This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154159.roa File: AS154159.roa (raw, json) Hash identifier: EjFDt9rLE421wJvEDB6iQydKhAqIIqtaBo9QFn3BQwY= Subject key identifier: 87:C2:9A:5F:C7:85:BF:A2:0D:7E:76:AF:B9:7C:E0:14:EC:A2:16:86 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4895F7D569CEDE1BF8DC74AB067BC431363E61 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154159.roa Signing time: Thu 18 Dec 2025 06:48:37 +0000 ROA not before: Thu 18 Dec 2025 06:43:37 +0000 ROA not after: Thu 17 Dec 2026 06:48:37 +0000 asID: 154159 IP address blocks: 203.8.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 03:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:95:f7:d5:69:ce:de:1b:f8:dc:74:ab:06:7b:c4:31:36:3e:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 18 06:43:37 2025 GMT Not After : Dec 17 06:48:37 2026 GMT Subject: CN=87C29A5FC785BFA20D7E76AFB97CE014ECA21686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:71:92:0d:44:76:d9:02:cb:ef:e2:f3:52:d4: dc:aa:4e:f1:c4:61:69:9e:c4:3c:10:63:f8:e7:ab: f0:fb:d7:a0:cb:14:21:4a:dd:c8:2a:0b:de:3c:34: 1a:81:4f:82:01:b6:b6:7a:c2:fd:fd:e8:9c:18:79: f7:cd:db:22:d4:5b:66:b9:8b:e5:89:1c:04:14:c4: ef:22:83:92:29:b8:4e:58:a9:90:a7:ba:8d:37:c6: be:91:21:72:84:0c:7c:67:ad:d3:77:47:1a:86:c1: 5d:c3:3b:99:d3:e7:19:e5:06:32:a6:4c:f6:fe:a5: 5a:a3:2e:a1:0e:29:b9:23:cf:51:31:d6:c3:9d:74: b4:23:c7:2c:03:4a:c6:e7:96:b8:52:46:ec:3b:06: 2c:52:c8:a5:4f:80:10:59:e2:69:d0:ba:9a:40:93: fd:1d:4a:64:35:e3:d2:7f:d8:ce:2e:15:ba:a1:94: a5:46:e8:6b:7e:3d:46:32:fc:34:2e:af:68:42:ed: 8a:e0:9d:a9:08:0d:65:73:0f:29:b1:2f:83:bb:a1: 1f:33:9a:91:ff:73:d9:8a:f8:0b:14:47:aa:d6:30: 48:89:37:ff:dd:62:16:a3:6d:d3:5c:02:fa:b1:92: 59:8d:1a:6a:14:2d:ee:04:f8:05:50:90:95:e7:b1: 84:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C2:9A:5F:C7:85:BF:A2:0D:7E:76:AF:B9:7C:E0:14:EC:A2:16:86 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154159.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.8.223.0/24 Signature Algorithm: sha256WithRSAEncryption 07:81:53:6a:3d:f8:1c:57:b0:20:30:c5:49:67:a3:aa:23:3a: 21:27:2e:90:fb:28:e5:38:a8:72:ac:0d:15:0b:50:f5:5f:75: 38:b3:56:49:d4:ef:c3:b1:bb:87:4d:34:a2:e4:9d:5b:28:9c: 3c:b3:18:52:c5:3a:8b:a3:87:8f:cb:49:96:26:fc:39:a7:45: 25:9c:e2:05:84:e5:ba:c6:a8:8d:37:8c:0b:dd:92:6d:b2:75: 27:bb:96:f7:8a:97:ad:6e:3a:d7:5b:b3:39:74:a6:a2:1c:07: e4:57:22:d3:f2:60:40:f1:44:c3:0e:7c:54:dd:57:05:71:e2: cd:1e:0c:b6:f3:2c:18:ef:b0:bb:2e:b3:ab:9f:47:63:37:da: dd:7d:d4:ae:76:92:21:91:12:70:9a:fc:5e:4e:ce:d9:8c:88: 70:a3:49:9f:2a:a9:70:cb:5e:fb:90:aa:f0:b9:2e:5e:ca:7d: 3f:13:b8:dc:c3:18:32:50:b1:f5:66:25:4c:44:92:b1:fc:ad: 6d:19:c6:78:52:3f:71:d6:f2:7d:21:17:49:04:6b:0a:91:10: 81:7b:11:a8:77:ef:21:a5:63:e4:73:83:ed:e6:50:5f:5c:a8: fa:af:66:c9:22:bf:eb:16:80:c7:4b:94:c1:79:09:87:6e:50: 91:a7:78:a9 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgITSJX31WnO3hv43HSrBnvEMTY+YTANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTE4NjIxNDAwMDAxMTAvBgNVBAUTKEJBOEY3N0QyMUU1 OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIwHhcNMjUxMjE4MDY0MzM3WhcN MjYxMjE3MDY0ODM3WjAzMTEwLwYDVQQDEyg4N0MyOUE1RkM3ODVCRkEyMEQ3RTc2 QUZCOTdDRTAxNEVDQTIxNjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHGSDUR22QLL7+LzUtTcqk7xxGFpnsQ8EGP456vw+9egyxQhSt3IKgvePDQa gU+CAba2esL9/eicGHn3zdsi1FtmuYvliRwEFMTvIoOSKbhOWKmQp7qNN8a+kSFy hAx8Z63Td0cahsFdwzuZ0+cZ5QYypkz2/qVaoy6hDim5I89RMdbDnXS0I8csA0rG 55a4UkbsOwYsUsilT4AQWeJp0LqaQJP9HUpkNePSf9jOLhW6oZSlRuhrfj1GMvw0 Lq9oQu2K4J2pCA1lcw8psS+Du6EfM5qR/3PZivgLFEeq1jBIiTf/3WIWo23TXAL6 sZJZjRpqFC3uBPgFUJCV57GEQwIDAQABo4IB0DCCAcwwHQYDVR0OBBYEFIfCml/H hb+iDX52r7l84BTsohaGMB8GA1UdIwQYMBaAFLqPd9IeWP6ck5prcOJYVhfhgzdr MA4GA1UdDwEB/wQEAwIHgDBpBgNVHR8EYjBgMF6gXKBahlhyc3luYzovL3JlcG8t cnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0JBOEY3N0QyMUU1OEZFOUM5 MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggr BgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdF RjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3VvOTMwaDVZX3B5VG1tdHc0bGhX Ri1HRE4ycy5jZXIwVAYIKwYBBQUHAQsESDBGMEQGCCsGAQUFBzALhjhyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FTMTU0MTU5LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAywjfMA0GCSqGSIb3DQEBCwUAA4IBAQAHgVNqPfgcV7AgMMVJZ6Oq IzohJy6Q+yjlOKhyrA0VC1D1X3U4s1ZJ1O/DsbuHTTSi5J1bKJw8sxhSxTqLo4eP y0mWJvw5p0UlnOIFhOW6xqiNN4wL3ZJtsnUnu5b3ipetbjrXW7M5dKaiHAfkVyLT 8mBA8UTDDnxU3VcFceLNHgy28ywY77C7LrOrn0djN9rdfdSudpIhkRJwmvxeTs7Z jIhwo0mfKqlwy177kKrwuS5eyn0/E7jcwxgyULH1ZiVMRJKx/K1tGcZ4Uj9x1vJ9 IRdJBGsKkRCBexGod+8hpWPkc4Pt5lBfXKj6r2bJIr/rFoDHS5TBeQmHblCRp3ip -----END CERTIFICATE-----Generated at Fri Dec 19 06:37:23 2025 by rpki-client