This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138894.roa File: AS138894.roa (raw, json) Hash identifier: pRJhrMeQFOe3gthZJW3LdiHezTY5vYDghynkUIW9xd4= Subject key identifier: 43:09:55:DD:F5:44:9F:32:95:7A:5D:39:C9:71:F4:C5:95:4D:C3:1F Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 52DA75B7404D2560DDE21F9D98A69ADE2F8A3824 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138894.roa Signing time: Tue 11 Nov 2025 06:00:14 +0000 ROA not before: Tue 11 Nov 2025 05:55:14 +0000 ROA not after: Tue 10 Nov 2026 06:00:14 +0000 asID: 138894 IP address blocks: 103.141.40.0/23 maxlen: 24 2001:df0:ec80::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:da:75:b7:40:4d:25:60:dd:e2:1f:9d:98:a6:9a:de:2f:8a:38:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 11 05:55:14 2025 GMT Not After : Nov 10 06:00:14 2026 GMT Subject: CN=430955DDF5449F32957A5D39C971F4C5954DC31F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:95:6a:a2:63:ad:2e:78:ba:d6:51:2a:c3:b9: 13:0a:74:82:bf:75:a4:3f:72:96:e1:ec:b6:d1:88: 91:ae:be:80:d3:61:2d:fd:8e:c7:45:73:1e:3e:14: 2d:8e:a6:dd:2f:64:1a:6d:79:45:4b:83:f6:9d:4d: 76:a2:b1:9f:57:c4:a6:f0:b4:90:ae:38:ce:73:80: 75:2f:4c:8c:db:7c:dd:5c:3d:76:00:95:7c:0e:d3: e6:9e:98:c5:df:a3:b7:fe:55:78:49:63:a4:86:90: 7d:59:08:1c:b3:d1:38:77:f6:d3:5a:5a:55:a8:c6: c7:ba:1c:f1:90:a5:99:59:ca:b4:06:d8:09:bd:0a: 8d:70:3c:8d:30:79:d1:d8:5e:f4:f6:ab:c1:5f:f6: a4:88:57:eb:10:47:aa:23:85:6e:4f:1f:53:de:f8: 91:68:af:40:45:21:07:19:a2:49:e6:19:10:4a:f0: 82:4d:69:84:d5:60:20:0c:e1:c0:2b:e0:82:db:bc: 2d:50:f2:28:e6:88:10:95:18:4b:9d:f7:86:b9:92: e5:71:df:c1:1d:c3:ca:4a:16:c0:6e:b5:db:14:3a: b5:5c:52:3e:fd:46:3f:9a:fe:24:6a:eb:bf:02:5d: f5:5d:2c:5a:c7:21:fd:5d:da:ea:f6:18:39:4c:ee: 92:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:09:55:DD:F5:44:9F:32:95:7A:5D:39:C9:71:F4:C5:95:4D:C3:1F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138894.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.141.40.0/23 IPv6: 2001:df0:ec80::/48 Signature Algorithm: sha256WithRSAEncryption 26:48:cc:50:de:d3:e9:c0:37:39:24:f8:7a:5b:1c:06:0e:37: 9a:15:61:64:db:26:41:bd:c1:b6:a5:c4:53:18:cd:bb:6a:0d: c4:3b:b7:2d:2f:1f:5a:95:63:fe:8a:e4:ed:af:4b:76:2a:78: ba:8c:72:57:57:b6:45:19:72:fb:88:b6:58:8a:41:cc:5d:aa: f3:ff:34:bc:a7:3e:9f:ba:09:73:82:a5:f6:ee:6a:d8:2f:1f: 0f:e2:5a:6a:98:1a:dc:40:5f:23:75:91:a6:f1:27:25:5e:ca: 09:5a:ee:1e:c9:ac:73:5c:8a:3c:96:09:15:1e:8e:72:eb:2b: 7d:ea:8d:90:67:91:19:aa:83:0f:ea:3c:ad:61:d4:03:d5:b6: 69:08:82:23:47:06:97:c8:26:37:0c:ab:78:3c:77:56:ba:08: 66:fa:28:7b:14:d3:57:fb:5e:83:32:b3:73:ef:7f:40:4d:ad: 62:70:5f:95:39:c5:2e:ab:76:2e:9f:2b:16:f1:9a:e9:79:12: b4:75:63:58:c1:a3:a6:37:8e:a6:34:0e:d7:39:67:45:51:f5: 20:f4:f6:20:bb:83:f4:6b:76:6d:41:96:89:ef:23:b0:e5:64: d8:60:a3:2c:a4:48:00:03:94:50:64:2a:fc:1e:28:64:4e:4a: c6:56:57:f4 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUUtp1t0BNJWDd4h+dmKaa3i+KOCQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTA1NTUxNFoX DTI2MTExMDA2MDAxNFowMzExMC8GA1UEAxMoNDMwOTU1RERGNTQ0OUYzMjk1N0E1 RDM5Qzk3MUY0QzU5NTREQzMxRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANOVaqJjrS54utZRKsO5Ewp0gr91pD9yluHsttGIka6+gNNhLf2Ox0VzHj4U LY6m3S9kGm15RUuD9p1NdqKxn1fEpvC0kK44znOAdS9MjNt83Vw9dgCVfA7T5p6Y xd+jt/5VeEljpIaQfVkIHLPROHf201paVajGx7oc8ZClmVnKtAbYCb0KjXA8jTB5 0dhe9ParwV/2pIhX6xBHqiOFbk8fU974kWivQEUhBxmiSeYZEErwgk1phNVgIAzh wCvggtu8LVDyKOaIEJUYS533hrmS5XHfwR3DykoWwG612xQ6tVxSPv1GP5r+JGrr vwJd9V0sWsch/V3a6vYYOUzukl8CAwEAAaOCAeEwggHdMB0GA1UdDgQWBBRDCVXd 9USfMpV6XTnJcfTFlU3DHzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzODg5NC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAWeNKDAPBAIAAjAJAwcAIAEN8OyAMA0GCSqGSIb3DQEBCwUAA4IB AQAmSMxQ3tPpwDc5JPh6WxwGDjeaFWFk2yZBvcG2pcRTGM27ag3EO7ctLx9alWP+ iuTtr0t2Kni6jHJXV7ZFGXL7iLZYikHMXarz/zS8pz6fuglzgqX27mrYLx8P4lpq mBrcQF8jdZGm8SclXsoJWu4eyaxzXIo8lgkVHo5y6yt96o2QZ5EZqoMP6jytYdQD 1bZpCIIjRwaXyCY3DKt4PHdWughm+ih7FNNX+16DMrNz739ATa1icF+VOcUuq3Yu nysW8ZrpeRK0dWNYwaOmN46mNA7XOWdFUfUg9PYgu4P0a3ZtQZaJ7yOw5WTYYKMs pEgAA5RQZCr8HihkTkrGVlf0 -----END CERTIFICATE-----Generated at Sat Dec 6 22:52:23 2025 by rpki-client