This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142221.roa File: AS142221.roa (raw, json) Hash identifier: nN4ojv/2oHz+2JUTZJVdUEY/T5Tc4dYfncVbATHz6RY= Subject key identifier: 64:EE:F5:49:AB:76:27:7F:88:81:0A:1A:88:25:92:2D:74:37:D3:D2 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 3E2A3B37ECD432D3F064D93E65880A993F350DFA Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142221.roa Signing time: Wed 21 Jan 2026 10:57:13 +0000 ROA not before: Wed 21 Jan 2026 10:52:13 +0000 ROA not after: Wed 20 Jan 2027 10:57:13 +0000 asID: 142221 IP address blocks: 192.103.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 21:04:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:2a:3b:37:ec:d4:32:d3:f0:64:d9:3e:65:88:0a:99:3f:35:0d:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jan 21 10:52:13 2026 GMT Not After : Jan 20 10:57:13 2027 GMT Subject: CN=64EEF549AB76277F88810A1A8825922D7437D3D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:68:87:69:a3:8f:23:de:d5:31:a9:bd:1b:21: 30:87:a9:9f:e7:64:c1:89:de:97:dc:d5:4b:56:3a: 88:41:3f:44:64:c8:8c:13:09:71:3f:a5:84:4a:f2: 0d:9a:2a:ee:6b:be:f1:0d:e8:6d:bf:e3:a4:5a:11: 84:02:64:4d:18:e7:d8:3b:57:8e:1a:05:f2:2a:fb: 77:93:8e:42:3a:b8:88:ea:0c:9c:12:5a:84:e7:8d: b3:97:14:e0:7b:dd:12:27:11:b7:d3:7d:39:28:74: ca:49:62:8f:ad:93:86:91:4d:af:2a:dd:89:2c:3b: 36:71:d9:12:37:da:3b:51:58:f0:d9:05:0b:05:68: 8b:70:64:e7:2d:37:31:44:73:90:ed:cb:22:91:ea: 9c:5c:0e:50:2a:68:49:9d:f7:a5:e8:ab:57:56:27: 18:4b:d2:09:8f:60:be:7f:d4:e1:1c:27:3e:d9:f7: 5c:7e:bc:7c:63:33:79:35:47:1e:84:79:4f:e4:e9: 65:d5:bc:c2:e0:58:f1:21:eb:1d:d7:50:a3:c5:29: 06:85:39:67:ef:a9:2c:d5:2d:9e:5e:f7:2c:eb:84: b0:83:08:8e:4f:be:a1:13:ae:bd:62:5e:22:f7:c5: d4:7c:a8:0b:8b:d9:8a:f0:a4:10:86:c2:36:38:b7: d4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:EE:F5:49:AB:76:27:7F:88:81:0A:1A:88:25:92:2D:74:37:D3:D2 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142221.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.103.46.0/24 Signature Algorithm: sha256WithRSAEncryption 16:52:18:5e:db:bb:ef:43:8e:07:aa:5a:d9:61:65:63:68:4c: 0e:92:a3:96:5f:62:42:d3:97:b9:25:d5:54:30:4c:36:21:8f: d0:23:25:47:8a:40:14:f5:e8:3c:d2:d7:09:cf:d5:ca:4d:4e: 5c:01:78:0d:51:e0:61:bf:a7:83:1e:6b:8c:03:ae:2b:dc:ef: 5c:59:88:19:9a:37:a5:ff:ed:5a:ce:59:ff:3f:dc:8e:e6:df: 54:55:2e:ff:82:81:04:c9:71:f6:4f:34:f4:5e:97:0f:b1:7a: 6c:b1:78:7e:f3:79:ae:25:94:a2:cc:93:c4:e3:2b:84:9e:21: 00:92:4c:e2:b2:46:79:c7:f4:28:3a:95:2b:1a:2d:b3:a9:9f: cc:ee:eb:91:c2:0b:b4:d7:cc:7a:8d:11:8c:fa:ab:ca:7e:ba: 89:74:53:6a:e9:19:7d:27:2d:e5:eb:d6:0c:9c:23:5e:2b:96: e1:b6:e1:76:79:37:89:96:f0:cc:56:8e:06:0b:7f:e6:4d:f9: ea:84:0a:fa:19:e3:b7:40:9e:fa:3c:09:5b:2d:11:50:1f:ab: 54:09:d7:29:bb:76:67:d3:c6:a5:ae:79:b8:df:70:cf:30:41: b7:04:19:b2:b5:e7:9b:c6:cc:28:5e:3b:dc:93:1a:dc:c9:ec: 9e:81:dd:af -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUPio7N+zUMtPwZNk+ZYgKmT81DfowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDEyMTEwNTIxM1oX DTI3MDEyMDEwNTcxM1owMzExMC8GA1UEAxMoNjRFRUY1NDlBQjc2Mjc3Rjg4ODEw QTFBODgyNTkyMkQ3NDM3RDNEMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMNoh2mjjyPe1TGpvRshMIepn+dkwYnel9zVS1Y6iEE/RGTIjBMJcT+lhEry DZoq7mu+8Q3obb/jpFoRhAJkTRjn2DtXjhoF8ir7d5OOQjq4iOoMnBJahOeNs5cU 4HvdEicRt9N9OSh0yklij62ThpFNryrdiSw7NnHZEjfaO1FY8NkFCwVoi3Bk5y03 MURzkO3LIpHqnFwOUCpoSZ33peirV1YnGEvSCY9gvn/U4RwnPtn3XH68fGMzeTVH HoR5T+TpZdW8wuBY8SHrHddQo8UpBoU5Z++pLNUtnl73LOuEsIMIjk++oROuvWJe IvfF1HyoC4vZivCkEIbCNji31HcCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRk7vVJ q3Ynf4iBChqIJZItdDfT0jAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE0MjIyMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMBnLjANBgkqhkiG9w0BAQsFAAOCAQEAFlIYXtu770OOB6pa2WFl Y2hMDpKjll9iQtOXuSXVVDBMNiGP0CMlR4pAFPXoPNLXCc/Vyk1OXAF4DVHgYb+n gx5rjAOuK9zvXFmIGZo3pf/tWs5Z/z/cjubfVFUu/4KBBMlx9k809F6XD7F6bLF4 fvN5riWUosyTxOMrhJ4hAJJM4rJGecf0KDqVKxots6mfzO7rkcILtNfMeo0RjPqr yn66iXRTaukZfSct5evWDJwjXiuW4bbhdnk3iZbwzFaOBgt/5k356oQK+hnjt0Ce +jwJWy0RUB+rVAnXKbt2Z9PGpa55uN9wzzBBtwQZsrXnm8bMKF473JMa3MnsnoHd rw== -----END CERTIFICATE-----Generated at Mon Jan 26 04:39:05 2026 by rpki-client