This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38773.roa File: AS38773.roa (raw, json) Hash identifier: reiOSqBMZhDo9eAhSvWgH9N4A5Q7uEBSn4KxmrdGnII= Subject key identifier: A9:B7:2C:5A:36:84:B4:C9:C7:71:BD:06:31:71:26:95:BB:70:F4:D3 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0BFE0386C9ECAA3E88699348692C419FD55F9E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38773.roa Signing time: Tue 11 Nov 2025 06:00:00 +0000 ROA not before: Tue 11 Nov 2025 05:55:00 +0000 ROA not after: Tue 10 Nov 2026 06:00:00 +0000 asID: 38773 IP address blocks: 114.141.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:fe:03:86:c9:ec:aa:3e:88:69:93:48:69:2c:41:9f:d5:5f:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 11 05:55:00 2025 GMT Not After : Nov 10 06:00:00 2026 GMT Subject: CN=A9B72C5A3684B4C9C771BD0631712695BB70F4D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:dd:0f:8a:0d:c2:90:d4:84:04:9b:5b:1e:65: 1e:92:b6:1e:04:b9:e4:aa:ff:dc:6e:2d:70:bd:06: 4e:f9:c9:5f:65:5b:e6:3d:8f:87:19:12:3d:6b:01: c0:c0:69:90:c7:c3:f7:c5:a6:de:15:ab:25:3b:b4: 21:64:79:65:38:6f:85:6e:41:53:d0:23:09:e6:1b: 3d:0a:5a:08:e7:d3:f2:4e:b8:3b:d4:1d:93:75:5b: d8:8c:bf:fe:a7:d5:e6:03:85:a8:07:93:3c:ae:92: 05:53:37:99:6a:25:9b:0f:ee:71:9b:ce:dd:ab:ab: a6:94:aa:b8:c6:5b:3e:c8:b1:2c:3c:f0:29:57:60: 5c:b2:0c:00:d6:ea:d1:3c:2f:a4:d6:06:83:49:20: 7f:e3:7f:38:d7:f4:ae:bb:19:6b:eb:1e:82:24:81: 0f:e6:18:cc:79:f2:f4:6d:eb:99:e8:99:4e:4e:7c: 92:54:4b:18:03:e1:74:93:7b:9f:5f:14:97:23:68: b0:1d:58:31:98:f4:6e:6e:31:86:6f:90:6e:1d:93: 0a:9c:af:27:e9:4b:c0:26:f3:75:b7:91:24:33:22: 8d:fa:51:53:a3:66:1e:1a:98:a4:5c:70:ab:ce:d6: 25:5e:e2:85:f5:7d:bd:c6:0e:82:e9:71:71:d1:ee: 9a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B7:2C:5A:36:84:B4:C9:C7:71:BD:06:31:71:26:95:BB:70:F4:D3 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38773.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.141.88.0/21 Signature Algorithm: sha256WithRSAEncryption 16:47:67:1a:7c:6d:3a:7b:87:1a:79:87:d3:4c:88:9e:2d:8d: a8:13:96:89:a9:cd:2a:a6:78:df:90:b8:05:02:04:fb:d0:3d: a6:93:80:53:a5:b8:aa:ca:2c:53:81:4e:d9:af:7d:18:5d:50: 95:21:02:b8:1c:fc:46:c2:e2:12:45:00:26:21:04:5e:ee:15: 40:a4:88:ad:56:56:94:b3:7c:8c:9f:fa:0b:08:4c:f2:f0:17: d6:48:03:57:26:f1:91:a4:d8:a8:3f:ff:d0:91:80:cd:e7:0a: 71:8c:45:a0:de:e9:ef:d7:83:63:ff:fe:2d:86:47:16:ed:22: 3d:05:06:5d:6d:93:da:d9:33:3f:66:d2:0e:7f:98:5a:c8:82: 8b:a5:9b:df:2d:07:9e:17:14:c3:ed:0a:e5:6e:1e:58:ea:a1: 04:d0:37:31:35:65:fc:72:3b:92:22:7a:7f:ba:c7:3d:05:60: e1:9a:9b:99:7c:74:a1:10:67:b7:3b:18:a5:c4:26:3d:58:9b: f4:f8:5e:c8:b4:ec:b2:a7:1c:f8:cd:f2:85:f6:25:6e:39:d0: a2:b8:93:e9:e2:c5:c1:6e:29:e9:c3:1f:b9:0a:c9:ab:1f:8a: 15:45:42:c4:85:b8:50:bf:69:c0:01:60:91:c5:b0:9d:0d:f4: e4:80:80:4c -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgITC/4Dhsnsqj6IaZNIaSxBn9VfnjANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTE4NjIxNDAwMDAxMTAvBgNVBAUTKEJBOEY3N0QyMUU1 OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIwHhcNMjUxMTExMDU1NTAwWhcN MjYxMTEwMDYwMDAwWjAzMTEwLwYDVQQDEyhBOUI3MkM1QTM2ODRCNEM5Qzc3MUJE MDYzMTcxMjY5NUJCNzBGNEQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvN0Pig3CkNSEBJtbHmUekrYeBLnkqv/cbi1wvQZO+clfZVvmPY+HGRI9awHA wGmQx8P3xabeFaslO7QhZHllOG+FbkFT0CMJ5hs9CloI59PyTrg71B2TdVvYjL/+ p9XmA4WoB5M8rpIFUzeZaiWbD+5xm87dq6umlKq4xls+yLEsPPApV2BcsgwA1urR PC+k1gaDSSB/43841/Suuxlr6x6CJIEP5hjMefL0beuZ6JlOTnySVEsYA+F0k3uf XxSXI2iwHVgxmPRubjGGb5BuHZMKnK8n6UvAJvN1t5EkMyKN+lFTo2YeGpikXHCr ztYlXuKF9X29xg6C6XFx0e6aowIDAQABo4IBzzCCAcswHQYDVR0OBBYEFKm3LFo2 hLTJx3G9BjFxJpW7cPTTMB8GA1UdIwQYMBaAFLqPd9IeWP6ck5prcOJYVhfhgzdr MA4GA1UdDwEB/wQEAwIHgDBpBgNVHR8EYjBgMF6gXKBahlhyc3luYzovL3JlcG8t cnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0JBOEY3N0QyMUU1OEZFOUM5 MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggr BgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdF RjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3VvOTMwaDVZX3B5VG1tdHc0bGhX Ri1HRE4ycy5jZXIwUwYIKwYBBQUHAQsERzBFMEMGCCsGAQUFBzALhjdyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FTMzg3NzMucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBANyjVgwDQYJKoZIhvcNAQELBQADggEBABZHZxp8bTp7hxp5h9NMiJ4t jagTlompzSqmeN+QuAUCBPvQPaaTgFOluKrKLFOBTtmvfRhdUJUhArgc/EbC4hJF ACYhBF7uFUCkiK1WVpSzfIyf+gsITPLwF9ZIA1cm8ZGk2Kg//9CRgM3nCnGMRaDe 6e/Xg2P//i2GRxbtIj0FBl1tk9rZMz9m0g5/mFrIgoulm98tB54XFMPtCuVuHljq oQTQNzE1ZfxyO5Iien+6xz0FYOGam5l8dKEQZ7c7GKXEJj1Ym/T4Xsi07LKnHPjN 8oX2JW450KK4k+nixcFuKenDH7kKyasfihVFQsSFuFC/acABYJHFsJ0N9OSAgEw= -----END CERTIFICATE-----Generated at Sat Dec 6 22:51:23 2025 by rpki-client