This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138806.roa
File: AS138806.roa (raw, json)
Hash identifier: wM41Dfr9A8vfz+5GJEpZOTze7KUmQVJJnrMN9mqvii0=
Subject key identifier: B9:E1:84:AE:2E:AE:8A:FF:B8:F4:9A:B8:14:27:19:08:64:8F:C6:92
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 0F63B5126D107ED36D2CD42FD519F129495FC40C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138806.roa
Signing time: Thu 04 Dec 2025 02:58:08 +0000
ROA not before: Thu 04 Dec 2025 02:53:08 +0000
ROA not after: Thu 03 Dec 2026 02:58:08 +0000
asID: 138806
IP address blocks: 103.135.180.0/22 maxlen: 24
2001:df7:ed00::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:63:b5:12:6d:10:7e:d3:6d:2c:d4:2f:d5:19:f1:29:49:5f:c4:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Dec 4 02:53:08 2025 GMT
Not After : Dec 3 02:58:08 2026 GMT
Subject: CN=B9E184AE2EAE8AFFB8F49AB814271908648FC692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:58:88:11:80:e0:15:13:99:85:a4:e2:62:bb:
86:01:dd:b0:6a:68:a9:f9:91:2a:8a:d6:03:e3:de:
14:f9:34:e5:ca:89:27:3a:72:0c:35:9a:d3:c2:fc:
84:96:5d:e6:9d:df:49:0d:cd:1d:2f:d2:64:27:b0:
30:4e:55:b8:e8:4e:e4:61:eb:0e:f6:2c:d3:eb:c0:
76:69:b9:09:60:34:94:f0:d3:e4:74:9b:5d:71:25:
e4:34:7e:ba:62:97:a1:3a:92:65:ae:e4:b9:a1:b9:
15:a5:74:c8:a4:36:d5:61:32:65:5b:e7:23:13:31:
20:93:51:08:6d:83:cd:3a:b7:d5:6f:c4:ff:22:ec:
55:95:32:2c:85:f6:ae:2f:64:27:fc:b1:68:03:12:
ed:4a:1f:00:f0:6e:17:a9:64:db:a2:69:d3:c3:b2:
65:1d:2a:4a:5b:92:03:7a:12:96:1b:11:aa:d4:bb:
20:ef:c4:20:34:94:64:ad:85:c9:12:df:5d:13:aa:
a4:3b:55:80:c6:a5:c1:c9:4e:07:3b:9a:05:4a:67:
8d:5c:55:9e:80:9d:92:08:d1:80:8d:9b:96:c6:88:
25:4a:24:ff:0c:94:cd:f3:0c:5d:36:9c:cb:2c:75:
09:86:01:71:47:42:a7:ac:e6:79:51:c5:0f:dd:d7:
e0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E1:84:AE:2E:AE:8A:FF:B8:F4:9A:B8:14:27:19:08:64:8F:C6:92
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138806.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.135.180.0/22
IPv6:
2001:df7:ed00::/48
Signature Algorithm: sha256WithRSAEncryption
58:7b:98:17:9e:2a:5d:3f:2e:55:9f:b2:3e:0f:3b:a5:6a:74:
ab:4c:07:3a:3e:51:de:ed:51:68:32:7e:a4:48:da:34:45:3c:
1e:b8:ad:f0:8c:49:d5:c0:36:e0:41:99:8b:35:9a:1a:d2:0b:
c1:6d:db:50:9b:20:e6:8d:f7:e9:cb:ca:98:f5:1b:a7:31:f9:
7c:fb:d1:e0:e2:51:76:3d:ea:25:1d:d2:b0:e3:e7:20:60:78:
8e:e0:40:f1:e4:2a:f8:96:5d:90:e5:d6:01:6d:9c:eb:cd:aa:
45:a7:a9:be:5c:06:a2:f0:06:42:2b:3e:33:8d:58:a6:0a:5f:
5a:3f:dd:17:00:02:28:bd:09:fc:42:fa:54:0d:8f:79:f7:39:
c1:fc:7c:f1:18:7e:68:34:fd:d3:78:6b:e0:d3:d5:66:df:18:
a5:8c:8c:65:f9:ec:dd:12:8b:85:db:06:31:71:fa:47:fb:63:
00:cb:b6:0f:e8:a3:1b:b1:05:4c:99:3e:4b:28:4a:36:d9:ec:
33:ee:85:2a:0c:88:40:92:50:b5:95:a1:67:43:46:ed:f9:7f:
10:d2:f6:b1:d0:7a:7d:09:5f:a5:2e:35:8a:06:3a:02:89:5c:
c8:92:f6:d0:3e:12:d5:bd:2b:24:e6:6b:c5:40:3f:4f:09:97:
cc:c9:ff:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:52:16 2025 by rpki-client