This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153945.roa File: AS153945.roa (raw, json) Hash identifier: j2Bmj6a/kXHUvw3L16n2aNi62RcQerB9qtlICAmh+J0= Subject key identifier: 0E:C3:6C:C6:02:3A:AF:40:A3:FB:D1:2B:72:6B:F1:8E:55:4F:72:1B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3406FD523DC8DD952DBECFB5C2A1D684B6823B3D Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153945.roa Signing time: Tue 20 Jan 2026 06:28:39 +0000 ROA not before: Tue 20 Jan 2026 06:23:39 +0000 ROA not after: Tue 19 Jan 2027 06:28:39 +0000 asID: 153945 IP address blocks: 2001:df5:9740::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 13:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:06:fd:52:3d:c8:dd:95:2d:be:cf:b5:c2:a1:d6:84:b6:82:3b:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 20 06:23:39 2026 GMT Not After : Jan 19 06:28:39 2027 GMT Subject: CN=0EC36CC6023AAF40A3FBD12B726BF18E554F721B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:24:ec:ef:f9:d7:fd:50:f1:f2:91:a9:58:d8: 8b:c0:d4:d9:1a:7b:ac:97:cb:f7:ec:ca:57:19:b3: 60:49:ee:f7:14:27:1d:90:e8:5e:86:ca:5c:55:8b: af:7d:32:ce:79:dd:5e:3e:64:e8:29:34:80:90:a5: 5e:a0:f6:cb:8e:7d:91:40:b4:a7:a3:9b:b3:14:49: cc:c2:e3:1a:25:40:18:56:83:24:ef:4b:2b:0c:9c: e3:55:84:b2:6d:d2:3d:03:55:e5:da:0d:bf:b2:bc: b5:4e:42:68:4d:98:61:69:55:8a:d8:1a:70:96:2d: 14:bb:08:3c:f3:86:dc:60:dc:c4:b3:ee:35:22:45: 73:eb:b5:51:8e:0a:0d:04:77:26:b9:06:e7:db:a2: 7b:ef:1b:a1:d3:8a:38:9c:f6:64:ce:d2:45:d7:24: 26:4a:73:1a:bd:22:41:46:dd:3c:aa:4e:c2:42:88: b5:b0:e0:a9:4c:12:2e:c8:f2:d0:14:41:92:4e:6d: dc:6e:2f:f3:62:5d:df:26:91:4c:6d:bd:f8:49:cf: a0:d5:96:07:cc:f3:e4:16:24:52:4b:90:1a:76:02: 57:90:6e:4d:f2:39:84:6e:af:0f:16:fb:cb:48:a5: b6:d1:0d:8b:84:8c:d6:e0:d0:eb:f5:c6:65:8d:5b: a5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C3:6C:C6:02:3A:AF:40:A3:FB:D1:2B:72:6B:F1:8E:55:4F:72:1B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153945.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df5:9740::/48 Signature Algorithm: sha256WithRSAEncryption 84:b2:f4:35:7b:89:28:eb:2e:a6:a8:d8:ae:40:4d:72:fe:4a: 46:25:dd:d4:b7:c1:1e:b8:07:0f:f5:2f:7a:ed:26:9b:56:fe: 1b:2c:27:26:e9:4c:b1:37:f7:71:b0:c8:0a:5a:56:56:ed:90: c4:3b:4c:a3:33:13:8f:f1:ea:27:5b:cf:7d:5b:83:5c:20:51: 68:4f:79:cc:38:49:c9:9c:1f:a0:dc:ae:ba:d8:fe:d9:07:ce: 08:38:ec:35:3f:ce:bc:18:4a:22:18:61:11:13:0e:48:19:d5: d4:5e:e5:2d:08:de:bf:b6:94:92:ac:b4:83:f9:53:44:f4:fd: e7:e3:1a:ed:64:77:75:3d:8a:29:71:1f:38:52:37:8a:22:ca: 6c:2b:14:d8:e0:5c:59:f5:19:b7:30:6a:17:d8:e8:62:e1:bb: c7:de:58:a9:83:64:6d:2d:23:b6:68:9c:c1:70:00:7d:ae:95: a1:3e:44:eb:e4:dd:ae:a9:c7:e0:a4:09:90:f9:74:d1:f8:a7: f6:30:3a:9d:c3:23:fd:dc:c6:69:0d:ec:0c:59:26:46:b7:0d: f0:b8:09:c5:f4:17:45:5d:c5:ba:c6:5c:5e:d0:e6:b5:ab:14: 3d:4c:01:42:57:0c:e3:c5:49:94:5b:08:05:25:30:4b:ee:39: 74:6c:fc:f2 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUNAb9Uj3I3ZUtvs+1wqHWhLaCOz0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDEyMDA2MjMzOVoX DTI3MDExOTA2MjgzOVowMzExMC8GA1UEAxMoMEVDMzZDQzYwMjNBQUY0MEEzRkJE MTJCNzI2QkYxOEU1NTRGNzIxQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKUk7O/51/1Q8fKRqVjYi8DU2Rp7rJfL9+zKVxmzYEnu9xQnHZDoXobKXFWL r30yznndXj5k6Ck0gJClXqD2y459kUC0p6ObsxRJzMLjGiVAGFaDJO9LKwyc41WE sm3SPQNV5doNv7K8tU5CaE2YYWlVitgacJYtFLsIPPOG3GDcxLPuNSJFc+u1UY4K DQR3JrkG59uie+8bodOKOJz2ZM7SRdckJkpzGr0iQUbdPKpOwkKItbDgqUwSLsjy 0BRBkk5t3G4v82Jd3yaRTG29+EnPoNWWB8zz5BYkUkuQGnYCV5BuTfI5hG6vDxb7 y0ilttENi4SM1uDQ6/XGZY1bpYkCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBQOw2zG AjqvQKP70Stya/GOVU9yGzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1Mzk0NS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfWXQDANBgkqhkiG9w0BAQsFAAOCAQEAhLL0NXuJKOsupqjY rkBNcv5KRiXd1LfBHrgHD/Uveu0mm1b+GywnJulMsTf3cbDIClpWVu2QxDtMozMT j/HqJ1vPfVuDXCBRaE95zDhJyZwfoNyuutj+2QfOCDjsNT/OvBhKIhhhERMOSBnV 1F7lLQjev7aUkqy0g/lTRPT95+Ma7WR3dT2KKXEfOFI3iiLKbCsU2OBcWfUZtzBq F9joYuG7x95YqYNkbS0jtmicwXAAfa6VoT5E6+TdrqnH4KQJkPl00fin9jA6ncMj /dzGaQ3sDFkmRrcN8LgJxfQXRV3FusZcXtDmtasUPUwBQlcM48VJlFsIBSUwS+45 dGz88g== -----END CERTIFICATE-----Generated at Wed Jan 21 14:30:07 2026 by rpki-client