This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141107.roa File: AS141107.roa (raw, json) Hash identifier: 8AZI1kmYkQVdSRQGmWAUPKGnCvRGOHXOlEa4i2ckdes= Subject key identifier: 66:2F:A7:C7:37:1B:58:B2:BE:B1:8B:E5:C0:86:C6:EE:43:92:78:A9 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 234853F555929F90853D49E7D763665885EFFC04 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141107.roa Signing time: Thu 22 Jan 2026 04:00:00 +0000 ROA not before: Thu 22 Jan 2026 03:55:00 +0000 ROA not after: Thu 21 Jan 2027 04:00:00 +0000 asID: 141107 IP address blocks: 103.157.26.0/23 maxlen: 24 103.169.6.0/23 maxlen: 24 103.187.106.0/24 maxlen: 24 2001:df5:b80::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:48:53:f5:55:92:9f:90:85:3d:49:e7:d7:63:66:58:85:ef:fc:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 22 03:55:00 2026 GMT Not After : Jan 21 04:00:00 2027 GMT Subject: CN=662FA7C7371B58B2BEB18BE5C086C6EE439278A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5e:a4:53:7c:93:e7:d6:95:d4:17:11:de:3f: 20:4d:d1:cc:40:97:76:18:41:8c:68:e3:4b:fb:a8: a4:39:d7:90:78:96:7c:71:2c:8f:ae:0b:5a:5a:f1: 96:46:81:fa:93:ae:97:85:c9:72:8e:e3:a6:1d:ad: 68:5c:22:35:ba:85:3b:03:46:89:a6:56:f0:b0:f2: 29:44:bd:05:1d:d5:e0:b0:65:f8:11:c5:34:d6:7c: 7f:86:e5:fc:38:bd:0e:10:4f:c7:f4:dd:46:ed:8f: e5:1f:f6:56:c3:6c:1a:ae:ee:9d:95:99:80:fc:bd: 24:43:49:79:94:66:1b:f7:54:d3:5f:de:ef:23:f9: 83:18:64:ea:8b:0d:df:44:4f:77:b5:19:b7:2e:45: 98:a2:38:6c:07:a2:7f:5f:ee:a8:1b:40:4d:58:30: 68:e9:5f:0f:78:b8:5e:bf:1a:42:b0:8e:8a:56:df: 1f:66:dd:04:4b:9b:ba:ec:93:78:12:01:4f:82:ff: 9c:4a:a2:bd:aa:2a:3e:ad:2b:b1:5a:8a:bf:30:25: f2:89:c6:a9:a3:72:a9:69:5d:b2:fd:f0:7d:a3:a1: 33:06:82:ac:18:30:51:f0:21:7f:6e:a4:98:fe:03: 82:94:34:23:a8:4e:c6:b0:1a:b5:e4:13:34:1c:c3: 26:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:2F:A7:C7:37:1B:58:B2:BE:B1:8B:E5:C0:86:C6:EE:43:92:78:A9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141107.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.157.26.0/23 103.169.6.0/23 103.187.106.0/24 IPv6: 2001:df5:b80::/48 Signature Algorithm: sha256WithRSAEncryption 7b:d8:39:92:d9:cf:0c:c3:d0:28:db:d1:2c:f3:b5:a8:a3:a9: 01:f4:11:f9:f8:84:93:ef:83:61:65:72:57:1f:7a:19:9f:06: f7:02:d4:f0:2f:28:54:d4:56:0f:77:64:7c:9c:83:22:af:6a: 10:98:34:da:76:81:31:46:b3:8d:66:63:95:75:7d:93:b7:81: 8a:71:f3:a7:19:1a:57:b1:31:39:87:d7:e3:68:b5:b3:ec:df: 45:61:c3:9a:85:b4:a2:92:7d:aa:98:ba:98:9c:92:6e:f4:c6: 17:b5:62:30:b9:08:27:dc:68:49:b1:c6:2e:f2:b7:18:b1:d2: c0:75:27:ee:b1:f8:29:50:b3:d0:38:fd:fe:32:26:72:c1:76: ad:db:85:a2:50:0d:7b:61:f7:9c:b2:65:2c:96:c6:18:e8:8a: 75:07:e2:68:3e:2c:d0:04:62:59:7b:4c:94:f5:43:3b:c0:2f: 1a:de:78:1b:b7:34:44:b5:ef:a8:36:ab:09:12:73:28:8b:5b: ba:b6:b5:bc:dd:60:a6:b7:92:59:35:a7:63:5c:4c:33:cc:a7: 18:52:50:99:65:cb:55:b6:c7:3d:36:e6:0a:28:98:3b:60:41: 92:e3:a2:7a:77:fc:2c:18:e7:5c:37:b1:2e:de:77:b0:8f:e2: aa:89:61:60 -----BEGIN CERTIFICATE----- MIIE+jCCA+KgAwIBAgIUI0hT9VWSn5CFPUnn12NmWIXv/AQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDEyMjAzNTUwMFoX DTI3MDEyMTA0MDAwMFowMzExMC8GA1UEAxMoNjYyRkE3QzczNzFCNThCMkJFQjE4 QkU1QzA4NkM2RUU0MzkyNzhBOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALxepFN8k+fWldQXEd4/IE3RzECXdhhBjGjjS/uopDnXkHiWfHEsj64LWlrx lkaB+pOul4XJco7jph2taFwiNbqFOwNGiaZW8LDyKUS9BR3V4LBl+BHFNNZ8f4bl /Di9DhBPx/TdRu2P5R/2VsNsGq7unZWZgPy9JENJeZRmG/dU01/e7yP5gxhk6osN 30RPd7UZty5FmKI4bAeif1/uqBtATVgwaOlfD3i4Xr8aQrCOilbfH2bdBEubuuyT eBIBT4L/nEqivaoqPq0rsVqKvzAl8onGqaNyqWldsv3wfaOhMwaCrBgwUfAhf26k mP4DgpQ0I6hOxrAateQTNBzDJu8CAwEAAaOCAe0wggHpMB0GA1UdDgQWBBRmL6fH NxtYsr6xi+XAhsbuQ5J4qTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTEwNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA8BggrBgEFBQcBBwEB/wQtMCsw GAQCAAEwEgMEAWedGgMEAWepBgMEAGe7ajAPBAIAAjAJAwcAIAEN9QuAMA0GCSqG SIb3DQEBCwUAA4IBAQB72DmS2c8Mw9Ao29Es87Woo6kB9BH5+IST74NhZXJXH3oZ nwb3AtTwLyhU1FYPd2R8nIMir2oQmDTadoExRrONZmOVdX2Tt4GKcfOnGRpXsTE5 h9fjaLWz7N9FYcOahbSikn2qmLqYnJJu9MYXtWIwuQgn3GhJscYu8rcYsdLAdSfu sfgpULPQOP3+MiZywXat24WiUA17YfecsmUslsYY6Ip1B+JoPizQBGJZe0yU9UM7 wC8a3ngbtzREte+oNqsJEnMoi1u6trW83WCmt5JZNadjXEwzzKcYUlCZZctVtsc9 NuYKKJg7YEGS46J6d/wsGOdcN7Eu3newj+KqiWFg -----END CERTIFICATE-----Generated at Sun Jan 25 18:25:10 2026 by rpki-client