This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141621.roa File: AS141621.roa (raw, json) Hash identifier: RCkH8vusQJvok0PUXTzzq3VdL6avLkJL9fQLyMdduVM= Subject key identifier: 30:ED:B0:7A:26:85:20:75:BE:BF:2D:23:C1:B5:86:83:1A:F8:2F:5C Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 48DD1936150A1848F782EBE5F8C4DE018F43E768 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141621.roa Signing time: Tue 11 Nov 2025 06:00:12 +0000 ROA not before: Tue 11 Nov 2025 05:55:12 +0000 ROA not after: Tue 10 Nov 2026 06:00:12 +0000 asID: 141621 IP address blocks: 103.161.164.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:dd:19:36:15:0a:18:48:f7:82:eb:e5:f8:c4:de:01:8f:43:e7:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 11 05:55:12 2025 GMT Not After : Nov 10 06:00:12 2026 GMT Subject: CN=30EDB07A26852075BEBF2D23C1B586831AF82F5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:61:8c:2f:38:9e:66:a2:9d:ad:83:69:90:b0: df:dd:6a:4a:0b:70:97:96:b6:65:3b:50:7c:bb:77: 54:88:04:3a:36:f8:05:d1:a0:7c:83:59:9f:3c:cb: f4:1f:48:da:03:d0:cc:21:d7:85:46:f0:c3:98:b8: 99:be:28:c8:51:4f:7c:94:06:9e:c3:93:69:22:1e: 3b:65:b8:d2:85:bc:a9:98:15:98:13:a3:c8:13:58: d6:34:78:84:c6:3f:72:17:38:8d:c1:12:6e:ea:35: 23:0c:55:66:39:35:f6:c3:bd:67:5d:9c:9b:87:36: cb:39:fa:96:c6:05:cb:81:5c:93:ea:ca:25:25:a0: 1e:cd:fd:98:16:68:56:e6:ed:25:5a:b3:1e:e2:12: cc:f9:6e:23:2b:39:21:07:56:20:b9:79:8c:82:a7: 6a:64:35:08:77:4c:18:1e:4d:62:32:ed:10:4d:bd: 4e:6b:d0:fb:f9:da:0e:95:71:7a:b3:d3:a0:a7:97: d6:6a:99:15:87:52:c3:23:8e:68:d7:ce:d6:f5:f7: b9:4a:b5:47:2c:7b:03:db:b2:04:3b:5f:09:76:01: 60:5a:fd:2f:c4:bc:40:54:68:3f:4e:e2:df:1e:9a: e6:56:9d:87:87:3d:7e:63:e3:62:7b:36:32:77:02: 2c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:ED:B0:7A:26:85:20:75:BE:BF:2D:23:C1:B5:86:83:1A:F8:2F:5C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141621.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.164.0/23 Signature Algorithm: sha256WithRSAEncryption 95:c5:d6:cb:d1:fb:94:b1:67:e3:af:3c:94:70:9c:61:fe:b1: 44:d0:41:c8:9d:81:3f:e4:5e:9b:a2:fb:af:7b:0c:dc:b8:f1: 80:26:23:1a:c4:34:dd:77:2e:16:a5:ef:f9:7e:d4:60:34:be: 8f:be:9d:4a:72:b9:9e:94:1e:c0:85:72:eb:db:6b:23:86:3f: 8c:a8:16:84:ae:33:3a:75:06:c1:12:24:2a:ee:88:27:d8:4e: 70:97:5e:c8:c4:00:a6:1d:62:c2:6f:01:4b:7f:c2:fb:00:48: 78:fd:3b:79:39:b4:00:4b:eb:88:0e:6c:28:b7:6f:bd:2a:73: 4b:60:d7:ec:74:98:68:51:ae:25:07:02:8d:c5:d9:07:4f:c5: b5:7f:02:6f:53:4f:e2:06:79:d0:80:ae:8f:c3:e4:bc:5c:bc: 08:a3:18:67:b2:0a:85:1c:ba:1b:6e:6d:0d:23:c2:18:3d:2e: 51:e4:77:4f:b6:92:f9:13:d6:3d:6f:3b:3a:6b:88:e4:a6:76: 9e:5b:dc:4e:96:56:eb:b0:68:b6:8d:3a:26:94:7a:1a:0c:80: 86:56:9a:fc:bd:a8:7b:a6:5f:e9:f9:e3:1b:bf:0b:27:70:c0: ca:e2:c7:1d:fa:fc:5d:eb:c1:2e:31:a1:62:e0:a6:78:2f:61: 8a:25:8f:96 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUSN0ZNhUKGEj3guvl+MTeAY9D52gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTA1NTUxMloX DTI2MTExMDA2MDAxMlowMzExMC8GA1UEAxMoMzBFREIwN0EyNjg1MjA3NUJFQkYy RDIzQzFCNTg2ODMxQUY4MkY1QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK5hjC84nmaina2DaZCw391qSgtwl5a2ZTtQfLt3VIgEOjb4BdGgfINZnzzL 9B9I2gPQzCHXhUbww5i4mb4oyFFPfJQGnsOTaSIeO2W40oW8qZgVmBOjyBNY1jR4 hMY/chc4jcESbuo1IwxVZjk19sO9Z12cm4c2yzn6lsYFy4Fck+rKJSWgHs39mBZo VubtJVqzHuISzPluIys5IQdWILl5jIKnamQ1CHdMGB5NYjLtEE29TmvQ+/naDpVx erPToKeX1mqZFYdSwyOOaNfO1vX3uUq1Ryx7A9uyBDtfCXYBYFr9L8S8QFRoP07i 3x6a5ladh4c9fmPjYns2MncCLBkCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQw7bB6 JoUgdb6/LSPBtYaDGvgvXDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTYyMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWehpDANBgkqhkiG9w0BAQsFAAOCAQEAlcXWy9H7lLFn4688lHCc Yf6xRNBByJ2BP+Rem6L7r3sM3LjxgCYjGsQ03XcuFqXv+X7UYDS+j76dSnK5npQe wIVy69trI4Y/jKgWhK4zOnUGwRIkKu6IJ9hOcJdeyMQAph1iwm8BS3/C+wBIeP07 eTm0AEvriA5sKLdvvSpzS2DX7HSYaFGuJQcCjcXZB0/FtX8Cb1NP4gZ50ICuj8Pk vFy8CKMYZ7IKhRy6G25tDSPCGD0uUeR3T7aS+RPWPW87OmuI5KZ2nlvcTpZW67Bo to06JpR6GgyAhlaa/L2oe6Zf6fnjG78LJ3DAyuLHHfr8XevBLjGhYuCmeC9hiiWP lg== -----END CERTIFICATE-----Generated at Sun Dec 7 01:36:16 2025 by rpki-client