This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141944.roa File: AS141944.roa (raw, json) Hash identifier: +Qo0ZAxoJ/XCmbFB51zskq0GRAD3f1LgazrwpO4Ppy0= Subject key identifier: 3A:B0:F0:80:C8:F4:30:58:F4:6B:7F:8F:7E:5B:8B:AF:D1:26:0F:BD Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5A6E23DC1647B01DB261BA8444ACEBCB9DFD5254 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141944.roa Signing time: Tue 11 Nov 2025 06:00:05 +0000 ROA not before: Tue 11 Nov 2025 05:55:05 +0000 ROA not after: Tue 10 Nov 2026 06:00:05 +0000 asID: 141944 IP address blocks: 103.166.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:6e:23:dc:16:47:b0:1d:b2:61:ba:84:44:ac:eb:cb:9d:fd:52:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 11 05:55:05 2025 GMT Not After : Nov 10 06:00:05 2026 GMT Subject: CN=3AB0F080C8F43058F46B7F8F7E5B8BAFD1260FBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a3:d2:10:ae:f3:aa:c8:88:3b:e6:97:e0:b8: 45:cc:49:e0:f4:5d:e6:b6:28:e0:69:f0:9c:0d:12: b3:e3:80:23:6d:c6:72:25:a6:38:f2:b5:60:7e:b4: 88:9b:7e:e3:79:1f:03:4d:26:8f:94:74:4b:d3:d3: 91:ef:05:7a:74:e5:c4:49:80:88:a5:8c:6d:34:ef: b1:1d:4c:cc:e3:1b:19:a5:14:9a:47:58:44:33:50: 22:08:2b:c4:f4:58:78:2d:8a:61:05:7c:b6:be:85: 54:c3:99:5b:a2:c7:77:88:cd:9b:93:e2:75:97:57: 04:3c:db:59:3d:5d:00:54:81:7b:b7:3a:5e:c0:64: 8a:8a:94:94:52:15:26:7c:d1:4a:bd:74:f9:65:22: 60:cf:f2:5a:f7:54:c8:40:33:23:c7:f2:33:48:e8: 88:48:8b:de:c3:5e:1f:2f:9b:18:e0:17:25:e1:54: cd:7e:25:00:58:fe:5e:7c:b9:b5:1b:9e:42:c3:f1: 27:9b:26:aa:20:35:e0:9e:a2:1b:1c:df:6b:ba:d4: 79:dd:50:13:3c:8d:ca:d8:75:ef:1b:51:ae:74:43: e1:b9:2a:f8:2e:3b:2e:5a:70:ab:a0:f4:7f:49:54: 2f:f3:27:ec:7c:51:8f:16:d9:c7:db:3c:72:22:a2: 94:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B0:F0:80:C8:F4:30:58:F4:6B:7F:8F:7E:5B:8B:AF:D1:26:0F:BD X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141944.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.134.0/24 Signature Algorithm: sha256WithRSAEncryption 39:95:7e:c2:2e:28:5a:2d:fa:0f:c5:66:ab:72:e6:59:c5:9c: e9:4a:0f:d2:17:c2:34:af:5f:58:7a:e0:f7:1b:82:a1:f0:9a: 7e:0a:e8:94:18:38:1a:9e:66:eb:be:88:00:95:76:d0:66:6a: 67:61:c8:8c:53:da:8a:d9:42:13:a8:ca:1e:7a:00:d7:e0:9b: 5e:58:9b:e7:a2:5a:68:4f:12:9d:7d:00:b9:31:30:00:da:2a: c6:20:07:08:89:8a:b9:0c:b4:d2:8b:47:83:46:51:fe:95:2c: da:0e:29:30:50:c0:9f:6c:9f:94:2c:31:f6:09:0a:e1:2e:eb: c5:50:87:57:20:5c:ae:22:8b:e1:10:42:44:6d:b9:ae:80:83: 4c:da:33:5e:06:58:3c:75:02:2e:08:67:37:ad:a6:a6:8a:91: 80:9e:ad:bc:8b:20:1c:ab:c7:b1:99:c0:bc:6a:84:11:a2:00: 2a:0a:29:3a:be:f7:6b:c6:f9:59:b7:c5:7f:82:e6:49:23:52: b5:7e:4d:92:bd:1f:8a:62:b4:8a:37:a2:d6:44:38:52:d7:b9: 3d:49:ce:eb:8b:68:e3:18:25:ea:77:19:61:67:90:9a:59:fb: dc:2a:04:c0:c7:47:b9:74:f2:15:ee:3a:4e:20:29:8d:2f:dc: 8c:e2:9b:a8 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUWm4j3BZHsB2yYbqERKzry539UlQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTA1NTUwNVoX DTI2MTExMDA2MDAwNVowMzExMC8GA1UEAxMoM0FCMEYwODBDOEY0MzA1OEY0NkI3 RjhGN0U1QjhCQUZEMTI2MEZCRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANCj0hCu86rIiDvml+C4RcxJ4PRd5rYo4GnwnA0Ss+OAI23GciWmOPK1YH60 iJt+43kfA00mj5R0S9PTke8FenTlxEmAiKWMbTTvsR1MzOMbGaUUmkdYRDNQIggr xPRYeC2KYQV8tr6FVMOZW6LHd4jNm5PidZdXBDzbWT1dAFSBe7c6XsBkioqUlFIV JnzRSr10+WUiYM/yWvdUyEAzI8fyM0joiEiL3sNeHy+bGOAXJeFUzX4lAFj+Xny5 tRueQsPxJ5smqiA14J6iGxzfa7rUed1QEzyNyth17xtRrnRD4bkq+C47Llpwq6D0 f0lUL/Mn7HxRjxbZx9s8ciKilPkCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQ6sPCA yPQwWPRrf49+W4uv0SYPvTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTk0NC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGemhjANBgkqhkiG9w0BAQsFAAOCAQEAOZV+wi4oWi36D8Vmq3Lm WcWc6UoP0hfCNK9fWHrg9xuCofCafgrolBg4Gp5m676IAJV20GZqZ2HIjFPaitlC E6jKHnoA1+CbXlib56JaaE8SnX0AuTEwANoqxiAHCImKuQy00otHg0ZR/pUs2g4p MFDAn2yflCwx9gkK4S7rxVCHVyBcriKL4RBCRG25roCDTNozXgZYPHUCLghnN62m poqRgJ6tvIsgHKvHsZnAvGqEEaIAKgopOr73a8b5WbfFf4LmSSNStX5Nkr0fimK0 ijei1kQ4Ute5PUnO64to4xgl6ncZYWeQmln73CoEwMdHuXTyFe46TiApjS/cjOKb qA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:36:01 2025 by rpki-client