This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154344.roa File: AS154344.roa (raw, json) Hash identifier: LfZBC2uommWPh0YJELCM8UA+7slBKJve1otNapJyHVk= Subject key identifier: 51:66:C9:1A:68:B3:80:C3:9E:9C:E6:19:CE:D2:81:28:E7:7A:FD:B9 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5229E94E9529CE09F341CFEC482EE478B7C39FB6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154344.roa Signing time: Wed 12 Nov 2025 03:23:09 +0000 ROA not before: Wed 12 Nov 2025 03:18:09 +0000 ROA not after: Wed 11 Nov 2026 03:23:09 +0000 asID: 154344 IP address blocks: 2001:df6:4040::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:29:e9:4e:95:29:ce:09:f3:41:cf:ec:48:2e:e4:78:b7:c3:9f:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 12 03:18:09 2025 GMT Not After : Nov 11 03:23:09 2026 GMT Subject: CN=5166C91A68B380C39E9CE619CED28128E77AFDB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d8:09:15:1f:2a:d6:15:2b:b1:6c:f3:31:8b: 89:bd:ee:48:06:e0:e3:33:40:d8:5a:7e:5d:2f:65: 9a:e3:f6:72:be:4c:a6:78:70:14:7d:cd:ed:16:82: 6e:ba:80:71:35:10:43:44:72:23:52:02:63:02:54: 38:b0:48:95:6c:9b:b5:7d:eb:52:0e:de:0d:66:f7: 6b:97:93:ec:ff:b2:d0:8a:ef:5d:31:02:7c:e9:16: d6:0c:a1:9e:58:9e:6c:23:ba:ea:88:0f:bc:c6:c0: 5d:9f:2e:1e:0a:17:c9:20:f6:37:40:50:ef:8b:d5: 7f:12:e8:05:c0:c4:80:55:ed:18:92:9a:ef:66:e9: 1a:5f:87:b9:a9:65:69:9c:0f:33:cd:5e:95:fe:3d: 13:c5:e0:1c:60:de:55:83:51:82:57:1f:0d:5c:ef: af:78:5d:00:54:25:71:01:1b:ea:ca:50:0b:25:bc: d8:c0:8e:38:08:f2:95:c0:5c:18:17:e9:ca:86:9f: ff:2d:9c:d4:5d:43:69:67:00:9e:5f:77:e9:d2:52: 77:b8:07:e5:00:01:25:8f:77:f9:fe:c2:62:99:f1: b9:ee:ba:12:92:a6:fb:2b:ee:b7:fd:c0:a8:aa:44: 6f:a9:3d:4d:ef:9c:e1:74:32:de:e2:e6:5d:9e:8f: 9d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:66:C9:1A:68:B3:80:C3:9E:9C:E6:19:CE:D2:81:28:E7:7A:FD:B9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154344.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:4040::/48 Signature Algorithm: sha256WithRSAEncryption 7c:45:a7:d8:c7:65:45:7a:b6:1d:29:82:36:ce:30:0b:f5:80: 83:b9:0f:83:12:f2:0d:6a:da:fc:40:98:90:1d:1d:81:5f:d9: a2:fc:5f:26:65:5a:48:c3:cd:0f:19:36:16:10:66:62:7d:76: d0:61:e7:24:ac:be:f4:6c:87:a7:de:f3:f0:8b:6b:79:c3:3f: 9f:32:cd:79:83:f9:bb:f0:07:55:b7:f3:aa:f2:77:b1:fd:c7: 88:d9:00:bd:3b:c2:f0:87:95:a0:1c:89:8b:53:78:86:ff:4f: 86:3b:2d:bb:3b:64:4a:3c:04:b2:fc:54:fb:0b:93:77:5c:c0: 09:cb:3d:62:41:e0:c1:1a:d3:56:e2:5f:13:03:6a:60:c0:9b: 2b:cb:be:d8:31:f4:ae:c7:4a:2d:14:eb:11:eb:3b:eb:dc:97: 87:bb:d3:f6:27:98:11:76:76:b7:6b:69:29:4c:46:4a:ab:50: 5e:67:ee:ca:a7:4d:45:b7:58:3c:27:af:73:42:ef:8d:fa:37: ef:1b:80:cb:c2:5a:4d:25:0f:da:67:f6:61:39:24:9b:81:4a: de:d2:49:b5:dd:af:d6:1d:67:68:40:3e:9f:de:8e:9b:54:0f: 43:80:f8:f6:3c:9d:df:45:68:e4:2e:79:73:1b:16:ad:65:17: 5e:7d:ab:d2 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUUinpTpUpzgnzQc/sSC7keLfDn7YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMjAzMTgwOVoX DTI2MTExMTAzMjMwOVowMzExMC8GA1UEAxMoNTE2NkM5MUE2OEIzODBDMzlFOUNF NjE5Q0VEMjgxMjhFNzdBRkRCOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALPYCRUfKtYVK7Fs8zGLib3uSAbg4zNA2Fp+XS9lmuP2cr5MpnhwFH3N7RaC brqAcTUQQ0RyI1ICYwJUOLBIlWybtX3rUg7eDWb3a5eT7P+y0IrvXTECfOkW1gyh nliebCO66ogPvMbAXZ8uHgoXySD2N0BQ74vVfxLoBcDEgFXtGJKa72bpGl+Huall aZwPM81elf49E8XgHGDeVYNRglcfDVzvr3hdAFQlcQEb6spQCyW82MCOOAjylcBc GBfpyoaf/y2c1F1DaWcAnl936dJSd7gH5QABJY93+f7CYpnxue66EpKm+yvut/3A qKpEb6k9Te+c4XQy3uLmXZ6PncMCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBRRZska aLOAw56c5hnO0oEo53r9uTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1NDM0NC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfZAQDANBgkqhkiG9w0BAQsFAAOCAQEAfEWn2MdlRXq2HSmC Ns4wC/WAg7kPgxLyDWra/ECYkB0dgV/ZovxfJmVaSMPNDxk2FhBmYn120GHnJKy+ 9GyHp97z8ItrecM/nzLNeYP5u/AHVbfzqvJ3sf3HiNkAvTvC8IeVoByJi1N4hv9P hjstuztkSjwEsvxU+wuTd1zACcs9YkHgwRrTVuJfEwNqYMCbK8u+2DH0rsdKLRTr Ees769yXh7vT9ieYEXZ2t2tpKUxGSqtQXmfuyqdNRbdYPCevc0Lvjfo37xuAy8Ja TSUP2mf2YTkkm4FK3tJJtd2v1h1naEA+n96Om1QPQ4D49jyd30Vo5C55cxsWrWUX Xn2r0g== -----END CERTIFICATE-----Generated at Wed Dec 3 14:50:01 2025 by rpki-client