This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138069.roa File: AS138069.roa (raw, json) Hash identifier: do7KcRt74iiVWH42XWdOwt7tMswvgWCwvbJNJCkIQW0= Subject key identifier: B0:BA:30:EB:1D:1D:61:1E:0A:ED:95:A1:6B:7E:69:3C:5A:02:EE:DA Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2CC7074CBA969E58727A69BCB2111DE80E000E3A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138069.roa Signing time: Tue 11 Nov 2025 06:00:24 +0000 ROA not before: Tue 11 Nov 2025 05:55:24 +0000 ROA not after: Tue 10 Nov 2026 06:00:24 +0000 asID: 138069 IP address blocks: 103.123.16.0/22 maxlen: 24 2001:df6:bd00::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:c7:07:4c:ba:96:9e:58:72:7a:69:bc:b2:11:1d:e8:0e:00:0e:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 11 05:55:24 2025 GMT Not After : Nov 10 06:00:24 2026 GMT Subject: CN=B0BA30EB1D1D611E0AED95A16B7E693C5A02EEDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e5:81:ec:0b:9c:f8:cd:03:3b:d8:ed:8b:98: 86:cd:78:6b:1e:e2:92:c9:d2:fc:e7:d3:6b:05:22: 89:56:8a:df:f8:42:61:23:31:97:0b:aa:1a:df:88: 62:e9:f9:54:03:eb:39:39:a0:fb:d1:5c:92:dc:9e: c7:18:7f:70:21:b3:42:97:66:b0:ed:96:5f:7e:6f: b5:24:27:6e:0e:e6:cb:08:9c:ee:12:0f:c8:4d:26: ed:1e:0b:3b:39:b0:33:01:4e:d1:6b:bc:da:70:d4: 1b:55:62:47:d9:6f:d2:6a:10:ec:ac:e0:01:25:8f: 65:cc:c6:0e:fa:13:d1:24:02:f3:42:d0:e3:e9:33: a1:df:db:f9:cd:97:22:1c:cc:59:d1:41:73:e9:51: b6:4b:3d:2f:64:21:d3:92:88:ff:51:68:64:92:ce: df:9b:28:33:45:47:45:1b:cc:34:90:32:53:88:59: 9d:11:76:99:45:79:25:2d:0c:0b:7c:ff:b9:1f:2f: 52:87:b4:61:67:99:78:c6:9f:62:50:b1:dc:88:38: 1c:6c:07:b8:52:c6:14:bd:2e:dc:7b:7e:b3:b7:cf: b6:8a:9f:d2:d0:e3:da:8d:4e:87:74:13:38:6d:fb: 36:3f:02:5d:37:c7:03:30:f5:5f:da:10:6b:d7:cf: e4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:BA:30:EB:1D:1D:61:1E:0A:ED:95:A1:6B:7E:69:3C:5A:02:EE:DA X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138069.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.123.16.0/22 IPv6: 2001:df6:bd00::/48 Signature Algorithm: sha256WithRSAEncryption 29:a8:f5:aa:bf:2f:29:08:e1:76:74:36:09:44:c8:a7:ec:45: 0b:1d:14:70:9a:cc:10:47:c7:e8:0e:f6:d8:c0:44:ae:4b:c5: 47:35:85:22:30:90:62:ba:e5:75:45:c0:29:39:db:f1:ba:9d: 4e:71:6d:b1:2a:e7:ae:a4:d0:2d:5c:1b:b0:90:86:c7:58:4a: 2f:f6:d6:4f:13:b0:1c:88:b3:32:3f:34:c4:b3:bd:3b:5c:da: 56:94:46:8b:35:31:65:23:c1:4e:68:83:d7:d3:c3:16:30:53: 30:68:9f:26:ed:0c:02:16:20:cc:f8:7a:6f:f7:54:e3:ce:69: 1c:a9:a3:7f:68:02:cb:92:ab:d9:f3:0e:a3:eb:1c:cc:2f:17: 29:54:b0:81:b5:25:d6:9e:7f:2a:93:30:d1:73:f0:77:11:a4: ec:da:86:1c:cc:3d:ae:7e:7e:d8:c2:b6:31:5d:65:54:39:8c: b5:f3:77:23:48:83:e7:74:e9:a1:68:99:b1:2f:52:cb:34:30: 8d:1a:42:4c:de:9b:6e:8b:7e:d8:be:aa:98:39:ea:19:66:3f: 2f:46:8f:a2:5f:a4:34:61:54:bf:48:a9:a4:56:3a:d5:71:84: f0:2b:4e:9f:e0:61:eb:0a:e4:b5:2b:cc:2e:0f:4a:6a:9d:d8: c9:39:6f:2b -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIULMcHTLqWnlhyemm8shEd6A4ADjowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTA1NTUyNFoX DTI2MTExMDA2MDAyNFowMzExMC8GA1UEAxMoQjBCQTMwRUIxRDFENjExRTBBRUQ5 NUExNkI3RTY5M0M1QTAyRUVEQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMjlgewLnPjNAzvY7YuYhs14ax7iksnS/OfTawUiiVaK3/hCYSMxlwuqGt+I Yun5VAPrOTmg+9Fcktyexxh/cCGzQpdmsO2WX35vtSQnbg7mywic7hIPyE0m7R4L OzmwMwFO0Wu82nDUG1ViR9lv0moQ7KzgASWPZczGDvoT0SQC80LQ4+kzod/b+c2X IhzMWdFBc+lRtks9L2Qh05KI/1FoZJLO35soM0VHRRvMNJAyU4hZnRF2mUV5JS0M C3z/uR8vUoe0YWeZeMafYlCx3Ig4HGwHuFLGFL0u3Ht+s7fPtoqf0tDj2o1Oh3QT OG37Nj8CXTfHAzD1X9oQa9fP5EUCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBSwujDr HR1hHgrtlaFrfmk8WgLu2jAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzODA2OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAmd7EDAPBAIAAjAJAwcAIAEN9r0AMA0GCSqGSIb3DQEBCwUAA4IB AQApqPWqvy8pCOF2dDYJRMin7EULHRRwmswQR8foDvbYwESuS8VHNYUiMJBiuuV1 RcApOdvxup1OcW2xKueupNAtXBuwkIbHWEov9tZPE7AciLMyPzTEs707XNpWlEaL NTFlI8FOaIPX08MWMFMwaJ8m7QwCFiDM+Hpv91TjzmkcqaN/aALLkqvZ8w6j6xzM LxcpVLCBtSXWnn8qkzDRc/B3EaTs2oYczD2ufn7YwrYxXWVUOYy183cjSIPndOmh aJmxL1LLNDCNGkJM3ptui37YvqqYOeoZZj8vRo+iX6Q0YVS/SKmkVjrVcYTwK06f 4GHrCuS1K8wuD0pqndjJOW8r -----END CERTIFICATE-----Generated at Sat Dec 6 22:51:49 2025 by rpki-client