This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152044.roa File: AS152044.roa (raw, json) Hash identifier: Z3bx5/CVlve2jB33OJDsaSURvnGhT2xcj0Tqf3tWci4= Subject key identifier: D7:44:04:F6:90:0E:CC:27:64:EA:6E:19:49:70:A3:80:DD:8D:BE:90 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4C6F368420FDFD990DD73A3FE9BCB728A3AA312F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152044.roa Signing time: Wed 17 Dec 2025 04:00:00 +0000 ROA not before: Wed 17 Dec 2025 03:55:00 +0000 ROA not after: Wed 16 Dec 2026 04:00:00 +0000 asID: 152044 IP address blocks: 115.187.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:6f:36:84:20:fd:fd:99:0d:d7:3a:3f:e9:bc:b7:28:a3:aa:31:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 17 03:55:00 2025 GMT Not After : Dec 16 04:00:00 2026 GMT Subject: CN=D74404F6900ECC2764EA6E194970A380DD8DBE90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:54:c7:af:81:5b:d4:26:07:b4:75:63:bf:90: 3e:fc:58:43:0f:3a:98:2d:bf:b2:2a:da:4d:69:74: 64:76:c5:be:d1:48:14:5d:41:93:a4:5b:ba:a1:65: 74:50:3f:23:e6:52:46:b6:0d:4a:17:a0:e1:93:10: c2:bb:68:59:30:f2:14:f9:51:f9:8a:83:58:f8:11: 60:12:da:90:5c:cb:68:5a:7b:eb:4e:f1:d8:0c:f2: c5:56:6d:b1:a4:8b:55:d9:b5:ef:7c:40:dd:27:e8: b9:44:31:a3:5e:d5:91:af:3b:a6:d3:74:3b:b3:18: 3d:c7:77:8a:22:7d:0e:0b:05:bb:60:1f:85:ce:6d: cc:f0:8a:04:61:68:d1:e5:e3:c6:84:d8:12:4c:2d: 5f:5b:25:99:30:02:6e:21:e0:df:df:22:3e:60:67: e0:90:b8:52:59:a5:0d:fc:7b:3e:2d:70:7c:44:60: 71:d5:b4:4d:15:b2:9d:90:56:79:1a:64:ad:30:3d: 8a:76:7d:5d:3a:9f:18:25:09:55:de:4f:55:4e:5f: 2a:80:4d:e6:16:54:42:b5:bc:5b:c4:72:44:12:34: a2:4e:3a:93:04:c7:6b:91:77:b5:8d:32:42:39:9a: f5:72:28:2c:96:b0:fc:b6:c8:0d:1a:5f:1e:95:dd: 45:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:44:04:F6:90:0E:CC:27:64:EA:6E:19:49:70:A3:80:DD:8D:BE:90 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152044.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 115.187.23.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:20:b8:47:61:c9:59:22:a6:a4:7f:9f:d3:b9:3d:12:43:c4: a4:0a:6f:a7:e7:d2:69:c0:16:39:14:6d:21:38:f1:32:a7:01: c9:d0:1b:3e:a5:02:c6:e6:79:cc:9a:91:84:e4:25:ed:9f:ac: fa:54:e3:f0:54:46:49:ed:85:ac:24:86:b5:b6:75:98:eb:a2: 6e:98:84:c5:07:5a:90:45:b0:4d:49:5d:35:bb:f1:a0:58:a9: cc:23:3c:52:19:aa:95:68:31:48:1b:91:73:6d:09:24:00:f5: 56:6f:64:75:bd:b4:48:42:7f:20:e8:2b:fb:a5:90:75:31:bf: 86:43:d2:83:42:33:f3:66:c2:57:16:84:f9:e2:b0:68:86:b4: 5b:bb:ab:d6:69:ed:68:43:5e:17:df:77:ca:70:e1:1c:05:a9: 1f:c0:d0:e2:ea:af:93:1f:8c:4b:8b:5a:a9:bd:17:70:db:5f: 2f:14:77:88:0e:84:2a:3e:69:92:92:5d:ad:37:a6:31:a7:0e: f2:53:d9:97:02:14:3a:e5:a5:56:51:77:b9:6e:1f:dd:ad:bd: 03:93:ad:40:e0:8c:6e:0e:13:e1:6d:cc:75:7a:a5:2e:50:b5: 81:ef:ba:92:67:73:30:11:43:94:9e:0b:55:ae:cf:03:0a:37: d4:b2:b0:5b -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUTG82hCD9/ZkN1zo/6by3KKOqMS8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIxNzAzNTUwMFoX DTI2MTIxNjA0MDAwMFowMzExMC8GA1UEAxMoRDc0NDA0RjY5MDBFQ0MyNzY0RUE2 RTE5NDk3MEEzODBERDhEQkU5MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMFUx6+BW9QmB7R1Y7+QPvxYQw86mC2/siraTWl0ZHbFvtFIFF1Bk6RbuqFl dFA/I+ZSRrYNSheg4ZMQwrtoWTDyFPlR+YqDWPgRYBLakFzLaFp7607x2AzyxVZt saSLVdm173xA3SfouUQxo17Vka87ptN0O7MYPcd3iiJ9DgsFu2Afhc5tzPCKBGFo 0eXjxoTYEkwtX1slmTACbiHg398iPmBn4JC4UlmlDfx7Pi1wfERgcdW0TRWynZBW eRpkrTA9inZ9XTqfGCUJVd5PVU5fKoBN5hZUQrW8W8RyRBI0ok46kwTHa5F3tY0y Qjma9XIoLJaw/LbIDRpfHpXdRXMCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTXRAT2 kA7MJ2TqbhlJcKOA3Y2+kDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MjA0NC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAHO7FzANBgkqhkiG9w0BAQsFAAOCAQEACyC4R2HJWSKmpH+f07k9 EkPEpApvp+fSacAWORRtITjxMqcBydAbPqUCxuZ5zJqRhOQl7Z+s+lTj8FRGSe2F rCSGtbZ1mOuibpiExQdakEWwTUldNbvxoFipzCM8UhmqlWgxSBuRc20JJAD1Vm9k db20SEJ/IOgr+6WQdTG/hkPSg0Iz82bCVxaE+eKwaIa0W7ur1mntaENeF993ynDh HAWpH8DQ4uqvkx+MS4taqb0XcNtfLxR3iA6EKj5pkpJdrTemMacO8lPZlwIUOuWl VlF3uW4f3a29A5OtQOCMbg4T4W3MdXqlLlC1ge+6kmdzMBFDlJ4LVa7PAwo31LKw Ww== -----END CERTIFICATE-----Generated at Wed Dec 24 18:32:39 2025 by rpki-client