This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131727.roa
File: AS131727.roa (raw, json)
Hash identifier: VXL3TRineYBlSWT/+KUiTIG7KSoWnSNWQ6guB4QvgtQ=
Subject key identifier: F1:81:AE:6F:D3:CD:70:0A:CD:20:2E:22:5C:1E:AC:93:C9:C3:52:EA
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 6AC29E76B30C7438E224402F98F1467802509273
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131727.roa
Signing time: Tue 11 Nov 2025 04:00:00 +0000
ROA not before: Tue 11 Nov 2025 03:55:00 +0000
ROA not after: Tue 10 Nov 2026 04:00:00 +0000
asID: 131727
IP address blocks: 103.134.66.0/23 maxlen: 24
2001:df7:bd00::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:c2:9e:76:b3:0c:74:38:e2:24:40:2f:98:f1:46:78:02:50:92:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Nov 11 03:55:00 2025 GMT
Not After : Nov 10 04:00:00 2026 GMT
Subject: CN=F181AE6FD3CD700ACD202E225C1EAC93C9C352EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1e:92:d1:da:bc:94:ab:d5:24:fe:71:ce:99:
1e:d3:e0:77:12:db:3c:8d:7e:99:1e:d4:2b:f2:eb:
fa:b7:e3:a1:c7:11:61:72:87:0c:d4:aa:52:39:a3:
47:d9:9c:d6:5b:40:69:0f:d7:fb:3f:d1:ce:c7:b9:
27:2e:c0:36:63:b0:fb:e6:f9:6f:d2:08:ea:61:63:
ad:ec:ba:a0:05:73:06:cd:b7:9f:6d:4e:1c:2c:13:
0b:f2:90:44:c5:db:bc:98:18:1d:66:21:93:f3:57:
d2:b3:97:2e:c0:31:e4:86:3a:e3:08:45:4e:4a:a3:
6e:9d:68:30:42:b6:61:10:23:b5:13:a1:4f:93:58:
fb:cd:a6:f5:b9:31:91:60:5c:55:dd:cf:df:1e:69:
64:89:be:1e:fd:2f:24:01:8f:96:a0:ec:82:8b:f2:
a7:63:c6:45:21:2c:b5:56:34:04:ed:31:83:76:b9:
1e:c2:15:95:07:2e:ec:a9:e0:ad:46:ab:6e:7d:c1:
45:43:19:86:72:5f:54:0b:f4:26:f4:bb:f6:a2:b0:
71:2e:63:e8:c5:8b:7f:73:35:89:d9:11:76:a2:6a:
ce:5e:bb:9e:01:53:96:6f:0b:f8:86:61:02:f5:a4:
65:22:4b:a7:c6:10:27:12:5a:23:61:55:bc:00:c0:
4d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:81:AE:6F:D3:CD:70:0A:CD:20:2E:22:5C:1E:AC:93:C9:C3:52:EA
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131727.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.134.66.0/23
IPv6:
2001:df7:bd00::/48
Signature Algorithm: sha256WithRSAEncryption
78:b5:6d:3c:39:d1:7b:02:51:26:a6:b4:5a:9a:6b:3a:77:37:
4d:df:aa:9c:cf:78:36:30:99:0a:5c:8d:61:4f:ea:0c:70:47:
7a:cd:84:5c:16:49:5e:d8:03:52:61:c4:f6:2a:eb:14:c7:2a:
90:15:bf:c9:9b:dd:d1:5b:de:5d:03:16:c1:23:63:5a:ef:a0:
fb:7d:bc:3b:36:83:4f:90:bb:f4:29:ec:ab:83:89:77:75:46:
a6:67:04:41:05:ea:32:4d:ed:42:82:b5:4a:60:f7:b8:91:58:
8d:ce:95:b6:d8:48:98:5a:d6:1d:af:ac:60:cb:91:1d:97:d0:
a9:29:e0:ae:cc:f0:41:dd:92:28:8e:fa:80:f9:28:0a:c4:18:
b2:ac:94:33:93:43:ae:df:33:7c:e9:2d:b6:e2:12:09:9f:e9:
7f:c5:9c:6f:ca:95:36:2e:5f:32:6f:a5:83:6b:fe:b9:0e:c3:
f5:60:e3:03:40:00:e3:5d:75:53:e2:c8:41:fb:c6:18:e8:cb:
dc:84:e5:0a:dd:df:fe:cd:94:e5:62:63:cf:a6:1a:e6:9a:af:
f9:7a:2a:23:bd:df:b5:43:03:67:82:e5:54:27:37:f2:68:48:
b2:19:39:f7:c5:81:6c:66:19:65:78:ad:93:e2:54:cf:4d:0c:
8c:aa:9c:0c
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIUasKedrMMdDjiJEAvmPFGeAJQknMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTAzNTUwMFoX
DTI2MTExMDA0MDAwMFowMzExMC8GA1UEAxMoRjE4MUFFNkZEM0NENzAwQUNEMjAy
RTIyNUMxRUFDOTNDOUMzNTJFQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJgektHavJSr1ST+cc6ZHtPgdxLbPI1+mR7UK/Lr+rfjoccRYXKHDNSqUjmj
R9mc1ltAaQ/X+z/Rzse5Jy7ANmOw++b5b9II6mFjrey6oAVzBs23n21OHCwTC/KQ
RMXbvJgYHWYhk/NX0rOXLsAx5IY64whFTkqjbp1oMEK2YRAjtROhT5NY+82m9bkx
kWBcVd3P3x5pZIm+Hv0vJAGPlqDsgovyp2PGRSEstVY0BO0xg3a5HsIVlQcu7Kng
rUarbn3BRUMZhnJfVAv0JvS79qKwcS5j6MWLf3M1idkRdqJqzl67ngFTlm8L+IZh
AvWkZSJLp8YQJxJaI2FVvADATR0CAwEAAaOCAeEwggHdMB0GA1UdDgQWBBTxga5v
081wCs0gLiJcHqyTycNS6jAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzMTcyNy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w
DAQCAAEwBgMEAWeGQjAPBAIAAjAJAwcAIAEN970AMA0GCSqGSIb3DQEBCwUAA4IB
AQB4tW08OdF7AlEmprRamms6dzdN36qcz3g2MJkKXI1hT+oMcEd6zYRcFkle2ANS
YcT2KusUxyqQFb/Jm93RW95dAxbBI2Na76D7fbw7NoNPkLv0Keyrg4l3dUamZwRB
BeoyTe1CgrVKYPe4kViNzpW22EiYWtYdr6xgy5Edl9CpKeCuzPBB3ZIojvqA+SgK
xBiyrJQzk0Ou3zN86S224hIJn+l/xZxvypU2Ll8yb6WDa/65DsP1YOMDQADjXXVT
4shB+8YY6MvchOUK3d/+zZTlYmPPphrmmq/5eiojvd+1QwNnguVUJzfyaEiyGTn3
xYFsZhlleK2T4lTPTQyMqpwM
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:52:05 2025 by rpki-client