This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS139205.roa File: AS139205.roa (raw, json) Hash identifier: s+8xGmiOk9/9K6iMhgQ1Sl8OWTtNQ793oaaixPWCUZw= Subject key identifier: FC:2F:CD:F8:6E:6D:F2:7D:27:E9:04:04:0C:D9:11:C5:00:EF:05:E9 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 70F756FE99F9AF29099C845DB487D6213BF5B60B Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS139205.roa Signing time: Fri 02 Jan 2026 01:45:18 +0000 ROA not before: Fri 02 Jan 2026 01:40:18 +0000 ROA not after: Fri 01 Jan 2027 01:45:18 +0000 asID: 139205 IP address blocks: 144.79.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Jan 2026 09:25:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:f7:56:fe:99:f9:af:29:09:9c:84:5d:b4:87:d6:21:3b:f5:b6:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jan 2 01:40:18 2026 GMT Not After : Jan 1 01:45:18 2027 GMT Subject: CN=FC2FCDF86E6DF27D27E904040CD911C500EF05E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ae:ad:1e:08:7f:da:22:49:ff:46:a1:f2:7a: 13:93:5c:28:76:84:32:0d:49:cf:c0:29:e8:4f:63: f8:33:ba:28:a5:a9:d2:0f:84:3f:ec:54:0e:44:ca: 3a:4d:eb:3c:26:ad:0a:61:53:fb:90:c0:0d:2e:d8: e1:db:2b:02:78:f6:e9:c5:a8:f1:50:cd:c0:a3:71: 1f:ea:58:c1:5a:0f:7a:b7:69:6b:b0:88:c6:86:d0: c8:f4:fe:43:2b:c2:0b:7f:9c:63:6d:45:41:e9:2e: 9e:89:9f:7a:b8:69:15:27:c5:87:2a:51:3a:a8:9e: 78:53:d8:fd:e7:21:e3:44:37:22:9e:e7:7f:78:7a: 9e:d3:6c:ff:6a:34:5a:0d:66:d0:28:96:81:56:40: 7e:85:e0:e9:0a:ee:ea:2e:42:dc:84:bd:92:65:12: 4f:a6:14:e5:7c:25:3c:89:fc:9d:49:b9:ac:c7:96: e7:f7:40:e0:76:38:d8:1a:97:ce:4f:66:ed:65:43: 2a:5a:69:47:9f:21:05:87:fb:d9:f0:10:40:99:8c: 23:3f:b9:85:62:1c:f0:d6:25:e3:21:da:f1:e1:80: c8:0d:9b:0a:91:a9:c1:f4:7f:f1:91:57:9b:93:7f: 2a:29:e5:76:f6:43:15:0a:cd:86:72:fb:6d:9d:88: 9c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:2F:CD:F8:6E:6D:F2:7D:27:E9:04:04:0C:D9:11:C5:00:EF:05:E9 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS139205.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.79.174.0/24 Signature Algorithm: sha256WithRSAEncryption 03:0b:d4:97:3d:b8:f4:5c:22:f2:f3:21:f9:35:ee:cc:3d:05: bd:d2:b4:ed:60:b7:ba:07:10:22:b2:ae:38:6d:1c:3e:c4:49: e2:cf:0d:cb:87:d7:37:ff:9f:66:e6:0c:9f:c3:6f:f6:68:59: 18:72:d9:5e:37:48:57:7f:e2:b7:7d:1e:fa:d3:c8:a3:6d:4f: 87:d6:bf:77:a1:ec:d9:ce:02:60:d9:b8:9f:47:38:e3:b3:34: 3d:99:67:72:fe:fa:d4:e1:c9:44:89:3e:e9:dd:c2:6b:1b:8e: 3a:9c:24:04:ce:b5:3f:f2:c3:6e:c5:e4:5b:8f:f6:8b:f6:67: 57:5c:04:27:e3:ee:9d:d5:47:7d:4e:45:ed:35:ab:1f:d8:a1: f6:28:5b:e7:17:4b:6c:f0:cb:3e:0e:4d:7e:75:dd:4f:e9:20: 01:34:0b:b5:19:ee:37:3e:ee:ab:96:4d:de:6f:30:e5:b1:06: 2e:d9:36:bb:b3:d5:c9:86:dc:94:0a:5f:c6:0e:8b:93:c1:fd: aa:9f:08:43:fc:a1:4a:34:7e:8b:d9:41:83:ae:a9:05:b3:2c: 78:66:df:79:1b:85:00:d8:87:9a:8e:14:07:cb:dd:a5:ff:a7: ef:35:19:bb:ce:41:e3:69:31:fd:0b:c0:01:11:26:66:34:a6: 70:7c:de:af -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUcPdW/pn5rykJnIRdtIfWITv1tgswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDEwMjAxNDAxOFoX DTI3MDEwMTAxNDUxOFowMzExMC8GA1UEAxMoRkMyRkNERjg2RTZERjI3RDI3RTkw NDA0MENEOTExQzUwMEVGMDVFOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANSurR4If9oiSf9GofJ6E5NcKHaEMg1Jz8Ap6E9j+DO6KKWp0g+EP+xUDkTK Ok3rPCatCmFT+5DADS7Y4dsrAnj26cWo8VDNwKNxH+pYwVoPerdpa7CIxobQyPT+ QyvCC3+cY21FQekunomferhpFSfFhypROqieeFPY/ech40Q3Ip7nf3h6ntNs/2o0 Wg1m0CiWgVZAfoXg6Qru6i5C3IS9kmUST6YU5XwlPIn8nUm5rMeW5/dA4HY42BqX zk9m7WVDKlppR58hBYf72fAQQJmMIz+5hWIc8NYl4yHa8eGAyA2bCpGpwfR/8ZFX m5N/KinldvZDFQrNhnL7bZ2InHcCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBT8L834 bm3yfSfpBAQM2RHFAO8F6TAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzEzOTIwNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAJBPrjANBgkqhkiG9w0BAQsFAAOCAQEAAwvUlz249Fwi8vMh+TXu zD0FvdK07WC3ugcQIrKuOG0cPsRJ4s8Ny4fXN/+fZuYMn8Nv9mhZGHLZXjdIV3/i t30e+tPIo21Ph9a/d6Hs2c4CYNm4n0c447M0PZlncv761OHJRIk+6d3CaxuOOpwk BM61P/LDbsXkW4/2i/ZnV1wEJ+PundVHfU5F7TWrH9ih9ihb5xdLbPDLPg5NfnXd T+kgATQLtRnuNz7uq5ZN3m8w5bEGLtk2u7PVyYbclApfxg6Lk8H9qp8IQ/yhSjR+ i9lBg66pBbMseGbfeRuFANiHmo4UB8vdpf+n7zUZu85B42kx/QvAAREmZjSmcHze rw== -----END CERTIFICATE-----Generated at Sat Jan 10 22:06:57 2026 by rpki-client