This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/AS147168.roa File: AS147168.roa (raw, json) Hash identifier: sXrlmN+ZCRiNZeyqUN67fyS1tNOgP0RFDODnmFAtcLI= Subject key identifier: 56:45:2D:76:11:6F:52:00:BB:5E:50:6D:95:69:B5:FA:2C:F1:F2:54 Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512 Certificate serial: 772B7DA39D65797BB2E7CDE140CAD791857B3CB2 Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/AS147168.roa Signing time: Tue 23 Dec 2025 06:36:13 +0000 ROA not before: Tue 23 Dec 2025 06:31:13 +0000 ROA not after: Tue 22 Dec 2026 06:36:13 +0000 asID: 147168 IP address blocks: 103.178.8.0/24 maxlen: 24 202.171.8.0/24 maxlen: 24 2404:c8:8::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 15:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:2b:7d:a3:9d:65:79:7b:b2:e7:cd:e1:40:ca:d7:91:85:7b:3c:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512 Validity Not Before: Dec 23 06:31:13 2025 GMT Not After : Dec 22 06:36:13 2026 GMT Subject: CN=56452D76116F5200BB5E506D9569B5FA2CF1F254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9a:ce:36:21:18:90:7e:02:12:1a:db:ad:d8: 96:a5:c0:27:df:cd:52:e8:e4:0f:3b:8c:ac:ca:76: 08:5e:53:55:99:76:16:56:87:27:e6:16:df:16:7f: d2:d4:29:b8:b4:1f:ea:d0:af:2f:19:5e:68:24:f4: 20:44:8f:fb:38:b4:d2:dc:93:29:6c:71:e5:e2:6d: 79:cc:6e:df:9e:aa:2b:0c:ca:81:a0:95:a2:98:21: c7:24:27:02:60:a7:e9:24:7e:4b:2e:29:3e:c4:42: cc:d2:8a:ec:51:7f:d9:c6:d4:29:62:74:92:89:24: 72:5c:22:8e:d1:f8:de:0b:05:34:a5:09:1c:99:84: c3:f5:37:b8:ee:31:96:80:f3:7d:38:f2:b6:4a:19: aa:7c:b6:e9:e6:d1:37:39:1c:99:29:75:3a:15:d9: b4:4a:8f:36:ff:fe:57:2f:78:92:ff:db:b1:3c:d1: 11:38:18:48:d8:2b:76:50:8b:dc:a8:fc:e1:77:30: 02:9f:0a:ce:8f:53:db:15:cb:7a:a6:80:73:e3:da: 86:f6:bc:63:34:bd:40:f1:4d:9c:a3:d1:7a:4e:9b: 46:74:6b:62:08:ac:85:05:4d:b6:4f:41:00:02:f6: b7:2a:75:09:78:67:7d:25:42:e9:48:12:02:6e:e9: 64:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:45:2D:76:11:6F:52:00:BB:5E:50:6D:95:69:B5:FA:2C:F1:F2:54 X509v3 Authority Key Identifier: keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/AS147168.