This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154210.roa File: AS154210.roa (raw, json) Hash identifier: AZjSwnQ0mNzFB9ba7Yh5UDHPIBpIBM3iE/2Ekz43nlo= Subject key identifier: 8E:D5:55:11:D0:CA:AF:EF:25:B5:09:CC:E2:11:8D:F4:58:2D:8D:68 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 59066F5A286209CB21E7944B9B2B30A93F697EEF Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154210.roa Signing time: Wed 12 Nov 2025 03:24:31 +0000 ROA not before: Wed 12 Nov 2025 03:19:31 +0000 ROA not after: Wed 11 Nov 2026 03:24:31 +0000 asID: 154210 IP address blocks: 203.16.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:06:6f:5a:28:62:09:cb:21:e7:94:4b:9b:2b:30:a9:3f:69:7e:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 12 03:19:31 2025 GMT Not After : Nov 11 03:24:31 2026 GMT Subject: CN=8ED55511D0CAAFEF25B509CCE2118DF4582D8D68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1c:e5:d8:c2:51:a1:f6:78:29:91:4c:d6:9d: 44:b8:2b:03:d2:2e:79:50:ad:b5:b5:ee:56:bc:94: c5:25:55:4a:0b:f8:e5:30:56:06:92:aa:28:e3:5e: dc:57:ca:67:fc:44:0d:8a:a3:a6:b4:58:19:1a:7b: ae:e9:13:db:5e:7e:b2:21:ea:a1:20:6c:05:e1:62: 41:25:dc:b2:ea:84:68:43:88:df:89:b1:51:4f:c1: a0:d6:34:35:c6:52:5b:5e:68:00:aa:eb:00:11:02: 12:76:db:d9:ba:1c:05:08:2d:d8:c8:f8:0f:d6:05: 6d:1d:c9:d9:4d:0f:f6:3c:d0:4c:c0:65:7e:ee:c6: 33:e5:b7:f9:ac:6b:15:be:c6:9d:77:0d:c7:0c:4f: 2c:61:50:72:73:f2:e7:58:2a:8e:fc:67:d9:b7:34: c2:bb:e6:85:8b:e5:9e:da:89:61:7d:68:5b:f7:fb: 1c:97:03:dd:84:ca:b2:67:4a:95:c3:c7:c1:3e:63: 6e:42:9f:bf:82:be:8b:b2:7b:05:8d:7e:70:6b:3f: 8c:25:da:4a:b5:3e:d9:2a:88:68:33:b2:e8:2c:cb: e6:9c:f2:9d:fb:a4:96:c5:e3:38:58:b3:93:4c:10: 1e:17:72:b5:eb:d2:3c:2f:43:17:9e:a1:98:fe:1d: 27:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D5:55:11:D0:CA:AF:EF:25:B5:09:CC:E2:11:8D:F4:58:2D:8D:68 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154210.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.16.11.0/24 Signature Algorithm: sha256WithRSAEncryption 81:42:85:11:59:f3:2a:d1:a5:19:b1:2c:22:ac:e7:7d:47:3f: 18:ce:b4:ba:b4:03:f0:52:84:96:5e:1b:99:12:e2:1a:e9:d6: dc:64:0c:e9:69:fa:30:c6:e6:cd:4c:d6:3a:ba:e3:1f:e3:16: ac:20:cd:a1:89:fc:f5:85:ca:65:56:9e:b9:75:0f:0e:85:f0: 28:37:12:ab:99:2c:e7:de:91:ac:73:8f:38:79:ad:d3:95:d6: fb:5b:8e:d3:04:c4:b7:1a:b7:e4:96:5c:33:f2:6e:ff:cc:0e: d0:d9:e8:a0:7b:3b:90:a5:70:6a:67:25:2c:5c:02:4c:a8:d3: 2a:3b:60:e6:6b:b5:7f:71:bf:9e:91:f5:e6:3c:96:55:21:9e: ff:74:73:94:29:e0:40:03:a1:f4:bd:44:a8:59:43:ff:36:5a: f4:ef:39:a2:b2:db:f3:60:15:d1:5d:52:28:69:8d:9b:6c:a5: a0:2f:d1:46:2a:31:ed:a8:41:74:a7:51:3e:ad:ec:26:49:70: 43:f9:04:69:b6:2b:0f:87:e5:07:c0:e0:ca:3d:8a:c1:fc:1c: 4b:71:dd:46:c0:a6:fc:e2:54:1c:6f:e2:a7:b0:76:29:9e:9b: a3:78:a3:8f:16:bb:c2:45:5a:ba:ba:dc:40:1d:cf:1a:a2:b1: 64:83:da:4e -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUWQZvWihiCcsh55RLmyswqT9pfu8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMjAzMTkzMVoX DTI2MTExMTAzMjQzMVowMzExMC8GA1UEAxMoOEVENTU1MTFEMENBQUZFRjI1QjUw OUNDRTIxMThERjQ1ODJEOEQ2ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKkc5djCUaH2eCmRTNadRLgrA9IueVCttbXuVryUxSVVSgv45TBWBpKqKONe 3FfKZ/xEDYqjprRYGRp7rukT215+siHqoSBsBeFiQSXcsuqEaEOI34mxUU/BoNY0 NcZSW15oAKrrABECEnbb2bocBQgt2Mj4D9YFbR3J2U0P9jzQTMBlfu7GM+W3+axr Fb7GnXcNxwxPLGFQcnPy51gqjvxn2bc0wrvmhYvlntqJYX1oW/f7HJcD3YTKsmdK lcPHwT5jbkKfv4K+i7J7BY1+cGs/jCXaSrU+2SqIaDOy6CzL5pzynfuklsXjOFiz k0wQHhdytevSPC9DF56hmP4dJ3MCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSO1VUR 0Mqv7yW1CcziEY30WC2NaDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1NDIxMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMsQCzANBgkqhkiG9w0BAQsFAAOCAQEAgUKFEVnzKtGlGbEsIqzn fUc/GM60urQD8FKEll4bmRLiGunW3GQM6Wn6MMbmzUzWOrrjH+MWrCDNoYn89YXK ZVaeuXUPDoXwKDcSq5ks596RrHOPOHmt05XW+1uO0wTEtxq35JZcM/Ju/8wO0Nno oHs7kKVwamclLFwCTKjTKjtg5mu1f3G/npH15jyWVSGe/3RzlCngQAOh9L1EqFlD /zZa9O85orLb82AV0V1SKGmNm2yloC/RRiox7ahBdKdRPq3sJklwQ/kEabYrD4fl B8Dgyj2KwfwcS3HdRsCm/OJUHG/ip7B2KZ6bo3ijjxa7wkVaurrcQB3PGqKxZIPa Tg== -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:37 2025 by rpki-client