This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154153.roa File: AS154153.roa (raw, json) Hash identifier: kBtkEhOiN1iSQxAvfHwdx8D/v12vtZGEcCrVbFNuGUU= Subject key identifier: DB:41:45:B5:6B:DD:B5:15:69:2E:32:0B:9C:99:7D:A4:F7:00:5B:77 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 749717433802D73A20E52348B83DDBD1E78A45E3 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154153.roa Signing time: Wed 14 Jan 2026 02:13:59 +0000 ROA not before: Wed 14 Jan 2026 02:08:59 +0000 ROA not after: Wed 13 Jan 2027 02:13:59 +0000 asID: 154153 IP address blocks: 2001:df5:e9c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 13:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:97:17:43:38:02:d7:3a:20:e5:23:48:b8:3d:db:d1:e7:8a:45:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 14 02:08:59 2026 GMT Not After : Jan 13 02:13:59 2027 GMT Subject: CN=DB4145B56BDDB515692E320B9C997DA4F7005B77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e9:96:b4:44:5d:1c:97:94:97:f5:3c:40:13: 29:d8:13:31:b4:cb:d0:5e:2d:6e:2c:d8:b0:57:f7: d5:f1:9f:a8:6a:eb:96:82:02:58:49:7b:05:08:74: 1a:1f:0b:9d:4e:18:86:82:1d:a8:a7:12:e0:a6:5f: ce:fe:a8:5b:91:80:6a:a6:b1:dc:37:51:d8:55:9c: 7c:cf:9f:91:ec:f8:27:60:31:60:83:4b:2c:c7:e3: 16:71:88:01:7c:dd:05:8f:07:cc:fa:7c:00:1c:dc: 09:3e:9e:89:c5:af:de:a4:87:b0:c3:a1:ae:7f:a1: cc:2b:f9:a6:88:44:7c:47:5e:64:7b:fa:26:15:56: 58:96:8b:b7:ad:fb:11:78:53:43:d7:23:0f:2b:70: eb:4e:72:81:c9:56:be:c7:4c:93:13:2e:44:71:55: d9:6c:ec:bf:b1:1d:2e:80:63:b5:5c:94:f4:5d:ea: 12:c9:ac:b8:66:d4:9c:43:6f:78:27:4c:3b:f3:54: 34:43:66:f0:a1:14:b1:04:18:fc:63:d3:0e:c4:99: 82:15:28:cc:7d:ec:77:12:26:57:64:38:68:3e:de: de:6b:03:80:a7:bb:22:29:45:a5:49:d3:a5:57:f7: 74:77:45:d3:34:44:ef:ef:03:5d:86:4b:2b:93:1b: 9b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:41:45:B5:6B:DD:B5:15:69:2E:32:0B:9C:99:7D:A4:F7:00:5B:77 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154153.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df5:e9c0::/48 Signature Algorithm: sha256WithRSAEncryption 69:61:77:1b:45:3c:47:00:a4:51:9e:ad:ec:39:96:a3:c9:04: e1:ba:a9:57:4a:85:73:79:4a:35:37:74:83:9d:72:47:61:02: 0d:80:8a:30:c6:13:a6:3d:1b:77:4c:1e:5d:a3:58:21:ed:19: 26:6f:ba:95:3e:a2:3a:da:c1:8a:34:a4:65:b5:ae:43:21:7c: 73:c5:f2:4c:0e:7f:d7:60:d6:f8:27:af:27:bd:ae:a3:42:ef: a7:31:75:30:a4:0b:f1:d9:10:de:96:67:ef:65:52:65:26:0c: de:a3:83:41:a3:7f:01:e7:e5:5f:df:08:19:dc:13:3d:ff:22: bd:44:a7:af:22:25:fb:29:d0:1c:71:3c:04:f2:a8:9e:1b:5b: 93:dc:7f:c1:65:d7:93:f3:fe:bd:9d:8c:88:be:c9:5e:89:7c: bd:15:24:43:7f:99:52:71:db:6d:d7:81:8c:da:0e:ea:96:fa: 12:62:9c:5d:05:a5:38:f5:e6:0f:0d:5c:c0:b8:41:e2:5c:f2: 91:02:17:3e:20:01:54:5a:fe:c1:ce:0d:d1:06:53:90:2d:de: e7:53:5e:0e:34:2f:c0:b1:64:a0:e7:2b:fd:ca:37:17:c9:0c: 39:61:69:8f:75:10:ea:7a:83:18:fa:2d:18:8c:df:68:fa:c1: 3b:5a:ec:2f -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUdJcXQzgC1zog5SNIuD3b0eeKReMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDExNDAyMDg1OVoX DTI3MDExMzAyMTM1OVowMzExMC8GA1UEAxMoREI0MTQ1QjU2QkREQjUxNTY5MkUz MjBCOUM5OTdEQTRGNzAwNUI3NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMXplrREXRyXlJf1PEATKdgTMbTL0F4tbizYsFf31fGfqGrrloICWEl7BQh0 Gh8LnU4YhoIdqKcS4KZfzv6oW5GAaqax3DdR2FWcfM+fkez4J2AxYINLLMfjFnGI AXzdBY8HzPp8ABzcCT6eicWv3qSHsMOhrn+hzCv5pohEfEdeZHv6JhVWWJaLt637 EXhTQ9cjDytw605ygclWvsdMkxMuRHFV2Wzsv7EdLoBjtVyU9F3qEsmsuGbUnENv eCdMO/NUNENm8KEUsQQY/GPTDsSZghUozH3sdxImV2Q4aD7e3msDgKe7IilFpUnT pVf3dHdF0zRE7+8DXYZLK5Mbm6MCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBTbQUW1 a921FWkuMgucmX2k9wBbdzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1NDE1My5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfXpwDANBgkqhkiG9w0BAQsFAAOCAQEAaWF3G0U8RwCkUZ6t 7DmWo8kE4bqpV0qFc3lKNTd0g51yR2ECDYCKMMYTpj0bd0weXaNYIe0ZJm+6lT6i OtrBijSkZbWuQyF8c8XyTA5/12DW+CevJ72uo0LvpzF1MKQL8dkQ3pZn72VSZSYM 3qODQaN/AeflX98IGdwTPf8ivUSnryIl+ynQHHE8BPKonhtbk9x/wWXXk/P+vZ2M iL7JXol8vRUkQ3+ZUnHbbdeBjNoO6pb6EmKcXQWlOPXmDw1cwLhB4lzykQIXPiAB VFr+wc4N0QZTkC3e51NeDjQvwLFkoOcr/co3F8kMOWFpj3UQ6nqDGPotGIzfaPrB O1rsLw== -----END CERTIFICATE-----Generated at Wed Jan 21 14:30:06 2026 by rpki-client