This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149736.roa File: AS149736.roa (raw, json) Hash identifier: ipBtAa8xgwxp1z9ROPu6vnee0/g31AUYFcIb7HcNk4s= Subject key identifier: AF:F3:51:70:D2:55:38:0A:93:49:11:DF:D6:79:78:16:53:3C:04:77 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6C00E83EAF8D9C87772EE89CA8B3D2776078C7D5 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149736.roa Signing time: Wed 10 Dec 2025 07:42:14 +0000 ROA not before: Wed 10 Dec 2025 07:37:14 +0000 ROA not after: Wed 09 Dec 2026 07:42:14 +0000 asID: 149736 IP address blocks: 103.188.172.0/23 maxlen: 24 103.215.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 13:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:00:e8:3e:af:8d:9c:87:77:2e:e8:9c:a8:b3:d2:77:60:78:c7:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 10 07:37:14 2025 GMT Not After : Dec 9 07:42:14 2026 GMT Subject: CN=AFF35170D255380A934911DFD6797816533C0477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:0e:ff:c6:76:41:37:ea:bf:46:2d:aa:97:f7: 6e:a5:4d:45:b6:d5:d8:ee:72:d6:62:f2:25:bb:ce: 02:c2:ce:1c:ba:d7:5c:d7:ce:96:e1:31:ea:e3:ee: 4d:e0:b2:44:53:00:86:42:9b:92:fb:01:66:c4:44: 39:de:8d:09:da:7f:c3:44:10:dc:52:55:2d:df:d7: 44:ac:8a:aa:c6:74:71:ce:7f:38:5b:7c:45:3b:a2: 6e:a3:86:06:7b:ed:02:d8:4e:bf:89:fd:13:21:a1: 20:84:b1:a9:d9:25:d9:76:60:d2:8f:0e:a3:ce:0f: 18:28:e1:43:39:4b:24:83:c0:28:28:8c:b6:8f:50: 89:ab:42:d3:38:4a:65:8c:68:39:60:6a:07:e1:39: 49:c0:05:e2:4d:a8:2f:a0:c2:1d:74:ae:e4:72:df: 31:89:02:40:4d:76:77:2a:41:cc:a3:d9:97:02:a4: 4a:07:50:ef:fe:7a:c1:09:c4:9b:d3:9e:53:aa:16: f2:bc:18:a0:55:cc:ac:c1:e5:3d:9e:95:11:ea:b5: dc:46:00:d3:01:9f:a4:ec:4d:e8:58:3d:32:98:ba: 50:21:0e:c1:de:2e:23:f2:06:e4:5c:3c:89:fc:d1: 21:fb:e1:bb:a9:5b:27:46:49:98:0b:15:57:95:5c: ef:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:F3:51:70:D2:55:38:0A:93:49:11:DF:D6:79:78:16:53:3C:04:77 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.188.172.0/23 103.215.69.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:28:ff:7d:15:bd:66:c6:08:af:ea:fd:78:84:33:62:c9:4b: c5:c9:52:ea:ba:8c:2f:5b:ed:40:5a:e5:82:a0:56:bc:be:ae: 20:fb:eb:ea:01:69:d2:a2:4b:56:7d:6d:1a:bc:05:92:83:30: 0f:30:91:28:f3:56:63:7d:00:5b:0f:a0:00:6a:9e:78:e1:d7: e0:ba:2b:11:56:8f:1f:9a:49:1e:ce:14:b1:b3:9a:54:8d:77: f8:d5:dc:64:92:de:c3:79:0f:89:70:a4:ac:58:43:78:56:60: dc:d0:e4:90:1f:25:35:7a:40:5d:c7:da:9a:d8:dc:cd:87:ce: fc:38:20:ba:a7:3f:14:dd:30:d4:72:1b:7f:36:a5:30:64:32: b8:e9:66:51:1a:43:ce:1a:04:2a:94:9a:86:0c:cc:1b:29:9a: b4:47:d5:ec:28:d5:55:cf:bf:67:3b:63:64:ec:47:9f:47:6c: 6e:34:32:5c:24:2c:b9:64:4d:09:a2:93:49:93:36:b1:8b:c5: 70:4b:1a:d3:6f:39:a7:f3:86:c4:ee:19:00:ca:a3:59:d5:01: 37:89:87:13:88:34:d0:7f:7e:fd:47:61:1d:53:f6:c7:48:58: 95:05:e9:15:01:97:a8:2b:c6:01:fe:79:57:cd:a5:38:43:cd: bd:ae:f4:ee -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUbADoPq+NnId3LuicqLPSd2B4x9UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIxMDA3MzcxNFoX DTI2MTIwOTA3NDIxNFowMzExMC8GA1UEAxMoQUZGMzUxNzBEMjU1MzgwQTkzNDkx MURGRDY3OTc4MTY1MzNDMDQ3NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOwO/8Z2QTfqv0Ytqpf3bqVNRbbV2O5y1mLyJbvOAsLOHLrXXNfOluEx6uPu TeCyRFMAhkKbkvsBZsREOd6NCdp/w0QQ3FJVLd/XRKyKqsZ0cc5/OFt8RTuibqOG BnvtAthOv4n9EyGhIISxqdkl2XZg0o8Oo84PGCjhQzlLJIPAKCiMto9QiatC0zhK ZYxoOWBqB+E5ScAF4k2oL6DCHXSu5HLfMYkCQE12dypBzKPZlwKkSgdQ7/56wQnE m9OeU6oW8rwYoFXMrMHlPZ6VEeq13EYA0wGfpOxN6Fg9Mpi6UCEOwd4uI/IG5Fw8 ifzRIfvhu6lbJ0ZJmAsVV5Vc768CAwEAAaOCAdYwggHSMB0GA1UdDgQWBBSv81Fw 0lU4CpNJEd/WeXgWUzwEdzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTczNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAWe8rAMEAGfXRTANBgkqhkiG9w0BAQsFAAOCAQEAjij/fRW9ZsYI r+r9eIQzYslLxclS6rqML1vtQFrlgqBWvL6uIPvr6gFp0qJLVn1tGrwFkoMwDzCR KPNWY30AWw+gAGqeeOHX4LorEVaPH5pJHs4UsbOaVI13+NXcZJLew3kPiXCkrFhD eFZg3NDkkB8lNXpAXcfamtjczYfO/Dgguqc/FN0w1HIbfzalMGQyuOlmURpDzhoE KpSahgzMGymatEfV7CjVVc+/ZztjZOxHn0dsbjQyXCQsuWRNCaKTSZM2sYvFcEsa 0285p/OGxO4ZAMqjWdUBN4mHE4g00H9+/UdhHVP2x0hYlQXpFQGXqCvGAf55V82l OEPNva707g== -----END CERTIFICATE-----Generated at Fri Dec 19 01:20:12 2025 by rpki-client