This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149664.roa
File: AS149664.roa (raw, json)
Hash identifier: ontto2hh9IxMKRFfo9bF567PSP0xITaXfsa0rUFBGII=
Subject key identifier: 4C:5E:4A:24:98:BA:46:1F:D2:4A:91:E8:63:BF:49:92:CF:E7:2C:9A
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 17461FE6B06192A029D5778BBFBA320D72E1901E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149664.roa
Signing time: Mon 22 Dec 2025 02:46:04 +0000
ROA not before: Mon 22 Dec 2025 02:41:04 +0000
ROA not after: Mon 21 Dec 2026 02:46:04 +0000
asID: 149664
IP address blocks: 103.184.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 17:20:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:46:1f:e6:b0:61:92:a0:29:d5:77:8b:bf:ba:32:0d:72:e1:90:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Dec 22 02:41:04 2025 GMT
Not After : Dec 21 02:46:04 2026 GMT
Subject: CN=4C5E4A2498BA461FD24A91E863BF4992CFE72C9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e4:05:05:00:cc:1c:a3:6b:b0:0e:40:7b:5b:
e8:3f:22:be:5f:34:76:4f:fe:60:c0:e0:60:1a:43:
95:69:93:3e:b8:bb:95:3e:c1:a5:8f:f8:3b:5b:a4:
df:b7:b7:12:bd:0f:1e:2b:f9:8a:d6:bb:78:c0:42:
e7:7f:0f:29:10:d0:18:b4:d8:dc:da:50:eb:42:24:
24:50:00:c2:14:a9:43:d3:b5:43:e2:e7:46:99:38:
8a:04:84:03:c6:c0:36:4d:89:c6:29:4b:d6:37:53:
95:1c:bf:46:de:fb:df:75:29:2b:24:9e:b2:cf:9f:
34:ef:80:cc:26:5c:95:08:2e:2c:c1:94:b1:0e:f9:
72:f2:a1:62:95:54:f4:4a:f4:e0:45:6a:d6:c9:fd:
bf:a0:14:6d:4d:5d:e4:67:83:c2:83:91:9a:f9:e3:
28:7e:b4:81:35:32:16:1c:62:5e:c0:ae:2d:4e:68:
2f:20:e0:9d:93:fd:f5:c5:54:64:e6:91:ed:d5:6b:
88:c6:17:da:92:9b:90:49:08:61:37:4b:cd:82:27:
37:aa:67:c4:8a:0c:3c:62:3b:7e:1d:8d:bc:15:de:
19:b6:df:82:90:e1:b4:d4:94:35:d6:db:1c:7d:23:
54:c7:79:7e:60:6a:13:89:8b:9d:0a:f8:a7:c8:cb:
86:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:5E:4A:24:98:BA:46:1F:D2:4A:91:E8:63:BF:49:92:CF:E7:2C:9A
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149664.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.184.62.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:15:6e:dc:bf:ec:28:00:98:44:e6:57:9f:ee:d6:bc:ac:48:
81:76:8d:1e:bd:4e:ef:e8:aa:9e:53:4b:c6:d4:8c:2f:0b:21:
fc:fa:23:8d:ef:77:4a:5b:0d:c0:fe:09:df:97:cb:9d:d5:d7:
bb:1c:bd:04:12:36:2e:ff:10:29:2a:cb:bb:99:d9:1d:a0:8c:
71:8d:4d:17:0a:18:3f:22:2b:89:3a:f2:5c:6d:d7:4b:84:75:
89:f3:c2:b6:ae:f4:42:d0:f0:34:cf:5a:28:0c:1b:16:1e:23:
02:34:1b:50:0f:b4:47:3d:4a:65:60:d0:73:03:88:c9:3b:f0:
26:13:34:82:50:2a:1b:a7:29:9f:e1:07:7d:59:50:e4:3e:15:
db:de:31:8a:46:c5:e1:af:6a:ca:4c:e9:c0:f7:6f:9d:29:24:
d7:05:b5:34:f2:ab:27:27:8a:1c:3e:b3:46:09:2e:97:31:2a:
ab:8d:b9:c1:43:b3:e1:ab:7c:14:da:91:c1:d0:0a:c0:08:2c:
91:4d:ba:89:db:66:71:3a:65:06:d0:d8:da:3a:a0:8f:18:4f:
34:5b:87:73:2e:0b:73:9f:5d:d3:26:f4:a9:ae:0f:48:f8:1c:
f7:7f:c8:ee:1a:06:e8:16:0e:92:29:c3:d7:a1:9c:40:3b:9f:
ed:9a:71:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 18:32:36 2025 by rpki-client