This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141092.roa File: AS141092.roa (raw, json) Hash identifier: mOFHvFKH8sLI8vFzcgy0KpUEJfsvcPKS5hOPh3zb1yo= Subject key identifier: B2:46:A1:85:03:77:C6:61:FE:5A:8C:23:30:A3:72:7C:90:16:34:42 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2E00BA46B220A0FBB4BCD4F4CE64E5660C782041 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141092.roa Signing time: Tue 11 Nov 2025 06:00:01 +0000 ROA not before: Tue 11 Nov 2025 05:55:01 +0000 ROA not after: Tue 10 Nov 2026 06:00:01 +0000 asID: 141092 IP address blocks: 103.156.140.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:00:ba:46:b2:20:a0:fb:b4:bc:d4:f4:ce:64:e5:66:0c:78:20:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 11 05:55:01 2025 GMT Not After : Nov 10 06:00:01 2026 GMT Subject: CN=B246A1850377C661FE5A8C2330A3727C90163442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5e:d9:56:39:c0:49:be:b9:17:23:bc:91:6a: 30:d0:5d:e5:d5:a4:80:c6:04:54:5c:fd:f9:c2:8b: b1:b7:35:09:f1:e4:3d:16:75:9a:d2:2b:a9:4c:a3: da:e9:23:e0:04:5e:db:e5:5b:e5:81:c3:2a:de:10: 3d:3d:67:5e:46:66:b0:1f:c3:15:15:c8:83:c8:52: 23:a6:b9:66:f4:a8:6b:67:b3:6a:e4:34:93:bb:87: 2c:e2:bd:6a:57:f7:cd:04:86:03:e3:2c:e2:4e:c9: 78:c2:9f:a2:d1:22:87:34:85:d6:aa:75:6b:f2:9f: 9e:4a:ec:71:c3:e8:ef:5e:3c:98:6e:ef:b2:37:bf: 9c:02:df:39:be:ef:5e:70:42:77:fe:ed:d4:22:0f: 68:85:04:86:2f:4a:d1:f5:59:43:4f:5e:38:78:ee: 63:64:c4:9a:04:fd:3b:17:e5:e5:cc:2c:db:7d:fb: fa:13:e4:b1:7c:df:5d:d1:f3:98:53:c7:c8:a4:17: a0:21:58:50:3d:ea:53:a9:eb:8c:c2:a3:04:72:71: 13:1b:96:ed:af:14:14:d3:e9:b1:43:9c:a0:34:30: 5c:4a:4c:16:c3:a3:c4:0e:5b:f5:05:42:72:cf:8a: 61:bd:2b:83:63:ea:d9:a7:27:55:ec:07:32:59:0d: dc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:46:A1:85:03:77:C6:61:FE:5A:8C:23:30:A3:72:7C:90:16:34:42 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141092.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.140.0/23 Signature Algorithm: sha256WithRSAEncryption 67:b9:90:9c:dc:be:84:a9:fd:b9:3f:b0:02:c0:d4:6b:4a:71: 8a:77:3d:b5:5f:dc:ac:de:62:ea:b3:b2:da:62:14:32:ce:17: 6c:75:5f:b3:b5:2c:9e:58:30:86:41:06:3b:55:54:e6:fe:35: 49:35:7d:63:9b:c3:be:7a:02:4a:16:9a:6e:82:6c:2d:d9:52: 86:ba:c2:6b:96:26:04:d2:e2:38:3f:67:50:ad:3d:d9:65:42: c1:90:99:21:7c:48:29:15:4a:de:59:4d:dd:0f:86:08:0d:aa: 79:de:d9:3a:37:b9:79:ee:43:c3:15:a0:19:24:01:e9:90:3c: 67:23:df:ca:1e:ef:92:c7:af:1f:6b:e3:a1:60:72:7a:1b:c0: 16:05:ff:2b:76:c7:a1:d1:8f:1a:c3:11:b0:52:f9:49:cb:67: da:77:49:de:2f:bc:7f:61:19:7e:26:a3:dd:65:79:a0:e9:4f: ec:6d:73:2e:7c:cb:f0:3a:95:f1:99:f6:c6:e2:75:41:ad:43: ca:18:73:d5:70:51:3b:eb:ac:46:94:c0:c9:a0:47:c5:6c:11: 2d:c8:70:77:37:90:fb:f2:34:9d:9c:86:fa:de:cd:82:7a:f4: 21:f2:98:85:16:b0:dc:c7:e1:16:4c:93:d2:cc:06:32:9e:40: bb:47:ac:d8 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIULgC6RrIgoPu0vNT0zmTlZgx4IEEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTA1NTUwMVoX DTI2MTExMDA2MDAwMVowMzExMC8GA1UEAxMoQjI0NkExODUwMzc3QzY2MUZFNUE4 QzIzMzBBMzcyN0M5MDE2MzQ0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANJe2VY5wEm+uRcjvJFqMNBd5dWkgMYEVFz9+cKLsbc1CfHkPRZ1mtIrqUyj 2ukj4ARe2+Vb5YHDKt4QPT1nXkZmsB/DFRXIg8hSI6a5ZvSoa2ezauQ0k7uHLOK9 alf3zQSGA+Ms4k7JeMKfotEihzSF1qp1a/KfnkrsccPo7148mG7vsje/nALfOb7v XnBCd/7t1CIPaIUEhi9K0fVZQ09eOHjuY2TEmgT9Oxfl5cws2337+hPksXzfXdHz mFPHyKQXoCFYUD3qU6nrjMKjBHJxExuW7a8UFNPpsUOcoDQwXEpMFsOjxA5b9QVC cs+KYb0rg2Pq2acnVewHMlkN3HkCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSyRqGF A3fGYf5ajCMwo3J8kBY0QjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTA5Mi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWecjDANBgkqhkiG9w0BAQsFAAOCAQEAZ7mQnNy+hKn9uT+wAsDU a0pxinc9tV/crN5i6rOy2mIUMs4XbHVfs7UsnlgwhkEGO1VU5v41STV9Y5vDvnoC ShaaboJsLdlShrrCa5YmBNLiOD9nUK092WVCwZCZIXxIKRVK3llN3Q+GCA2qed7Z Oje5ee5DwxWgGSQB6ZA8ZyPfyh7vksevH2vjoWByehvAFgX/K3bHodGPGsMRsFL5 Sctn2ndJ3i+8f2EZfiaj3WV5oOlP7G1zLnzL8DqV8Zn2xuJ1Qa1Dyhhz1XBRO+us RpTAyaBHxWwRLchwdzeQ+/I0nZyG+t7Ngnr0IfKYhRaw3MfhFkyT0swGMp5Au0es 2A== -----END CERTIFICATE-----Generated at Sat Dec 6 22:51:37 2025 by rpki-client