This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149353.roa File: AS149353.roa (raw, json) Hash identifier: 7LLwb2fF9mnjI3ZquwyftXnZHT9kpF+uuBP+fje46iE= Subject key identifier: EB:6D:6B:CD:6C:87:A7:7E:4F:F0:0D:93:3D:88:6D:67:75:90:72:2A Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 34E5C26BA39E04CBCF60C13BFB89C4188A4F589D Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149353.roa Signing time: Fri 12 Dec 2025 07:00:00 +0000 ROA not before: Fri 12 Dec 2025 06:55:00 +0000 ROA not after: Fri 11 Dec 2026 07:00:00 +0000 asID: 149353 IP address blocks: 2001:df2:1340::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 20:54:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:e5:c2:6b:a3:9e:04:cb:cf:60:c1:3b:fb:89:c4:18:8a:4f:58:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 12 06:55:00 2025 GMT Not After : Dec 11 07:00:00 2026 GMT Subject: CN=EB6D6BCD6C87A77E4FF00D933D886D677590722A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:de:f6:79:d4:31:bf:28:d1:29:41:ab:8a:2c: 06:9b:cc:61:44:05:52:cc:68:2a:af:10:bf:0c:6d: 36:41:47:e3:85:c8:e2:47:a7:9b:0f:e4:db:f5:6e: 70:a5:65:d0:94:3e:30:ac:cb:8e:2d:ed:ba:64:a5: 3a:94:d9:b9:95:6a:f9:ec:57:a3:3d:a7:d7:c5:51: 56:6d:c6:35:76:ab:fd:4b:b9:11:8e:d9:d2:c5:60: 46:48:cd:5e:3d:2d:49:67:c4:a7:79:56:2f:e2:6f: 7e:78:d6:69:82:2d:f8:89:59:21:3e:3d:fe:19:bc: 53:35:a8:51:2d:3a:e4:79:64:70:c9:66:57:54:59: d8:14:77:42:dc:7c:1a:b9:1d:7f:68:57:03:d6:8f: 08:23:84:ed:62:43:b9:11:e5:09:4a:06:f2:32:ce: 82:d1:89:ab:18:a7:70:a5:3b:62:5a:77:86:39:46: 09:0c:be:46:6b:b5:26:53:98:96:81:1a:07:48:2d: 7e:0f:99:3a:57:ee:f5:19:7e:48:40:3d:cf:23:bd: e9:d6:ce:74:f3:6f:a4:41:03:3d:8a:f9:46:8d:10: f6:b9:ed:f2:0f:20:8d:7c:6d:65:e1:8a:21:d4:ad: 45:f9:50:7c:81:f9:b8:3f:b0:da:0d:e1:e6:e1:99: 15:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:6D:6B:CD:6C:87:A7:7E:4F:F0:0D:93:3D:88:6D:67:75:90:72:2A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149353.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:1340::/48 Signature Algorithm: sha256WithRSAEncryption 99:e4:e4:76:4d:09:7a:ae:a6:9d:10:b5:b3:76:10:3f:cc:c7: 5a:50:1f:ed:bc:63:88:ef:69:ba:50:74:6b:43:0a:5f:6a:bc: a6:7e:24:f3:f5:bd:63:44:69:70:88:db:db:cb:01:ab:de:09: 30:24:c1:d2:b3:3a:d1:a4:81:10:36:1e:05:e6:43:00:22:9c: 2e:3a:e0:65:c9:86:6a:af:27:3d:9c:e0:d8:cc:d7:6a:35:17: be:e8:ed:7a:f0:eb:ac:f6:f9:97:82:a0:4a:e7:27:e4:b6:12: b7:e4:20:b2:db:59:84:40:7e:c2:2d:94:40:c8:f2:66:0a:49: 55:b8:43:c1:8a:5d:e7:58:5a:7f:fa:ba:56:85:db:2d:a7:3b: c1:02:c5:44:ad:1e:b0:f4:77:e8:a5:84:db:e3:51:47:b1:38: 52:a9:8f:7e:87:b6:33:ae:9c:67:a9:e4:0d:d5:fc:f3:72:ae: c8:e1:fc:85:5e:cb:5e:d4:3b:60:9e:1e:bd:9a:bd:b5:66:74: 6c:3c:25:1a:8a:71:f8:e8:aa:be:b6:65:77:f6:25:e2:10:a7: aa:8a:1d:32:82:8f:f8:fc:b3:b3:f3:35:1b:7b:d9:93:96:c7: 33:b4:e8:4e:7f:85:9f:a3:9f:86:6e:1c:5b:2e:d3:05:83:01: 68:70:05:e1 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUNOXCa6OeBMvPYME7+4nEGIpPWJ0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIxMjA2NTUwMFoX DTI2MTIxMTA3MDAwMFowMzExMC8GA1UEAxMoRUI2RDZCQ0Q2Qzg3QTc3RTRGRjAw RDkzM0Q4ODZENjc3NTkwNzIyQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALje9nnUMb8o0SlBq4osBpvMYUQFUsxoKq8QvwxtNkFH44XI4kenmw/k2/Vu cKVl0JQ+MKzLji3tumSlOpTZuZVq+exXoz2n18VRVm3GNXar/Uu5EY7Z0sVgRkjN Xj0tSWfEp3lWL+JvfnjWaYIt+IlZIT49/hm8UzWoUS065HlkcMlmV1RZ2BR3Qtx8 Grkdf2hXA9aPCCOE7WJDuRHlCUoG8jLOgtGJqxincKU7Ylp3hjlGCQy+Rmu1JlOY loEaB0gtfg+ZOlfu9Rl+SEA9zyO96dbOdPNvpEEDPYr5Ro0Q9rnt8g8gjXxtZeGK IdStRflQfIH5uD+w2g3h5uGZFRcCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBTrbWvN bIenfk/wDZM9iG1ndZByKjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTM1My5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfITQDANBgkqhkiG9w0BAQsFAAOCAQEAmeTkdk0Jeq6mnRC1 s3YQP8zHWlAf7bxjiO9pulB0a0MKX2q8pn4k8/W9Y0RpcIjb28sBq94JMCTB0rM6 0aSBEDYeBeZDACKcLjrgZcmGaq8nPZzg2MzXajUXvujtevDrrPb5l4KgSucn5LYS t+QgsttZhEB+wi2UQMjyZgpJVbhDwYpd51haf/q6VoXbLac7wQLFRK0esPR36KWE 2+NRR7E4UqmPfoe2M66cZ6nkDdX883KuyOH8hV7LXtQ7YJ4evZq9tWZ0bDwlGopx +OiqvrZld/Yl4hCnqoodMoKP+Pyzs/M1G3vZk5bHM7ToTn+Fn6Ofhm4cWy7TBYMB aHAF4Q== -----END CERTIFICATE-----Generated at Wed Dec 17 20:49:41 2025 by rpki-client