This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136825.roa File: AS136825.roa (raw, json) Hash identifier: eX1UR9dEDg+W+J06wcQSCX09M507DxkJu+aqoWxWSsE= Subject key identifier: 74:33:3C:FA:52:24:C8:9C:92:BF:AA:DA:4C:0F:4F:10:01:58:2A:C1 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4FEB31277670DB00024092D0338F1035B44896A0 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136825.roa Signing time: Tue 11 Nov 2025 06:00:24 +0000 ROA not before: Tue 11 Nov 2025 05:55:24 +0000 ROA not after: Tue 10 Nov 2026 06:00:24 +0000 asID: 136825 IP address blocks: 103.91.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:eb:31:27:76:70:db:00:02:40:92:d0:33:8f:10:35:b4:48:96:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 11 05:55:24 2025 GMT Not After : Nov 10 06:00:24 2026 GMT Subject: CN=74333CFA5224C89C92BFAADA4C0F4F1001582AC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2f:2e:5d:d9:b5:00:3a:ac:63:1e:0d:ed:c3: b2:6c:94:0e:73:51:e2:77:09:1d:d6:e8:c9:77:8d: 28:ee:e1:4f:65:a7:7c:7f:f8:be:77:22:2f:3b:29: 51:22:54:52:b1:55:6c:8f:f4:00:8b:b6:b4:d5:36: 2e:ea:2f:e7:2d:e6:17:67:e0:3a:d6:43:96:80:2c: 0a:3f:47:ca:71:58:1d:1e:f5:2e:04:5a:af:23:41: 75:92:05:0d:9f:95:99:88:03:eb:94:ac:79:db:8d: f4:18:11:5c:d0:6c:d8:0c:39:d1:10:57:25:74:a9: b7:d4:4f:52:7c:61:69:07:83:3d:54:99:fa:b7:6f: 5b:c3:5b:c5:7f:15:4c:24:bc:10:57:8e:ac:d7:69: 70:2c:52:05:78:5c:58:7d:75:c7:15:4b:e2:2d:fc: 0b:b2:f7:bc:6a:71:99:e6:dd:80:fa:e2:a1:98:9d: 97:f4:d8:78:10:46:1b:87:d1:67:38:a5:13:4b:69: ab:7d:b1:39:64:c7:c2:b2:ab:c3:ba:d0:66:fd:39: 12:e4:10:af:f2:a3:05:de:33:4f:34:47:7c:f4:f5: 8e:12:75:61:b9:4d:ea:fb:21:3e:e4:f7:89:08:90: a3:cf:f4:76:ad:62:aa:18:bd:89:eb:f7:48:eb:e2: 4b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:33:3C:FA:52:24:C8:9C:92:BF:AA:DA:4C:0F:4F:10:01:58:2A:C1 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136825.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.91.24.0/22 Signature Algorithm: sha256WithRSAEncryption 8f:2c:34:11:4f:e2:5f:a4:a0:30:a3:f8:cb:73:be:3e:c2:8b: 96:21:6a:bc:58:da:57:0a:00:67:16:79:d0:eb:85:a0:6b:3f: bc:62:80:50:f9:c1:b3:7d:f0:cd:66:50:bf:a4:8e:da:aa:e2: 5f:a8:b6:71:b9:5d:13:3f:82:16:69:bd:ef:3d:cb:ee:52:f4: e7:fa:ac:3b:76:23:e5:fb:0b:38:d7:d4:d3:1b:13:62:8d:4b: 73:c4:be:d2:32:6d:df:0c:6c:fa:97:de:59:5e:56:b1:32:c6: 59:62:69:4c:cb:b2:f2:ff:2f:ee:d7:c4:7c:1d:d7:07:b6:59: b0:2f:c9:4d:ce:ec:88:53:93:e4:61:a8:18:9e:89:5d:c7:5c: 0f:85:2b:ab:64:b6:9f:af:fa:69:91:a8:75:32:ec:59:ee:c9: 1b:53:9c:2e:0c:95:c8:d4:e4:c7:90:3e:a6:d6:dd:df:fb:c2: 5f:72:36:1c:48:7e:0e:2c:c3:39:a4:d5:91:3a:2f:9a:a0:01: 3a:28:60:22:94:86:6b:b2:29:1b:78:ed:34:58:2f:10:1c:07: 7d:52:64:cb:96:dd:97:d8:33:73:97:05:0c:ac:c1:e7:44:a0: e3:ad:4d:03:d6:c0:f3:f3:fe:12:6b:85:ab:31:89:db:35:ec: 18:19:27:0c -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUT+sxJ3Zw2wACQJLQM48QNbRIlqAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTA1NTUyNFoX DTI2MTExMDA2MDAyNFowMzExMC8GA1UEAxMoNzQzMzNDRkE1MjI0Qzg5QzkyQkZB QURBNEMwRjRGMTAwMTU4MkFDMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMIvLl3ZtQA6rGMeDe3DsmyUDnNR4ncJHdboyXeNKO7hT2WnfH/4vnciLzsp USJUUrFVbI/0AIu2tNU2Luov5y3mF2fgOtZDloAsCj9HynFYHR71LgRaryNBdZIF DZ+VmYgD65SseduN9BgRXNBs2Aw50RBXJXSpt9RPUnxhaQeDPVSZ+rdvW8NbxX8V TCS8EFeOrNdpcCxSBXhcWH11xxVL4i38C7L3vGpxmebdgPrioZidl/TYeBBGG4fR ZzilE0tpq32xOWTHwrKrw7rQZv05EuQQr/KjBd4zTzRHfPT1jhJ1YblN6vshPuT3 iQiQo8/0dq1iqhi9iev3SOviS80CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBR0Mzz6 UiTInJK/qtpMD08QAVgqwTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNjgyNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmdbGDANBgkqhkiG9w0BAQsFAAOCAQEAjyw0EU/iX6SgMKP4y3O+ PsKLliFqvFjaVwoAZxZ50OuFoGs/vGKAUPnBs33wzWZQv6SO2qriX6i2cbldEz+C Fmm97z3L7lL05/qsO3Yj5fsLONfU0xsTYo1Lc8S+0jJt3wxs+pfeWV5WsTLGWWJp TMuy8v8v7tfEfB3XB7ZZsC/JTc7siFOT5GGoGJ6JXcdcD4Urq2S2n6/6aZGodTLs We7JG1OcLgyVyNTkx5A+ptbd3/vCX3I2HEh+DizDOaTVkTovmqABOihgIpSGa7Ip G3jtNFgvEBwHfVJky5bdl9gzc5cFDKzB50Sg461NA9bA8/P+EmuFqzGJ2zXsGBkn DA== -----END CERTIFICATE-----Generated at Sun Dec 7 04:34:58 2025 by rpki-client