This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139423.roa File: AS139423.roa (raw, json) Hash identifier: R6es/miV2uu/TBXDurkYr+OSfm1HIkDZp3qSCH31nDE= Subject key identifier: 5C:86:23:91:DB:E9:62:04:7A:8A:23:40:95:C2:35:F8:E0:A3:62:EA Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 43F5DB606B70ED4575555CB3F5836BF3B43681A5 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139423.roa Signing time: Tue 11 Nov 2025 06:00:11 +0000 ROA not before: Tue 11 Nov 2025 05:55:11 +0000 ROA not after: Tue 10 Nov 2026 06:00:11 +0000 asID: 139423 IP address blocks: 103.144.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:f5:db:60:6b:70:ed:45:75:55:5c:b3:f5:83:6b:f3:b4:36:81:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 11 05:55:11 2025 GMT Not After : Nov 10 06:00:11 2026 GMT Subject: CN=5C862391DBE962047A8A234095C235F8E0A362EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:5e:4f:b0:22:f6:21:b0:88:59:d9:9d:25:10: 29:2e:01:08:d7:97:79:7a:cc:75:37:f9:24:ea:0a: 4d:c8:77:e1:6f:96:af:12:69:55:e9:47:00:13:8f: 2c:87:e5:1e:21:0a:8f:53:da:1f:a0:1b:25:c6:f7: 52:86:d1:77:72:a4:30:cc:d2:c1:3a:cb:ec:e8:51: c3:3f:b5:15:05:8d:79:48:dd:ef:e0:50:46:4d:81: 12:9e:6b:b6:d3:78:fd:9e:46:e3:0e:3e:fe:6c:0b: 71:85:d9:23:f2:fa:13:d0:60:d0:3d:0c:25:23:91: 90:e7:a1:d0:8d:3d:b7:58:dc:95:17:b7:1d:e1:18: ef:de:e8:69:67:d3:61:b5:f3:2c:d1:eb:64:82:da: cb:93:37:3a:e7:db:6f:9b:07:e8:dc:61:1b:41:b1: df:db:02:23:3e:9d:95:7b:17:29:80:63:f3:5a:ee: 7f:94:ee:99:00:f7:a6:e8:64:01:e8:ad:c7:5c:fd: d4:fe:34:61:b9:a3:40:3f:40:97:e0:6c:59:02:4e: 0c:1a:b3:a3:b3:2d:fa:ae:ce:c1:e6:69:d9:60:73: 5d:dd:85:0f:de:25:c5:d1:25:7f:9b:0c:7f:2e:a3: d0:72:3d:ba:47:e2:12:a4:57:67:97:28:1e:34:fd: a6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:86:23:91:DB:E9:62:04:7A:8A:23:40:95:C2:35:F8:E0:A3:62:EA X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139423.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.144.20.0/24 Signature Algorithm: sha256WithRSAEncryption 57:01:13:f0:9b:22:eb:51:83:a7:7c:af:c6:58:03:6a:72:98: 20:d9:c5:17:60:22:8d:10:41:3e:5f:31:2c:19:59:b9:75:73: 81:f1:a9:2f:7f:73:e9:77:e4:62:65:b8:56:1c:cc:ad:16:a7: b3:c0:d2:99:1a:58:21:3e:be:69:14:43:ee:f7:bb:b0:c2:80: 73:28:9c:91:ad:65:42:ce:8c:37:51:c7:f8:42:05:b3:99:fd: 74:f0:83:d2:15:39:30:e6:69:64:09:ed:19:53:32:ad:1b:2e: 63:dd:5b:f0:cf:c3:2b:94:1b:73:ba:54:3b:32:98:25:a5:de: 08:2d:66:55:bb:47:23:9d:68:17:0d:60:4e:d9:b0:6a:bb:84: d6:9d:5d:6c:9e:b2:54:34:50:95:4f:46:0b:41:78:22:ee:f7: 6f:e0:50:83:b8:8b:1f:fd:1f:c3:f0:ee:4b:e8:6f:99:f7:20: 1f:23:94:d3:bd:21:c2:93:5d:1b:92:83:4c:21:34:9c:bb:9b: 99:ed:e7:6b:8b:5d:05:44:c7:63:51:50:ee:bd:76:92:cd:f2: c8:79:a0:7c:aa:0a:58:77:af:60:20:d0:f2:0d:a9:d0:11:9f: 44:b0:d5:1b:b6:aa:0c:3e:6c:46:f8:ab:89:14:60:7a:b3:19: 2b:e9:b2:ad -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUQ/XbYGtw7UV1VVyz9YNr87Q2gaUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTA1NTUxMVoX DTI2MTExMDA2MDAxMVowMzExMC8GA1UEAxMoNUM4NjIzOTFEQkU5NjIwNDdBOEEy MzQwOTVDMjM1RjhFMEEzNjJFQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOZeT7Ai9iGwiFnZnSUQKS4BCNeXeXrMdTf5JOoKTch34W+WrxJpVelHABOP LIflHiEKj1PaH6AbJcb3UobRd3KkMMzSwTrL7OhRwz+1FQWNeUjd7+BQRk2BEp5r ttN4/Z5G4w4+/mwLcYXZI/L6E9Bg0D0MJSORkOeh0I09t1jclRe3HeEY797oaWfT YbXzLNHrZILay5M3Oufbb5sH6NxhG0Gx39sCIz6dlXsXKYBj81ruf5TumQD3puhk Aeitx1z91P40YbmjQD9Al+BsWQJODBqzo7Mt+q7OweZp2WBzXd2FD94lxdElf5sM fy6j0HI9ukfiEqRXZ5coHjT9pscCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRchiOR 2+liBHqKI0CVwjX44KNi6jAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzOTQyMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGeQFDANBgkqhkiG9w0BAQsFAAOCAQEAVwET8Jsi61GDp3yvxlgD anKYINnFF2AijRBBPl8xLBlZuXVzgfGpL39z6XfkYmW4VhzMrRans8DSmRpYIT6+ aRRD7ve7sMKAcyicka1lQs6MN1HH+EIFs5n9dPCD0hU5MOZpZAntGVMyrRsuY91b 8M/DK5Qbc7pUOzKYJaXeCC1mVbtHI51oFw1gTtmwaruE1p1dbJ6yVDRQlU9GC0F4 Iu73b+BQg7iLH/0fw/DuS+hvmfcgHyOU070hwpNdG5KDTCE0nLubme3na4tdBUTH Y1FQ7r12ks3yyHmgfKoKWHevYCDQ8g2p0BGfRLDVG7aqDD5sRviriRRgerMZK+my rQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:51:34 2025 by rpki-client