This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141576.roa
File: AS141576.roa (raw, json)
Hash identifier: kqLbNRLuBPOPvQDvvY0uVa7rj8tHtKo1s6xaTO5Hu1w=
Subject key identifier: C1:EE:A9:48:D6:F4:8A:AD:89:77:44:34:9B:64:32:26:54:7E:D5:6D
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 37342180426193E3FE3EBB7F37FC40A06D86E43A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141576.roa
Signing time: Tue 11 Nov 2025 06:00:19 +0000
ROA not before: Tue 11 Nov 2025 05:55:19 +0000
ROA not after: Tue 10 Nov 2026 06:00:19 +0000
asID: 141576
IP address blocks: 103.160.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:34:21:80:42:61:93:e3:fe:3e:bb:7f:37:fc:40:a0:6d:86:e4:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Nov 11 05:55:19 2025 GMT
Not After : Nov 10 06:00:19 2026 GMT
Subject: CN=C1EEA948D6F48AAD897744349B643226547ED56D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d1:e8:b8:9e:1f:2e:a3:92:0d:dd:0f:a9:55:
89:f5:73:47:b0:e5:50:da:86:91:af:19:f6:75:2a:
8d:4c:c6:d3:d7:b0:fc:a6:6f:71:f2:c4:66:b8:db:
a8:5b:1e:cb:fd:cd:26:84:31:9b:c7:0c:4d:31:5e:
7e:1e:c8:1a:99:fd:8e:2f:8f:bb:d6:3b:82:9b:5a:
4b:68:d0:a0:ce:06:a7:33:07:90:69:b7:89:69:34:
5c:d0:df:84:27:30:63:86:a1:2f:ed:89:91:fc:21:
fa:31:e8:38:29:19:f9:97:63:53:a0:0a:d4:74:29:
c8:cd:71:72:05:23:8d:cc:a7:17:88:ad:5c:f8:3e:
4b:fc:86:93:93:6e:f4:1e:cb:20:3d:7d:96:c8:dd:
68:0d:c0:9c:45:35:27:12:1f:26:90:21:77:8d:41:
26:3b:a9:46:75:3f:3c:55:a7:70:b7:0f:ab:0c:45:
c4:c9:7f:f9:c3:32:e7:2a:8e:26:5c:42:9e:a7:c8:
98:95:d4:2e:98:fb:eb:11:7f:56:1d:82:00:0e:16:
f0:a4:33:b3:43:82:b7:c7:e3:4d:eb:b1:13:19:d0:
94:b5:91:ea:a1:b9:3a:c8:18:8b:c3:2a:de:f3:c3:
39:7a:f8:48:84:2a:8f:13:91:a3:a8:e8:56:9a:f2:
5c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EE:A9:48:D6:F4:8A:AD:89:77:44:34:9B:64:32:26:54:7E:D5:6D
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141576.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.160.147.0/24
Signature Algorithm: sha256WithRSAEncryption
34:c7:f2:ed:66:f9:95:d8:71:0e:7a:39:ec:34:da:1f:30:ef:
c4:2e:92:d2:d2:8c:aa:01:7e:c4:62:70:c3:c4:62:04:61:7f:
73:71:9c:77:45:49:81:6b:3b:9c:3e:4a:65:99:68:29:89:03:
33:bd:71:bf:c2:02:8c:3c:bb:be:fe:25:20:79:62:a0:a3:a8:
0f:45:07:ea:79:c8:9f:47:cc:84:6d:c8:c8:f6:33:f8:fa:59:
34:27:dd:0b:7b:b0:eb:fa:fe:f2:ed:25:ad:e8:05:29:fe:b7:
bf:9c:6c:42:06:71:26:7d:d3:1e:5c:ac:a3:a0:51:92:53:bc:
ac:a9:fc:a3:1c:85:22:8b:8b:59:ed:d4:a2:d7:5a:88:dc:68:
71:08:55:51:3c:85:fd:13:14:4a:13:95:71:61:87:db:45:e4:
1a:46:68:f0:1d:ae:d4:8f:5f:a0:b1:fa:18:67:34:15:36:6b:
86:b7:95:1e:ce:f1:0d:a2:c4:0e:43:ff:1b:cc:f7:7e:a1:70:
d0:be:fe:00:a9:35:ba:d4:ea:3f:c3:ca:bc:dd:49:af:be:e2:
f0:5d:9c:69:17:aa:95:dd:a5:03:24:51:bb:7b:c6:d2:15:02:
80:b1:75:80:da:a7:a7:9c:2b:86:0e:38:22:47:25:e8:f8:e4:
4f:18:cf:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:50:21 2025 by rpki-client