This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142349.roa File: AS142349.roa (raw, json) Hash identifier: xq2NATYmafsrCxImbg61hNTzCOAzAGLEHo4zcVU0yII= Subject key identifier: 54:5F:B9:86:DD:D7:A6:2F:5E:C1:6F:86:7C:FF:E2:04:46:92:86:FF Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 712CB93F9C5E60536AC2C2DB62F74A2625083C46 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142349.roa Signing time: Thu 04 Dec 2025 09:00:00 +0000 ROA not before: Thu 04 Dec 2025 08:55:00 +0000 ROA not after: Thu 03 Dec 2026 09:00:00 +0000 asID: 142349 IP address blocks: 103.169.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:2c:b9:3f:9c:5e:60:53:6a:c2:c2:db:62:f7:4a:26:25:08:3c:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 4 08:55:00 2025 GMT Not After : Dec 3 09:00:00 2026 GMT Subject: CN=545FB986DDD7A62F5EC16F867CFFE204469286FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:89:50:98:a3:65:30:63:5f:bd:09:1b:04:e9: b8:ac:77:ec:a2:3a:02:97:7e:69:64:30:03:1b:63: 9e:23:bf:9c:33:67:e4:85:49:82:f7:e8:67:fb:09: 17:7d:48:30:02:de:88:72:a6:20:bb:b7:f0:bd:cc: 15:dd:71:41:63:32:96:86:21:38:c0:02:20:87:d0: 25:22:83:ab:ba:2d:0a:a1:4e:5b:5c:25:2f:68:e5: f1:36:9a:ef:00:1b:d8:02:60:5b:ac:00:39:dd:95: 51:47:6b:15:4d:d5:9d:32:94:19:55:70:e3:0b:45: 69:31:40:8d:3a:94:75:b0:46:ae:79:5f:31:0e:a4: ef:17:52:17:87:3a:3d:c8:9b:61:f6:9d:f6:63:20: 0b:29:1f:dd:19:94:58:ac:8a:3b:95:18:c2:ce:1f: 9a:68:e7:f9:66:5e:ec:73:da:67:44:1f:99:a9:e3: 6d:b4:49:84:fc:15:33:e4:13:a4:96:9e:ef:a2:a4: d5:75:24:64:49:69:44:43:38:49:e2:e9:53:2b:63: f9:17:ed:fa:93:45:b7:4e:1c:fc:87:42:2a:b8:22: bc:20:1f:1d:24:60:72:89:c5:51:8e:13:58:04:e6: 86:aa:45:7e:ea:a3:33:6f:1b:5d:44:48:b1:94:20: e9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:5F:B9:86:DD:D7:A6:2F:5E:C1:6F:86:7C:FF:E2:04:46:92:86:FF X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142349.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.71.0/24 Signature Algorithm: sha256WithRSAEncryption 50:12:27:03:6a:c8:39:00:88:cc:41:67:7a:30:e4:40:00:db: 07:21:ec:c6:3c:85:a9:25:77:92:91:b8:79:e1:7a:7f:c0:8c: b8:a4:f0:70:3c:76:9c:f9:82:2c:a5:fc:62:e1:da:c5:cd:c8: c7:83:72:b3:36:d6:d7:1f:9a:89:2b:a5:10:97:1e:48:fc:c8: 2b:91:74:94:5d:3e:ee:e7:d3:fe:6d:06:e8:0f:51:2c:e3:69: f6:2d:61:7a:d9:29:89:c6:5b:60:40:26:ff:f0:58:e6:4c:54: 75:a4:c2:31:70:a3:98:b9:75:7e:c0:44:9a:ab:d4:42:7e:8e: 9c:9f:5b:71:4e:56:24:51:22:ec:3d:6b:25:fb:9f:d2:34:59: 41:57:c0:66:86:cb:46:66:9e:87:c1:85:d7:1c:ac:ef:d1:d5: 43:64:c5:74:b4:d4:48:b5:49:1d:db:42:35:82:ee:22:ef:cf: 19:07:3e:ce:40:8e:10:62:db:d7:1d:d2:49:b8:20:50:33:31: 11:d8:aa:98:53:fc:e7:d6:68:27:26:cb:e2:0a:7e:42:f1:94: fa:cd:98:30:c3:e6:3a:58:8a:02:27:eb:34:98:af:05:a9:6c: 92:0d:47:30:0f:95:7f:e1:1e:a0:75:18:6a:51:65:d9:54:12: d3:10:2c:1b -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUcSy5P5xeYFNqwsLbYvdKJiUIPEYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIwNDA4NTUwMFoX DTI2MTIwMzA5MDAwMFowMzExMC8GA1UEAxMoNTQ1RkI5ODZEREQ3QTYyRjVFQzE2 Rjg2N0NGRkUyMDQ0NjkyODZGRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPSJUJijZTBjX70JGwTpuKx37KI6Apd+aWQwAxtjniO/nDNn5IVJgvfoZ/sJ F31IMALeiHKmILu38L3MFd1xQWMyloYhOMACIIfQJSKDq7otCqFOW1wlL2jl8Taa 7wAb2AJgW6wAOd2VUUdrFU3VnTKUGVVw4wtFaTFAjTqUdbBGrnlfMQ6k7xdSF4c6 PcibYfad9mMgCykf3RmUWKyKO5UYws4fmmjn+WZe7HPaZ0QfmanjbbRJhPwVM+QT pJae76Kk1XUkZElpREM4SeLpUytj+Rft+pNFt04c/IdCKrgivCAfHSRgconFUY4T WATmhqpFfuqjM28bXURIsZQg6dcCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRUX7mG 3demL17Bb4Z8/+IERpKG/zAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjM0OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGepRzANBgkqhkiG9w0BAQsFAAOCAQEAUBInA2rIOQCIzEFnejDk QADbByHsxjyFqSV3kpG4eeF6f8CMuKTwcDx2nPmCLKX8YuHaxc3Ix4NyszbW1x+a iSulEJceSPzIK5F0lF0+7ufT/m0G6A9RLONp9i1hetkpicZbYEAm//BY5kxUdaTC MXCjmLl1fsBEmqvUQn6OnJ9bcU5WJFEi7D1rJfuf0jRZQVfAZobLRmaeh8GF1xys 79HVQ2TFdLTUSLVJHdtCNYLuIu/PGQc+zkCOEGLb1x3SSbggUDMxEdiqmFP859Zo JybL4gp+QvGU+s2YMMPmOliKAifrNJivBalskg1HMA+Vf+EeoHUYalFl2VQS0xAs Gw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:48:24 2025 by rpki-client