This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138880.roa File: AS138880.roa (raw, json) Hash identifier: 0LeaJ1cxrwWFEaGBuucnYl5CbcNj/k4qY3CdOm5Lym4= Subject key identifier: DF:FC:6A:27:15:7D:36:73:D6:E8:D6:FB:4A:B7:CB:97:76:D0:08:34 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 266E42CDE498A87D9A3A823A514BF541AB7A019F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138880.roa Signing time: Tue 11 Nov 2025 06:00:09 +0000 ROA not before: Tue 11 Nov 2025 05:55:09 +0000 ROA not after: Tue 10 Nov 2026 06:00:09 +0000 asID: 138880 IP address blocks: 103.140.184.0/24 maxlen: 24 2001:df0:e180::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:6e:42:cd:e4:98:a8:7d:9a:3a:82:3a:51:4b:f5:41:ab:7a:01:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 11 05:55:09 2025 GMT Not After : Nov 10 06:00:09 2026 GMT Subject: CN=DFFC6A27157D3673D6E8D6FB4AB7CB9776D00834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:63:49:98:99:dc:0c:34:4e:e2:08:8b:22:ba: 5b:40:56:84:6f:0b:2c:5b:60:23:03:f1:9f:65:f4: d9:05:dc:d8:a0:71:7b:68:90:93:9e:07:fe:de:77: c9:1f:da:ab:f4:ef:2a:40:aa:3b:a9:f0:05:ea:fe: a0:1f:09:0c:6a:ab:09:12:77:d1:fd:cb:a2:04:af: 2e:7d:77:c5:c3:a1:89:a1:7e:bf:c1:4e:4a:fa:3e: a7:2f:d3:ae:0d:37:61:7f:e3:32:3b:17:e7:36:6f: 0b:bc:45:56:00:88:a2:d7:2d:80:ac:49:2c:37:dd: 03:40:16:1f:a2:b3:87:2a:0d:b6:c3:be:bf:a0:12: 5e:27:bf:05:33:f1:2e:93:70:04:2c:a9:3d:c9:4a: 54:31:e0:b6:a7:cd:6b:a2:62:b2:a0:5a:c2:a5:d5: 38:94:44:06:57:9c:7c:ee:ee:fb:2c:50:d9:66:87: c2:4e:d8:21:30:47:d1:7d:a1:a9:c5:fe:e1:04:44: 45:52:03:14:dc:f0:18:32:4d:36:04:90:17:ce:3d: a6:8a:99:4e:54:7c:a5:4f:14:96:5b:61:15:f9:c2: 12:a5:3b:5f:8e:41:4a:a8:e0:3b:cf:c9:f8:f5:54: 4e:00:42:5f:ed:3c:3c:b8:f1:a3:69:d0:30:74:40: 0d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:FC:6A:27:15:7D:36:73:D6:E8:D6:FB:4A:B7:CB:97:76:D0:08:34 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138880.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.140.184.0/24 IPv6: 2001:df0:e180::/48 Signature Algorithm: sha256WithRSAEncryption 32:a3:5c:7b:55:5a:68:41:a1:42:6d:57:95:23:ba:a3:5b:e7: a1:08:77:70:c8:5e:e1:18:95:87:24:d8:13:19:45:9a:48:0c: 59:52:38:9b:92:28:06:86:9c:bc:ff:59:b7:69:44:42:60:8f: a8:c9:a8:f8:84:cc:04:8e:fa:36:c9:47:c9:a4:e1:84:3a:8a: 6e:53:cf:6a:fd:ba:91:f1:16:74:86:f2:e9:16:16:24:7b:0d: 1e:86:c1:2e:ca:a8:f1:1d:22:ce:01:2c:4d:e3:69:47:43:56: 08:13:12:a9:3c:f0:c8:89:c4:5a:6e:29:ea:05:4e:36:ca:0a: bb:9b:46:e9:ba:94:4a:e6:e3:7e:b8:1e:f7:a6:35:c1:ce:b3: 09:11:3b:8e:51:d4:78:cb:77:b1:61:68:b5:a4:09:79:2f:b2: 7d:a8:3e:ad:c1:9e:a4:44:05:97:51:e6:76:9a:8a:b9:c6:37: 7c:e5:14:6a:bb:19:29:53:5a:25:76:3b:5f:24:15:10:33:5c: b1:06:36:64:be:6e:6b:65:1e:4b:47:55:81:f4:3d:b0:f7:70: c2:87:c5:63:25:f5:8a:12:00:71:d1:6f:c9:68:04:27:7d:cd: 2b:a7:71:4e:cd:e3:59:81:11:f1:52:b2:ba:fa:ad:41:04:9c: df:82:ac:b2 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUJm5CzeSYqH2aOoI6UUv1Qat6AZ8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTA1NTUwOVoX DTI2MTExMDA2MDAwOVowMzExMC8GA1UEAxMoREZGQzZBMjcxNTdEMzY3M0Q2RThE NkZCNEFCN0NCOTc3NkQwMDgzNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALNjSZiZ3Aw0TuIIiyK6W0BWhG8LLFtgIwPxn2X02QXc2KBxe2iQk54H/t53 yR/aq/TvKkCqO6nwBer+oB8JDGqrCRJ30f3LogSvLn13xcOhiaF+v8FOSvo+py/T rg03YX/jMjsX5zZvC7xFVgCIotctgKxJLDfdA0AWH6KzhyoNtsO+v6ASXie/BTPx LpNwBCypPclKVDHgtqfNa6JisqBawqXVOJREBlecfO7u+yxQ2WaHwk7YITBH0X2h qcX+4QRERVIDFNzwGDJNNgSQF849poqZTlR8pU8UllthFfnCEqU7X45BSqjgO8/J +PVUTgBCX+08PLjxo2nQMHRADbcCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBTf/Gon FX02c9bo1vtKt8uXdtAINDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzODg4MC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAGeMuDAPBAIAAjAJAwcAIAEN8OGAMA0GCSqGSIb3DQEBCwUAA4IB AQAyo1x7VVpoQaFCbVeVI7qjW+ehCHdwyF7hGJWHJNgTGUWaSAxZUjibkigGhpy8 /1m3aURCYI+oyaj4hMwEjvo2yUfJpOGEOopuU89q/bqR8RZ0hvLpFhYkew0ehsEu yqjxHSLOASxN42lHQ1YIExKpPPDIicRabinqBU42ygq7m0bpupRK5uN+uB73pjXB zrMJETuOUdR4y3exYWi1pAl5L7J9qD6twZ6kRAWXUeZ2moq5xjd85RRquxkpU1ol djtfJBUQM1yxBjZkvm5rZR5LR1WB9D2w93DCh8VjJfWKEgBx0W/JaAQnfc0rp3FO zeNZgRHxUrK6+q1BBJzfgqyy -----END CERTIFICATE-----Generated at Sat Dec 6 22:52:12 2025 by rpki-client