This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142206.roa
File: AS142206.roa (raw, json)
Hash identifier: cHShuE4nDoiR6JzrEk1+MK/Iz8StgztRQKOezL3kdHs=
Subject key identifier: 49:39:5F:CE:8E:69:D2:3F:4C:95:4E:2A:98:29:4A:8B:C5:D6:46:C7
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 0D6E379CD4789BC619620E261A23703B833B5A71
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142206.roa
Signing time: Fri 23 Jan 2026 01:13:26 +0000
ROA not before: Fri 23 Jan 2026 01:08:26 +0000
ROA not after: Fri 22 Jan 2027 01:13:26 +0000
asID: 142206
IP address blocks: 2001:df6:8c40::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:6e:37:9c:d4:78:9b:c6:19:62:0e:26:1a:23:70:3b:83:3b:5a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jan 23 01:08:26 2026 GMT
Not After : Jan 22 01:13:26 2027 GMT
Subject: CN=49395FCE8E69D23F4C954E2A98294A8BC5D646C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ce:9a:55:61:bb:74:e8:10:0a:cd:de:82:bf:
1f:28:68:58:f9:de:5d:4e:78:84:9b:98:48:0a:f5:
5c:4f:e4:b5:09:8b:31:1c:04:1f:ae:33:62:93:e0:
22:8e:6a:e2:98:44:03:90:b0:d4:32:c6:8d:a1:99:
fb:d2:3f:fc:da:6d:6b:5c:40:16:36:b2:1e:de:9d:
b4:e7:97:a1:16:a1:9e:c0:66:53:86:19:20:1b:09:
91:00:ae:cc:31:60:d6:c3:7e:74:4c:6c:47:87:ad:
89:7b:7c:b4:02:02:64:f9:a6:8f:08:ee:f8:80:d5:
06:a7:27:77:1f:72:82:ca:d5:80:63:43:ad:10:29:
a7:35:51:70:15:ea:d4:58:ff:64:95:f5:03:ea:c2:
d8:51:51:25:a7:f8:75:f3:5d:c5:e8:a2:b0:73:35:
36:eb:97:d4:88:50:61:02:8c:56:53:18:7f:28:ea:
3f:ad:4a:65:00:a5:8e:09:60:74:89:93:db:89:25:
f2:4e:d1:ae:5d:47:2b:61:dd:fe:34:eb:8e:fc:34:
38:6e:1e:8e:67:33:10:35:e4:2a:ea:65:0a:93:87:
94:f3:9c:7e:3f:5a:cb:87:d6:d4:9b:66:df:99:47:
e4:f7:43:c2:08:67:82:8b:79:44:79:db:da:f1:50:
37:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:39:5F:CE:8E:69:D2:3F:4C:95:4E:2A:98:29:4A:8B:C5:D6:46:C7
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142206.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:8c40::/48
Signature Algorithm: sha256WithRSAEncryption
2f:81:40:de:57:db:67:04:5f:11:58:38:3a:10:b6:c4:a9:e5:
1b:a4:be:88:c0:06:1b:a7:d7:d0:86:4d:17:b3:6e:b9:15:2b:
63:8b:f6:e1:1e:ab:31:05:3c:2b:4a:0a:c5:b1:44:cd:a1:a0:
94:aa:15:bd:3e:0c:04:b2:a7:21:bc:fd:d0:64:c3:24:54:10:
d1:43:b4:e1:b2:7d:20:88:3c:48:84:dc:22:4b:cc:c2:bd:38:
dc:c2:23:db:85:30:6e:97:0b:76:c3:80:b6:e3:ee:50:fb:89:
e9:15:8e:da:64:6d:a3:f3:f5:d6:fa:bd:f8:31:63:10:df:36:
b6:0c:ac:49:a9:e9:e1:ff:ad:87:61:85:5c:83:e3:2e:1c:e5:
88:9b:6b:20:1f:54:b0:85:bd:3f:a8:f3:e9:56:7b:c9:75:ce:
52:67:66:64:d3:56:0f:ff:b7:3f:3b:75:0f:ea:a3:1c:f3:e1:
3b:e0:72:94:15:26:b0:c9:80:35:80:1f:95:a1:19:74:27:c1:
cd:f9:46:e8:4a:db:8c:e4:84:e4:a1:73:6d:e6:97:20:5c:16:
b9:14:8a:42:b9:24:b6:6a:e8:a4:62:7b:51:b6:68:74:3f:56:
2f:05:9f:5e:e5:5c:26:c7:f5:e4:43:bd:1e:1b:3d:b8:00:23:
a5:76:d0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:49:53 2026 by rpki-client