This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140416.roa
File: AS140416.roa (raw, json)
Hash identifier: EbKl8SDha18Rs0otGnaeNRrvBY9uEKqrai6YsUoGLds=
Subject key identifier: A0:BC:80:B7:03:1E:3C:9B:21:33:0E:83:FD:58:27:6D:91:07:0F:EB
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 766C8F0121361667AAABF270FB7455C262D2C7A8
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140416.roa
Signing time: Tue 11 Nov 2025 06:00:13 +0000
ROA not before: Tue 11 Nov 2025 05:55:13 +0000
ROA not after: Tue 10 Nov 2026 06:00:13 +0000
asID: 140416
IP address blocks: 103.148.86.0/23 maxlen: 24
2001:df2:c880::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:6c:8f:01:21:36:16:67:aa:ab:f2:70:fb:74:55:c2:62:d2:c7:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Nov 11 05:55:13 2025 GMT
Not After : Nov 10 06:00:13 2026 GMT
Subject: CN=A0BC80B7031E3C9B21330E83FD58276D91070FEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d1:f6:88:e3:de:23:d1:4d:4e:bb:fe:a3:54:
21:82:2f:d0:15:0d:c8:eb:3d:b9:33:25:c7:c4:de:
8a:9e:32:84:23:50:3d:3f:08:f7:9d:91:36:6d:6c:
9d:b4:17:d4:97:42:70:2c:68:8a:dd:56:99:ba:5f:
29:33:18:73:d7:f7:45:16:04:ce:f8:ab:b7:e8:ae:
db:57:fa:05:5d:8f:fc:d5:a9:88:ec:21:72:e4:8c:
ab:d1:a8:2e:55:24:12:02:d8:61:40:3f:9c:0e:d8:
8b:0a:2a:6f:bd:4c:70:c8:7c:dc:c1:7a:39:be:8c:
82:59:bd:d2:31:54:46:bc:1c:d9:e8:d6:58:8c:a7:
9c:cc:20:e3:94:ab:b6:24:32:24:0a:7b:f2:d3:0d:
78:30:ef:2e:38:97:5f:18:14:e4:a2:c7:b8:c8:49:
1c:67:7b:fe:4d:29:e9:ce:c7:9c:6a:63:f6:28:fc:
eb:59:47:70:68:62:21:1f:fa:56:79:57:c6:1e:46:
68:c0:57:d9:a5:6c:9a:9d:c5:dc:bd:59:73:cc:b0:
1a:d9:15:1d:8a:2e:42:01:b0:60:19:55:e5:ba:08:
19:51:4b:61:16:7b:e8:e1:73:50:d2:b0:82:74:9d:
1f:cc:74:1d:16:54:6c:c1:05:8d:06:ad:7e:b9:ff:
20:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:BC:80:B7:03:1E:3C:9B:21:33:0E:83:FD:58:27:6D:91:07:0F:EB
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140416.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.148.86.0/23
IPv6:
2001:df2:c880::/48
Signature Algorithm: sha256WithRSAEncryption
5a:77:7c:e9:54:32:15:d5:40:66:ca:e2:6c:89:0a:28:48:60:
7b:5a:16:83:16:7b:99:b2:82:4a:6a:60:af:8e:7c:b7:42:04:
b4:cb:fc:6c:3a:ed:85:2c:cf:6a:a8:e6:8c:b4:c3:3d:da:c4:
30:46:78:a2:f6:81:93:d3:a5:08:6b:c6:77:42:67:f1:9b:8d:
ef:01:6c:e5:b2:73:1e:af:a7:84:59:e7:52:b0:8f:27:bf:98:
5e:f8:73:d4:79:6f:79:60:3a:cd:ae:c2:cc:a8:d2:3e:45:c9:
db:25:c5:03:d3:65:a5:76:da:05:b8:f9:c6:d0:bb:04:54:e2:
41:ad:ec:63:b9:b0:3b:78:2c:46:e1:bd:f2:79:e8:90:b5:97:
62:0d:ae:8f:48:77:eb:28:81:d5:23:a8:6a:da:3c:bf:aa:46:
17:fe:3d:41:f4:6e:8b:4e:67:df:2b:9f:43:a7:61:8b:2d:bc:
c8:d3:45:50:3c:81:f4:84:b8:4f:92:dd:3e:8f:5d:62:4b:18:
c0:7d:79:48:fb:0c:eb:98:31:33:9f:dd:c0:1c:e5:50:7d:34:
5d:52:08:46:19:e6:19:28:68:2c:a7:2d:00:ee:59:1d:ec:40:
92:a3:2a:4a:09:0e:35:1c:6a:b9:86:7f:0c:be:90:12:eb:a5:
a4:94:ca:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:49:25 2025 by rpki-client