This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138835.roa File: AS138835.roa (raw, json) Hash identifier: k9F0GSzLJkSml5zrqfQKPeE39sommmA1ISfzXjQOl0A= Subject key identifier: 50:95:E9:4B:EC:1B:B4:A6:94:61:49:1A:1D:A5:0B:34:E2:E4:37:DB Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 691052D3CE387D7F3CC8A6BF16DAAF81B8DF5840 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138835.roa Signing time: Tue 11 Nov 2025 05:00:00 +0000 ROA not before: Tue 11 Nov 2025 04:55:00 +0000 ROA not after: Tue 10 Nov 2026 05:00:00 +0000 asID: 138835 IP address blocks: 103.138.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:10:52:d3:ce:38:7d:7f:3c:c8:a6:bf:16:da:af:81:b8:df:58:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 11 04:55:00 2025 GMT Not After : Nov 10 05:00:00 2026 GMT Subject: CN=5095E94BEC1BB4A69461491A1DA50B34E2E437DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0e:fd:ce:96:8d:0c:08:98:2f:e3:64:55:15: 6f:48:a2:c9:91:26:71:83:fb:21:49:a4:65:c8:9b: 51:36:11:9b:44:bd:47:c4:43:5c:a7:40:65:2b:0b: 95:40:7a:de:41:5d:c8:52:91:95:5b:aa:19:75:3a: e6:1f:f6:84:0c:f6:b6:9e:72:9b:e4:c6:f6:5e:90: af:5f:b6:5e:b7:2a:ed:84:3c:36:1b:31:44:eb:d0: ef:0a:6d:a1:3b:a6:ee:fb:09:85:ed:e2:2a:47:15: a0:f0:eb:27:f7:c8:fd:60:e7:20:14:1a:39:10:58: 05:91:fd:d6:0e:be:2b:3a:89:a1:8d:6f:be:43:e4: aa:4f:d3:fc:6a:d1:39:17:8d:b9:bb:a0:a8:eb:1b: 64:4b:52:f3:ae:03:15:fd:a1:54:dd:2f:98:be:f4: cc:35:71:f8:ba:53:a6:34:23:19:67:db:e4:03:08: 70:8e:2f:35:61:95:88:c5:69:f4:b3:77:81:28:a3: 47:c1:39:49:f4:e7:b8:e2:98:8a:ac:22:5b:e9:c1: 89:2f:6b:00:1a:7c:36:cb:7e:ed:f7:aa:a2:72:ad: 6c:b6:2b:d5:fa:5a:e8:80:63:88:06:dc:7f:77:83: 5a:70:4f:7f:87:61:24:90:14:59:af:2b:2d:ba:60: 7e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:95:E9:4B:EC:1B:B4:A6:94:61:49:1A:1D:A5:0B:34:E2:E4:37:DB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.138.10.0/24 Signature Algorithm: sha256WithRSAEncryption 09:db:9f:13:9f:05:88:ec:20:6c:53:76:3f:d1:aa:0a:e9:8c: 47:11:89:47:6a:fd:f6:99:c8:b5:c1:93:74:5b:23:18:4b:04: 70:b6:cb:e2:bd:97:4b:c7:1f:87:6d:67:72:2c:6f:c0:d7:0d: f7:0e:f7:5e:39:87:f2:93:c4:9f:e6:0a:b7:4c:9a:11:82:c3: 0b:aa:fd:4e:3d:42:47:27:ec:71:e5:f7:72:5a:ed:7c:26:93: a2:9b:0b:46:9f:ca:ee:3d:26:38:18:17:36:e7:7d:39:1c:66: f1:d7:d5:62:3a:b6:c9:7e:54:81:e8:c0:74:3c:6d:a5:57:b8: f9:dd:a4:a5:20:e9:5f:41:21:06:28:2a:ea:74:bd:5d:22:f3: 1b:c1:33:67:f6:8b:92:a9:b5:10:c7:46:ad:d1:cd:ea:0c:01: 2d:bd:48:57:a5:e5:8f:d6:de:5b:b5:38:2a:8d:36:46:3a:12: 22:26:63:58:7a:7c:7c:3f:7e:d1:4b:78:3c:c9:be:25:57:af: da:d6:e7:0c:a2:5b:08:e1:b9:b2:bd:0a:3c:a6:cc:95:cf:2c: 8e:ff:8e:cc:35:4d:eb:e4:26:da:b9:7f:29:48:40:b7:38:6f: 36:3b:5f:54:2f:56:62:fb:8f:c1:cd:4f:eb:08:09:bd:05:c1: 2b:90:58:15 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUaRBS0844fX88yKa/FtqvgbjfWEAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTA0NTUwMFoX DTI2MTExMDA1MDAwMFowMzExMC8GA1UEAxMoNTA5NUU5NEJFQzFCQjRBNjk0NjE0 OTFBMURBNTBCMzRFMkU0MzdEQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALsO/c6WjQwImC/jZFUVb0iiyZEmcYP7IUmkZcibUTYRm0S9R8RDXKdAZSsL lUB63kFdyFKRlVuqGXU65h/2hAz2tp5ym+TG9l6Qr1+2Xrcq7YQ8NhsxROvQ7wpt oTum7vsJhe3iKkcVoPDrJ/fI/WDnIBQaORBYBZH91g6+KzqJoY1vvkPkqk/T/GrR OReNubugqOsbZEtS864DFf2hVN0vmL70zDVx+LpTpjQjGWfb5AMIcI4vNWGViMVp 9LN3gSijR8E5SfTnuOKYiqwiW+nBiS9rABp8Nst+7feqonKtbLYr1fpa6IBjiAbc f3eDWnBPf4dhJJAUWa8rLbpgfnsCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRQlelL 7Bu0ppRhSRodpQs04uQ32zAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzODgzNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGeKCjANBgkqhkiG9w0BAQsFAAOCAQEACdufE58FiOwgbFN2P9Gq CumMRxGJR2r99pnItcGTdFsjGEsEcLbL4r2XS8cfh21ncixvwNcN9w73XjmH8pPE n+YKt0yaEYLDC6r9Tj1CRyfsceX3clrtfCaTopsLRp/K7j0mOBgXNud9ORxm8dfV Yjq2yX5UgejAdDxtpVe4+d2kpSDpX0EhBigq6nS9XSLzG8EzZ/aLkqm1EMdGrdHN 6gwBLb1IV6Xlj9beW7U4Ko02RjoSIiZjWHp8fD9+0Ut4PMm+JVev2tbnDKJbCOG5 sr0KPKbMlc8sjv+OzDVN6+Qm2rl/KUhAtzhvNjtfVC9WYvuPwc1P6wgJvQXBK5BY FQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:52:10 2025 by rpki-client