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.178.8.0/24 202.171.8.0/24 IPv6: 2404:c8:8::/48 Signature Algorithm: sha256WithRSAEncryption 35:2a:67:4b:ce:47:e5:88:7f:e0:67:e4:ac:46:05:6e:6f:69: 58:a8:77:0e:99:77:b3:ec:52:ce:8f:cd:7d:26:b6:14:6f:d1: fb:10:0a:fc:60:2b:4c:59:f9:b0:eb:86:6f:da:3b:37:ff:7c: 24:48:28:d8:cd:e4:7a:2f:82:0d:82:d1:7c:cb:c6:30:db:d6: 54:18:fd:6b:d3:c6:09:e2:ac:31:35:d1:d8:f6:d4:e5:38:60: 1a:22:5f:ac:e5:c0:ba:96:67:c1:45:4d:f3:a4:67:f9:0c:7a: 2a:8d:0a:d0:ba:0d:e4:5d:d3:6c:4c:16:f1:f8:b4:94:c7:fa: b4:0d:2a:4c:ce:85:36:08:eb:dd:27:f4:ca:5b:0b:96:3d:75: cd:c8:f8:05:c3:c7:5d:c7:98:fb:60:ff:14:db:c0:09:66:e0: 36:a3:b3:94:16:9b:a8:35:ca:87:c2:2c:c0:8b:58:00:93:ff: c6:a3:66:00:e1:bc:cc:b7:11:fe:14:16:ee:7a:e6:c8:38:17: 38:c4:4d:9f:03:5c:66:39:81:54:9e:9c:62:a9:da:48:3e:70: 42:87:7c:16:50:51:42:be:42:51:b4:a2:a8:83:81:6f:4a:b5: 5f:49:4b:76:a3:59:96:c8:7f:67:28:92:a5:58:2c:f0:77:5b: 80:7b:79:68 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUdyt9o51leXuy583hQMrXkYV7PLIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFF MkMzQjUxMjAeFw0yNTEyMjMwNjMxMTNaFw0yNjEyMjIwNjM2MTNaMDMxMTAvBgNV BAMTKDU2NDUyRDc2MTE2RjUyMDBCQjVFNTA2RDk1NjlCNUZBMkNGMUYyNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDms42IRiQfgISGtut2JalwCff zVLo5A87jKzKdgheU1WZdhZWhyfmFt8Wf9LUKbi0H+rQry8ZXmgk9CBEj/s4tNLc kylsceXibXnMbt+eqisMyoGglaKYIcckJwJgp+kkfksuKT7EQszSiuxRf9nG1Cli dJKJJHJcIo7R+N4LBTSlCRyZhMP1N7juMZaA83048rZKGap8tunm0Tc5HJkpdToV 2bRKjzb//lcveJL/27E80RE4GEjYK3ZQi9yo/OF3MAKfCs6PU9sVy3qmgHPj2ob2 vGM0vUDxTZyj0XpOm0Z0a2IIrIUFTbZPQQAC9rcqdQl4Z30lQulIEgJu6WTJAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUVkUtdhFvUgC7XlBtlWm1+izx8lQwHwYDVR0j BBgwFoAUIphmUI1tYkUj7a0qDeHoKuLDtRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmI3MDgxOC0yMzY2LTQyZTAtOWRiZC0yNTQzODEwNjllNTcvMC8yMjk4NjY1MDhE NkQ2MjQ1MjNFREFEMkEwREUxRTgyQUUyQzNCNTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFFMkMz QjUxMi5jZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jl cG8tcnBraS5pZG5pYy5uZXQvcmVwby8yZmI3MDgxOC0yMzY2LTQyZTAtOWRiZC0y NTQzODEwNjllNTcvMC9BUzE0NzE2OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjA2BggrBgEFBQcBBwEB/wQnMCUwEgQCAAEwDAMEAGeyCAMEAMqrCDAPBAIA AjAJAwcAJAQAyAAIMA0GCSqGSIb3DQEBCwUAA4IBAQA1KmdLzkfliH/gZ+SsRgVu b2lYqHcOmXez7FLOj819JrYUb9H7EAr8YCtMWfmw64Zv2js3/3wkSCjYzeR6L4IN gtF8y8Yw29ZUGP1r08YJ4qwxNdHY9tTlOGAaIl+s5cC6lmfBRU3zpGf5DHoqjQrQ ug3kXdNsTBbx+LSUx/q0DSpMzoU2COvdJ/TKWwuWPXXNyPgFw8ddx5j7YP8U28AJ ZuA2o7OUFpuoNcqHwizAi1gAk//Go2YA4bzMtxH+FBbueubIOBc4xE2fA1xmOYFU npxiqdpIPnBCh3wWUFFCvkJRtKKog4FvSrVfSUt2o1mWyH9nKJKlWCzwd1uAe3lo -----END CERTIFICATE-----Generated at Thu Dec 25 00:38:04 2025 by rpki-client