This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136842.roa File: AS136842.roa (raw, json) Hash identifier: /T35kgGxp9R6k2hxnV8NYGxlIIeISc2U9NIR1D88aLA= Subject key identifier: 3E:14:A4:8D:06:F9:21:B5:13:AE:8B:17:EA:5C:FC:10:2F:BA:01:67 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 44DC6735AB3D2389E495E067CCAFC3A7573B3BC7 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136842.roa Signing time: Tue 11 Nov 2025 06:00:07 +0000 ROA not before: Tue 11 Nov 2025 05:55:07 +0000 ROA not after: Tue 10 Nov 2026 06:00:07 +0000 asID: 136842 IP address blocks: 103.100.246.0/24 maxlen: 24 103.100.247.0/24 maxlen: 24 2405:bc0::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:dc:67:35:ab:3d:23:89:e4:95:e0:67:cc:af:c3:a7:57:3b:3b:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 11 05:55:07 2025 GMT Not After : Nov 10 06:00:07 2026 GMT Subject: CN=3E14A48D06F921B513AE8B17EA5CFC102FBA0167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ba:0f:e9:77:ff:7d:0e:81:56:a1:8f:31:43: 03:f8:6e:a1:30:6e:3d:a9:36:da:09:81:3d:87:b1: a7:36:54:a2:1b:15:4f:05:8b:1a:88:28:d7:e0:ed: 80:9c:6b:74:ba:c3:0d:c9:60:5b:d0:c8:ae:03:f2: 45:3a:dd:05:a9:a7:0c:98:c5:dd:43:66:be:6b:fc: 3f:1e:aa:a5:2d:3b:77:08:4e:1e:b9:6b:1d:74:95: 08:a0:44:ea:fe:dd:8b:7d:24:26:f4:94:e7:8e:86: 74:97:0c:e8:3e:84:50:4a:62:43:40:f4:1e:5c:b4: 4b:36:68:79:b3:a9:ab:68:db:79:11:9a:74:22:a3: 33:83:f6:4d:c2:db:09:a7:ce:f7:72:65:5e:ee:0f: 24:e3:90:a9:d3:78:bc:47:cb:b9:2b:43:fa:eb:13: 78:c5:81:f9:90:2a:22:d8:ad:34:89:44:2f:04:74: 36:db:66:3d:e2:d0:8c:91:0e:f8:29:82:c2:dc:d2: 12:7f:e6:a4:dc:ec:01:9c:52:2e:7f:2f:0f:74:75: 56:c0:75:63:12:73:32:c0:2b:50:d9:e5:82:02:18: 67:22:0d:25:fd:a0:15:9f:9f:b6:df:48:67:3b:51: a9:7d:2a:a1:34:01:48:8f:49:d8:ff:7e:9a:b4:0f: 7a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:14:A4:8D:06:F9:21:B5:13:AE:8B:17:EA:5C:FC:10:2F:BA:01:67 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136842.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.100.246.0/23 IPv6: 2405:bc0::/32 Signature Algorithm: sha256WithRSAEncryption 66:d2:4f:8e:db:56:ea:f3:16:ce:65:40:7c:74:6b:4e:ce:64: b7:34:fd:77:8a:3f:ea:ee:cb:5b:0a:9a:7a:f3:7e:5b:dd:67: b5:27:58:40:82:45:da:ef:74:3c:f7:2f:37:80:cb:17:69:13: 3d:6e:1a:ea:0f:7f:c5:76:6e:ef:0f:07:fe:99:7e:27:51:f5: 45:73:20:d9:b6:f1:28:33:51:bb:7c:45:6f:e5:66:87:2b:a2: 19:38:c6:94:72:fe:d8:e0:b5:d2:a1:b5:b5:70:5b:ce:1e:ee: 70:e7:a3:a1:d0:72:3a:d4:0e:0f:72:4a:ab:37:32:af:76:37: 47:42:85:5d:37:2e:15:75:96:7f:c6:41:7b:33:f8:a7:b6:e8: 7c:b7:fa:67:c3:d6:a1:eb:0b:86:aa:45:87:b9:c6:75:97:bc: ae:58:91:1f:58:3e:22:54:95:b6:5b:98:3c:87:07:e1:1a:ab: a9:cb:0b:fa:3e:06:f6:e0:a3:35:f9:1e:5f:e7:ee:42:3f:63: 86:aa:9d:5b:8b:1d:6e:e7:bb:c6:b3:1e:89:30:fc:3c:14:fd: af:40:59:82:25:95:38:ec:60:15:73:34:c2:92:8e:52:2d:24: 94:0e:08:35:1d:c5:62:0f:a0:d2:ac:32:48:e1:6f:02:62:3e: 94:f8:d4:25 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIURNxnNas9I4nkleBnzK/Dp1c7O8cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTA1NTUwN1oX DTI2MTExMDA2MDAwN1owMzExMC8GA1UEAxMoM0UxNEE0OEQwNkY5MjFCNTEzQUU4 QjE3RUE1Q0ZDMTAyRkJBMDE2NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOS6D+l3/30OgVahjzFDA/huoTBuPak22gmBPYexpzZUohsVTwWLGogo1+Dt gJxrdLrDDclgW9DIrgPyRTrdBamnDJjF3UNmvmv8Px6qpS07dwhOHrlrHXSVCKBE 6v7di30kJvSU546GdJcM6D6EUEpiQ0D0Hly0SzZoebOpq2jbeRGadCKjM4P2TcLb CafO93JlXu4PJOOQqdN4vEfLuStD+usTeMWB+ZAqItitNIlELwR0NttmPeLQjJEO +CmCwtzSEn/mpNzsAZxSLn8vD3R1VsB1YxJzMsArUNnlggIYZyINJf2gFZ+ftt9I ZztRqX0qoTQBSI9J2P9+mrQPevECAwEAAaOCAd8wggHbMB0GA1UdDgQWBBQ+FKSN BvkhtROuixfqXPwQL7oBZzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNjg0Mi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0w DAQCAAEwBgMEAWdk9jANBAIAAjAHAwUAJAULwDANBgkqhkiG9w0BAQsFAAOCAQEA ZtJPjttW6vMWzmVAfHRrTs5ktzT9d4o/6u7LWwqaevN+W91ntSdYQIJF2u90PPcv N4DLF2kTPW4a6g9/xXZu7w8H/pl+J1H1RXMg2bbxKDNRu3xFb+VmhyuiGTjGlHL+ 2OC10qG1tXBbzh7ucOejodByOtQOD3JKqzcyr3Y3R0KFXTcuFXWWf8ZBezP4p7bo fLf6Z8PWoesLhqpFh7nGdZe8rliRH1g+IlSVtluYPIcH4RqrqcsL+j4G9uCjNfke X+fuQj9jhqqdW4sdbue7xrMeiTD8PBT9r0BZgiWVOOxgFXM0wpKOUi0klA4INR3F Yg+g0qwySOFvAmI+lPjUJQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:53:16 2025 by rpki-client