This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153877.roa File: AS153877.roa (raw, json) Hash identifier: x69wBg6OauWP1zWdab90v6fTjswSBi9PhCYNGe2HOp0= Subject key identifier: 3A:58:D5:2D:C5:95:44:63:5E:4A:C7:70:5E:04:2E:A4:75:AC:78:D7 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 64EC0CC9B902A409D96761DD15569939B42740B7 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153877.roa Signing time: Mon 22 Dec 2025 10:52:14 +0000 ROA not before: Mon 22 Dec 2025 10:47:14 +0000 ROA not after: Mon 21 Dec 2026 10:52:14 +0000 asID: 153877 IP address blocks: 144.79.177.0/24 maxlen: 24 165.99.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 21:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:ec:0c:c9:b9:02:a4:09:d9:67:61:dd:15:56:99:39:b4:27:40:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Dec 22 10:47:14 2025 GMT Not After : Dec 21 10:52:14 2026 GMT Subject: CN=3A58D52DC59544635E4AC7705E042EA475AC78D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:ab:82:80:1d:db:88:28:66:4c:78:94:70:53: e5:93:16:d9:4a:5a:d8:df:15:7d:18:6f:00:dd:85: 73:20:31:3c:34:72:00:e3:60:39:09:5f:8d:ea:14: 7e:1e:fe:23:0b:58:1d:e8:98:4a:c0:3d:00:ba:bf: 12:4c:f2:9e:ef:9b:1f:d2:7d:b4:04:31:9b:ce:6a: 34:81:36:9f:6d:cf:be:bf:a5:a1:99:d1:2c:ec:ac: 27:97:7a:80:d9:16:4b:94:a5:25:15:50:b4:b5:5b: 30:59:c9:4c:b3:04:01:4a:0e:2d:19:6a:30:ad:84: 41:94:0a:dc:dd:52:37:bc:5e:27:e6:0a:b7:71:2c: 6f:cc:68:11:6b:48:07:b1:ce:e9:ec:77:0f:7d:7a: b6:6a:1e:c4:3a:23:fe:41:b7:28:85:95:09:bb:45: 2b:1b:40:21:28:73:64:be:ff:9d:68:95:a3:78:9c: 46:de:08:25:e3:9f:01:61:73:14:f4:d1:9c:c0:89: 1c:0c:fc:fd:a5:5b:30:6b:71:16:93:30:8b:49:a5: 10:22:e2:e6:9e:15:0f:fe:44:56:d6:e9:05:84:b6: 68:6f:d6:e1:c3:4d:f9:ce:98:9c:92:07:73:4a:aa: fa:72:aa:33:ad:72:5e:9d:73:79:53:a7:4c:d1:90: dd:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:58:D5:2D:C5:95:44:63:5E:4A:C7:70:5E:04:2E:A4:75:AC:78:D7 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153877.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.79.177.0/24 165.99.19.0/24 Signature Algorithm: sha256WithRSAEncryption 54:0a:13:81:04:ba:61:6e:72:73:4a:3e:a5:92:9d:64:58:80: 3f:c8:81:da:53:c7:9f:cd:67:e7:2d:27:3f:4c:0e:af:69:77: ac:f3:b2:8b:fc:a4:ee:8c:5e:52:9a:96:85:c8:da:da:40:3d: 1a:8a:18:e5:81:51:5e:b8:3d:7b:9e:e3:51:91:3b:e3:4e:21: 37:b4:30:de:54:df:ab:58:cb:e5:60:ea:e4:96:2a:e3:c3:d5: 07:97:dc:6f:20:3f:e6:6c:a8:31:2d:87:67:49:5d:06:55:11: e5:db:0b:bf:2f:ba:c4:ce:d8:0e:96:c5:d0:71:bd:a1:6b:3f: 8e:5f:94:e9:9d:d2:4b:b2:71:af:3b:ab:e1:aa:8d:b1:92:e4: 64:48:0a:5f:ed:51:81:fa:3c:ad:bd:b1:57:2f:1b:bb:8b:a7: 81:03:5f:9a:95:45:19:ee:4d:d0:dd:81:a0:da:94:d7:ee:2e: ff:3b:c1:8a:d9:35:21:a1:40:d4:99:0f:4b:be:69:00:9a:7b: 53:e8:7c:3d:d2:c5:ad:36:30:0d:3b:36:91:d7:50:42:f4:43: e9:bd:50:c7:aa:a0:7c:09:a4:d9:68:da:92:b6:3d:9f:25:19: a8:fd:4a:ab:2b:b9:48:be:b2:c0:fd:bc:21:01:fc:26:e9:e5: c4:7d:3e:63 -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUZOwMybkCpAnZZ2HdFVaZObQnQLcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTIyMjEwNDcxNFoX DTI2MTIyMTEwNTIxNFowMzExMC8GA1UEAxMoM0E1OEQ1MkRDNTk1NDQ2MzVFNEFD NzcwNUUwNDJFQTQ3NUFDNzhENzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPergoAd24goZkx4lHBT5ZMW2Upa2N8VfRhvAN2FcyAxPDRyAONgOQlfjeoU fh7+IwtYHeiYSsA9ALq/Ekzynu+bH9J9tAQxm85qNIE2n23Pvr+loZnRLOysJ5d6 gNkWS5SlJRVQtLVbMFnJTLMEAUoOLRlqMK2EQZQK3N1SN7xeJ+YKt3Esb8xoEWtI B7HO6ex3D316tmoexDoj/kG3KIWVCbtFKxtAIShzZL7/nWiVo3icRt4IJeOfAWFz FPTRnMCJHAz8/aVbMGtxFpMwi0mlECLi5p4VD/5EVtbpBYS2aG/W4cNN+c6YnJIH c0qq+nKqM61yXp1zeVOnTNGQ3bMCAwEAAaOCAdYwggHSMB0GA1UdDgQWBBQ6WNUt xZVEY15Kx3BeBC6kdax41zAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1Mzg3Ny5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAJBPsQMEAKVjEzANBgkqhkiG9w0BAQsFAAOCAQEAVAoTgQS6YW5y c0o+pZKdZFiAP8iB2lPHn81n5y0nP0wOr2l3rPOyi/yk7oxeUpqWhcja2kA9GooY 5YFRXrg9e57jUZE7404hN7Qw3lTfq1jL5WDq5JYq48PVB5fcbyA/5myoMS2HZ0ld BlUR5dsLvy+6xM7YDpbF0HG9oWs/jl+U6Z3SS7Jxrzur4aqNsZLkZEgKX+1Rgfo8 rb2xVy8bu4ungQNfmpVFGe5N0N2BoNqU1+4u/zvBitk1IaFA1JkPS75pAJp7U+h8 PdLFrTYwDTs2kddQQvRD6b1Qx6qgfAmk2WjakrY9nyUZqP1Kqyu5SL6ywP28IQH8 JunlxH0+Yw== -----END CERTIFICATE-----Generated at Thu Dec 25 00:27:46 2025 by rpki-client