This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141127.roa File: AS141127.roa (raw, json) Hash identifier: Zt1FLBgzqZymOdGYzqAJBYwieMVcfbGp/Id6FOOi8f4= Subject key identifier: 3B:C6:F0:5D:B9:B8:72:21:BC:C4:C3:2D:B3:7A:DB:50:DC:03:E8:7F Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 15DBCBC9A7E15597D2E12968D3D33B72C44404AC Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141127.roa Signing time: Tue 11 Nov 2025 06:00:03 +0000 ROA not before: Tue 11 Nov 2025 05:55:03 +0000 ROA not after: Tue 10 Nov 2026 06:00:03 +0000 asID: 141127 IP address blocks: 103.174.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:db:cb:c9:a7:e1:55:97:d2:e1:29:68:d3:d3:3b:72:c4:44:04:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 11 05:55:03 2025 GMT Not After : Nov 10 06:00:03 2026 GMT Subject: CN=3BC6F05DB9B87221BCC4C32DB37ADB50DC03E87F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:81:3c:5f:d1:f5:f5:b7:af:6a:4e:85:6c:6b: 49:8c:7b:d9:28:47:ff:f3:f3:ee:42:a4:fe:01:a0: 8e:8c:aa:b5:9c:80:5f:ff:ac:48:1f:85:ce:4c:f7: b3:4f:73:ad:b2:02:6a:d2:be:b4:87:6b:cb:33:95: 5e:75:7b:7a:de:2b:3b:75:05:ee:c5:d6:75:bf:1f: f1:f4:a7:d2:c3:80:f5:cf:65:63:18:3a:de:1b:c7: 1a:7f:73:9b:9d:97:8b:16:52:3b:d6:53:5b:5b:a6: 18:8b:89:2b:05:e6:53:01:41:9c:82:21:81:7f:5e: c4:ae:db:e0:c3:f9:12:e9:6d:4c:13:6e:d2:0f:7d: 2c:fb:b0:0c:7c:93:a9:c6:ca:93:3b:6c:13:08:a0: 9f:1e:04:11:e4:ad:b9:7f:88:36:7d:ef:1a:1c:9f: cd:1b:cc:cc:ae:e8:9a:e9:df:71:b8:c3:3f:37:36: 54:5f:31:70:f1:f6:5d:f4:4d:09:93:20:31:bb:b4: fa:47:d0:46:5e:25:0f:c8:29:4b:56:08:0e:70:47: 32:94:23:74:85:03:b7:a3:b2:2b:57:8c:d0:3c:92: c0:d1:dc:d2:17:0d:1c:65:fa:70:87:79:84:f3:be: fc:39:f3:d6:bb:e9:75:bb:b6:d3:da:a8:a6:7f:11: 70:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C6:F0:5D:B9:B8:72:21:BC:C4:C3:2D:B3:7A:DB:50:DC:03:E8:7F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141127.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.174.238.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:9b:a3:fc:8a:4d:57:b5:a9:58:eb:e9:9f:b7:b3:59:65:9b: b6:f5:f1:22:ee:3b:16:3b:31:b8:3f:32:1e:57:cd:62:7d:ee: 70:61:18:b5:32:0d:2d:c9:68:ba:2b:f8:0e:b7:a1:0d:6b:11: 96:c5:c4:95:b9:c4:88:2a:cf:35:5d:3e:e5:2c:99:e7:55:e2: 97:78:c0:75:76:70:40:73:ff:0f:d0:2a:61:27:03:4b:67:df: 38:7b:5c:a7:30:17:9c:96:82:aa:0c:5f:c7:29:35:bd:b9:63: b3:f6:a6:cd:e6:70:e5:b5:e7:d4:95:83:ce:4a:46:12:00:47: be:63:8f:c4:3e:a9:12:47:98:3b:63:e2:13:a5:c8:62:2f:24: 2d:cc:4e:51:63:ea:77:42:3c:56:e9:92:fb:f6:de:3b:ac:e6: 19:b0:a6:ba:5c:5c:37:da:25:4b:99:4d:d1:1a:11:7a:ba:ad: f4:cc:ed:96:f8:9f:62:3c:8f:46:4f:5d:49:82:2c:2b:f4:70: 37:47:33:ad:e3:e9:67:cf:35:52:7d:d2:2e:64:e2:18:d1:f2: 65:00:d4:e4:b0:97:e6:ed:e4:72:7e:80:e1:b5:1e:43:dd:c7: e0:c0:d4:52:85:e6:78:7f:0a:a8:2f:5a:96:2c:5d:64:aa:20: aa:29:99:5a -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUFdvLyafhVZfS4Slo09M7csREBKwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTA1NTUwM1oX DTI2MTExMDA2MDAwM1owMzExMC8GA1UEAxMoM0JDNkYwNURCOUI4NzIyMUJDQzRD MzJEQjM3QURCNTBEQzAzRTg3RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANKBPF/R9fW3r2pOhWxrSYx72ShH//Pz7kKk/gGgjoyqtZyAX/+sSB+Fzkz3 s09zrbICatK+tIdryzOVXnV7et4rO3UF7sXWdb8f8fSn0sOA9c9lYxg63hvHGn9z m52XixZSO9ZTW1umGIuJKwXmUwFBnIIhgX9exK7b4MP5EultTBNu0g99LPuwDHyT qcbKkztsEwignx4EEeStuX+INn3vGhyfzRvMzK7omunfcbjDPzc2VF8xcPH2XfRN CZMgMbu0+kfQRl4lD8gpS1YIDnBHMpQjdIUDt6OyK1eM0DySwNHc0hcNHGX6cId5 hPO+/Dnz1rvpdbu209qopn8RcFUCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQ7xvBd ubhyIbzEwy2zettQ3APofzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTEyNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGeu7jANBgkqhkiG9w0BAQsFAAOCAQEAL5uj/IpNV7WpWOvpn7ez WWWbtvXxIu47FjsxuD8yHlfNYn3ucGEYtTINLclouiv4DrehDWsRlsXElbnEiCrP NV0+5SyZ51Xil3jAdXZwQHP/D9AqYScDS2ffOHtcpzAXnJaCqgxfxyk1vbljs/am zeZw5bXn1JWDzkpGEgBHvmOPxD6pEkeYO2PiE6XIYi8kLcxOUWPqd0I8VumS+/be O6zmGbCmulxcN9olS5lN0RoRerqt9MztlvifYjyPRk9dSYIsK/RwN0czrePpZ881 Un3SLmTiGNHyZQDU5LCX5u3kcn6A4bUeQ93H4MDUUoXmeH8KqC9alixdZKogqimZ Wg== -----END CERTIFICATE-----Generated at Sun Dec 7 01:36:15 2025 by rpki-client