This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154337.roa File: AS154337.roa (raw, json) Hash identifier: gt0E32vpD4VlISo1KTQPmZJDYug8g0AybKW2wpZYKno= Subject key identifier: 07:31:FF:B0:B2:AA:91:AF:BF:DC:98:FD:A8:7F:5B:BA:70:B2:4C:C7 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1716BB567BCF4AE34BE4D3ED65FAD28C9D428FBC Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154337.roa Signing time: Thu 13 Nov 2025 04:33:31 +0000 ROA not before: Thu 13 Nov 2025 04:28:31 +0000 ROA not after: Thu 12 Nov 2026 04:33:31 +0000 asID: 154337 IP address blocks: 2001:df6:3dc0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:16:bb:56:7b:cf:4a:e3:4b:e4:d3:ed:65:fa:d2:8c:9d:42:8f:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 13 04:28:31 2025 GMT Not After : Nov 12 04:33:31 2026 GMT Subject: CN=0731FFB0B2AA91AFBFDC98FDA87F5BBA70B24CC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:37:3c:32:b0:22:48:42:28:cb:aa:66:8e:a6: 76:4a:0a:38:4e:7e:d1:aa:44:82:56:37:e4:91:b6: d6:cc:dc:db:e6:0f:e7:e9:17:bb:3a:a7:ec:19:bd: 0b:f0:ad:9a:8c:c3:26:81:16:97:41:6a:f5:d3:43: 32:68:77:cb:5e:51:60:92:3d:cc:32:64:91:a6:9c: 53:f7:72:71:52:2a:59:4b:26:bc:6c:22:36:d7:c0: 74:e4:53:cf:62:bb:68:21:c8:42:58:e1:a6:5c:7d: be:d6:01:ca:9b:be:1f:e5:15:54:1c:df:07:1c:6a: ec:c9:26:ef:84:2e:a5:20:88:75:f9:8a:26:d1:b7: a1:f4:0b:03:be:05:0c:4d:71:87:1a:3c:75:88:12: 82:f1:e5:9f:01:ae:76:2f:c3:09:78:3c:0e:63:bb: f6:1c:d3:42:fc:45:31:32:db:ac:4b:4f:96:24:c1: 31:3e:7d:bb:32:79:48:e4:14:d1:5b:07:38:4a:d2: f1:70:51:ae:6f:bc:28:65:da:ff:26:34:83:fd:1e: a3:32:3c:0d:59:29:0a:c0:5a:7f:8a:6a:a5:37:d0: ab:fc:0d:f2:a3:99:f7:21:2a:d9:df:f8:33:0d:7e: a2:48:eb:67:99:5a:e5:62:ba:42:29:df:d6:b1:d9: 16:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:31:FF:B0:B2:AA:91:AF:BF:DC:98:FD:A8:7F:5B:BA:70:B2:4C:C7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:3dc0::/48 Signature Algorithm: sha256WithRSAEncryption 3b:cd:43:0f:ae:ef:f4:8c:71:54:b6:64:03:72:34:a4:17:92: e0:d4:0b:90:17:e5:ac:08:e3:e7:82:11:75:15:62:75:e8:64: 00:c7:98:10:3e:17:b5:8e:46:02:96:a0:25:bc:25:d8:ec:81: 77:ec:73:5e:9e:f3:2a:3e:a0:28:76:7f:a2:c4:66:18:9f:6b: 35:4d:c9:ab:bc:04:d6:ec:39:24:e9:60:47:e8:c9:c0:fd:d0: 82:e7:69:ce:05:c2:42:9e:aa:d9:44:f2:a7:56:36:ac:65:fe: d5:2b:2c:2f:c8:fa:32:83:ad:3e:55:20:dd:51:3c:04:03:9d: 83:e2:1f:12:f3:82:dc:77:48:85:96:6e:dd:b4:5b:8c:1d:a5: 21:e6:3d:79:13:23:cc:4b:3f:3e:93:0c:9a:9f:fd:24:4a:f6: ba:9b:74:3a:7f:a9:a9:bc:17:a4:fd:70:94:8b:a1:62:39:44: a5:e1:2d:ac:42:fc:b6:24:9a:a2:5c:66:a2:2b:cb:af:1e:ee: e1:0f:01:c8:ac:e0:44:99:cd:7d:e4:cd:39:68:e6:01:2b:63: 14:a7:db:9f:db:d4:2f:b9:6c:25:99:68:92:22:18:23:e1:ee: eb:a6:e8:bf:f3:9f:a5:5c:dc:61:b2:70:bd:7b:a7:72:ac:4b: 11:73:19:61 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUFxa7VnvPSuNL5NPtZfrSjJ1Cj7wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMzA0MjgzMVoX DTI2MTExMjA0MzMzMVowMzExMC8GA1UEAxMoMDczMUZGQjBCMkFBOTFBRkJGREM5 OEZEQTg3RjVCQkE3MEIyNENDNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN03PDKwIkhCKMuqZo6mdkoKOE5+0apEglY35JG21szc2+YP5+kXuzqn7Bm9 C/CtmozDJoEWl0Fq9dNDMmh3y15RYJI9zDJkkaacU/dycVIqWUsmvGwiNtfAdORT z2K7aCHIQljhplx9vtYBypu+H+UVVBzfBxxq7Mkm74QupSCIdfmKJtG3ofQLA74F DE1xhxo8dYgSgvHlnwGudi/DCXg8DmO79hzTQvxFMTLbrEtPliTBMT59uzJ5SOQU 0VsHOErS8XBRrm+8KGXa/yY0g/0eozI8DVkpCsBaf4pqpTfQq/wN8qOZ9yEq2d/4 Mw1+okjrZ5la5WK6Qinf1rHZFtcCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBQHMf+w sqqRr7/cmP2of1u6cLJMxzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1NDMzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfY9wDANBgkqhkiG9w0BAQsFAAOCAQEAO81DD67v9IxxVLZk A3I0pBeS4NQLkBflrAjj54IRdRVidehkAMeYED4XtY5GApagJbwl2OyBd+xzXp7z Kj6gKHZ/osRmGJ9rNU3Jq7wE1uw5JOlgR+jJwP3QgudpzgXCQp6q2UTyp1Y2rGX+ 1SssL8j6MoOtPlUg3VE8BAOdg+IfEvOC3HdIhZZu3bRbjB2lIeY9eRMjzEs/PpMM mp/9JEr2upt0On+pqbwXpP1wlIuhYjlEpeEtrEL8tiSaolxmoivLrx7u4Q8ByKzg RJnNfeTNOWjmAStjFKfbn9vUL7lsJZlokiIYI+Hu66bov/OfpVzcYbJwvXuncqxL EXMZYQ== -----END CERTIFICATE-----Generated at Wed Dec 3 14:50:04 2025 by rpki-client