This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45291.roa File: AS45291.roa (raw, json) Hash identifier: xXuYo3TOdTvYH+2nZkwxyp8NYkzOgLAqlVrvSrNWfYo= Subject key identifier: F7:A4:6F:E1:5B:6E:43:04:83:35:3B:CB:AC:CA:98:D3:B8:78:34:49 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7C645D1D988B7350D28F4087C87C5C02ED6AB9AD Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45291.roa Signing time: Tue 11 Nov 2025 06:00:17 +0000 ROA not before: Tue 11 Nov 2025 05:55:17 +0000 ROA not after: Tue 10 Nov 2026 06:00:17 +0000 asID: 45291 IP address blocks: 103.156.72.0/23 maxlen: 24 203.153.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:64:5d:1d:98:8b:73:50:d2:8f:40:87:c8:7c:5c:02:ed:6a:b9:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 11 05:55:17 2025 GMT Not After : Nov 10 06:00:17 2026 GMT Subject: CN=F7A46FE15B6E430483353BCBACCA98D3B8783449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8a:bb:eb:6c:e7:06:18:4f:db:f2:5c:a7:8b: f1:ac:0b:c9:49:33:77:29:b8:46:a1:45:2f:88:f4: 79:40:78:6f:4f:44:4a:7c:6d:ef:72:31:b7:a7:fa: 49:ed:d0:ec:fb:7d:8b:b3:0c:a5:45:af:b8:8f:c2: b5:76:d9:da:c5:2c:9a:3a:2c:84:df:12:bd:3b:72: c4:6e:5d:9d:e8:38:37:00:68:62:2e:23:12:69:15: 29:7c:d0:16:9d:b1:e9:61:e5:3d:06:4c:cb:05:97: ba:cc:02:ff:26:2d:67:28:9b:b2:1b:b9:6e:b4:9a: 44:3d:f8:6e:86:15:d0:b3:8f:e3:b7:f6:43:43:a8: 84:c7:c0:9b:4d:84:ee:69:df:a8:41:ac:6a:89:4e: 6a:46:8d:f2:6c:42:66:0a:91:3e:94:ce:c4:68:27: 9e:87:ba:de:3e:5c:c9:47:ad:34:64:da:e4:b0:76: e0:32:15:22:e2:8f:ac:2d:b3:d5:b9:f5:be:38:1e: 85:b8:e1:57:51:1c:82:ce:da:f7:3a:e8:15:f3:92: cb:4e:bc:5c:21:d0:0a:a5:d1:47:cf:41:39:f3:5f: 0e:a2:43:ef:8b:aa:ec:7b:b2:ff:92:83:74:45:5d: 8f:24:a4:2c:7f:50:50:22:06:09:c1:3e:f2:23:bc: 1b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:A4:6F:E1:5B:6E:43:04:83:35:3B:CB:AC:CA:98:D3:B8:78:34:49 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45291.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.72.0/23 203.153.216.0/22 Signature Algorithm: sha256WithRSAEncryption 8e:00:06:9a:2a:4e:a5:62:64:a9:6f:75:28:d9:a7:bb:37:e5: d7:72:26:51:ed:d9:91:15:5e:0e:df:03:a7:1b:b6:83:cd:8c: 56:16:46:d3:5f:25:e3:78:a4:bb:0b:55:6c:f6:4b:a0:0a:7d: ba:48:68:a7:06:81:e5:9c:33:49:d6:74:93:0f:25:80:ae:4c: 61:44:db:ec:40:87:2a:93:63:78:0a:56:ca:f1:e2:0e:d1:78: 9c:2b:06:5b:74:a7:29:3f:c7:65:b4:15:71:01:4a:94:2e:28: e0:ad:0d:59:b6:75:e8:a4:d9:9a:6a:9b:7b:69:e7:4e:62:5f: a9:b9:ff:0a:ca:cf:d5:c5:39:e1:cf:4d:de:7e:cc:1a:09:e8: 4e:51:ad:05:ae:dd:6e:87:4a:4f:16:72:14:c3:11:1f:3b:b0: 1a:d1:c5:c5:80:44:c4:ce:6a:b5:5c:0d:b2:f7:20:50:a2:dd: e6:c9:3e:53:b8:d4:db:12:a5:b3:69:70:be:b4:76:bf:e1:59: 8e:fc:c1:7d:17:cd:fc:f5:a2:82:13:41:ec:3b:31:16:56:d3: 53:70:dd:20:c7:16:26:47:a1:05:ec:2f:75:37:9e:b8:e6:a3: 5f:3b:01:e6:d2:10:e0:5d:32:7a:fb:60:38:9c:cc:4a:68:06: 5a:90:b5:93 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUfGRdHZiLc1DSj0CHyHxcAu1qua0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTA1NTUxN1oX DTI2MTExMDA2MDAxN1owMzExMC8GA1UEAxMoRjdBNDZGRTE1QjZFNDMwNDgzMzUz QkNCQUNDQTk4RDNCODc4MzQ0OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKuKu+ts5wYYT9vyXKeL8awLyUkzdym4RqFFL4j0eUB4b09ESnxt73Ixt6f6 Se3Q7Pt9i7MMpUWvuI/CtXbZ2sUsmjoshN8SvTtyxG5dneg4NwBoYi4jEmkVKXzQ Fp2x6WHlPQZMywWXuswC/yYtZyibshu5brSaRD34boYV0LOP47f2Q0OohMfAm02E 7mnfqEGsaolOakaN8mxCZgqRPpTOxGgnnoe63j5cyUetNGTa5LB24DIVIuKPrC2z 1bn1vjgehbjhV1Ecgs7a9zroFfOSy068XCHQCqXRR89BOfNfDqJD74uq7Huy/5KD dEVdjySkLH9QUCIGCcE+8iO8GxsCAwEAAaOCAdUwggHRMB0GA1UdDgQWBBT3pG/h W25DBIM1O8usypjTuHg0STAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzQ1MjkxLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBZ5xIAwQCy5nYMA0GCSqGSIb3DQEBCwUAA4IBAQCOAAaaKk6lYmSp b3Uo2ae7N+XXciZR7dmRFV4O3wOnG7aDzYxWFkbTXyXjeKS7C1Vs9kugCn26SGin BoHlnDNJ1nSTDyWArkxhRNvsQIcqk2N4ClbK8eIO0XicKwZbdKcpP8dltBVxAUqU LijgrQ1ZtnXopNmaapt7aedOYl+puf8Kys/VxTnhz03efswaCehOUa0Frt1uh0pP FnIUwxEfO7Aa0cXFgETEzmq1XA2y9yBQot3myT5TuNTbEqWzaXC+tHa/4VmO/MF9 F8389aKCE0HsOzEWVtNTcN0gxxYmR6EF7C91N5645qNfOwHm0hDgXTJ6+2A4nMxK aAZakLWT -----END CERTIFICATE-----Generated at Wed Dec 3 13:15:01 2025 by rpki-client