This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142221.roa File: AS142221.roa (raw, json) Hash identifier: TLW6KUNt7+dSC3dxr2wtxzjbY4+/Jq9tHcY+eFXzdNk= Subject key identifier: 67:21:02:16:FC:A8:F2:1B:CC:62:C9:A8:95:CA:E4:99:49:E8:AE:F9 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 46D0C7F6CB9DDE96E4ADE33C6568098CB58451BD Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142221.roa Signing time: Wed 21 Jan 2026 10:58:29 +0000 ROA not before: Wed 21 Jan 2026 10:53:29 +0000 ROA not after: Wed 20 Jan 2027 10:58:29 +0000 asID: 142221 IP address blocks: 2001:df6:9540::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:d0:c7:f6:cb:9d:de:96:e4:ad:e3:3c:65:68:09:8c:b5:84:51:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 21 10:53:29 2026 GMT Not After : Jan 20 10:58:29 2027 GMT Subject: CN=67210216FCA8F21BCC62C9A895CAE49949E8AEF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:02:a7:c9:03:dd:99:22:f3:dc:46:38:0f:f3: 04:de:2a:ba:53:ea:61:9c:a7:0a:57:66:5c:1a:ac: 51:9e:cf:93:58:a1:af:4b:04:57:00:5d:4f:83:27: 6a:9d:d2:19:5e:e8:7e:3c:14:3f:ba:99:d0:02:36: 7f:93:59:7e:02:62:20:8e:46:87:ec:ce:5d:80:b3: 88:66:1c:c5:fb:fc:29:06:c4:eb:cb:bf:7a:7d:c0: 90:a6:17:c1:a1:62:ee:8c:b9:a2:2d:3f:02:c8:a9: 52:e4:51:93:28:05:85:98:9c:8d:e5:66:c2:07:73: 66:0a:5a:1b:52:ce:65:3e:7d:e7:b3:f9:b8:72:9e: 2b:4b:1f:b1:63:35:d1:9a:f4:ef:1a:c2:78:81:03: ef:21:eb:3c:ca:c7:1c:90:2a:a1:3d:78:45:3b:c4: dd:28:38:1a:04:40:de:07:4a:35:9a:93:c7:75:7d: ea:bb:f8:f0:4f:d2:e8:86:d9:8e:4b:13:a2:23:c3: 75:3b:68:e3:4a:0a:8c:72:49:47:14:5a:cf:64:9d: 21:23:80:ac:e9:7e:6a:62:dd:a3:72:18:27:d1:43: f8:db:21:db:9f:0e:c9:02:05:1d:14:a9:20:a5:53: 8f:86:64:87:8a:ac:47:4d:6f:9a:dd:46:5d:06:da: 0c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:21:02:16:FC:A8:F2:1B:CC:62:C9:A8:95:CA:E4:99:49:E8:AE:F9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142221.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:9540::/48 Signature Algorithm: sha256WithRSAEncryption 19:85:01:22:14:72:13:ba:c3:7e:a1:f1:1c:c0:00:f8:13:5b: 99:b3:b7:10:74:1b:86:a2:fb:46:15:4d:e1:ca:b9:67:84:67: a4:ef:1e:80:0a:a5:d6:8e:80:74:f9:7c:6b:b4:42:fe:44:2c: 2c:68:64:a6:48:3c:8a:89:1e:8a:d6:e4:dc:52:b8:49:c0:f2: 11:d2:f2:5c:87:86:5c:02:7c:af:65:41:9d:51:90:62:94:c6: d0:67:86:41:fd:f1:ae:27:b4:63:34:53:0f:30:90:56:c5:d4: 24:f4:a1:86:6d:cc:fb:0a:e2:87:20:a4:dd:4d:58:3c:da:df: 71:c2:33:e5:19:e9:7b:0e:30:33:2c:65:e5:2e:20:e0:62:f8: 8c:ac:6f:35:85:aa:2e:c2:d1:db:92:dc:49:bf:c8:38:75:5a: b5:d8:d7:7b:6b:a4:1f:59:a6:25:3f:47:22:f4:ff:02:60:50: a2:a1:60:73:46:4e:75:f8:12:43:fa:3e:32:e3:0a:e3:46:36: a2:4f:69:8e:82:d0:f8:2b:67:e4:b4:6b:f3:c2:51:fc:26:d3: 23:98:3e:73:8e:42:80:28:98:15:7a:5c:94:24:a9:4d:af:b8: 4a:72:19:6a:49:94:3a:2a:bb:e9:fa:76:2c:3a:bb:e5:29:bf: cd:2c:6d:c4 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIURtDH9sud3pbkreM8ZWgJjLWEUb0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDEyMTEwNTMyOVoX DTI3MDEyMDEwNTgyOVowMzExMC8GA1UEAxMoNjcyMTAyMTZGQ0E4RjIxQkNDNjJD OUE4OTVDQUU0OTk0OUU4QUVGOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN0Cp8kD3Zki89xGOA/zBN4qulPqYZynCldmXBqsUZ7Pk1ihr0sEVwBdT4Mn ap3SGV7ofjwUP7qZ0AI2f5NZfgJiII5Gh+zOXYCziGYcxfv8KQbE68u/en3AkKYX waFi7oy5oi0/AsipUuRRkygFhZicjeVmwgdzZgpaG1LOZT5957P5uHKeK0sfsWM1 0Zr07xrCeIED7yHrPMrHHJAqoT14RTvE3Sg4GgRA3gdKNZqTx3V96rv48E/S6IbZ jksToiPDdTto40oKjHJJRxRaz2SdISOArOl+amLdo3IYJ9FD+Nsh258OyQIFHRSp IKVTj4Zkh4qsR01vmt1GXQbaDNUCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBRnIQIW /KjyG8xiyaiVyuSZSeiu+TAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjIyMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfaVQDANBgkqhkiG9w0BAQsFAAOCAQEAGYUBIhRyE7rDfqHx HMAA+BNbmbO3EHQbhqL7RhVN4cq5Z4RnpO8egAql1o6AdPl8a7RC/kQsLGhkpkg8 iokeitbk3FK4ScDyEdLyXIeGXAJ8r2VBnVGQYpTG0GeGQf3xrie0YzRTDzCQVsXU JPShhm3M+wrihyCk3U1YPNrfccIz5Rnpew4wMyxl5S4g4GL4jKxvNYWqLsLR25Lc Sb/IOHVatdjXe2ukH1mmJT9HIvT/AmBQoqFgc0ZOdfgSQ/o+MuMK40Y2ok9pjoLQ +Ctn5LRr88JR/CbTI5g+c45CgCiYFXpclCSpTa+4SnIZakmUOiq76fp2LDq75Sm/ zSxtxA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:49:53 2026 by rpki-client