This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149325.roa File: AS149325.roa (raw, json) Hash identifier: /wFJtVkVmaBC2bmHq/7szufkwVLqdzaXe63pMPKWrWA= Subject key identifier: 1A:A2:20:A3:E5:C0:C5:9E:7C:FA:8C:DB:91:E5:A7:E8:4C:14:67:24 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 48EE23E89CCDABCE26890A9B1B5A527CC9A3054C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149325.roa Signing time: Thu 11 Dec 2025 03:00:00 +0000 ROA not before: Thu 11 Dec 2025 02:55:00 +0000 ROA not after: Thu 10 Dec 2026 03:00:00 +0000 asID: 149325 IP address blocks: 103.178.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:ee:23:e8:9c:cd:ab:ce:26:89:0a:9b:1b:5a:52:7c:c9:a3:05:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 11 02:55:00 2025 GMT Not After : Dec 10 03:00:00 2026 GMT Subject: CN=1AA220A3E5C0C59E7CFA8CDB91E5A7E84C146724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:93:45:cc:06:0f:19:b2:ca:6b:45:b2:e4:da: 60:34:d3:a2:13:b0:45:57:a6:64:10:d1:da:6c:ea: 3b:49:28:0b:a6:76:e0:4a:3a:b0:9d:51:cc:c6:7e: c1:5b:3c:dc:03:6c:34:9f:dd:6d:dd:a1:d0:59:04: 99:7e:dd:d0:3e:07:fe:b1:8b:91:7f:3d:89:a3:79: f8:89:5a:6b:65:7c:2b:ff:45:9c:7c:cf:cb:05:d2: b7:fd:2e:bb:43:08:ec:d5:67:a7:74:7f:5b:3c:bd: 46:8e:e3:ea:73:8d:0f:de:f4:09:2b:f8:c9:9e:85: a6:51:ec:d2:1d:a6:e7:b1:68:c8:7d:c4:43:0d:ea: 79:00:26:19:4a:46:db:99:6f:22:88:e0:11:61:21: e4:b8:d9:f2:f4:ff:b0:9b:75:c2:05:ea:d8:a9:19: 97:12:0d:df:d2:fa:1e:a5:0d:51:5b:5a:d8:be:4e: 08:f0:34:4a:3d:f7:6d:1a:68:88:6e:31:f1:d7:a3: 6a:6b:77:ec:58:fc:79:df:c4:e1:5d:60:ad:f5:3d: d5:b9:db:b4:38:b2:7c:0c:25:59:02:43:a4:5a:12: 20:3a:1e:80:a5:d5:e3:c8:47:37:5c:aa:e1:de:42: b5:1d:35:8c:a7:d3:a7:61:c7:e5:68:ed:97:8e:59: f6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A2:20:A3:E5:C0:C5:9E:7C:FA:8C:DB:91:E5:A7:E8:4C:14:67:24 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149325.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.178.172.0/23 Signature Algorithm: sha256WithRSAEncryption 37:42:b9:bd:b6:f4:01:cf:69:f8:03:f6:b0:b6:f3:b8:25:f9: 80:75:cc:4b:f5:d1:0b:39:81:c4:cd:fe:0d:9f:12:a4:72:ee: bb:eb:19:fa:16:21:34:cf:b5:26:44:4f:dd:a4:21:97:2a:c1: 1c:e4:cd:dd:81:72:c6:3a:18:76:8c:7f:fa:69:a7:f4:80:2c: 5c:1b:f2:52:1a:31:22:56:5c:41:28:b0:f8:60:85:6f:94:29: 92:c4:16:1e:1c:58:67:8e:0e:c9:10:06:eb:61:97:d1:44:72: d9:b4:d5:e6:c2:81:09:18:62:6c:ba:9b:ce:a9:cd:f7:77:fc: 11:f3:ad:c8:89:72:09:ef:92:f6:03:cc:97:5b:0a:23:2d:b5: fe:1e:f9:08:78:d6:ef:4e:fa:de:58:60:ac:bb:c8:ec:68:26: 74:cb:96:bc:c8:11:64:2c:36:0e:90:f8:b0:76:29:db:46:24: c7:99:d7:5e:d5:c9:7b:92:41:80:b8:d9:66:7b:d6:a3:0e:c8: 6c:c5:2b:bd:0f:d2:f6:ed:21:0b:a8:d9:ee:4e:42:78:de:ab: e9:43:c4:08:e0:e3:57:eb:79:66:f4:2f:e3:ad:30:4d:37:90: 87:25:8c:63:1c:5c:1e:5f:48:60:34:a6:5c:f5:4a:2b:47:42: cc:9f:43:b6 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUSO4j6JzNq84miQqbG1pSfMmjBUwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIxMTAyNTUwMFoX DTI2MTIxMDAzMDAwMFowMzExMC8GA1UEAxMoMUFBMjIwQTNFNUMwQzU5RTdDRkE4 Q0RCOTFFNUE3RTg0QzE0NjcyNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKuTRcwGDxmyymtFsuTaYDTTohOwRVemZBDR2mzqO0koC6Z24Eo6sJ1RzMZ+ wVs83ANsNJ/dbd2h0FkEmX7d0D4H/rGLkX89iaN5+Ilaa2V8K/9FnHzPywXSt/0u u0MI7NVnp3R/Wzy9Ro7j6nOND970CSv4yZ6FplHs0h2m57FoyH3EQw3qeQAmGUpG 25lvIojgEWEh5LjZ8vT/sJt1wgXq2KkZlxIN39L6HqUNUVta2L5OCPA0Sj33bRpo iG4x8dejamt37Fj8ed/E4V1grfU91bnbtDiyfAwlWQJDpFoSIDoegKXV48hHN1yq 4d5CtR01jKfTp2HH5Wjtl45Z9qsCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQaoiCj 5cDFnnz6jNuR5afoTBRnJDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTMyNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWeyrDANBgkqhkiG9w0BAQsFAAOCAQEAN0K5vbb0Ac9p+AP2sLbz uCX5gHXMS/XRCzmBxM3+DZ8SpHLuu+sZ+hYhNM+1JkRP3aQhlyrBHOTN3YFyxjoY dox/+mmn9IAsXBvyUhoxIlZcQSiw+GCFb5QpksQWHhxYZ44OyRAG62GX0URy2bTV 5sKBCRhibLqbzqnN93f8EfOtyIlyCe+S9gPMl1sKIy21/h75CHjW70763lhgrLvI 7GgmdMuWvMgRZCw2DpD4sHYp20Ykx5nXXtXJe5JBgLjZZnvWow7IbMUrvQ/S9u0h C6jZ7k5CeN6r6UPECODjV+t5ZvQv460wTTeQhyWMYxxcHl9IYDSmXPVKK0dCzJ9D tg== -----END CERTIFICATE-----Generated at Wed Dec 24 18:33:22 2025 by rpki-client