This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141961.roa File: AS141961.roa (raw, json) Hash identifier: AV5RjLj5TqCg6ChSZo/Pf8sy0rMN0ER8jkCiMsH/doY= Subject key identifier: C1:B4:BB:24:8A:A3:13:8F:70:C9:7B:1A:5E:DB:E1:89:94:5A:66:0D Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0894839ABB3D9C179939DB2CF2F508E247588C02 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141961.roa Signing time: Tue 11 Nov 2025 06:00:18 +0000 ROA not before: Tue 11 Nov 2025 05:55:18 +0000 ROA not after: Tue 10 Nov 2026 06:00:18 +0000 asID: 141961 IP address blocks: 103.166.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:94:83:9a:bb:3d:9c:17:99:39:db:2c:f2:f5:08:e2:47:58:8c:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 11 05:55:18 2025 GMT Not After : Nov 10 06:00:18 2026 GMT Subject: CN=C1B4BB248AA3138F70C97B1A5EDBE189945A660D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:39:72:52:fc:92:72:b3:61:be:03:24:9b:73: c5:6c:03:2f:25:df:d7:56:1e:23:36:ef:ab:a3:e0: 82:bb:34:02:24:30:69:44:9f:88:8c:8c:37:3c:49: 13:34:ce:81:67:56:58:4d:07:3e:6c:9f:c8:1b:c9: 37:44:47:32:d7:5a:79:38:a2:03:1b:83:0d:f3:e5: 36:74:c0:35:3b:c9:9a:15:cf:39:3f:1e:24:67:3a: 79:87:66:09:91:2d:e1:20:35:e3:ca:fc:46:09:03: e4:46:e5:e1:30:c9:38:55:35:c5:ca:77:c0:3a:5a: 10:04:85:4c:a2:06:72:6f:16:2c:98:eb:57:0b:d6: 6b:20:c3:a0:fb:be:92:4d:2c:ba:2c:9e:2b:c4:59: 59:2f:8e:eb:5e:2d:71:31:a2:0d:fc:07:74:3a:21: 20:00:dc:34:b7:2d:9f:1e:ab:e8:94:94:d4:93:f7: 75:9b:38:2c:03:39:c7:67:a4:b1:ee:bc:92:c9:f6: 91:de:c5:3b:e8:8f:93:0d:ae:02:d9:05:3b:e8:f7: 4a:48:6c:59:52:b0:48:82:56:68:23:56:b4:fd:27: a7:0d:bc:9e:24:9b:b9:d3:62:c5:31:c0:f8:0b:72: 42:dc:fe:19:df:df:10:5f:ec:9e:46:79:6a:9e:6b: 77:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:B4:BB:24:8A:A3:13:8F:70:C9:7B:1A:5E:DB:E1:89:94:5A:66:0D X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141961.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.192.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:d0:9f:eb:ab:43:9d:4c:65:1e:70:c3:a5:20:51:e3:71:98: 5f:7b:66:3f:a8:70:4d:ff:98:30:bc:42:b5:ca:29:d2:42:96: 3a:69:79:2e:7f:b7:a9:16:ab:39:a7:0c:4a:aa:a4:57:ed:96: 89:3d:bd:b5:a8:c1:a0:c4:22:8c:d7:ee:37:fe:43:2b:89:e8: 26:10:47:b8:f9:8a:a8:10:fc:16:ad:92:2b:a0:c1:a8:f7:30: 3b:02:57:4d:4c:98:b9:3a:9a:06:06:90:51:b4:04:2b:5e:25: d3:ec:4f:e8:c2:61:16:3e:1b:ce:84:75:63:32:23:0e:e6:89: 31:ae:33:ea:0e:81:9c:5c:02:b7:c5:9a:bd:13:3a:b0:3e:ab: 0e:2c:bf:9f:50:19:38:9d:5e:a3:12:08:41:8d:30:67:91:99: dc:ab:42:78:67:ee:6d:06:c3:ea:e2:89:b3:46:72:63:80:19: d6:9d:cc:48:ae:2a:18:68:7f:d1:81:9e:bc:c1:b7:4d:2d:19: db:4e:5e:7e:51:c5:3a:1c:e7:5a:f8:2a:10:ad:eb:a0:ed:69: 16:4f:bc:80:52:24:de:2e:0f:88:65:eb:2f:d8:e0:e6:8e:8c: 46:4a:94:e0:e4:2e:65:98:e4:e3:75:59:c6:9f:2f:06:45:d9: 1f:59:4e:bb -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUCJSDmrs9nBeZOdss8vUI4kdYjAIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTA1NTUxOFoX DTI2MTExMDA2MDAxOFowMzExMC8GA1UEAxMoQzFCNEJCMjQ4QUEzMTM4RjcwQzk3 QjFBNUVEQkUxODk5NDVBNjYwRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL05clL8knKzYb4DJJtzxWwDLyXf11YeIzbvq6Pggrs0AiQwaUSfiIyMNzxJ EzTOgWdWWE0HPmyfyBvJN0RHMtdaeTiiAxuDDfPlNnTANTvJmhXPOT8eJGc6eYdm CZEt4SA148r8RgkD5Ebl4TDJOFU1xcp3wDpaEASFTKIGcm8WLJjrVwvWayDDoPu+ kk0suiyeK8RZWS+O614tcTGiDfwHdDohIADcNLctnx6r6JSU1JP3dZs4LAM5x2ek se68ksn2kd7FO+iPkw2uAtkFO+j3SkhsWVKwSIJWaCNWtP0npw28niSbudNixTHA +AtyQtz+Gd/fEF/snkZ5ap5rdxcCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTBtLsk iqMTj3DJexpe2+GJlFpmDTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTk2MS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGemwDANBgkqhkiG9w0BAQsFAAOCAQEAj9Cf66tDnUxlHnDDpSBR 43GYX3tmP6hwTf+YMLxCtcop0kKWOml5Ln+3qRarOacMSqqkV+2WiT29tajBoMQi jNfuN/5DK4noJhBHuPmKqBD8Fq2SK6DBqPcwOwJXTUyYuTqaBgaQUbQEK14l0+xP 6MJhFj4bzoR1YzIjDuaJMa4z6g6BnFwCt8WavRM6sD6rDiy/n1AZOJ1eoxIIQY0w Z5GZ3KtCeGfubQbD6uKJs0ZyY4AZ1p3MSK4qGGh/0YGevMG3TS0Z205eflHFOhzn WvgqEK3roO1pFk+8gFIk3i4PiGXrL9jg5o6MRkqU4OQuZZjk43VZxp8vBkXZH1lO uw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:50:20 2025 by rpki-client