This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS136816.roa File: AS136816.roa (raw, json) Hash identifier: 6oKImlR0Ll3UZrNbl/ZA3kZqyl8cusSoOTNvNPfQjBU= Subject key identifier: B9:BE:3F:53:23:96:0C:5E:E2:D3:87:D8:06:62:46:5B:45:7A:7B:88 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 240B436852F53B07A04AA53E5CF59CA4492A728C Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS136816.roa Signing time: Mon 22 Dec 2025 02:54:17 +0000 ROA not before: Mon 22 Dec 2025 02:49:17 +0000 ROA not after: Mon 21 Dec 2026 02:54:17 +0000 asID: 136816 IP address blocks: 138.252.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 13:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:0b:43:68:52:f5:3b:07:a0:4a:a5:3e:5c:f5:9c:a4:49:2a:72:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Dec 22 02:49:17 2025 GMT Not After : Dec 21 02:54:17 2026 GMT Subject: CN=B9BE3F5323960C5EE2D387D80662465B457A7B88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e6:90:e0:73:b3:e2:77:fb:c8:11:7e:7b:ec: 9c:b5:df:1d:76:1e:b9:12:1a:fb:26:0c:84:2e:a2: d5:23:8d:b3:db:ec:be:5d:1e:70:dc:38:b4:13:0f: ac:f9:24:23:41:38:64:81:db:62:88:17:83:64:26: c7:cf:ec:13:37:a6:c5:43:93:85:5a:3f:21:fe:4f: c8:cc:31:e4:8a:6d:3c:d8:65:f1:41:cb:bb:84:60: 7e:b8:f8:26:be:7a:d9:9a:4a:ea:ef:b1:b4:c2:be: 55:28:ab:15:f0:a6:ad:a9:64:b5:cc:7a:e6:17:86: d8:14:f0:7a:4c:c1:2e:54:4c:01:5e:9a:dd:4b:96: b7:6d:27:ff:d9:c2:4a:00:ca:00:6f:bc:77:4f:b9: f7:c8:59:9e:71:2e:bb:76:43:54:4e:c8:71:a4:9a: 37:bf:99:d9:73:aa:a4:27:bf:ab:13:f9:d3:e7:85: 89:e4:3a:7a:61:75:b0:6d:86:ec:8f:a1:ee:36:1d: f6:30:b9:d5:99:04:14:be:74:a0:74:c5:7f:52:be: 1a:22:18:82:93:0c:9c:7e:00:d2:2a:37:3b:38:c5: 46:48:07:af:22:cd:50:37:77:bc:19:7b:36:7b:12: d2:bc:56:92:f4:59:af:20:97:de:46:7b:a2:ed:09: 73:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:BE:3F:53:23:96:0C:5E:E2:D3:87:D8:06:62:46:5B:45:7A:7B:88 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS136816.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.252.183.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:f9:07:2c:b5:1d:46:c0:96:5c:d0:b2:94:6e:30:c0:e8:5c: 85:eb:a8:c2:b1:3f:16:f5:72:f0:cc:dc:e5:ae:d9:93:00:47: 63:64:b3:44:c3:68:2a:20:a2:a0:a9:3e:af:07:21:ac:06:fa: 44:0d:31:ef:0d:29:fb:b6:f9:58:08:cb:15:88:4d:27:99:21: 53:4f:d3:39:2e:e8:c6:42:49:2f:65:a1:6e:4d:bd:71:1a:9f: df:62:c5:5e:3d:1a:55:07:46:c1:56:bf:7a:7f:ae:e6:d7:d7: 10:80:88:f9:7e:13:f2:7d:3b:94:eb:e6:04:21:ab:bb:84:35: d2:21:29:63:60:5a:04:0a:aa:a9:5a:bf:f7:72:3e:d5:89:4a: df:f2:8b:7b:3b:9e:75:4b:65:03:29:3d:5b:20:6c:6d:65:bc: 50:29:ff:7d:43:0c:e2:f6:c6:6f:bb:fa:05:c5:a1:e4:98:c9: 53:7d:78:c1:5d:85:28:c7:6a:8b:f3:37:b3:3e:c4:23:6e:63: 27:54:e9:48:6a:b5:50:1a:12:fb:72:c6:d1:47:8c:d2:89:e1: 89:3f:db:61:6c:71:d1:e5:68:52:06:26:65:b9:25:82:37:d4: ca:bd:58:d2:94:d3:dc:25:f3:4c:23:e0:23:1b:f0:c1:b7:c8: d9:02:74:98 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUJAtDaFL1OwegSqU+XPWcpEkqcowwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTIyMjAyNDkxN1oX DTI2MTIyMTAyNTQxN1owMzExMC8GA1UEAxMoQjlCRTNGNTMyMzk2MEM1RUUyRDM4 N0Q4MDY2MjQ2NUI0NTdBN0I4ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANHmkOBzs+J3+8gRfnvsnLXfHXYeuRIa+yYMhC6i1SONs9vsvl0ecNw4tBMP rPkkI0E4ZIHbYogXg2Qmx8/sEzemxUOThVo/If5PyMwx5IptPNhl8UHLu4Rgfrj4 Jr562ZpK6u+xtMK+VSirFfCmralktcx65heG2BTwekzBLlRMAV6a3UuWt20n/9nC SgDKAG+8d0+598hZnnEuu3ZDVE7IcaSaN7+Z2XOqpCe/qxP50+eFieQ6emF1sG2G 7I+h7jYd9jC51ZkEFL50oHTFf1K+GiIYgpMMnH4A0io3OzjFRkgHryLNUDd3vBl7 NnsS0rxWkvRZryCX3kZ7ou0Jc1UCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBS5vj9T I5YMXuLTh9gGYkZbRXp7iDAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzEzNjgxNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAIr8tzANBgkqhkiG9w0BAQsFAAOCAQEAfPkHLLUdRsCWXNCylG4w wOhcheuowrE/FvVy8Mzc5a7ZkwBHY2SzRMNoKiCioKk+rwchrAb6RA0x7w0p+7b5 WAjLFYhNJ5khU0/TOS7oxkJJL2Whbk29cRqf32LFXj0aVQdGwVa/en+u5tfXEICI +X4T8n07lOvmBCGru4Q10iEpY2BaBAqqqVq/93I+1YlK3/KLezuedUtlAyk9WyBs bWW8UCn/fUMM4vbGb7v6BcWh5JjJU314wV2FKMdqi/M3sz7EI25jJ1TpSGq1UBoS +3LG0UeM0onhiT/bYWxx0eVoUgYmZbklgjfUyr1Y0pTT3CXzTCPgIxvwwbfI2QJ0 mA== -----END CERTIFICATE-----Generated at Wed Jan 21 10:27:52 2026 by rpki-client