This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141929.roa
File: AS141929.roa (raw, json)
Hash identifier: vWZdLtbwiBGaToiqd33+2N/kEJbkI8/tnN6QwahgU8M=
Subject key identifier: 4D:7D:E7:C5:C6:0D:E4:34:57:C2:8C:F2:39:E1:C8:11:97:07:10:99
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 694AF7D459E4C704CAFE16EAD0CDAB41790BE766
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141929.roa
Signing time: Tue 11 Nov 2025 06:00:04 +0000
ROA not before: Tue 11 Nov 2025 05:55:04 +0000
ROA not after: Tue 10 Nov 2026 06:00:04 +0000
asID: 141929
IP address blocks: 103.166.32.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:4a:f7:d4:59:e4:c7:04:ca:fe:16:ea:d0:cd:ab:41:79:0b:e7:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Nov 11 05:55:04 2025 GMT
Not After : Nov 10 06:00:04 2026 GMT
Subject: CN=4D7DE7C5C60DE43457C28CF239E1C81197071099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d7:29:e9:2f:0d:e8:b4:ec:54:bf:25:9c:39:
9e:b9:f5:17:21:d9:79:f3:99:00:66:60:a5:d3:4b:
03:e3:d6:6e:d4:ca:30:66:ee:36:72:a5:99:49:16:
34:d5:5a:84:08:cc:4c:bc:6b:fd:4d:80:97:cc:2f:
d8:0f:c3:68:81:fc:f4:85:a2:92:7a:6e:5e:dd:80:
1a:2d:eb:44:0b:1e:da:db:9d:54:0f:1e:5e:b6:2d:
8c:a9:29:6c:ee:97:2c:58:c5:3f:d6:72:9e:fc:f5:
ec:db:7b:36:67:74:a1:16:76:2a:9d:ea:96:b6:59:
e9:e2:72:53:9a:ae:cd:d7:e3:b5:13:42:b1:12:05:
da:98:88:aa:5d:ec:26:0c:44:80:ba:7c:f2:d6:56:
e2:9a:8c:e0:11:c6:00:fd:04:40:d7:dc:30:92:56:
35:e3:b5:5e:a2:a0:2c:3f:db:4c:c6:64:f9:31:67:
19:15:f3:2a:fc:fa:ef:85:a4:14:88:4b:59:1a:2f:
bb:eb:3b:e4:18:c0:2c:4a:06:19:bf:0d:10:0d:0e:
23:8f:d6:37:0f:69:b2:83:c0:15:2b:a6:fa:0e:9c:
8b:94:c5:69:36:16:47:10:82:22:54:b1:20:f7:6e:
a6:03:79:de:b6:f5:af:ab:7b:3b:58:35:31:cf:fc:
3b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:7D:E7:C5:C6:0D:E4:34:57:C2:8C:F2:39:E1:C8:11:97:07:10:99
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141929.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.166.32.0/23
Signature Algorithm: sha256WithRSAEncryption
60:09:6f:95:50:0c:f3:7e:4d:ba:73:cc:7b:3d:fa:26:6b:b7:
c8:5b:c8:ed:e8:c6:69:f1:74:db:b8:bf:b9:a0:72:96:8c:38:
9d:9f:de:ad:c4:16:31:33:5b:57:e9:cc:6b:77:f2:d6:18:c4:
93:c3:a6:b1:da:09:24:cd:96:3c:11:cb:d6:7d:64:9d:75:d7:
bc:5c:4f:1a:14:8e:19:92:a2:a0:28:a4:ec:31:fa:b9:76:99:
c7:41:ec:10:54:8b:e4:ec:11:2d:0c:9d:79:84:79:6c:bc:f3:
26:8d:09:b9:1e:c0:9b:62:cf:e0:69:fa:8c:33:18:a7:d1:21:
8e:f9:a3:e8:76:54:ec:5a:ff:5c:43:5a:72:c7:f9:27:4b:45:
27:f9:ef:65:d1:8f:d1:3b:d1:93:67:2a:75:32:3e:ae:6c:b5:
c7:00:ee:75:fa:1b:d3:8f:63:3c:46:a6:c3:e0:c3:fd:85:ca:
0c:69:62:92:61:e0:78:22:0b:7c:12:48:4e:79:ba:30:16:4c:
8e:70:db:40:27:bf:f4:6d:80:fe:a9:30:e1:c7:eb:bc:d2:f7:
64:5b:21:61:cb:5f:1e:1f:b5:d0:6c:11:ff:0f:ad:80:88:e0:
0c:46:43:02:1e:6a:37:8f:be:34:3c:8e:6f:31:59:6d:32:5e:
6c:4c:02:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:50:53 2025 by rpki-client