This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS132641.roa File: AS132641.roa (raw, json) Hash identifier: DN5/0WWKo6KLJbP5MpKijfdZJQd9uAEHtAmvGyn4Mtg= Subject key identifier: 24:81:8A:E3:37:00:B6:2A:8D:22:CC:B2:A1:5C:5D:9C:D1:84:23:76 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1A6126CE54A8750B24FBF1EFFF9497F2478FA32A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS132641.roa Signing time: Tue 06 Jan 2026 07:00:00 +0000 ROA not before: Tue 06 Jan 2026 06:55:00 +0000 ROA not after: Tue 05 Jan 2027 07:00:00 +0000 asID: 132641 IP address blocks: 43.251.96.0/22 maxlen: 24 103.19.108.0/22 maxlen: 24 103.132.140.0/22 maxlen: 24 103.145.218.0/23 maxlen: 24 103.145.224.0/23 maxlen: 24 103.145.240.0/23 maxlen: 24 103.145.244.0/23 maxlen: 24 2406:a500:c3e7::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:61:26:ce:54:a8:75:0b:24:fb:f1:ef:ff:94:97:f2:47:8f:a3:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 6 06:55:00 2026 GMT Not After : Jan 5 07:00:00 2027 GMT Subject: CN=24818AE33700B62A8D22CCB2A15C5D9CD1842376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7d:43:33:08:02:84:a5:eb:80:1e:24:e5:96: aa:31:f1:9d:fd:b5:3d:ad:7e:0a:24:d8:e0:99:1d: e1:69:75:eb:8a:32:3f:33:e2:50:45:c2:18:5e:6f: ec:b2:ea:76:1a:a7:cb:38:33:0f:82:98:ce:2d:d6: cd:47:0c:0a:cd:e1:7d:4f:3d:0b:46:e6:53:70:96: f8:f4:7f:db:7e:82:77:cd:37:82:7a:79:e8:62:14: 21:b7:88:d4:1e:c2:cb:17:a4:22:15:fe:ef:a2:03: f8:07:a4:81:d3:9b:f0:98:95:e2:10:e2:cc:eb:b8: b4:5d:a6:9e:2b:fb:3b:71:50:9a:de:10:40:95:29: f8:96:86:f5:49:7d:61:64:96:85:b3:af:b4:75:79: 3e:3c:63:3c:ff:2a:33:b7:0d:29:3f:06:4a:b5:71: 56:80:41:a0:5d:4f:66:0c:78:26:fc:a1:52:06:76: 31:a7:d1:18:64:26:f9:dc:9b:ae:42:0f:2e:b2:c3: ba:fd:f4:36:0c:86:54:7f:47:40:8b:26:6e:0a:47: 50:a3:90:1a:ed:87:f1:0f:27:14:eb:db:20:3d:ba: 69:90:85:3c:d1:5b:7b:a5:ef:dd:f2:f6:8f:84:91: e0:50:eb:d0:8d:7f:45:30:2e:dc:65:c1:1c:73:d7: fa:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:81:8A:E3:37:00:B6:2A:8D:22:CC:B2:A1:5C:5D:9C:D1:84:23:76 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS132641.