This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154092.roa File: AS154092.roa (raw, json) Hash identifier: rHkU76DbQLwCc9L0HN4jxJxScfT7kT/MHak46qsD1Ew= Subject key identifier: 13:3A:4C:55:F3:E0:35:8E:4A:69:8E:77:FD:82:F6:C3:26:2C:D2:75 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 79EB498FB726B817DDCC4857DC470CE1ECBC2F20 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154092.roa Signing time: Thu 31 Jul 2025 02:54:57 +0000 ROA not before: Thu 31 Jul 2025 02:49:57 +0000 ROA not after: Thu 30 Jul 2026 02:54:57 +0000 asID: 154092 IP address blocks: 2001:df5:d8c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:eb:49:8f:b7:26:b8:17:dd:cc:48:57:dc:47:0c:e1:ec:bc:2f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 02:49:57 2025 GMT Not After : Jul 30 02:54:57 2026 GMT Subject: CN=133A4C55F3E0358E4A698E77FD82F6C3262CD275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:38:7a:e4:a4:87:54:3c:6c:91:02:e5:96:47: 63:9c:40:ee:54:c2:20:7d:d3:68:4b:f2:ba:9b:40: 18:dc:4c:20:70:1d:30:c4:39:df:96:3c:f6:bc:a9: 97:e8:76:25:21:57:b8:d7:78:66:81:10:42:5a:51: 9d:23:0c:0a:90:d9:3f:73:3c:11:55:d7:68:38:d3: ff:e2:4c:7c:4b:36:68:76:17:da:37:50:f3:a1:d8: 5d:ce:3a:b0:3b:dc:be:91:de:1b:46:1e:04:9b:19: e3:45:e8:2d:5a:45:d5:a9:66:d2:c4:49:36:df:9e: 41:94:16:1b:d3:eb:5b:dc:09:b6:02:3d:74:4e:1f: 65:93:16:23:3f:c7:0d:45:a9:c3:ab:85:c0:2f:b4: 32:92:db:e8:8e:13:e5:85:0d:d4:4f:87:8f:a8:33: 5c:b0:72:86:b8:63:5a:03:2f:3f:5f:d8:db:ff:55: 50:40:d5:51:d3:cf:2d:fd:2c:fc:1b:28:12:76:59: c5:de:a4:09:d7:ba:fa:6c:1f:39:ca:74:57:67:29: 3b:a0:82:7c:34:15:e3:16:0e:d1:27:51:2e:df:e0: c7:17:8f:c5:94:a1:c6:77:5a:5e:a1:17:78:f8:a4: 45:83:0f:a4:36:d9:bb:f7:84:07:be:e8:6e:68:60: 2e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:3A:4C:55:F3:E0:35:8E:4A:69:8E:77:FD:82:F6:C3:26:2C:D2:75 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154092.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df5:d8c0::/48 Signature Algorithm: sha256WithRSAEncryption 72:40:74:56:7c:42:e0:44:f2:55:ae:33:af:c6:28:a7:11:5b: 07:91:9e:bb:f0:5f:85:a1:38:ab:ec:11:da:4c:72:5e:d7:1b: df:9b:25:d9:4a:6a:77:39:eb:49:d0:ec:0d:70:da:f8:c7:1a: e3:1b:6a:3c:0c:a5:61:08:ac:8b:7f:0b:d5:ba:4c:b2:d8:d8: 88:df:31:e2:72:b8:b0:73:79:96:13:03:b4:07:73:83:ce:10: 37:e9:78:a9:bb:d5:c6:cc:8d:17:65:88:dc:7f:63:8f:57:9e: 1e:09:3d:4e:8e:d4:d2:e8:a0:9f:d1:bb:84:d2:9d:58:fd:6e: c9:70:33:66:69:cc:5d:3e:2c:e4:29:04:bb:c7:5e:31:5d:8a: 94:a5:46:35:0f:35:d1:5d:1c:fb:3a:a8:54:94:36:bf:cf:de: 86:24:db:df:ca:bd:4d:9d:8f:76:68:e1:55:92:ca:93:63:e1: 3e:d6:a0:c6:56:ae:4d:e4:57:e1:9e:87:ba:5e:86:cc:90:4e: eb:48:43:b5:12:2c:ae:db:4d:db:32:6e:48:82:86:8b:7a:48: 87:b2:bd:c1:af:36:84:73:02:77:5a:55:b7:67:67:77:3e:d0: 12:b4:d1:b0:5f:fd:86:3e:2c:8f:c4:a9:36:3c:d6:1b:4d:cd: 61:d5:b6:2d -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUeetJj7cmuBfdzEhX3EcM4ey8LyAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDczMTAyNDk1N1oX DTI2MDczMDAyNTQ1N1owMzExMC8GA1UEAxMoMTMzQTRDNTVGM0UwMzU4RTRBNjk4 RTc3RkQ4MkY2QzMyNjJDRDI3NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJw4euSkh1Q8bJEC5ZZHY5xA7lTCIH3TaEvyuptAGNxMIHAdMMQ535Y89ryp l+h2JSFXuNd4ZoEQQlpRnSMMCpDZP3M8EVXXaDjT/+JMfEs2aHYX2jdQ86HYXc46 sDvcvpHeG0YeBJsZ40XoLVpF1alm0sRJNt+eQZQWG9PrW9wJtgI9dE4fZZMWIz/H DUWpw6uFwC+0MpLb6I4T5YUN1E+Hj6gzXLByhrhjWgMvP1/Y2/9VUEDVUdPPLf0s /BsoEnZZxd6kCde6+mwfOcp0V2cpO6CCfDQV4xYO0SdRLt/gxxePxZShxndaXqEX ePikRYMPpDbZu/eEB77obmhgLtUCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBQTOkxV 8+A1jkppjnf9gvbDJizSdTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1NDA5Mi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfXYwDANBgkqhkiG9w0BAQsFAAOCAQEAckB0VnxC4ETyVa4z r8YopxFbB5Geu/BfhaE4q+wR2kxyXtcb35sl2UpqdznrSdDsDXDa+Mca4xtqPAyl YQisi38L1bpMstjYiN8x4nK4sHN5lhMDtAdzg84QN+l4qbvVxsyNF2WI3H9jj1ee Hgk9To7U0uign9G7hNKdWP1uyXAzZmnMXT4s5CkEu8deMV2KlKVGNQ810V0c+zqo VJQ2v8/ehiTb38q9TZ2PdmjhVZLKk2PhPtagxlauTeRX4Z6Hul6GzJBO60hDtRIs rttN2zJuSIKGi3pIh7K9wa82hHMCd1pVt2dndz7QErTRsF/9hj4sj8SpNjzWG03N YdW2LQ== -----END CERTIFICATE-----Generated at Wed Dec 3 13:15:38 2025 by rpki-client