:47:81:18:6a:64: 1d:11:2b:e2:54:f7:e0:0c:43:20:31:0f:6e:10:00:55:e2:a0: 81:50:3b:91:b9:f9:61:1a:82:df:94:f9:74:81:ce:d2:c6:5f: 99:f9:ed:6c:ff:59:19:b9:96:35:cf:83:4e:3e:b1:a5:a0:a1: 38:f2:76:5f:75:89:67:ae:38:3c:bf:73:09:d4:d1:97:65:49: 71:52:8c:ce:89:d7:5e:e1:0d:93:5a:88:04:c7:b2:25:a7:20: cf:df:36:b8:77:97:93:25:88:9f:17:fb:22:67:73:65:0e:58: 69:15:97:64:8e:76:ca:4a:49:0d:df:f7:bf:2f:11:d1:fb:c3: 1d:f6:30:32:36:01:6a:d3:8d:42:94:e8:79:4e:8b:1e:e9:f9: fa:13:1b:17:03:b2:39:6f:0b:9b:4c:6f:0a:51:69:db:ed:f1: be:b6:53:2b:ba:f6:23:8e:71:17:a6:6d:76:c2:7f:6e:20:22: d1:b3:a1:00:cd:ec:e6:c5:08:8b:06:2e:8e:4b:0c:9d:71:f1: 31:56:81:34 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUQoHotuP85aC2vsW3fRQJ2lXRyqowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcxNDAyMzMyM1oX DTI2MDcxMzAyMzgyM1owMzExMC8GA1UEAxMoMzc4Q0FDODBBQjc5ODU0N0Q2OEUz NzU5OUU4Rjk2RDM2MjYzQjBCRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALg7BsepHx76eWgoVVujUkv/MfpQvTlQBThtzqcJwPMDNKPPBVR5zBeWAh9i jwJeFgUv2YjMoNRl52qCYMjELlgzCic3iH3TMwRFGZtbS5dDpkAm3Kt4AcmwYgxv LvCAJiSR8mcJ9PwJvWe72dofujbnqNOefRJ0NOGgqzWpmo9EtHdItRffxeuoUmoq o6zn4iH7kU7ZynzRK05xcBuk1Aoojam/yOn0jFkRwjwE5v/iZZHot0n7ByB2iFGZ /s2tSxAFqg6y9JtAdjz+AfTyMHEpAiFL2P519jZzMv2Oj4zM6QchtW1muqvmP/k7 8KJloJQW19x3HnkPzMsgIfpWw9cCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQ3jKyA q3mFR9aON1mej5bTYmOwvzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1Mzg4Ny5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKPj/DANBgkqhkiG9w0BAQsFAAOCAQEAcux0T8n2o6nnk4ZYPilm xI29eOGYl3UBr4jMNYlOqvleYPr0D7LTw7o7R925u2OY8UeBGGpkHREr4lT34AxD IDEPbhAAVeKggVA7kbn5YRqC35T5dIHO0sZfmfntbP9ZGbmWNc+DTj6xpaChOPJ2 X3WJZ644PL9zCdTRl2VJcVKMzonXXuENk1qIBMeyJacgz982uHeXkyWInxf7Imdz ZQ5YaRWXZI52ykpJDd/3vy8R0fvDHfYwMjYBatONQpToeU6LHun5+hMbFwOyOW8L m0xvClFp2+3xvrZTK7r2I45xF6ZtdsJ/biAi0bOhAM3s5sUIiwYujksMnXHxMVaB NA== -----END CERTIFICATE-----Generated at Wed Dec 3 13:15:36 2025 by rpki-client