This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140029.roa File: AS140029.roa (raw, json) Hash identifier: 1Z/F/E50AtTHyNBvsk67dqUD+wH5qQt1eRYG9X3YlqI= Subject key identifier: 0C:AB:7F:7D:ED:DD:E1:B6:34:62:77:47:99:98:C7:6F:63:BE:B9:29 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7F7E4B29807E21BFB521F592E58449FD9335045B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140029.roa Signing time: Tue 11 Nov 2025 06:00:15 +0000 ROA not before: Tue 11 Nov 2025 05:55:15 +0000 ROA not after: Tue 10 Nov 2026 06:00:15 +0000 asID: 140029 IP address blocks: 103.149.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:7e:4b:29:80:7e:21:bf:b5:21:f5:92:e5:84:49:fd:93:35:04:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 11 05:55:15 2025 GMT Not After : Nov 10 06:00:15 2026 GMT Subject: CN=0CAB7F7DEDDDE1B6346277479998C76F63BEB929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:48:8e:16:f8:07:27:31:ce:10:01:16:7c:0b: 13:71:a7:06:74:8f:b0:f4:41:7c:3a:51:c9:86:8a: cf:fb:91:9d:27:e8:35:bb:77:7e:c6:cf:a4:66:de: ab:dc:64:cf:ca:e9:2e:88:cb:47:9d:48:2c:64:af: 5d:fc:f4:82:17:37:23:80:0d:fa:bd:68:2b:00:84: ab:16:07:42:49:90:0b:92:4e:f8:54:08:a5:f5:11: 84:f6:7a:ab:47:6f:81:2c:2b:46:07:55:98:6d:9c: 0c:a5:21:8a:50:16:c7:e2:0b:38:a7:4e:20:6c:45: 21:41:08:f5:bb:a6:7a:a1:30:35:14:77:0c:72:eb: 17:d2:4a:4e:c7:28:4c:35:2d:ef:f0:65:57:f6:41: 69:92:68:47:cf:53:fd:09:61:de:d0:16:4a:73:03: 7e:9f:55:cc:14:ab:f1:c7:b5:6c:41:da:0e:8b:7f: 66:9d:12:d3:ff:93:e1:0e:08:c9:7d:7b:07:09:60: 4a:a3:43:83:cc:fb:e8:2c:b6:9b:86:b6:65:81:1a: 89:61:14:57:cd:7d:d8:88:9e:d3:db:3c:76:f3:e7: 88:25:1a:76:a5:d1:3b:ed:d3:53:99:a6:88:50:22: 7f:39:56:d0:95:39:e5:11:9a:79:e3:db:32:c5:0d: 8c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:AB:7F:7D:ED:DD:E1:B6:34:62:77:47:99:98:C7:6F:63:BE:B9:29 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140029.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.149.208.0/24 Signature Algorithm: sha256WithRSAEncryption 65:0e:d6:22:6e:cd:72:b1:88:14:e0:cf:5f:4f:d0:d2:85:d4: ba:94:76:c7:73:2b:9c:33:6a:3d:c7:c7:8a:a9:3a:46:12:cd: 0e:f4:05:d1:f4:c8:42:59:d7:bc:90:43:3c:17:4b:45:62:bb: d5:a8:b9:f6:92:91:8e:92:63:11:9b:8b:0a:5d:81:1c:99:f7: 71:31:4e:28:de:a5:b1:8d:55:9b:77:ed:08:ff:ca:f8:b0:a4: 5c:ab:3e:be:63:f8:e2:39:c0:0d:9f:63:61:fd:fa:e4:93:69: 66:be:5a:1c:19:55:38:c4:7e:ad:19:8b:e8:fd:e8:fe:67:2b: be:d3:aa:d0:61:9a:d0:55:6a:32:37:31:7b:a0:9c:e6:95:f2: 2c:c4:a5:e8:38:2b:65:c9:50:85:42:e5:fb:ce:83:a1:55:a5: 56:b6:41:7d:94:63:b6:49:0f:e1:7d:17:cc:29:ed:a4:bd:f3: 69:7b:82:28:49:0f:46:0d:44:53:77:fe:97:be:9e:36:f6:3e: 61:85:71:93:dc:b9:0a:22:88:64:80:33:69:4a:56:4e:c0:4a: eb:b4:90:ce:51:f3:45:da:dc:c6:86:2f:e7:8b:a6:9b:d4:1f: f1:86:ee:d2:3b:bc:fa:7b:41:c8:1f:95:60:ea:ef:43:90:75: 56:93:58:a7 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUf35LKYB+Ib+1IfWS5YRJ/ZM1BFswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTA1NTUxNVoX DTI2MTExMDA2MDAxNVowMzExMC8GA1UEAxMoMENBQjdGN0RFRERERTFCNjM0NjI3 NzQ3OTk5OEM3NkY2M0JFQjkyOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAORIjhb4BycxzhABFnwLE3GnBnSPsPRBfDpRyYaKz/uRnSfoNbt3fsbPpGbe q9xkz8rpLojLR51ILGSvXfz0ghc3I4AN+r1oKwCEqxYHQkmQC5JO+FQIpfURhPZ6 q0dvgSwrRgdVmG2cDKUhilAWx+ILOKdOIGxFIUEI9bumeqEwNRR3DHLrF9JKTsco TDUt7/BlV/ZBaZJoR89T/Qlh3tAWSnMDfp9VzBSr8ce1bEHaDot/Zp0S0/+T4Q4I yX17BwlgSqNDg8z76Cy2m4a2ZYEaiWEUV8192Iie09s8dvPniCUadqXRO+3TU5mm iFAifzlW0JU55RGaeePbMsUNjIkCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQMq399 7d3htjRid0eZmMdvY765KTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MDAyOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGeV0DANBgkqhkiG9w0BAQsFAAOCAQEAZQ7WIm7NcrGIFODPX0/Q 0oXUupR2x3MrnDNqPcfHiqk6RhLNDvQF0fTIQlnXvJBDPBdLRWK71ai59pKRjpJj EZuLCl2BHJn3cTFOKN6lsY1Vm3ftCP/K+LCkXKs+vmP44jnADZ9jYf365JNpZr5a HBlVOMR+rRmL6P3o/mcrvtOq0GGa0FVqMjcxe6Cc5pXyLMSl6DgrZclQhULl+86D oVWlVrZBfZRjtkkP4X0XzCntpL3zaXuCKEkPRg1EU3f+l76eNvY+YYVxk9y5CiKI ZIAzaUpWTsBK67SQzlHzRdrcxoYv54umm9Qf8Ybu0ju8+ntByB+VYOrvQ5B1VpNY pw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:48:59 2025 by rpki-client