This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149362.roa File: AS149362.roa (raw, json) Hash identifier: xCm3w5oSdHobBxol/GzEx+E0CuE6FU0cBxl70b6CQb4= Subject key identifier: 68:DB:55:55:DC:5C:B6:3E:A7:80:10:4A:6F:E9:F6:60:1F:97:84:F9 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7687C8AF92F4E76799804626B458F5DE6405A663 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149362.roa Signing time: Thu 11 Dec 2025 04:43:43 +0000 ROA not before: Thu 11 Dec 2025 04:38:43 +0000 ROA not after: Thu 10 Dec 2026 04:43:43 +0000 asID: 149362 IP address blocks: 103.178.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 15:22:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:87:c8:af:92:f4:e7:67:99:80:46:26:b4:58:f5:de:64:05:a6:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 11 04:38:43 2025 GMT Not After : Dec 10 04:43:43 2026 GMT Subject: CN=68DB5555DC5CB63EA780104A6FE9F6601F9784F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:bd:57:5f:1c:65:ee:71:da:c1:7f:c1:f9:09: 6e:9d:65:c3:33:5a:2c:72:fe:f6:a9:3a:62:ea:fd: 40:a4:db:cc:ab:2d:f1:2d:2f:bf:a9:60:f0:86:29: 49:82:94:4c:89:f2:89:fd:a4:0c:e1:e7:13:da:73: 55:3f:60:bb:65:af:3f:03:ef:d3:e9:f2:f5:88:6a: 9f:a0:05:56:27:ea:9b:27:32:1d:65:e7:bb:4b:84: e9:6c:3b:2b:ad:cf:a7:2c:00:c7:6b:75:72:07:f1: 3d:88:13:ed:6f:f0:bb:e8:98:4a:33:43:5d:2b:0e: cb:6c:85:d9:d4:12:1d:6c:7a:16:9b:95:ac:7f:25: 0c:3d:57:0b:e5:94:8f:7d:71:14:ad:d9:24:98:04: 47:5b:48:34:31:a1:28:f2:7b:eb:b7:8c:c6:d5:70: a3:ee:9e:35:1b:8b:e0:ca:86:f4:79:75:d2:15:1e: 98:09:7d:72:66:19:15:df:c7:d0:1c:cc:c9:27:42: da:30:f0:81:8a:73:b3:5b:a0:35:32:2e:6a:f0:b9: e5:bc:dd:de:14:3c:18:0d:79:db:8e:5a:eb:85:90: 72:78:34:c8:b9:c4:73:bc:de:56:75:aa:6d:1b:c4: 4f:03:0a:2c:c7:10:48:08:68:a0:df:27:be:b1:c6: db:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:DB:55:55:DC:5C:B6:3E:A7:80:10:4A:6F:E9:F6:60:1F:97:84:F9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149362.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.178.89.0/24 Signature Algorithm: sha256WithRSAEncryption 90:53:b9:ca:21:6b:2f:72:ce:df:b1:99:e6:d6:19:40:ff:5e: 9c:da:ba:1b:48:35:12:2a:a8:f9:63:86:bf:a5:85:87:a5:31: b6:6a:3e:36:a4:c8:46:c2:db:94:ca:5d:ba:67:b3:9b:1c:26: 81:bc:b8:54:30:b8:09:73:fd:56:c4:64:ab:8a:54:56:bf:c4: 15:00:a3:65:53:f5:2d:b6:f8:81:2d:cd:30:ba:9d:2f:f3:95: 3c:19:b5:2f:70:f2:e6:0a:55:50:d0:b3:7c:8b:00:82:fb:27: b8:3e:93:f8:40:af:9f:3d:85:07:9d:89:5e:a3:b8:3f:5a:1f: 8a:43:2e:85:67:2d:c8:d9:45:55:36:98:5b:55:83:ac:f5:d7: d6:00:44:59:71:a9:2c:57:85:6d:67:97:7e:c1:ae:ed:21:ec: 63:28:d3:b6:75:f1:f7:f7:3b:79:61:83:f8:9a:65:0d:d4:f7: 82:2b:30:33:e7:5e:ee:ef:2c:a0:07:db:ea:df:2c:a5:4c:85: bb:dc:f4:85:4d:cb:08:c4:0b:81:d1:92:ff:a8:10:1c:1c:61: de:bd:ba:10:40:38:f4:37:bd:82:55:3b:bc:50:57:77:d0:12: 72:f6:84:c8:db:ff:bc:37:77:80:08:b2:fb:0c:e5:38:d1:de: b5:0c:93:44 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUdofIr5L052eZgEYmtFj13mQFpmMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIxMTA0Mzg0M1oX DTI2MTIxMDA0NDM0M1owMzExMC8GA1UEAxMoNjhEQjU1NTVEQzVDQjYzRUE3ODAx MDRBNkZFOUY2NjAxRjk3ODRGOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPK9V18cZe5x2sF/wfkJbp1lwzNaLHL+9qk6Yur9QKTbzKst8S0vv6lg8IYp SYKUTInyif2kDOHnE9pzVT9gu2WvPwPv0+ny9Yhqn6AFVifqmycyHWXnu0uE6Ww7 K63PpywAx2t1cgfxPYgT7W/wu+iYSjNDXSsOy2yF2dQSHWx6FpuVrH8lDD1XC+WU j31xFK3ZJJgER1tINDGhKPJ767eMxtVwo+6eNRuL4MqG9Hl10hUemAl9cmYZFd/H 0BzMySdC2jDwgYpzs1ugNTIuavC55bzd3hQ8GA15245a64WQcng0yLnEc7zeVnWq bRvETwMKLMcQSAhooN8nvrHG2y0CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRo21VV 3Fy2PqeAEEpv6fZgH5eE+TAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTM2Mi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGeyWTANBgkqhkiG9w0BAQsFAAOCAQEAkFO5yiFrL3LO37GZ5tYZ QP9enNq6G0g1Eiqo+WOGv6WFh6Uxtmo+NqTIRsLblMpdumezmxwmgby4VDC4CXP9 VsRkq4pUVr/EFQCjZVP1Lbb4gS3NMLqdL/OVPBm1L3Dy5gpVUNCzfIsAgvsnuD6T +ECvnz2FB52JXqO4P1ofikMuhWctyNlFVTaYW1WDrPXX1gBEWXGpLFeFbWeXfsGu 7SHsYyjTtnXx9/c7eWGD+JplDdT3giswM+de7u8soAfb6t8spUyFu9z0hU3LCMQL gdGS/6gQHBxh3r26EEA49De9glU7vFBXd9AScvaEyNv/vDd3gAiy+wzlONHetQyT RA== -----END CERTIFICATE-----Generated at Wed Dec 17 15:16:26 2025 by rpki-client