This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136129.roa File: AS136129.roa (raw, json) Hash identifier: koP2pHsyHznvwRB0Zq8w23lpB3BNoZLrZ4yBsrJfW1s= Subject key identifier: C4:F5:C3:BB:E4:D3:AA:05:AA:38:BA:97:0C:AE:EC:9D:33:4B:D6:41 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3841FE907CF067A44F741F65A5FB798BA9CA7E91 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136129.roa Signing time: Fri 14 Nov 2025 04:00:00 +0000 ROA not before: Fri 14 Nov 2025 03:55:00 +0000 ROA not after: Fri 13 Nov 2026 04:00:00 +0000 asID: 136129 IP address blocks: 103.98.31.0/24 maxlen: 24 2001:df2:1100::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:41:fe:90:7c:f0:67:a4:4f:74:1f:65:a5:fb:79:8b:a9:ca:7e:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 14 03:55:00 2025 GMT Not After : Nov 13 04:00:00 2026 GMT Subject: CN=C4F5C3BBE4D3AA05AA38BA970CAEEC9D334BD641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:18:13:0a:f1:1a:af:79:be:34:0b:96:72:b5: 2b:3c:c1:97:c4:8b:c7:d0:a7:95:72:d8:79:03:b4: 81:50:63:55:09:e4:96:d0:9a:86:ca:07:72:3f:9d: 82:8c:53:82:73:6a:ad:f3:cf:84:6b:59:3f:61:8b: 3c:68:7d:85:e0:9d:33:74:f2:a0:d7:0e:17:11:0e: 1d:ef:ea:62:06:fb:ac:ff:79:7f:d3:a2:5a:cf:12: 43:f7:f7:a3:3b:8f:ff:25:da:e8:78:6d:c3:dc:54: d4:92:ab:34:e0:e3:81:89:14:7b:8d:5e:e1:3e:75: e3:2b:9e:5e:4f:c3:76:ec:ce:79:47:48:8c:b7:7e: e3:59:a4:28:35:fd:4c:9d:1e:11:a7:4a:8d:b4:f6: cc:f8:aa:47:01:00:43:d7:36:0d:5c:ad:9b:01:7e: a7:30:27:f7:29:5e:3b:6b:55:a7:ec:a1:50:4e:32: a9:5a:ba:66:7b:e1:6c:66:e9:2c:e4:a1:c6:d4:cb: 48:e5:2d:76:8c:65:df:15:93:ff:8d:63:36:6a:83: a9:bb:eb:f0:2c:72:4f:79:22:e9:16:e0:2d:f3:07: f8:62:1f:07:57:59:42:71:ca:67:4f:65:74:74:67: f9:4f:e5:06:72:7f:68:4e:f0:9a:b2:f8:86:9b:1a: 7b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F5:C3:BB:E4:D3:AA:05:AA:38:BA:97:0C:AE:EC:9D:33:4B:D6:41 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136129.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.98.31.0/24 IPv6: 2001:df2:1100::/48 Signature Algorithm: sha256WithRSAEncryption 7e:a1:fc:47:dd:43:9d:ae:5d:a2:a4:48:8f:f3:82:88:01:ca: 77:4d:84:52:f3:e3:01:9d:83:ae:58:32:72:69:45:6e:7f:d8: 3a:f3:dd:46:a7:15:7c:c4:db:94:54:e6:d2:16:ba:8b:35:57: df:b8:d2:b8:5d:99:90:6c:61:dc:e2:cf:c6:57:87:62:35:1f: 7a:0a:4b:d4:86:ba:fe:c1:f3:16:bc:98:43:06:54:3b:f7:b1: 10:f0:28:ee:8e:f1:82:9d:9b:f7:f5:4a:a0:f3:50:55:dc:c2: 35:82:12:b1:06:5e:0b:a6:23:fa:d9:4e:ae:97:f6:e3:33:bf: aa:ab:e1:94:c3:1d:06:c6:fd:9a:83:c2:f5:26:8f:22:8f:c7: 5e:76:dc:c2:b5:ac:e7:0f:3f:5c:02:95:24:4d:bd:0a:81:55: 95:22:5d:1b:83:92:bf:89:25:52:6f:68:82:80:4f:bb:f1:15: ed:24:eb:cf:d6:7e:47:50:6f:8a:0e:0f:09:76:27:a2:1c:3e: f5:01:14:a7:be:50:b1:72:ad:f0:0e:08:2d:ef:6d:9c:70:22: 9c:db:a6:29:c6:fe:29:6d:69:f9:b5:6a:97:eb:f3:d1:ed:46: 2e:0a:21:d6:1d:66:1a:95:4c:3b:a6:63:64:6a:73:d4:42:50: ec:89:28:76 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUOEH+kHzwZ6RPdB9lpft5i6nKfpEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExNDAzNTUwMFoX DTI2MTExMzA0MDAwMFowMzExMC8GA1UEAxMoQzRGNUMzQkJFNEQzQUEwNUFBMzhC QTk3MENBRUVDOUQzMzRCRDY0MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJsYEwrxGq95vjQLlnK1KzzBl8SLx9CnlXLYeQO0gVBjVQnkltCahsoHcj+d goxTgnNqrfPPhGtZP2GLPGh9heCdM3TyoNcOFxEOHe/qYgb7rP95f9OiWs8SQ/f3 ozuP/yXa6Hhtw9xU1JKrNODjgYkUe41e4T514yueXk/DduzOeUdIjLd+41mkKDX9 TJ0eEadKjbT2zPiqRwEAQ9c2DVytmwF+pzAn9yleO2tVp+yhUE4yqVq6ZnvhbGbp LOShxtTLSOUtdoxl3xWT/41jNmqDqbvr8CxyT3ki6RbgLfMH+GIfB1dZQnHKZ09l dHRn+U/lBnJ/aE7wmrL4hpsae08CAwEAAaOCAeEwggHdMB0GA1UdDgQWBBTE9cO7 5NOqBao4upcMruydM0vWQTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNjEyOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAGdiHzAPBAIAAjAJAwcAIAEN8hEAMA0GCSqGSIb3DQEBCwUAA4IB AQB+ofxH3UOdrl2ipEiP84KIAcp3TYRS8+MBnYOuWDJyaUVuf9g6891GpxV8xNuU VObSFrqLNVffuNK4XZmQbGHc4s/GV4diNR96CkvUhrr+wfMWvJhDBlQ797EQ8Cju jvGCnZv39Uqg81BV3MI1ghKxBl4LpiP62U6ul/bjM7+qq+GUwx0Gxv2ag8L1Jo8i j8dedtzCtaznDz9cApUkTb0KgVWVIl0bg5K/iSVSb2iCgE+78RXtJOvP1n5HUG+K Dg8JdieiHD71ARSnvlCxcq3wDggt722ccCKc26Ypxv4pbWn5tWqX6/PR7UYuCiHW HWYalUw7pmNkanPUQlDsiSh2 -----END CERTIFICATE-----Generated at Sat Dec 6 22:51:38 2025 by rpki-client