This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS141898.roa File: AS141898.roa (raw, json) Hash identifier: wmaUM9R4YhEFHK/oPXy+xcTVtNOgyBa8ejmZH4x4DQc= Subject key identifier: 0B:C1:07:C3:3C:DB:5C:C7:AF:73:9C:05:81:28:C2:09:17:5F:46:26 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 074766148F8E4A5E2E1EF52BF7E08D648027998C Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS141898.roa Signing time: Thu 08 Jan 2026 11:00:09 +0000 ROA not before: Thu 08 Jan 2026 10:55:09 +0000 ROA not after: Thu 07 Jan 2027 11:00:09 +0000 asID: 141898 IP address blocks: 157.10.222.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 21:04:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:47:66:14:8f:8e:4a:5e:2e:1e:f5:2b:f7:e0:8d:64:80:27:99:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jan 8 10:55:09 2026 GMT Not After : Jan 7 11:00:09 2027 GMT Subject: CN=0BC107C33CDB5CC7AF739C058128C209175F4626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:28:e1:70:95:b2:88:4b:ee:91:07:ea:83:a3: 85:af:a1:3e:88:d2:7c:bd:7e:e2:71:06:e8:54:13: ee:9d:36:02:82:a3:0a:49:93:c6:ac:4e:d1:e5:fe: 24:42:13:da:55:a2:af:b9:6c:12:09:fc:ad:76:ca: 20:96:41:bf:fa:d4:6f:3a:e3:c1:9d:37:8d:ad:6d: 5c:d0:cb:4a:14:91:18:92:4c:55:d5:de:27:df:23: 8f:29:a2:cb:3e:06:93:c9:08:39:e1:b2:78:b5:74: 15:c1:c8:95:f2:58:95:a6:57:62:ec:df:53:d1:50: fa:db:82:49:08:d9:e3:aa:57:91:f3:11:69:e8:86: 61:7c:51:9b:01:6c:0f:ba:84:1a:65:14:d4:4f:98: ba:21:c6:4c:6c:23:e5:78:06:0b:1d:9d:75:9a:2b: 38:67:1b:7c:76:0e:4a:91:be:66:1d:f3:db:15:5d: 24:66:1c:98:79:08:a6:e1:a1:86:96:56:9c:d7:ea: 9d:11:38:d3:df:68:21:fe:b2:2c:a6:a9:30:60:bc: 98:55:b3:3c:16:84:5a:cf:f4:37:6e:ef:39:dc:35: d9:e9:4b:3e:7b:01:50:72:ac:70:31:70:3c:42:54: 80:21:37:e4:5b:17:1d:04:8a:ab:f1:f9:3f:4c:11: c6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C1:07:C3:3C:DB:5C:C7:AF:73:9C:05:81:28:C2:09:17:5F:46:26 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS141898.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.10.222.0/23 Signature Algorithm: sha256WithRSAEncryption 67:90:6c:95:76:6e:bb:c7:70:c6:e3:c4:e3:2a:6a:04:01:26: da:9b:dc:14:bb:e0:fb:d5:c4:bc:dc:7b:d0:74:68:2b:1f:ba: 5f:7a:a4:18:f1:8f:da:7d:09:24:c2:ed:eb:90:a2:fc:d4:8a: 38:b7:19:cf:52:8a:fb:f7:1e:fa:4f:00:5f:39:25:21:28:85: ba:87:59:fe:9d:b9:55:c6:a6:65:bf:df:0c:08:b1:66:83:09: c8:d7:72:00:3f:44:c5:a4:ae:66:1c:2a:b4:16:d1:fd:d4:d1: 0c:0f:5f:db:83:5c:1c:5b:ff:9e:b4:62:cc:e0:c1:c2:e1:8f: 89:a9:47:0a:67:50:b9:a7:0d:86:6d:f5:54:56:70:9b:3c:47: c7:61:ed:86:d4:68:f3:16:33:63:e7:fd:13:1c:97:fe:26:f9: 06:41:89:51:6d:83:21:bf:16:68:4e:01:73:bf:ad:4b:a8:5a: 5d:68:63:81:0f:1a:a9:cd:ea:26:38:5c:c9:13:b0:12:af:20: ec:ff:7a:7c:15:8e:e8:ff:4b:59:b6:f0:d1:63:19:f5:94:96: a9:7f:42:e5:9f:df:b2:75:41:ba:d7:89:aa:96:c0:f1:78:a5: b3:a9:c8:6e:11:33:73:b8:fe:c0:8a:14:1e:07:c7:03:90:a0: ce:f8:a2:8b -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUB0dmFI+OSl4uHvUr9+CNZIAnmYwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDEwODEwNTUwOVoX DTI3MDEwNzExMDAwOVowMzExMC8GA1UEAxMoMEJDMTA3QzMzQ0RCNUNDN0FGNzM5 QzA1ODEyOEMyMDkxNzVGNDYyNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMIo4XCVsohL7pEH6oOjha+hPojSfL1+4nEG6FQT7p02AoKjCkmTxqxO0eX+ JEIT2lWir7lsEgn8rXbKIJZBv/rUbzrjwZ03ja1tXNDLShSRGJJMVdXeJ98jjymi yz4Gk8kIOeGyeLV0FcHIlfJYlaZXYuzfU9FQ+tuCSQjZ46pXkfMRaeiGYXxRmwFs D7qEGmUU1E+YuiHGTGwj5XgGCx2ddZorOGcbfHYOSpG+Zh3z2xVdJGYcmHkIpuGh hpZWnNfqnRE4099oIf6yLKapMGC8mFWzPBaEWs/0N27vOdw12elLPnsBUHKscDFw PEJUgCE35FsXHQSKq/H5P0wRxisCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQLwQfD PNtcx69znAWBKMIJF19GJjAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE0MTg5OC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAZ0K3jANBgkqhkiG9w0BAQsFAAOCAQEAZ5BslXZuu8dwxuPE4ypq BAEm2pvcFLvg+9XEvNx70HRoKx+6X3qkGPGP2n0JJMLt65Ci/NSKOLcZz1KK+/ce +k8AXzklISiFuodZ/p25VcamZb/fDAixZoMJyNdyAD9ExaSuZhwqtBbR/dTRDA9f 24NcHFv/nrRizODBwuGPialHCmdQuacNhm31VFZwmzxHx2HthtRo8xYzY+f9ExyX /ib5BkGJUW2DIb8WaE4Bc7+tS6haXWhjgQ8aqc3qJjhcyROwEq8g7P96fBWO6P9L Wbbw0WMZ9ZSWqX9C5Z/fsnVButeJqpbA8Xils6nIbhEzc7j+wIoUHgfHA5Cgzvii iw== -----END CERTIFICATE-----Generated at Sun Jan 25 21:41:22 2026 by rpki-client