This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS136873.roa File: AS136873.roa (raw, json) Hash identifier: 93YQiBtFbcZmzNIS6veA6Q+Fc7EU2a0QgIVEwdnk4Fk= Subject key identifier: B0:E5:84:F7:60:61:B4:CD:E6:D9:73:E4:24:B9:7A:9C:E1:44:20:81 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 63D83F335D86208A5C2DF29414BFE5BFEE29A73E Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS136873.roa Signing time: Wed 05 Nov 2025 04:48:35 +0000 ROA not before: Wed 05 Nov 2025 04:43:35 +0000 ROA not after: Wed 04 Nov 2026 04:48:35 +0000 asID: 136873 IP address blocks: 160.22.8.0/24 maxlen: 24 160.22.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:d8:3f:33:5d:86:20:8a:5c:2d:f2:94:14:bf:e5:bf:ee:29:a7:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Nov 5 04:43:35 2025 GMT Not After : Nov 4 04:48:35 2026 GMT Subject: CN=B0E584F76061B4CDE6D973E424B97A9CE1442081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:71:be:ec:31:b4:2d:d8:05:52:e2:2d:d3:5b: 26:86:cb:47:4d:4f:bc:74:4d:0f:0a:e2:da:72:7b: c7:3b:30:cd:c7:ed:73:c3:72:08:ca:6f:35:21:79: c0:e8:95:b1:45:1a:45:06:8e:67:14:e2:f8:a8:b4: c7:5a:a1:23:e0:ca:a7:69:bb:7d:b0:c4:62:2a:b4: c8:fa:d9:f3:54:a6:f6:5c:2f:f9:8f:dd:6b:5d:19: 5b:8f:46:47:c9:a1:f3:16:c5:44:d0:d0:07:69:94: 83:66:22:e2:b9:57:5d:47:b5:36:ea:10:f8:d3:8d: 73:ff:3d:1a:ea:7f:5a:cf:50:38:7a:1a:2d:ab:04: 18:ae:cd:02:52:ab:25:28:e8:9f:90:58:59:ae:db: 7d:54:46:96:b0:5a:f5:56:9a:14:0d:54:49:0d:4b: cc:ef:f2:32:c8:af:bc:ea:80:c3:c3:cc:29:a7:5b: d4:9d:c5:96:df:74:ed:58:f7:ce:cb:97:ca:c1:18: ff:ab:a6:6a:d1:e3:ca:64:27:71:0d:96:31:91:d7: b1:41:08:7d:02:43:ab:0d:03:89:75:d8:a7:9c:47: 59:9c:89:1f:42:d7:48:9f:da:f1:8b:bc:e3:65:29: e7:b2:2d:a4:ae:86:fa:89:60:3f:9b:61:fa:bd:74: d7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E5:84:F7:60:61:B4:CD:E6:D9:73:E4:24:B9:7A:9C:E1:44:20:81 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS136873.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.8.0/23 Signature Algorithm: sha256WithRSAEncryption 06:73:31:db:92:83:85:d6:4e:9d:da:9f:b5:e5:e5:fc:9d:35: 01:94:41:fd:ca:ad:75:15:ef:31:7b:f4:f3:ab:e9:2c:9e:03: 9b:38:05:ff:74:7a:0e:b5:c5:e0:d3:ea:f2:ba:81:7f:92:75: e2:34:52:e6:12:01:6f:7c:ae:d1:6c:1f:fa:66:94:07:2e:26: 1a:1d:e5:d1:c0:f6:25:03:04:97:cd:0c:75:06:b7:3d:54:2d: d8:bd:ea:06:2e:a9:a0:a7:9d:03:f2:3b:f9:03:70:9b:23:ea: b1:ac:39:1b:a2:8c:d0:58:28:4d:5d:d4:98:f9:05:54:f9:5f: 4c:22:1f:a3:22:61:90:ef:8a:4f:91:8a:1d:55:fd:9b:04:1d: 70:58:47:23:41:80:26:d6:29:f6:45:1d:8a:f7:17:5a:1e:4d: da:ca:5e:6b:66:42:04:7a:1d:4e:0c:42:44:11:49:d0:8c:7c: b9:e5:77:49:1d:64:62:b4:db:79:77:05:e2:47:39:b6:30:4b: 65:1c:62:24:90:d9:31:80:7d:47:cf:4b:89:1a:5e:98:29:17: 56:d9:84:c2:60:44:cc:15:a9:3a:36:15:f5:f5:9c:4c:eb:63: ee:17:ae:46:c1:d4:62:50:66:b5:02:b5:89:08:e0:6c:89:ef: d0:36:3c:be -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUY9g/M12GIIpcLfKUFL/lv+4ppz4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTEwNTA0NDMzNVoX DTI2MTEwNDA0NDgzNVowMzExMC8GA1UEAxMoQjBFNTg0Rjc2MDYxQjRDREU2RDk3 M0U0MjRCOTdBOUNFMTQ0MjA4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKJxvuwxtC3YBVLiLdNbJobLR01PvHRNDwri2nJ7xzswzcftc8NyCMpvNSF5 wOiVsUUaRQaOZxTi+Ki0x1qhI+DKp2m7fbDEYiq0yPrZ81Sm9lwv+Y/da10ZW49G R8mh8xbFRNDQB2mUg2Yi4rlXXUe1NuoQ+NONc/89Gup/Ws9QOHoaLasEGK7NAlKr JSjon5BYWa7bfVRGlrBa9VaaFA1USQ1LzO/yMsivvOqAw8PMKadb1J3Flt907Vj3 zsuXysEY/6umatHjymQncQ2WMZHXsUEIfQJDqw0DiXXYp5xHWZyJH0LXSJ/a8Yu8 42Up57ItpK6G+olgP5th+r101+UCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSw5YT3 YGG0zebZc+QkuXqc4UQggTAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzEzNjg3My5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaAWCDANBgkqhkiG9w0BAQsFAAOCAQEABnMx25KDhdZOndqfteXl /J01AZRB/cqtdRXvMXv086vpLJ4DmzgF/3R6DrXF4NPq8rqBf5J14jRS5hIBb3yu 0Wwf+maUBy4mGh3l0cD2JQMEl80MdQa3PVQt2L3qBi6poKedA/I7+QNwmyPqsaw5 G6KM0FgoTV3UmPkFVPlfTCIfoyJhkO+KT5GKHVX9mwQdcFhHI0GAJtYp9kUdivcX Wh5N2spea2ZCBHodTgxCRBFJ0Ix8ueV3SR1kYrTbeXcF4kc5tjBLZRxiJJDZMYB9 R89LiRpemCkXVtmEwmBEzBWpOjYV9fWcTOtj7heuRsHUYlBmtQK1iQjgbInv0DY8 vg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:47:21 2025 by rpki-client