This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS147082.roa File: AS147082.roa (raw, json) Hash identifier: 38EXRVkZ5xrHLXGpf4jqGOs41BbohuduI5FdXAgUp/c= Subject key identifier: 4E:68:9A:F4:12:C0:D5:57:C4:52:4E:DB:6C:D8:5C:72:E1:D8:28:EB Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 4C9AB09847E849E2B500C16CB63FFC678C0E8F01 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS147082.roa Signing time: Wed 24 Dec 2025 15:00:07 +0000 ROA not before: Wed 24 Dec 2025 14:55:07 +0000 ROA not after: Wed 23 Dec 2026 15:00:07 +0000 asID: 147082 IP address blocks: 160.187.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 21:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:9a:b0:98:47:e8:49:e2:b5:00:c1:6c:b6:3f:fc:67:8c:0e:8f:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Dec 24 14:55:07 2025 GMT Not After : Dec 23 15:00:07 2026 GMT Subject: CN=4E689AF412C0D557C4524EDB6CD85C72E1D828EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:96:db:14:38:8d:db:82:e9:b2:14:e1:38:cc: 29:db:1d:d6:c1:c7:7e:b9:01:91:7b:a5:fa:b3:b5: 88:5c:43:a2:f3:da:89:5c:05:64:ef:e3:7b:e4:81: d7:16:ae:47:76:e4:70:05:c5:d4:78:a5:70:25:cc: fa:ae:05:e6:8c:32:91:9a:9d:da:51:0e:33:54:22: 7a:a9:d9:aa:02:5e:f8:21:a7:10:ae:4f:25:51:6f: 66:fa:ee:0b:92:ec:cc:a1:4e:d7:03:ff:58:86:8f: 92:64:11:90:8a:ca:ce:3e:40:60:4d:a8:54:1e:33: 0e:83:c4:0b:73:9f:2d:e6:24:25:fe:8f:bd:58:65: 2d:91:97:02:48:c5:9d:cd:85:e3:1c:7c:ae:1a:47: 63:95:24:37:64:ab:d9:a2:58:49:ae:f4:1b:8d:31: 12:ef:fc:d2:9c:fc:c6:93:cf:9a:1d:e2:52:20:36: 78:27:5c:77:08:8f:7f:ad:0b:d2:59:b9:4e:f0:a5: 40:2a:55:f3:7c:ec:2e:e8:99:9c:e2:49:97:bd:ba: 0f:26:d9:94:78:07:10:b9:d4:fe:9c:9f:6e:61:cb: 61:10:ca:b0:3a:1c:7c:9b:dd:0f:e1:63:bb:4f:db: 1d:02:93:2d:b8:85:04:60:40:a0:6c:94:46:4e:13: 46:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:68:9A:F4:12:C0:D5:57:C4:52:4E:DB:6C:D8:5C:72:E1:D8:28:EB X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS147082.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.187.197.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:45:f0:72:0b:72:af:4d:b3:b1:64:80:70:e8:de:03:5b:6a: 27:b7:90:18:9e:43:37:e6:3b:93:b1:cf:de:ca:41:4b:c0:5b: c3:93:08:5b:1e:50:cf:98:89:67:22:6c:23:92:5f:31:e5:2b: 45:5b:c7:75:2e:0e:75:d4:f7:0d:29:93:f2:3e:15:0d:9c:a9: 99:f1:78:78:50:9a:b8:52:ec:e0:45:15:ea:1f:60:0e:cb:f3: c3:d0:ce:68:a8:0d:1a:bb:b6:b1:38:d5:89:b2:6a:2a:a1:6a: 94:2e:5c:b3:15:ca:09:27:0a:f2:0b:32:99:e5:04:cc:da:0a: 57:75:84:8b:e2:26:f6:9a:99:52:3a:f5:ff:55:82:e9:44:f1: 72:cd:72:45:9b:19:70:01:a8:4f:03:15:a5:d3:a3:40:e3:07: 53:d1:c7:ac:60:fd:78:a2:b3:ff:0d:3f:64:6c:b6:cf:8c:82: f1:be:4b:3c:7d:45:10:42:21:0e:27:21:e8:42:de:d7:63:9e: ba:5c:5b:ec:41:e9:13:52:b0:8b:63:0c:7b:a4:a4:df:4e:2d: ae:bd:9c:2d:aa:97:40:06:29:54:3e:79:b2:d2:6c:d2:dc:a4: f1:d8:3c:a9:40:14:3c:cd:81:f9:90:31:7a:4c:a2:06:ba:65: e9:72:b1:6c -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUTJqwmEfoSeK1AMFstj/8Z4wOjwEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTIyNDE0NTUwN1oX DTI2MTIyMzE1MDAwN1owMzExMC8GA1UEAxMoNEU2ODlBRjQxMkMwRDU1N0M0NTI0 RURCNkNEODVDNzJFMUQ4MjhFQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK+W2xQ4jduC6bIU4TjMKdsd1sHHfrkBkXul+rO1iFxDovPaiVwFZO/je+SB 1xauR3bkcAXF1HilcCXM+q4F5owykZqd2lEOM1QieqnZqgJe+CGnEK5PJVFvZvru C5LszKFO1wP/WIaPkmQRkIrKzj5AYE2oVB4zDoPEC3OfLeYkJf6PvVhlLZGXAkjF nc2F4xx8rhpHY5UkN2Sr2aJYSa70G40xEu/80pz8xpPPmh3iUiA2eCdcdwiPf60L 0lm5TvClQCpV83zsLuiZnOJJl726DybZlHgHELnU/pyfbmHLYRDKsDocfJvdD+Fj u0/bHQKTLbiFBGBAoGyURk4TRvkCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBROaJr0 EsDVV8RSTtts2Fxy4dgo6zAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE0NzA4Mi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKC7xTANBgkqhkiG9w0BAQsFAAOCAQEAbEXwcgtyr02zsWSAcOje A1tqJ7eQGJ5DN+Y7k7HP3spBS8Bbw5MIWx5Qz5iJZyJsI5JfMeUrRVvHdS4OddT3 DSmT8j4VDZypmfF4eFCauFLs4EUV6h9gDsvzw9DOaKgNGru2sTjVibJqKqFqlC5c sxXKCScK8gsymeUEzNoKV3WEi+Im9pqZUjr1/1WC6UTxcs1yRZsZcAGoTwMVpdOj QOMHU9HHrGD9eKKz/w0/ZGy2z4yC8b5LPH1FEEIhDich6ELe12Oeulxb7EHpE1Kw i2MMe6Sk304trr2cLaqXQAYpVD55stJs0tyk8dg8qUAUPM2B+ZAxekyiBrpl6XKx bA== -----END CERTIFICATE-----Generated at Wed Dec 24 21:45:41 2025 by rpki-client