This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS147131.roa File: AS147131.roa (raw, json) Hash identifier: XuwrkbgBl1EJL/BkWG1LnTPEjbENQBhmaYTfVxJT9Ik= Subject key identifier: 74:9A:27:F4:84:A8:68:85:97:9F:7F:F6:FE:E8:4E:2F:EB:F7:26:AA Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 2397D5AC9CB5660159E54F412B3F9523B176ADBD Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS147131.roa Signing time: Tue 09 Dec 2025 09:47:13 +0000 ROA not before: Tue 09 Dec 2025 09:42:13 +0000 ROA not after: Tue 08 Dec 2026 09:47:13 +0000 asID: 147131 IP address blocks: 138.252.178.0/23 maxlen: 24 165.99.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 15:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:97:d5:ac:9c:b5:66:01:59:e5:4f:41:2b:3f:95:23:b1:76:ad:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Dec 9 09:42:13 2025 GMT Not After : Dec 8 09:47:13 2026 GMT Subject: CN=749A27F484A86885979F7FF6FEE84E2FEBF726AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:10:60:21:43:dd:ec:7f:c6:52:5f:04:ed:74: 33:04:80:d7:e6:79:1c:80:14:5a:26:bd:17:d3:d5: a3:a0:2c:a2:f2:b3:32:2c:b1:00:94:2d:98:63:c7: e3:16:5b:52:43:33:a3:6f:e6:dd:26:6c:30:ba:51: e8:d4:25:f6:46:16:bf:c0:bc:9d:7b:db:3b:b2:15: 6c:84:0a:3f:24:f7:59:9e:51:3c:e0:28:56:75:35: 49:9e:04:61:0a:f4:29:8d:5b:e0:57:4d:c2:6f:55: 00:bd:e9:7e:e5:b7:e1:ad:c1:d6:9e:8a:21:b1:e4: cb:e9:58:48:65:09:a3:a6:89:06:25:2e:95:87:fa: de:5c:07:a8:c0:d9:02:b6:08:df:53:00:6d:81:05: a2:77:02:4f:25:0c:ab:e1:36:ba:8e:f7:9f:c1:0f: 9f:12:12:cd:9e:c3:ba:c9:d7:ed:4c:37:8f:0a:17: e0:41:b6:69:88:f1:d6:40:f7:b2:1b:8d:1b:d5:ee: 34:2b:2c:82:b0:99:38:c7:fb:03:5f:f7:d7:7e:97: f8:05:dd:24:54:ac:1e:b7:fb:13:be:d7:8a:0d:a2: 8b:48:2f:e2:a5:da:1c:51:0a:27:04:d4:ca:1b:2e: 6e:a4:88:6e:92:d8:43:36:21:f6:4c:78:2e:74:4a: 9d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:9A:27:F4:84:A8:68:85:97:9F:7F:F6:FE:E8:4E:2F:EB:F7:26:AA X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS147131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.252.178.0/23 165.99.160.0/24 Signature Algorithm: sha256WithRSAEncryption 34:0a:d4:6b:e2:fb:1b:03:61:a2:e9:38:ab:b6:a0:37:bf:3b: 07:92:e4:20:8c:ac:3c:e0:22:c3:30:0b:22:fb:24:9d:4f:37: 5d:e4:4e:36:7c:5b:05:09:c0:05:7e:8b:cf:cf:f4:8a:dc:63: ec:3e:62:21:88:78:82:3a:10:f4:47:91:b8:eb:21:cd:78:55: 81:05:65:29:be:88:70:30:90:8e:22:df:2c:c0:b9:a2:1b:b9: 3c:d7:65:1d:3c:82:ce:59:76:cb:d7:4d:a6:69:23:dc:fa:69: 1b:07:f2:fe:6f:2d:45:fd:ca:9a:e0:85:eb:7f:c0:b5:a7:38: 77:45:4c:24:19:80:9b:09:12:f8:bc:02:ec:09:a4:54:f1:a6: 28:8f:e7:70:d8:bb:16:51:9a:79:ab:05:6e:ef:52:0a:3d:1c: 92:9a:25:1c:b7:b2:01:f8:3e:64:39:2f:fa:81:d5:ce:27:3a: 82:e9:96:0b:ad:89:30:b9:a7:a8:63:4f:6b:3c:e7:f6:49:52: 93:5c:a3:5b:e3:fd:c2:55:e7:06:c8:0d:00:ff:d1:d5:c1:fd: 9f:02:05:94:f4:1d:10:43:dd:7e:4b:bc:2e:f5:81:e0:37:c1: d1:51:73:15:1f:da:28:d1:50:63:e0:ff:bc:85:3f:2c:51:16: 07:8e:44:8c -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUI5fVrJy1ZgFZ5U9BKz+VI7F2rb0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTIwOTA5NDIxM1oX DTI2MTIwODA5NDcxM1owMzExMC8GA1UEAxMoNzQ5QTI3RjQ4NEE4Njg4NTk3OUY3 RkY2RkVFODRFMkZFQkY3MjZBQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK0QYCFD3ex/xlJfBO10MwSA1+Z5HIAUWia9F9PVo6AsovKzMiyxAJQtmGPH 4xZbUkMzo2/m3SZsMLpR6NQl9kYWv8C8nXvbO7IVbIQKPyT3WZ5RPOAoVnU1SZ4E YQr0KY1b4FdNwm9VAL3pfuW34a3B1p6KIbHky+lYSGUJo6aJBiUulYf63lwHqMDZ ArYI31MAbYEFoncCTyUMq+E2uo73n8EPnxISzZ7DusnX7Uw3jwoX4EG2aYjx1kD3 shuNG9XuNCssgrCZOMf7A1/3136X+AXdJFSsHrf7E77Xig2ii0gv4qXaHFEKJwTU yhsubqSIbpLYQzYh9kx4LnRKnVsCAwEAAaOCAdYwggHSMB0GA1UdDgQWBBR0mif0 hKhohZeff/b+6E4v6/cmqjAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE0NzEzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAYr8sgMEAKVjoDANBgkqhkiG9w0BAQsFAAOCAQEANArUa+L7GwNh ouk4q7agN787B5LkIIysPOAiwzALIvsknU83XeRONnxbBQnABX6Lz8/0itxj7D5i IYh4gjoQ9EeRuOshzXhVgQVlKb6IcDCQjiLfLMC5ohu5PNdlHTyCzll2y9dNpmkj 3PppGwfy/m8tRf3KmuCF63/Atac4d0VMJBmAmwkS+LwC7AmkVPGmKI/ncNi7FlGa easFbu9SCj0ckpolHLeyAfg+ZDkv+oHVzic6gumWC62JMLmnqGNPazzn9klSk1yj W+P9wlXnBsgNAP/R1cH9nwIFlPQdEEPdfku8LvWB4DfB0VFzFR/aKNFQY+D/vIU/ LFEWB45EjA== -----END CERTIFICATE-----Generated at Mon Dec 22 02:50:13 2025 by rpki-client