This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150504.roa File: AS150504.roa (raw, json) Hash identifier: KqBB2rdLsQwaP0idiWREree1eIuKAnhwrUBXrGdFWVs= Subject key identifier: 98:78:34:B1:99:36:50:55:90:2D:EF:65:15:26:12:EB:64:65:D6:73 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 444B86DC0718803C9F5049C5E4D91991133C19C6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150504.roa Signing time: Thu 11 Dec 2025 08:00:00 +0000 ROA not before: Thu 11 Dec 2025 07:55:00 +0000 ROA not after: Thu 10 Dec 2026 08:00:00 +0000 asID: 150504 IP address blocks: 2001:df1:ccc0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:4b:86:dc:07:18:80:3c:9f:50:49:c5:e4:d9:19:91:13:3c:19:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 11 07:55:00 2025 GMT Not After : Dec 10 08:00:00 2026 GMT Subject: CN=987834B199365055902DEF65152612EB6465D673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:75:fb:56:a2:40:36:83:21:bb:f0:17:a7:83: d5:0d:44:e2:76:97:e3:4a:64:c0:62:94:10:6c:86: e2:9c:46:49:ed:b7:13:de:9a:b2:b8:d8:c8:3d:09: 84:45:31:0d:6e:25:3f:b9:19:45:8d:70:63:40:c7: b9:a3:95:4f:42:5b:40:75:39:c2:3f:fe:75:be:fa: 4e:a1:c9:48:e8:17:e3:19:19:d5:71:24:3e:88:87: 8a:3b:8c:8f:ab:12:03:c6:b9:3e:d0:ee:4d:dc:8f: ce:7f:33:c8:85:4e:be:9d:8e:30:c0:8c:ee:96:33: 37:18:29:d1:62:31:cd:b8:91:87:c3:fb:ff:76:c5: 8b:95:f6:54:cc:90:8a:07:27:a5:8b:47:64:25:c1: 19:cc:3a:e2:7f:4b:a3:92:e5:59:f7:06:03:8c:09: cc:f4:cf:93:75:7a:f1:3e:9f:da:9b:0b:a2:9f:73: 05:db:0a:0f:5b:e2:72:7d:06:08:21:60:39:3d:21: 76:8f:1b:fc:07:b7:7d:ed:07:3f:91:dd:ae:32:c7: 65:74:fe:8d:e7:22:a2:69:fb:99:db:75:4e:5d:18: c8:09:03:e2:a8:c3:58:73:f2:25:a4:6a:70:77:12: 1a:21:a3:35:f7:da:44:4f:db:4f:7b:79:ca:fc:ee: 2d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:78:34:B1:99:36:50:55:90:2D:EF:65:15:26:12:EB:64:65:D6:73 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150504.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:ccc0::/48 Signature Algorithm: sha256WithRSAEncryption 72:69:9c:49:d9:de:5b:c1:e1:09:53:a7:63:14:e5:a2:61:1c: 0d:78:4b:31:34:4a:cb:52:58:9e:59:5b:49:ea:cd:fa:61:20: db:e7:89:c1:69:7f:79:8d:b9:c3:a4:1f:66:03:71:f5:4c:94: 6d:1f:18:ba:26:22:6e:70:04:9c:e9:13:e2:12:73:2e:01:b0: 87:e9:c2:78:24:3e:92:8a:3d:4c:7e:bd:43:67:f5:35:b4:4c: 5f:5a:7d:44:74:75:13:2b:90:74:8a:dd:3f:f6:b8:af:e2:9c: 71:bc:d4:59:97:75:b1:c3:f4:eb:54:80:ca:e5:5d:33:49:f8: a9:76:09:e5:39:28:c4:9f:76:cd:39:09:90:c9:fc:c5:ac:be: c2:92:33:a4:26:a4:61:c6:6d:f8:26:cd:ea:2c:18:d5:d7:16: a0:bd:4d:8f:c7:d7:38:9d:1c:6e:7b:99:d6:dd:56:ba:13:11: 2e:ce:b8:3c:15:7a:a5:b4:8c:85:c5:f2:2c:69:89:5f:a4:47: 7c:2f:d7:f3:6c:d4:0c:df:f5:29:c4:6f:29:ca:7d:4a:c7:93: 67:5c:78:49:86:32:7b:07:f4:78:f9:05:2c:92:2a:d1:1b:f4: c3:f7:ea:d1:37:11:1b:d0:85:bd:c1:c7:a6:f1:db:1a:09:4b: 03:1d:48:c1 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUREuG3AcYgDyfUEnF5NkZkRM8GcYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIxMTA3NTUwMFoX DTI2MTIxMDA4MDAwMFowMzExMC8GA1UEAxMoOTg3ODM0QjE5OTM2NTA1NTkwMkRF RjY1MTUyNjEyRUI2NDY1RDY3MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMN1+1aiQDaDIbvwF6eD1Q1E4naX40pkwGKUEGyG4pxGSe23E96asrjYyD0J hEUxDW4lP7kZRY1wY0DHuaOVT0JbQHU5wj/+db76TqHJSOgX4xkZ1XEkPoiHijuM j6sSA8a5PtDuTdyPzn8zyIVOvp2OMMCM7pYzNxgp0WIxzbiRh8P7/3bFi5X2VMyQ igcnpYtHZCXBGcw64n9Lo5LlWfcGA4wJzPTPk3V68T6f2psLop9zBdsKD1vicn0G CCFgOT0hdo8b/Ae3fe0HP5HdrjLHZXT+jeciomn7mdt1Tl0YyAkD4qjDWHPyJaRq cHcSGiGjNffaRE/bT3t5yvzuLWcCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBSYeDSx mTZQVZAt72UVJhLrZGXWczAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDUwNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfHMwDANBgkqhkiG9w0BAQsFAAOCAQEAcmmcSdneW8HhCVOn YxTlomEcDXhLMTRKy1JYnllbSerN+mEg2+eJwWl/eY25w6QfZgNx9UyUbR8YuiYi bnAEnOkT4hJzLgGwh+nCeCQ+koo9TH69Q2f1NbRMX1p9RHR1EyuQdIrdP/a4r+Kc cbzUWZd1scP061SAyuVdM0n4qXYJ5TkoxJ92zTkJkMn8xay+wpIzpCakYcZt+CbN 6iwY1dcWoL1Nj8fXOJ0cbnuZ1t1WuhMRLs64PBV6pbSMhcXyLGmJX6RHfC/X82zU DN/1KcRvKcp9SseTZ1x4SYYyewf0ePkFLJIq0Rv0w/fq0TcRG9CFvcHHpvHbGglL Ax1IwQ== -----END CERTIFICATE-----Generated at Wed Dec 24 20:21:04 2025 by rpki-client