This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151566.roa File: AS151566.roa (raw, json) Hash identifier: hP17yzMr2G0RnxBbRNi7YufDwINWpLYqClyFsr3jtT4= Subject key identifier: 47:94:41:AB:11:C7:C0:B9:D8:81:14:B8:BB:75:83:93:F5:CE:3D:F0 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0A63707E6B0AD12296CD71B08D9893BEEB7DAF00 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151566.roa Signing time: Mon 15 Dec 2025 04:00:00 +0000 ROA not before: Mon 15 Dec 2025 03:55:00 +0000 ROA not after: Mon 14 Dec 2026 04:00:00 +0000 asID: 151566 IP address blocks: 103.231.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:63:70:7e:6b:0a:d1:22:96:cd:71:b0:8d:98:93:be:eb:7d:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 15 03:55:00 2025 GMT Not After : Dec 14 04:00:00 2026 GMT Subject: CN=479441AB11C7C0B9D88114B8BB758393F5CE3DF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ba:1b:df:14:56:f8:80:3d:18:29:cd:01:91: 6b:20:72:2c:97:29:ba:eb:57:a0:1d:42:57:80:77: 05:c9:fd:6c:1a:da:8b:bf:fa:26:1e:c5:fa:9b:da: 98:24:b9:b6:4e:3f:27:72:ea:d1:29:52:36:03:68: 9e:68:35:37:7f:cc:de:4b:06:56:bd:a8:54:f7:f2: b0:23:f7:12:69:c8:e9:eb:fc:03:c1:4b:2f:cd:e9: 17:82:e3:b4:4e:c2:f3:ad:cc:c0:ff:a5:49:73:37: 8a:53:de:26:5f:41:a5:e9:96:27:59:70:e6:2a:e7: ba:bf:43:a1:cb:fd:2c:1e:c2:52:37:d8:bf:ee:ac: 0b:1d:05:72:eb:b4:7b:4c:2c:a7:17:be:99:bc:09: 06:98:80:aa:9a:c3:55:37:06:13:c3:31:4c:54:00: a1:5c:27:8b:10:8f:51:18:76:58:c1:35:78:b2:ba: 2e:4f:35:61:5b:34:e8:28:35:9b:8d:f7:f9:83:1f: 79:48:c9:7a:6f:b5:56:86:37:0c:82:00:7e:60:f1: b6:5f:f8:d1:8e:ac:7c:35:49:68:22:c4:60:66:06: 5b:0c:78:51:37:de:62:a7:fa:d0:3a:7d:fa:2b:bf: f1:72:62:36:1f:a5:d8:16:c0:60:dc:fd:33:c3:0c: 59:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:94:41:AB:11:C7:C0:B9:D8:81:14:B8:BB:75:83:93:F5:CE:3D:F0 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151566.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.231.237.0/24 Signature Algorithm: sha256WithRSAEncryption 69:72:82:6b:d4:d9:6b:d4:f2:a0:ad:62:98:b3:57:83:78:4a: ca:fa:39:dc:2a:43:16:6c:38:9f:27:55:db:64:38:01:ca:d7: 90:0d:b5:20:14:5d:9c:f2:c5:ed:d2:fb:71:88:c2:ff:59:72: 2a:94:e8:ab:f1:dd:a0:1f:7b:87:c4:78:88:2b:99:70:d5:c9: 5d:26:37:d0:aa:c8:fa:38:01:7d:84:9d:d2:d4:81:77:32:d8: 28:29:ef:cf:f4:88:c5:56:3b:53:13:9d:69:0c:1d:cb:61:18: da:5c:9a:c5:25:94:5d:84:65:2b:67:1d:a2:6b:97:b3:c3:72: 60:72:ac:2c:27:a2:97:75:8a:52:46:23:ae:9b:99:62:93:28: 2e:aa:06:4e:38:6a:c0:74:a0:3f:34:8e:51:0b:c3:c4:d6:05: 7d:95:83:ae:f7:3e:ff:71:32:9d:3c:4e:a3:1f:47:d2:91:fd: cd:87:6a:12:b8:05:b8:86:a8:98:82:9e:95:e3:ed:ca:8a:81: 17:9b:58:da:77:8f:3e:1a:dc:ea:59:ec:74:5d:b0:c7:b8:5a: af:43:cc:04:aa:47:6e:a4:7e:3f:2f:1f:07:e9:a8:78:a3:33: ad:b8:67:33:51:10:de:28:60:43:a5:db:e2:4d:df:5c:74:8d: 8f:ac:60:92 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUCmNwfmsK0SKWzXGwjZiTvut9rwAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIxNTAzNTUwMFoX DTI2MTIxNDA0MDAwMFowMzExMC8GA1UEAxMoNDc5NDQxQUIxMUM3QzBCOUQ4ODEx NEI4QkI3NTgzOTNGNUNFM0RGMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMC6G98UVviAPRgpzQGRayByLJcpuutXoB1CV4B3Bcn9bBrai7/6Jh7F+pva mCS5tk4/J3Lq0SlSNgNonmg1N3/M3ksGVr2oVPfysCP3EmnI6ev8A8FLL83pF4Lj tE7C863MwP+lSXM3ilPeJl9BpemWJ1lw5irnur9Docv9LB7CUjfYv+6sCx0Fcuu0 e0wspxe+mbwJBpiAqprDVTcGE8MxTFQAoVwnixCPURh2WME1eLK6Lk81YVs06Cg1 m433+YMfeUjJem+1VoY3DIIAfmDxtl/40Y6sfDVJaCLEYGYGWwx4UTfeYqf60Dp9 +iu/8XJiNh+l2BbAYNz9M8MMWTECAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRHlEGr EcfAudiBFLi7dYOT9c498DAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MTU2Ni5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGfn7TANBgkqhkiG9w0BAQsFAAOCAQEAaXKCa9TZa9TyoK1imLNX g3hKyvo53CpDFmw4nydV22Q4AcrXkA21IBRdnPLF7dL7cYjC/1lyKpToq/HdoB97 h8R4iCuZcNXJXSY30KrI+jgBfYSd0tSBdzLYKCnvz/SIxVY7UxOdaQwdy2EY2lya xSWUXYRlK2cdomuXs8NyYHKsLCeil3WKUkYjrpuZYpMoLqoGTjhqwHSgPzSOUQvD xNYFfZWDrvc+/3EynTxOox9H0pH9zYdqErgFuIaomIKelePtyoqBF5tY2nePPhrc 6lnsdF2wx7har0PMBKpHbqR+Py8fB+moeKMzrbhnM1EQ3ihgQ6Xb4k3fXHSNj6xg kg== -----END CERTIFICATE-----Generated at Wed Dec 24 20:21:04 2025 by rpki-client