This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS138131.roa File: AS138131.roa (raw, json) Hash identifier: /JMiMzQ/MohVibOVUNlu6WzTody2delNC651EMoYk0w= Subject key identifier: 06:AC:09:DC:BD:20:C4:43:1A:33:87:CA:C2:A4:59:F6:25:83:90:6B Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 0213286702E69105914CB1388BD0F34839F522D5 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS138131.roa Signing time: Thu 08 Jan 2026 11:00:02 +0000 ROA not before: Thu 08 Jan 2026 10:55:02 +0000 ROA not after: Thu 07 Jan 2027 11:00:02 +0000 asID: 138131 IP address blocks: 160.187.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Jan 2026 13:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:13:28:67:02:e6:91:05:91:4c:b1:38:8b:d0:f3:48:39:f5:22:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jan 8 10:55:02 2026 GMT Not After : Jan 7 11:00:02 2027 GMT Subject: CN=06AC09DCBD20C4431A3387CAC2A459F62583906B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3c:8b:94:67:c2:6c:65:74:c0:16:fd:6d:e6: 7a:ed:e3:d9:0a:ef:c4:11:c8:e2:00:b4:09:97:cf: b2:95:36:37:cd:9d:a4:cc:63:f4:e9:29:f5:88:d2: 6a:d3:75:d4:44:9f:42:b6:de:0b:c6:70:46:08:90: be:66:26:af:39:4f:79:cd:96:07:e0:4f:d2:08:38: d4:70:ff:04:dd:d6:55:62:62:c7:41:81:d1:4a:80: e8:04:70:40:01:a8:dc:6a:15:ce:c2:b9:d9:ad:dd: a1:c7:fb:2d:40:8e:18:4a:b3:a1:fb:7e:9b:fa:07: fb:f4:2a:28:7a:2e:9a:f5:88:48:79:18:ab:87:60: e6:2f:af:1d:81:02:9f:52:84:fe:80:b0:39:76:61: 92:ba:1b:5e:90:e0:0a:83:45:1f:28:ab:4a:ab:fa: 38:3c:e2:17:63:12:af:c1:2d:a0:86:b6:f5:fb:37: 4b:cf:7a:34:a7:75:de:c1:d2:c0:77:1b:3e:22:41: b6:90:09:91:2e:0a:b6:59:ae:4c:04:a1:a4:3a:fb: 74:5e:62:3a:a9:c0:e1:a9:ed:e6:8b:ad:4a:9c:f4: b2:1b:4a:52:7f:85:ab:db:b4:7d:83:45:bb:a4:94: a9:95:79:11:aa:58:75:75:39:6b:37:9e:b8:5d:4c: 88:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:AC:09:DC:BD:20:C4:43:1A:33:87:CA:C2:A4:59:F6:25:83:90:6B X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS138131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.187.143.0/24 Signature Algorithm: sha256WithRSAEncryption 08:07:5f:90:c0:90:45:2f:fe:b0:52:57:19:3e:cc:a0:ea:b8: 00:6e:f5:33:c5:72:d9:c7:d6:b8:26:7f:12:05:f7:04:5a:eb: 68:27:42:22:48:04:ba:24:2f:02:88:58:64:44:92:3c:d0:96: d0:38:9a:16:38:93:64:0b:9e:33:52:dd:8b:31:65:53:c8:eb: 4c:8b:b5:53:a6:73:20:d6:b0:60:5e:f3:6f:66:cd:ba:cd:7d: 71:45:44:ef:bb:e9:95:91:69:c8:d1:6c:b0:7f:e3:32:6b:e4: 8b:d1:95:0c:f7:a7:6a:f7:92:f7:99:13:43:9b:6d:cb:24:57: 2b:70:4f:45:4d:d4:0d:44:57:4b:30:de:36:15:e9:bf:36:a2: 64:32:10:eb:e6:40:6b:a5:e9:9e:a8:2b:32:39:ad:d7:39:00: 4d:33:bc:73:80:e0:6a:2d:c9:3d:99:b7:f8:37:8a:8a:ef:be: f4:a5:f5:56:94:38:43:4b:44:8b:78:c1:05:80:19:d9:c3:04: 1e:59:2d:4f:78:2b:ff:3a:53:b1:38:6b:5d:d8:ba:09:3f:fa: 62:ef:ef:2f:84:9a:79:fe:43:f3:3b:06:ab:68:9d:cc:8e:de: c5:20:27:0b:bb:16:b4:5c:00:4c:53:98:9d:42:94:92:ea:8d: e2:5f:90:79 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUAhMoZwLmkQWRTLE4i9DzSDn1ItUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDEwODEwNTUwMloX DTI3MDEwNzExMDAwMlowMzExMC8GA1UEAxMoMDZBQzA5RENCRDIwQzQ0MzFBMzM4 N0NBQzJBNDU5RjYyNTgzOTA2QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMg8i5RnwmxldMAW/W3meu3j2QrvxBHI4gC0CZfPspU2N82dpMxj9Okp9YjS atN11ESfQrbeC8ZwRgiQvmYmrzlPec2WB+BP0gg41HD/BN3WVWJix0GB0UqA6ARw QAGo3GoVzsK52a3docf7LUCOGEqzoft+m/oH+/QqKHoumvWISHkYq4dg5i+vHYEC n1KE/oCwOXZhkrobXpDgCoNFHyirSqv6ODziF2MSr8EtoIa29fs3S896NKd13sHS wHcbPiJBtpAJkS4KtlmuTAShpDr7dF5iOqnA4ant5outSpz0shtKUn+Fq9u0fYNF u6SUqZV5EapYdXU5azeeuF1MiK0CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQGrAnc vSDEQxozh8rCpFn2JYOQazAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzEzODEzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKC7jzANBgkqhkiG9w0BAQsFAAOCAQEACAdfkMCQRS/+sFJXGT7M oOq4AG71M8Vy2cfWuCZ/EgX3BFrraCdCIkgEuiQvAohYZESSPNCW0DiaFjiTZAue M1LdizFlU8jrTIu1U6ZzINawYF7zb2bNus19cUVE77vplZFpyNFssH/jMmvki9GV DPenaveS95kTQ5ttyyRXK3BPRU3UDURXSzDeNhXpvzaiZDIQ6+ZAa6XpnqgrMjmt 1zkATTO8c4Dgai3JPZm3+DeKiu++9KX1VpQ4Q0tEi3jBBYAZ2cMEHlktT3gr/zpT sThrXdi6CT/6Yu/vL4Saef5D8zsGq2idzI7exSAnC7sWtFwATFOYnUKUkuqN4l+Q eQ== -----END CERTIFICATE-----Generated at Mon Jan 26 06:04:16 2026 by rpki-client