This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142183.roa
File: AS142183.roa (raw, json)
Hash identifier: aHtvfwOlsaYBot84wtnhDXgqsdcWbF0kscd8X4b3EW8=
Subject key identifier: 45:23:D3:BE:22:B9:2B:21:5D:96:28:87:D4:DB:C1:CA:C1:49:2F:DF
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 1EE9F11033985937CF31A34657C1D7A96E350E5D
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142183.roa
Signing time: Fri 23 Jan 2026 01:25:00 +0000
ROA not before: Fri 23 Jan 2026 01:20:00 +0000
ROA not after: Fri 22 Jan 2027 01:25:00 +0000
asID: 142183
IP address blocks: 144.79.254.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 21:04:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:e9:f1:10:33:98:59:37:cf:31:a3:46:57:c1:d7:a9:6e:35:0e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Validity
Not Before: Jan 23 01:20:00 2026 GMT
Not After : Jan 22 01:25:00 2027 GMT
Subject: CN=4523D3BE22B92B215D962887D4DBC1CAC1492FDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8c:ad:42:70:94:2f:92:72:ec:e5:02:1e:6e:
a9:78:ee:45:f8:03:e8:f1:90:a4:b0:83:3a:56:99:
38:48:c1:e1:a7:f7:15:27:8e:2d:ff:41:7d:72:e5:
d6:68:06:24:46:1a:5b:29:15:20:a0:d5:0f:99:61:
08:c1:5c:0f:60:fb:10:58:ea:9d:31:2e:a4:91:a6:
3c:b5:14:59:a9:94:fa:05:38:22:ea:33:f1:b8:16:
95:be:61:99:f3:0e:3d:f3:cc:c0:15:f6:68:51:08:
2d:16:8f:c1:91:0f:0b:33:d5:3f:a5:38:24:3a:13:
08:3f:0f:48:4b:c6:ec:a8:65:35:87:d2:41:bb:e6:
d8:06:be:8d:c6:d4:22:a3:53:52:df:e7:e5:39:c4:
66:9a:5c:16:2c:41:bc:bf:39:10:19:3f:97:b8:6c:
31:b1:33:88:a7:84:a9:e0:79:4b:46:5d:7b:8b:ed:
6a:d0:02:3d:7d:51:07:99:69:a9:b6:5b:3e:91:8c:
bf:38:fb:3d:b6:fa:60:ad:d3:d4:44:ce:f2:ea:3f:
e4:1e:11:22:68:62:44:e3:68:22:84:2f:72:f1:b7:
70:75:79:80:70:64:b3:a3:ac:62:51:46:97:76:f9:
f5:c7:e0:05:08:a9:66:aa:79:7a:03:5f:67:02:58:
cb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:23:D3:BE:22:B9:2B:21:5D:96:28:87:D4:DB:C1:CA:C1:49:2F:DF
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142183.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.79.254.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:6a:41:51:6e:57:a9:8b:7a:3d:3f:1d:c5:23:e2:01:1d:0c:
b0:84:e6:0c:5e:66:0e:f8:fb:a2:5d:0e:63:9e:d3:a5:71:c8:
62:89:95:99:ce:e3:3e:d8:c4:fa:a3:61:ce:83:56:2a:8c:d8:
48:90:5d:b6:fb:41:f9:e0:8e:4b:61:3b:e5:34:9b:e4:99:1b:
81:20:5a:1f:e9:29:fe:fb:64:a8:63:c4:64:46:a2:37:05:09:
8a:dc:02:5f:0e:cb:5f:b7:ac:ee:31:b7:cf:19:6e:af:c6:9c:
e4:70:dc:50:7e:31:a8:06:42:de:9a:e5:03:7c:3f:79:3b:72:
d4:ae:92:e5:3b:53:1b:60:79:79:6a:e9:c2:48:7e:c5:2c:a6:
05:28:9e:a7:30:b6:73:62:d0:1f:d7:45:0b:39:54:1f:7d:41:
7b:ba:63:08:9e:f2:9f:00:dc:15:26:ec:87:c5:ad:ea:18:3c:
57:bd:7b:c2:ed:dd:3c:ba:f2:16:98:38:50:9c:2f:f3:86:c5:
55:77:f8:24:ee:0b:f6:a6:cc:8d:4e:b0:b8:6a:31:10:bf:ce:
52:02:69:b3:8b:38:1e:4e:95:34:96:79:0c:54:62:46:99:fb:
e1:4d:b7:6d:a4:41:eb:40:24:d0:a1:ae:0e:08:80:04:8c:3f:
5f:db:7f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:39:07 2026 by rpki-client