This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141048.roa File: AS141048.roa (raw, json) Hash identifier: 9pePP6vCeWqfiwyt5cZCtV3kiUqQo12CaKTiUwEIJW0= Subject key identifier: C9:7C:CC:7F:5A:F4:95:39:06:54:4E:CD:97:41:C7:6B:BF:19:62:1D Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7BCCF00D2935264A5A1C232908FE562362DF371C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141048.roa Signing time: Thu 11 Dec 2025 03:00:00 +0000 ROA not before: Thu 11 Dec 2025 02:55:00 +0000 ROA not after: Thu 10 Dec 2026 03:00:00 +0000 asID: 141048 IP address blocks: 103.155.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 21:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:cc:f0:0d:29:35:26:4a:5a:1c:23:29:08:fe:56:23:62:df:37:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 11 02:55:00 2025 GMT Not After : Dec 10 03:00:00 2026 GMT Subject: CN=C97CCC7F5AF4953906544ECD9741C76BBF19621D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:04:94:c7:da:0c:ca:a9:24:71:89:95:e4:0b: a5:2f:cd:fc:f3:ce:cc:39:b4:61:c8:74:4c:10:d7: 0d:94:6d:7d:5c:d6:80:ae:02:ee:db:a5:ee:7d:2b: 10:de:13:17:91:27:fd:71:b2:63:3a:a4:08:49:42: c7:e2:41:e0:a7:6d:e7:81:c7:75:42:3a:db:67:17: 33:b5:78:8d:98:60:c5:00:19:2e:45:94:55:e4:c9: c8:77:0f:35:1c:a4:15:12:38:2d:1b:9c:97:71:41: 2a:27:71:2c:99:15:f5:95:1a:d3:33:eb:db:ba:8b: 03:9a:0a:c1:aa:dc:89:69:7b:67:53:6c:3c:9f:8a: 9a:6c:f3:37:45:5e:65:0a:31:47:80:c5:95:6c:15: 50:5b:bf:3a:de:65:a3:a1:ef:cd:43:de:20:0c:72: 06:de:de:0d:12:bf:44:b8:84:96:74:15:40:f3:9f: a8:26:10:cf:a1:3e:60:dd:82:64:99:7b:03:1b:bb: ec:08:7e:af:8c:9a:41:af:40:5c:e1:ec:ac:d0:b4: 62:a0:49:71:c5:94:ee:7a:aa:52:70:34:30:75:7d: cb:d5:1c:e6:96:e6:35:31:e2:80:94:e6:48:30:ad: 86:2b:c9:86:7f:10:be:b8:fa:46:c9:a0:61:6a:0d: 8f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:7C:CC:7F:5A:F4:95:39:06:54:4E:CD:97:41:C7:6B:BF:19:62:1D X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141048.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.155.29.0/24 Signature Algorithm: sha256WithRSAEncryption 99:9e:78:c4:78:dc:13:53:07:a0:33:3a:ec:20:57:07:82:ab: 08:ee:76:92:99:2d:71:28:d7:11:0e:01:4b:ee:4e:9e:b8:4e: 07:6f:fe:97:fa:87:9b:b7:a7:38:5d:3e:ae:0e:f7:c3:18:08: 2d:de:2c:77:b3:3e:46:2d:6e:8d:3b:e7:09:95:7e:9e:85:0e: d4:c8:e5:5b:d1:ee:7a:18:ef:9f:99:33:5a:1b:32:69:0d:de: 6a:50:4a:9e:bd:76:65:55:07:da:bb:e9:68:09:ab:5b:01:0f: b3:e3:13:16:8d:37:f4:74:a0:4e:2d:f9:09:6f:99:b8:42:00: 2e:ff:5a:dd:2c:45:65:ca:9a:79:13:01:5e:2a:1f:f4:0e:c2: 96:a9:fc:6b:3a:ea:e0:e4:02:36:59:a3:9e:36:25:c5:be:71: 86:fa:dd:d7:60:17:49:65:cb:47:b9:88:bb:b0:e5:2a:69:f4: 5b:17:07:80:18:d7:7e:d9:37:74:7b:90:a8:1c:3b:97:bc:a8: a4:23:50:49:eb:de:c2:b0:d7:b6:ce:93:70:44:ba:a9:d9:b1: e5:a4:f2:50:e4:b3:16:03:48:3c:12:ee:ef:ea:3d:de:7a:38: 2a:f6:9b:38:3b:77:da:1c:fa:f0:8d:df:aa:04:33:55:4a:9e: d0:81:a5:ab -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUe8zwDSk1JkpaHCMpCP5WI2LfNxwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIxMTAyNTUwMFoX DTI2MTIxMDAzMDAwMFowMzExMC8GA1UEAxMoQzk3Q0NDN0Y1QUY0OTUzOTA2NTQ0 RUNEOTc0MUM3NkJCRjE5NjIxRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKoElMfaDMqpJHGJleQLpS/N/PPOzDm0Ych0TBDXDZRtfVzWgK4C7tul7n0r EN4TF5En/XGyYzqkCElCx+JB4Kdt54HHdUI622cXM7V4jZhgxQAZLkWUVeTJyHcP NRykFRI4LRucl3FBKidxLJkV9ZUa0zPr27qLA5oKwarciWl7Z1NsPJ+KmmzzN0Ve ZQoxR4DFlWwVUFu/Ot5lo6HvzUPeIAxyBt7eDRK/RLiElnQVQPOfqCYQz6E+YN2C ZJl7Axu77Ah+r4yaQa9AXOHsrNC0YqBJccWU7nqqUnA0MHV9y9Uc5pbmNTHigJTm SDCthivJhn8Qvrj6RsmgYWoNjzUCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTJfMx/ WvSVOQZUTs2XQcdrvxliHTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTA0OC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGebHTANBgkqhkiG9w0BAQsFAAOCAQEAmZ54xHjcE1MHoDM67CBX B4KrCO52kpktcSjXEQ4BS+5OnrhOB2/+l/qHm7enOF0+rg73wxgILd4sd7M+Ri1u jTvnCZV+noUO1MjlW9Huehjvn5kzWhsyaQ3ealBKnr12ZVUH2rvpaAmrWwEPs+MT Fo039HSgTi35CW+ZuEIALv9a3SxFZcqaeRMBXiof9A7Clqn8azrq4OQCNlmjnjYl xb5xhvrd12AXSWXLR7mIu7DlKmn0WxcHgBjXftk3dHuQqBw7l7yopCNQSevewrDX ts6TcES6qdmx5aTyUOSzFgNIPBLu7+o93no4KvabODt32hz68I3fqgQzVUqe0IGl qw== -----END CERTIFICATE-----Generated at Tue Dec 16 17:56:56 2025 by rpki-client