This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139396.roa File: AS139396.roa (raw, json) Hash identifier: 007aOmmhSHjTv/WWIC8Im3uA7qDIP31/cf3vXWI6f3Y= Subject key identifier: E7:2E:FD:DD:ED:C7:1E:29:1C:57:CE:92:3A:64:35:62:DC:24:A9:F9 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3A3297E59FA4885FE85DAADE660A319E067675ED Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139396.roa Signing time: Tue 11 Nov 2025 06:00:12 +0000 ROA not before: Tue 11 Nov 2025 05:55:12 +0000 ROA not after: Tue 10 Nov 2026 06:00:12 +0000 asID: 139396 IP address blocks: 45.113.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:32:97:e5:9f:a4:88:5f:e8:5d:aa:de:66:0a:31:9e:06:76:75:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 11 05:55:12 2025 GMT Not After : Nov 10 06:00:12 2026 GMT Subject: CN=E72EFDDDEDC71E291C57CE923A643562DC24A9F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ae:ad:ac:e7:16:94:88:22:b1:9c:d9:ae:91: 57:d8:30:90:a3:72:bc:21:18:fb:8c:4d:da:c9:66: 64:4b:ed:85:b8:d8:35:7d:98:ea:4e:32:70:88:24: 75:38:9e:54:30:0c:3c:71:98:68:c9:7c:11:51:4e: 6d:eb:b9:90:13:16:b4:a5:61:ed:28:04:16:e6:74: d5:08:7d:e4:77:f4:42:d5:63:43:d7:48:c4:68:b7: 26:12:be:10:65:d0:cf:96:d7:81:b1:08:5a:79:3c: 49:e8:10:c0:0e:e6:5d:33:79:6f:bc:2f:b9:6b:67: 5e:3a:63:d6:95:c0:06:f1:c6:c2:af:ba:e4:a8:86: 55:d7:02:1f:06:7c:61:b5:d8:8d:ce:8c:8e:c7:9d: 80:79:14:4c:c5:7d:7f:4f:c2:69:d3:bf:1b:df:dc: 7d:89:25:7b:82:21:ca:6b:24:2e:b5:de:85:f5:c5: cb:4e:fc:0a:3e:11:6e:d5:5a:22:c9:aa:0d:65:9b: 71:c7:07:60:02:af:2b:13:22:d4:3c:63:a6:e4:65: 4b:1d:79:72:82:74:16:2b:77:d9:1a:ee:62:c3:c0: 1d:91:b5:35:ed:47:75:9d:7c:47:54:64:c1:63:e5: 91:e2:60:f3:a9:8f:57:b1:85:69:38:f5:a9:66:5a: 4b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:2E:FD:DD:ED:C7:1E:29:1C:57:CE:92:3A:64:35:62:DC:24:A9:F9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139396.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.113.228.0/22 Signature Algorithm: sha256WithRSAEncryption 0d:29:19:0c:a7:c8:ef:b0:67:45:db:8e:c6:e5:e1:da:96:2b: c5:08:7a:98:32:70:74:33:1d:2d:f3:65:73:7d:58:73:0a:c0: 8f:79:b2:32:bf:27:5a:4f:1d:56:68:d5:a0:d0:c2:60:b8:dc: a3:a9:fa:d5:8d:78:6f:ba:db:27:64:9e:bd:9e:92:bf:c1:99: 8c:61:f9:72:04:b5:f1:3d:0d:69:c0:24:d6:fc:78:ed:56:d4: f8:b0:93:4d:3a:1c:4d:81:8d:d1:50:b9:e4:6b:9b:09:5c:30: f1:ea:d9:c1:8f:a4:61:27:8c:cb:01:18:97:17:b2:48:ab:a7: 4a:c1:6d:30:ea:b0:3e:d0:6e:e3:a5:8e:4d:ad:7f:60:91:7d: 8e:99:64:1f:06:8d:52:b1:e9:5b:b4:73:68:a6:1c:48:a9:11: 6d:36:4c:a9:89:3a:ca:f1:27:14:15:26:c4:a9:42:b2:d7:44: 5c:ed:24:9b:b8:68:39:25:cd:28:c0:ce:d6:31:99:ce:98:35: 34:fc:63:98:e8:fb:b9:ca:84:51:c6:e2:f3:1d:d6:9d:60:58: b5:85:28:54:23:b2:e9:ee:a8:da:49:4f:0b:c6:11:60:c6:4b: 37:d4:b9:b0:63:0d:70:a9:ba:1d:6a:9a:e2:90:d1:9f:b3:2d: 47:56:94:67 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUOjKX5Z+kiF/oXareZgoxngZ2de0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTA1NTUxMloX DTI2MTExMDA2MDAxMlowMzExMC8GA1UEAxMoRTcyRUZERERFREM3MUUyOTFDNTdD RTkyM0E2NDM1NjJEQzI0QTlGOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOmuraznFpSIIrGc2a6RV9gwkKNyvCEY+4xN2slmZEvthbjYNX2Y6k4ycIgk dTieVDAMPHGYaMl8EVFObeu5kBMWtKVh7SgEFuZ01Qh95Hf0QtVjQ9dIxGi3JhK+ EGXQz5bXgbEIWnk8SegQwA7mXTN5b7wvuWtnXjpj1pXABvHGwq+65KiGVdcCHwZ8 YbXYjc6MjsedgHkUTMV9f0/CadO/G9/cfYkle4IhymskLrXehfXFy078Cj4RbtVa IsmqDWWbcccHYAKvKxMi1DxjpuRlSx15coJ0Fit32RruYsPAHZG1Ne1HdZ18R1Rk wWPlkeJg86mPV7GFaTj1qWZaS8cCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTnLv3d 7cceKRxXzpI6ZDVi3CSp+TAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzOTM5Ni5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAi1x5DANBgkqhkiG9w0BAQsFAAOCAQEADSkZDKfI77BnRduOxuXh 2pYrxQh6mDJwdDMdLfNlc31YcwrAj3myMr8nWk8dVmjVoNDCYLjco6n61Y14b7rb J2SevZ6Sv8GZjGH5cgS18T0NacAk1vx47VbU+LCTTTocTYGN0VC55GubCVww8erZ wY+kYSeMywEYlxeySKunSsFtMOqwPtBu46WOTa1/YJF9jplkHwaNUrHpW7RzaKYc SKkRbTZMqYk6yvEnFBUmxKlCstdEXO0km7hoOSXNKMDO1jGZzpg1NPxjmOj7ucqE Ucbi8x3WnWBYtYUoVCOy6e6o2klPC8YRYMZLN9S5sGMNcKm6HWqa4pDRn7MtR1aU Zw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:50:33 2025 by rpki-client