This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141095.roa File: AS141095.roa (raw, json) Hash identifier: joYTvFTStxczZ+Zh0W6MQArW1Rm7nOyDkVnvz4KIFWk= Subject key identifier: C9:AC:F1:AC:95:D9:59:3A:15:9A:DE:39:75:0D:88:D3:2D:1C:A3:CB Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 40E2476CB87EEC61CE21E1B50C02DA61639BEA0A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141095.roa Signing time: Tue 11 Nov 2025 06:00:11 +0000 ROA not before: Tue 11 Nov 2025 05:55:11 +0000 ROA not after: Tue 10 Nov 2026 06:00:11 +0000 asID: 141095 IP address blocks: 103.156.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:e2:47:6c:b8:7e:ec:61:ce:21:e1:b5:0c:02:da:61:63:9b:ea:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 11 05:55:11 2025 GMT Not After : Nov 10 06:00:11 2026 GMT Subject: CN=C9ACF1AC95D9593A159ADE39750D88D32D1CA3CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:db:78:39:09:db:bd:34:b3:22:0d:50:2d:31: 15:64:0c:30:24:1f:3f:8a:c9:22:9a:64:43:0f:70: 91:7b:71:dc:6f:f6:46:d4:02:c7:55:a4:42:6d:a6: 93:32:19:62:94:07:de:f9:ae:8e:fe:06:bf:a7:c1: e0:e3:6b:2f:82:eb:5c:54:5f:98:0c:c0:14:12:c8: aa:ee:9a:90:94:f3:c1:c9:d4:de:77:39:c5:0f:4c: ed:e0:7e:7b:bb:ae:93:17:83:38:b4:43:da:07:73: ca:48:24:2d:ae:e6:fa:f8:0f:7f:2b:da:e5:ec:07: 95:69:81:72:80:68:dd:8c:65:7d:ad:03:9f:78:28: a6:49:e4:7b:ef:8d:fe:70:50:cf:a5:7f:2c:06:b5: f3:6e:f2:4c:e4:ef:1c:74:9d:52:a1:91:c5:36:7f: bf:0e:14:ee:65:da:f3:15:d6:8e:75:0a:77:30:e6: c8:64:2f:9a:2c:04:14:92:c6:c8:65:84:8b:1e:02: 47:87:35:da:26:3e:ac:80:11:66:2e:65:77:c1:6d: 2c:10:9a:3a:93:d5:05:ce:7c:c4:c1:2f:b4:df:41: 3f:3f:3b:cd:b9:07:28:68:90:71:c0:52:ef:b6:af: bd:1f:c4:35:5b:08:11:76:1d:c9:a6:47:07:60:c9: 5e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:AC:F1:AC:95:D9:59:3A:15:9A:DE:39:75:0D:88:D3:2D:1C:A3:CB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141095.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.211.0/24 Signature Algorithm: sha256WithRSAEncryption 99:b8:26:47:41:be:f8:79:ea:75:0f:74:d1:89:8a:35:f6:2f: 9d:5f:64:80:a2:35:45:42:2b:b7:d2:33:37:f1:05:ed:ad:af: 2a:64:d1:9b:db:67:e5:e2:a9:1c:1d:83:a1:e7:b7:48:7d:bf: af:b9:bb:37:70:f3:f8:56:38:71:38:a6:05:8c:b4:a4:ad:3a: 43:53:6e:81:2d:e2:1f:5b:e3:b7:b0:ba:82:53:9d:03:16:b7: 55:4c:a6:03:ea:55:a5:f5:19:7b:a8:66:60:4d:97:88:8f:a6: d4:79:c3:8d:e4:cb:2d:27:17:bf:19:de:89:e8:e6:84:bb:b0: b9:26:e2:ae:fd:8b:41:30:d5:5f:30:ef:35:eb:53:ca:72:5a: 0e:fa:e9:d5:e4:a0:28:27:5a:55:42:7a:f3:18:14:d2:cf:42: a6:21:f7:ef:08:01:de:15:bc:ff:d8:aa:81:88:0c:19:a0:40: f7:a8:38:73:16:27:28:5c:40:15:01:40:f7:09:87:bc:19:74: c8:4a:de:3a:f3:16:cc:c5:01:fd:c6:be:47:ca:e0:2b:bc:6a: 1e:82:23:1f:4b:e6:e0:42:f8:57:bb:39:a4:7c:ae:c9:ee:ec: 4e:41:57:b8:f5:44:69:d4:84:b5:6a:fa:57:05:dd:74:81:51: 3c:84:62:4f -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUQOJHbLh+7GHOIeG1DALaYWOb6gowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTA1NTUxMVoX DTI2MTExMDA2MDAxMVowMzExMC8GA1UEAxMoQzlBQ0YxQUM5NUQ5NTkzQTE1OUFE RTM5NzUwRDg4RDMyRDFDQTNDQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALjbeDkJ2700syINUC0xFWQMMCQfP4rJIppkQw9wkXtx3G/2RtQCx1WkQm2m kzIZYpQH3vmujv4Gv6fB4ONrL4LrXFRfmAzAFBLIqu6akJTzwcnU3nc5xQ9M7eB+ e7uukxeDOLRD2gdzykgkLa7m+vgPfyva5ewHlWmBcoBo3Yxlfa0Dn3gopknke++N /nBQz6V/LAa1827yTOTvHHSdUqGRxTZ/vw4U7mXa8xXWjnUKdzDmyGQvmiwEFJLG yGWEix4CR4c12iY+rIARZi5ld8FtLBCaOpPVBc58xMEvtN9BPz87zbkHKGiQccBS 77avvR/ENVsIEXYdyaZHB2DJXtcCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTJrPGs ldlZOhWa3jl1DYjTLRyjyzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTA5NS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGec0zANBgkqhkiG9w0BAQsFAAOCAQEAmbgmR0G++HnqdQ900YmK NfYvnV9kgKI1RUIrt9IzN/EF7a2vKmTRm9tn5eKpHB2Doee3SH2/r7m7N3Dz+FY4 cTimBYy0pK06Q1NugS3iH1vjt7C6glOdAxa3VUymA+pVpfUZe6hmYE2XiI+m1HnD jeTLLScXvxneiejmhLuwuSbirv2LQTDVXzDvNetTynJaDvrp1eSgKCdaVUJ68xgU 0s9CpiH37wgB3hW8/9iqgYgMGaBA96g4cxYnKFxAFQFA9wmHvBl0yEreOvMWzMUB /ca+R8rgK7xqHoIjH0vm4EL4V7s5pHyuye7sTkFXuPVEadSEtWr6VwXddIFRPIRi Tw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:39:56 2025 by rpki-client