This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138886.roa File: AS138886.roa (raw, json) Hash identifier: ++xyCHXdI0gr0DY5Mc7Q73q/NPN0Yn3EFWAijyJ0mx4= Subject key identifier: 84:EB:F6:63:CD:8A:38:D9:A6:76:D0:28:12:8F:FE:E1:90:EF:32:D3 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 23D60F2DB410F04F9A633F1AEBFBA158BCB02CF4 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138886.roa Signing time: Fri 16 Jan 2026 10:00:00 +0000 ROA not before: Fri 16 Jan 2026 09:55:00 +0000 ROA not after: Fri 15 Jan 2027 10:00:00 +0000 asID: 138886 IP address blocks: 117.18.20.0/22 maxlen: 24 202.58.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:d6:0f:2d:b4:10:f0:4f:9a:63:3f:1a:eb:fb:a1:58:bc:b0:2c:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 16 09:55:00 2026 GMT Not After : Jan 15 10:00:00 2027 GMT Subject: CN=84EBF663CD8A38D9A676D028128FFEE190EF32D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e6:b2:b1:e0:33:92:54:11:4f:75:54:14:1a: 33:9c:0d:b0:02:35:7c:1d:65:5f:fa:b2:57:4a:6c: 01:6e:35:f2:b2:fd:f2:51:90:5e:d4:9f:06:cb:b1: 29:06:17:62:cc:6f:27:37:4e:bf:b4:cb:92:a5:8c: f6:fa:21:fa:b6:01:47:00:0a:b6:f7:b7:a4:76:93: 40:4e:56:fa:fe:ec:fa:03:d0:ac:8b:e5:05:cb:83: 10:3e:d9:7a:c2:89:19:b6:70:53:2f:9f:8d:f4:93: 76:b3:05:fe:55:03:b5:00:28:91:b5:7a:51:c9:b7: ea:b1:71:3b:b4:ab:87:ca:99:4b:2a:29:30:07:12: 0a:1e:47:34:55:3f:8b:5d:93:2b:50:46:78:e8:20: 29:6c:f1:57:b2:d8:2c:92:1a:45:7e:5b:ba:43:95: 8c:f0:5b:af:7b:48:c3:2c:14:2a:00:d5:9a:07:cd: ce:ec:80:4e:1f:ce:49:55:0f:fa:d6:42:42:35:d3: 1c:53:66:86:f7:30:27:8b:ab:24:7b:ad:18:d3:57: 70:e4:82:a2:56:11:5a:92:12:74:13:7e:27:22:71: 65:8a:58:ef:2b:49:59:2c:4a:7f:46:66:d5:77:8d: 0a:f3:01:bc:6a:8f:8d:82:00:15:ce:d6:35:cf:da: 06:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:EB:F6:63:CD:8A:38:D9:A6:76:D0:28:12:8F:FE:E1:90:EF:32:D3 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138886.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.18.20.0/22 202.58.72.0/21 Signature Algorithm: sha256WithRSAEncryption 2a:e9:1f:46:15:62:58:48:62:26:df:a4:79:06:ef:bf:4d:03: da:ae:d9:b6:e5:f5:eb:c4:1e:1a:2d:8d:03:a7:e0:dc:52:0a: c1:82:85:59:ce:8c:bf:40:5b:4a:7d:28:67:a8:c9:a0:11:9b: 4b:9a:5e:b2:87:e2:80:93:29:5a:26:ec:62:95:b8:59:ac:61: 3a:a4:d7:46:40:ec:8e:b5:e9:fe:8c:05:b6:64:45:f1:db:23: bd:a2:78:10:04:8f:15:29:a8:0e:c7:1c:ee:01:2b:d8:53:f6: 15:16:1f:97:88:78:c4:ea:ff:12:a3:e3:68:82:f1:65:e9:08: 08:ed:18:20:88:0d:86:0d:cc:6b:6f:f3:a6:a2:90:9b:eb:31: 9e:ad:d5:b1:46:23:03:c6:1d:2f:47:56:72:e7:58:f7:30:b0: 80:0a:28:5d:c2:05:8e:cb:09:f7:f7:c5:dd:1d:c6:8d:f1:10: 59:e5:af:55:12:f1:77:35:15:57:63:64:b6:b3:fc:4c:64:81: 31:7d:3b:08:55:de:17:4e:84:57:0e:d8:9c:bc:34:ba:a8:d1: e2:c7:53:10:50:19:5e:9c:bc:df:c7:57:a9:e2:e5:e2:2b:6f: 95:07:66:00:56:66:05:bd:ff:95:63:94:cd:8f:96:68:50:27: 3c:a4:f0:ea -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUI9YPLbQQ8E+aYz8a6/uhWLywLPQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDExNjA5NTUwMFoX DTI3MDExNTEwMDAwMFowMzExMC8GA1UEAxMoODRFQkY2NjNDRDhBMzhEOUE2NzZE MDI4MTI4RkZFRTE5MEVGMzJEMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALHmsrHgM5JUEU91VBQaM5wNsAI1fB1lX/qyV0psAW418rL98lGQXtSfBsux KQYXYsxvJzdOv7TLkqWM9voh+rYBRwAKtve3pHaTQE5W+v7s+gPQrIvlBcuDED7Z esKJGbZwUy+fjfSTdrMF/lUDtQAokbV6Ucm36rFxO7Srh8qZSyopMAcSCh5HNFU/ i12TK1BGeOggKWzxV7LYLJIaRX5bukOVjPBbr3tIwywUKgDVmgfNzuyATh/OSVUP +tZCQjXTHFNmhvcwJ4urJHutGNNXcOSColYRWpISdBN+JyJxZYpY7ytJWSxKf0Zm 1XeNCvMBvGqPjYIAFc7WNc/aBlcCAwEAAaOCAdYwggHSMB0GA1UdDgQWBBSE6/Zj zYo42aZ20CgSj/7hkO8y0zAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzODg4Ni5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAnUSFAMEA8o6SDANBgkqhkiG9w0BAQsFAAOCAQEAKukfRhViWEhi Jt+keQbvv00D2q7ZtuX168QeGi2NA6fg3FIKwYKFWc6Mv0BbSn0oZ6jJoBGbS5pe sofigJMpWibsYpW4WaxhOqTXRkDsjrXp/owFtmRF8dsjvaJ4EASPFSmoDscc7gEr 2FP2FRYfl4h4xOr/EqPjaILxZekICO0YIIgNhg3Ma2/zpqKQm+sxnq3VsUYjA8Yd L0dWcudY9zCwgAooXcIFjssJ9/fF3R3GjfEQWeWvVRLxdzUVV2NktrP8TGSBMX07 CFXeF06EVw7YnLw0uqjR4sdTEFAZXpy838dXqeLl4itvlQdmAFZmBb3/lWOUzY+W aFAnPKTw6g== -----END CERTIFICATE-----Generated at Sun Jan 25 18:24:39 2026 by rpki-client