This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154075.roa File: AS154075.roa (raw, json) Hash identifier: lloQaKcaMRUvs/Nl+7onZ6LetvJLcurPNkvvjEoX+Yc= Subject key identifier: D3:CC:D7:E7:5C:3D:67:A7:42:C5:06:C1:F8:19:94:C5:AF:47:54:C0 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3CC45454AF1589BF4D4E493C2B521DC6FC545C78 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154075.roa Signing time: Fri 28 Nov 2025 01:09:44 +0000 ROA not before: Fri 28 Nov 2025 01:04:44 +0000 ROA not after: Fri 27 Nov 2026 01:09:44 +0000 asID: 154075 IP address blocks: 2001:df5:e440::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:c4:54:54:af:15:89:bf:4d:4e:49:3c:2b:52:1d:c6:fc:54:5c:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 28 01:04:44 2025 GMT Not After : Nov 27 01:09:44 2026 GMT Subject: CN=D3CCD7E75C3D67A742C506C1F81994C5AF4754C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b2:4d:82:7b:9f:47:1d:06:79:09:8d:bc:3d: 21:3e:56:4e:d4:b0:03:e0:b3:69:cb:c3:21:81:46: 4b:d0:d5:63:7c:f1:18:70:b9:df:3c:26:2a:42:ca: 1e:06:90:41:23:4b:71:74:e6:5c:53:19:2e:5b:e9: ad:d6:8e:0f:a3:f8:90:b7:82:4a:16:85:86:34:15: 4a:34:58:24:0b:88:84:73:86:26:d0:1e:ae:e0:6c: c7:ca:41:6a:6f:be:95:4a:65:22:63:49:13:0e:3d: 25:f1:a0:fa:73:bb:47:f0:7e:32:81:50:63:fe:fa: 83:b1:45:54:c6:38:d0:87:f7:c8:09:8b:2f:bd:1f: 63:37:75:ec:dc:27:60:32:8d:e2:e4:dd:2d:04:76: 9e:21:ac:f7:39:61:c2:9f:0d:6a:ad:d2:65:b6:bc: 6b:0b:07:97:8e:5b:fe:df:75:af:72:ac:6d:99:46: 0a:8a:e2:db:d8:7d:20:44:c0:f3:94:ad:e4:aa:18: e7:9a:1c:dc:11:a8:8d:99:b5:bc:f7:bf:a0:cf:b2: 60:8b:44:8a:f5:a4:d1:09:61:da:99:99:ec:9e:94: e3:f7:df:74:a9:50:16:4f:ed:a8:df:dd:77:5b:83: 53:4c:a7:f6:15:52:8d:35:b7:64:02:b6:3d:6a:d4: ed:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:CC:D7:E7:5C:3D:67:A7:42:C5:06:C1:F8:19:94:C5:AF:47:54:C0 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154075.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df5:e440::/48 Signature Algorithm: sha256WithRSAEncryption 51:18:61:62:8a:f9:17:66:5f:e4:9b:f9:6b:18:47:54:71:e7: a9:73:65:49:ed:f4:9c:70:22:f8:e5:4b:d5:9e:ad:be:fa:9d: 43:03:55:f9:76:76:56:00:73:fe:81:94:8c:d1:cd:8b:d1:55: d1:35:a1:7f:95:08:c9:48:a8:94:1e:03:66:ea:44:02:5f:16: 30:33:c7:8c:b5:fe:51:52:0d:dd:d3:00:a4:5a:f1:6b:5d:c5: 86:58:4a:65:24:5e:9d:61:5e:ae:8f:9e:3e:a3:75:e9:e7:07: 58:10:8e:4f:f6:d1:fc:8f:22:6a:bf:7b:f2:3c:3a:87:c1:fb: 9b:35:b8:0f:db:32:16:28:8e:68:bb:8c:30:b5:21:bf:81:22: 97:c7:3c:ce:5a:9d:0f:48:80:0d:fd:49:e0:67:55:d0:40:0c: 7b:53:45:a7:ee:34:27:6e:e3:4a:be:f2:01:06:7a:4d:30:ac: c2:3c:94:c7:fa:a2:3f:28:46:3f:e7:4f:32:7e:ce:04:cf:4d: 4c:2e:7a:62:c0:81:70:05:56:5f:83:11:66:ec:b0:34:b7:52: 96:56:a7:ad:7a:e5:56:f9:73:10:0c:54:ab:b7:df:d2:e0:47: e8:31:49:b7:e1:21:8d:90:ac:1c:50:b0:8a:0e:2e:41:5b:79: dd:45:35:6b -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUPMRUVK8Vib9NTkk8K1IdxvxUXHgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTEyODAxMDQ0NFoX DTI2MTEyNzAxMDk0NFowMzExMC8GA1UEAxMoRDNDQ0Q3RTc1QzNENjdBNzQyQzUw NkMxRjgxOTk0QzVBRjQ3NTRDMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMSyTYJ7n0cdBnkJjbw9IT5WTtSwA+CzacvDIYFGS9DVY3zxGHC53zwmKkLK HgaQQSNLcXTmXFMZLlvprdaOD6P4kLeCShaFhjQVSjRYJAuIhHOGJtAeruBsx8pB am++lUplImNJEw49JfGg+nO7R/B+MoFQY/76g7FFVMY40If3yAmLL70fYzd17Nwn YDKN4uTdLQR2niGs9zlhwp8Naq3SZba8awsHl45b/t91r3KsbZlGCori29h9IETA 85St5KoY55oc3BGojZm1vPe/oM+yYItEivWk0Qlh2pmZ7J6U4/ffdKlQFk/tqN/d d1uDU0yn9hVSjTW3ZAK2PWrU7d0CAwEAAaOCAdMwggHPMB0GA1UdDgQWBBTTzNfn XD1np0LFBsH4GZTFr0dUwDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1NDA3NS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfXkQDANBgkqhkiG9w0BAQsFAAOCAQEAURhhYor5F2Zf5Jv5 axhHVHHnqXNlSe30nHAi+OVL1Z6tvvqdQwNV+XZ2VgBz/oGUjNHNi9FV0TWhf5UI yUiolB4DZupEAl8WMDPHjLX+UVIN3dMApFrxa13FhlhKZSRenWFero+ePqN16ecH WBCOT/bR/I8iar978jw6h8H7mzW4D9syFiiOaLuMMLUhv4Eil8c8zlqdD0iADf1J 4GdV0EAMe1NFp+40J27jSr7yAQZ6TTCswjyUx/qiPyhGP+dPMn7OBM9NTC56YsCB cAVWX4MRZuywNLdSllanrXrlVvlzEAxUq7ff0uBH6DFJt+EhjZCsHFCwig4uQVt5 3UU1aw== -----END CERTIFICATE-----Generated at Wed Dec 3 14:50:01 2025 by rpki-client