This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136835.roa File: AS136835.roa (raw, json) Hash identifier: sk3ipWHABFTxCGWVRGnrSqghceRwzp7TRl8QyK67yn0= Subject key identifier: C9:A9:DB:50:44:ED:0E:A9:55:D0:69:4A:F8:4B:04:93:FE:94:D3:72 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0F77E823F0EFCA6A749373A96B9A26371D52B9EE Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136835.roa Signing time: Tue 11 Nov 2025 06:00:11 +0000 ROA not before: Tue 11 Nov 2025 05:55:11 +0000 ROA not after: Tue 10 Nov 2026 06:00:11 +0000 asID: 136835 IP address blocks: 2407:24c0::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:77:e8:23:f0:ef:ca:6a:74:93:73:a9:6b:9a:26:37:1d:52:b9:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 11 05:55:11 2025 GMT Not After : Nov 10 06:00:11 2026 GMT Subject: CN=C9A9DB5044ED0EA955D0694AF84B0493FE94D372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:dd:3a:e9:d5:fd:dd:64:64:9a:be:cf:fd:8a: 39:9a:f5:66:37:7a:1d:5f:05:40:1e:a8:bb:3d:02: 93:c5:72:71:19:90:2e:e9:14:6e:1a:b3:88:50:36: c5:ad:71:4f:17:e1:4c:f6:23:b2:aa:d0:7b:76:20: 9f:fc:8c:40:ac:c5:5d:2c:8d:d7:46:73:ab:54:69: fc:9a:26:49:b1:16:fc:08:cd:66:43:b1:0a:31:f1: 58:8a:66:ad:99:20:e7:c0:b1:52:40:ab:a2:be:74: a5:60:c7:c0:bd:f0:91:cd:09:0a:3a:0c:77:3d:d3: 2d:11:f0:c3:7a:1e:f5:9c:86:4e:4c:bc:c4:37:35: b2:fd:2e:de:16:29:1a:7e:da:78:1b:ce:37:35:b8: 63:c9:1d:40:61:22:03:80:c2:76:44:9d:c5:b5:cf: 9d:86:53:bf:f3:ba:ae:46:59:cd:ac:05:c4:50:36: 40:bf:96:4e:9e:2f:61:8c:d1:41:6f:76:b9:c9:8c: b9:f1:8d:9e:51:b0:38:dd:5e:37:1f:25:d8:3c:46: 90:50:cf:9c:87:07:c4:14:7d:c4:84:7d:6b:68:77: 28:78:b1:f0:93:93:50:21:fe:dc:55:f6:fa:cf:6b: 0e:5d:44:29:3c:af:09:71:49:3c:bd:7f:fc:cd:86: c2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A9:DB:50:44:ED:0E:A9:55:D0:69:4A:F8:4B:04:93:FE:94:D3:72 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:24c0::/32 Signature Algorithm: sha256WithRSAEncryption 11:c2:21:b8:c4:08:ad:51:7c:e2:02:29:ad:f9:df:98:84:4e: b0:6b:04:1c:9f:69:e2:d9:7b:05:80:36:43:21:82:61:10:de: f1:0b:21:16:6b:c4:63:05:52:ba:13:da:2d:55:bf:79:91:54: db:74:c5:cb:9d:f9:36:e4:22:2a:89:45:d3:f3:ed:89:96:3c: c6:12:1a:a9:99:c5:e0:f6:25:d2:32:69:1e:de:3f:db:93:5e: 5d:88:c9:8d:55:8a:8b:3d:22:1f:2f:0d:a5:84:76:4f:cd:ce: 1e:0b:41:86:ff:90:8f:63:37:2b:2d:b9:19:d3:e9:63:0c:e2: 62:a6:6d:5a:4f:a3:57:a3:60:b3:00:23:46:86:ee:f3:7f:21: 14:bb:9e:44:1e:cf:92:0b:4e:c3:ce:33:bc:91:fd:5e:bc:68: 7f:3e:b2:71:01:37:84:fc:dd:10:a4:ef:44:73:7d:f7:bb:1a: f4:63:5f:84:2d:1a:da:ba:48:1c:6b:fe:7b:16:15:c1:07:0f: 32:d8:f7:61:2a:09:85:d2:d4:4e:58:67:14:4c:63:10:11:e0: 88:a5:85:0a:97:d0:75:09:5a:bd:2e:60:39:3b:ae:f6:85:3d: b5:ec:c5:5c:ab:8f:8b:0b:61:28:ac:c5:be:e3:cd:62:3d:39: b2:c8:5f:6c -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUD3foI/Dvymp0k3Opa5omNx1Sue4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTA1NTUxMVoX DTI2MTExMDA2MDAxMVowMzExMC8GA1UEAxMoQzlBOURCNTA0NEVEMEVBOTU1RDA2 OTRBRjg0QjA0OTNGRTk0RDM3MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANndOunV/d1kZJq+z/2KOZr1Zjd6HV8FQB6ouz0Ck8VycRmQLukUbhqziFA2 xa1xTxfhTPYjsqrQe3Ygn/yMQKzFXSyN10Zzq1Rp/JomSbEW/AjNZkOxCjHxWIpm rZkg58CxUkCror50pWDHwL3wkc0JCjoMdz3TLRHww3oe9ZyGTky8xDc1sv0u3hYp Gn7aeBvONzW4Y8kdQGEiA4DCdkSdxbXPnYZTv/O6rkZZzawFxFA2QL+WTp4vYYzR QW92ucmMufGNnlGwON1eNx8l2DxGkFDPnIcHxBR9xIR9a2h3KHix8JOTUCH+3FX2 +s9rDl1EKTyvCXFJPL1//M2GwqcCAwEAAaOCAdEwggHNMB0GA1UdDgQWBBTJqdtQ RO0OqVXQaUr4SwST/pTTcjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNjgzNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8w DQQCAAIwBwMFACQHJMAwDQYJKoZIhvcNAQELBQADggEBABHCIbjECK1RfOICKa35 35iETrBrBByfaeLZewWANkMhgmEQ3vELIRZrxGMFUroT2i1Vv3mRVNt0xcud+Tbk IiqJRdPz7YmWPMYSGqmZxeD2JdIyaR7eP9uTXl2IyY1Vios9Ih8vDaWEdk/Nzh4L QYb/kI9jNystuRnT6WMM4mKmbVpPo1ejYLMAI0aG7vN/IRS7nkQez5ILTsPOM7yR /V68aH8+snEBN4T83RCk70Rzffe7GvRjX4QtGtq6SBxr/nsWFcEHDzLY92EqCYXS 1E5YZxRMYxAR4IilhQqX0HUJWr0uYDk7rvaFPbXsxVyrj4sLYSisxb7jzWI9ObLI X2w= -----END CERTIFICATE-----Generated at Sat Dec 6 21:52:56 2025 by rpki-client