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.251.96.0/22 103.19.108.0/22 103.132.140.0/22 103.145.218.0/23 103.145.224.0/23 103.145.240.0/23 103.145.244.0/23 IPv6: 2406:a500:c3e7::/48 Signature Algorithm: sha256WithRSAEncryption 6e:66:4b:8d:e0:a9:fc:a5:dd:c4:00:a7:3c:2e:3b:21:8a:09: e9:ed:f8:e4:3d:a2:30:3c:5b:57:13:d6:dc:f7:30:09:7d:4b: 18:34:84:2c:aa:5c:41:78:cb:d3:48:48:38:4b:ff:e6:a1:f8: 9e:c1:ad:ad:88:75:91:35:91:4d:cd:34:19:b8:b6:65:8d:94: d7:96:aa:16:2d:4a:a6:86:f1:a0:91:10:21:2c:6a:c4:89:1b: 06:d9:31:9f:28:2e:cf:a3:d2:67:ee:77:4f:e8:ff:95:0b:4f: 81:4e:28:b5:bd:0b:0a:bb:95:b0:de:fc:82:25:65:0a:74:ea: b2:42:a6:10:49:fe:c0:bc:38:70:e3:9e:b2:c2:7a:de:13:4d: 7b:4b:a7:39:35:6f:3c:bb:a1:01:ca:a8:de:de:e3:a3:d2:a4: 4b:f7:7e:0c:f8:78:4b:44:68:5a:5f:d5:80:74:11:6a:d1:92: 53:c4:11:b7:6b:58:65:22:03:0b:06:8e:80:ec:91:1f:00:d5: 15:87:ea:a0:76:cc:ea:ee:b7:38:2d:fd:86:22:af:2f:ec:ad: ad:87:14:dd:be:4c:c0:30:af:d8:46:0e:0d:9f:db:44:ad:d0: 6e:94:dc:f8:6f:e9:03:6a:ba:38:5a:85:ab:9e:94:5e:0f:16: 46:92:f8:8c -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgIUGmEmzlSodQsk+/Hv/5SX8kePoyowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDEwNjA2NTUwMFoX DTI3MDEwNTA3MDAwMFowMzExMC8GA1UEAxMoMjQ4MThBRTMzNzAwQjYyQThEMjJD Q0IyQTE1QzVEOUNEMTg0MjM3NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMF9QzMIAoSl64AeJOWWqjHxnf21Pa1+CiTY4Jkd4Wl164oyPzPiUEXCGF5v 7LLqdhqnyzgzD4KYzi3WzUcMCs3hfU89C0bmU3CW+PR/236Cd803gnp56GIUIbeI 1B7CyxekIhX+76ID+AekgdOb8JiV4hDizOu4tF2mniv7O3FQmt4QQJUp+JaG9Ul9 YWSWhbOvtHV5PjxjPP8qM7cNKT8GSrVxVoBBoF1PZgx4JvyhUgZ2MafRGGQm+dyb rkIPLrLDuv30NgyGVH9HQIsmbgpHUKOQGu2H8Q8nFOvbID26aZCFPNFbe6Xv3fL2 j4SR4FDr0I1/RTAu3GXBHHPX+hMCAwEAAaOCAgUwggIBMB0GA1UdDgQWBBQkgYrj NwC2Ko0izLKhXF2c0YQjdjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzMjY0MS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBUBggrBgEFBQcBBwEB/wRFMEMw MAQCAAEwKgMEAiv7YAMEAmcTbAMEAmeEjAMEAWeR2gMEAWeR4AMEAWeR8AMEAWeR 9DAPBAIAAjAJAwcAJAalAMPnMA0GCSqGSIb3DQEBCwUAA4IBAQBuZkuN4Kn8pd3E AKc8Ljshignp7fjkPaIwPFtXE9bc9zAJfUsYNIQsqlxBeMvTSEg4S//mofiewa2t iHWRNZFNzTQZuLZljZTXlqoWLUqmhvGgkRAhLGrEiRsG2TGfKC7Po9Jn7ndP6P+V C0+BTii1vQsKu5Ww3vyCJWUKdOqyQqYQSf7AvDhw456ywnreE017S6c5NW88u6EB yqje3uOj0qRL934M+HhLRGhaX9WAdBFq0ZJTxBG3a1hlIgMLBo6A7JEfANUVh+qg dszq7rc4Lf2GIq8v7K2thxTdvkzAMK/YRg4Nn9tErdBulNz4b+kDaro4WoWrnpRe DxZGkviM -----END CERTIFICATE-----Generated at Sun Jan 25 18:24:56 2026 by rpki-client