This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS139428.roa File: AS139428.roa (raw, json) Hash identifier: lv8PIQUOjeGFmI3VbS3FnJgZEEosniHkv5PYBk+tenY= Subject key identifier: CB:3A:5C:D6:90:F8:3B:3C:66:5D:58:63:91:77:15:9C:EE:1A:92:0D Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 4696ACA1D5B70D2DD0742B00BF042C159E3E424F Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS139428.roa Signing time: Thu 08 Jan 2026 11:00:03 +0000 ROA not before: Thu 08 Jan 2026 10:55:03 +0000 ROA not after: Thu 07 Jan 2027 11:00:03 +0000 asID: 139428 IP address blocks: 157.20.176.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 13:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:96:ac:a1:d5:b7:0d:2d:d0:74:2b:00:bf:04:2c:15:9e:3e:42:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jan 8 10:55:03 2026 GMT Not After : Jan 7 11:00:03 2027 GMT Subject: CN=CB3A5CD690F83B3C665D58639177159CEE1A920D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5a:e5:2e:ca:da:05:c0:8a:fc:39:f2:38:cc: 74:d8:9b:47:83:d0:ad:2b:ef:11:f2:09:59:6b:47: 7c:59:ae:db:ae:66:a0:a0:58:62:1e:c2:a4:b8:73: b3:92:d4:2c:ec:1f:01:f7:34:35:be:0e:42:ed:1d: fc:14:7f:50:cd:36:fe:37:24:1c:c8:86:b0:60:da: 87:3f:66:c2:9e:5b:49:07:54:89:d9:96:c6:c3:30: 4f:e0:d0:91:65:1f:86:a2:3b:dc:c9:2f:13:d7:bc: 9e:b0:2e:01:49:d4:78:a1:fc:43:b5:0c:5f:e1:ee: 60:8f:35:c2:ae:82:fb:3e:b6:9e:91:26:ef:34:ff: c2:4f:7c:4d:c4:87:5f:40:86:7b:6e:0a:c8:4b:c4: a0:b4:8d:f2:b0:21:3c:f9:b1:7b:b0:c1:8d:d0:23: 53:d5:d4:44:2a:73:c7:c5:7d:b6:82:6f:0c:58:9e: f7:98:ce:0f:7f:bd:ec:51:99:25:4a:13:18:bc:98: 45:5e:a7:27:db:08:db:46:ff:de:d4:26:a7:7a:28: 42:b7:99:e9:f3:a1:da:58:51:a5:cd:c6:7d:53:6d: 15:8c:b8:21:06:59:2e:a5:7a:ae:63:72:47:d8:96: c2:fd:86:e0:65:5b:8f:ec:4c:9d:40:bf:a1:79:17: d4:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:3A:5C:D6:90:F8:3B:3C:66:5D:58:63:91:77:15:9C:EE:1A:92:0D X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS139428.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.176.0/23 Signature Algorithm: sha256WithRSAEncryption 18:53:4a:4d:66:f6:73:8f:c5:b0:0e:56:bf:89:84:fd:3a:9e: 78:ff:1e:81:7e:ef:80:f5:91:d8:5e:14:f7:2b:cd:d3:c6:7a: 3e:81:9e:0a:27:c5:a6:a9:b0:f2:4d:ba:f2:5b:3b:ea:14:f3: 96:e3:4d:27:27:c2:87:dc:fc:08:f3:ed:4a:40:37:29:2a:eb: 3c:f8:cb:fb:69:b4:86:03:d9:49:1e:25:71:97:32:91:9f:9e: 40:fb:53:7b:b4:18:00:8d:19:44:42:82:dc:4e:20:6d:06:54: 93:d9:ad:b2:f0:96:72:99:15:0a:fc:53:69:3f:30:e4:90:71: c6:c2:f8:64:6b:91:79:a5:26:23:1c:36:4d:91:05:07:b9:3c: 7e:3b:31:ec:f4:04:8d:d6:30:91:11:3e:d1:c8:66:f4:3c:c4: 97:de:c0:24:85:dd:62:82:2d:70:ee:c9:be:bf:3a:7b:37:de: e1:da:52:f5:cc:db:da:d3:69:8c:f2:c6:f7:f2:5f:13:b3:4a: 12:88:c6:57:ef:d2:7d:01:9c:47:4c:af:22:a4:c8:dc:82:fd: 25:d2:ae:64:87:ff:2d:24:9e:15:9e:df:8f:9c:e0:77:b0:54: d8:b7:10:74:32:21:99:dc:89:ae:9c:d8:f7:a2:09:bb:ac:dd: 89:fe:bf:21 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIURpasodW3DS3QdCsAvwQsFZ4+Qk8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDEwODEwNTUwM1oX DTI3MDEwNzExMDAwM1owMzExMC8GA1UEAxMoQ0IzQTVDRDY5MEY4M0IzQzY2NUQ1 ODYzOTE3NzE1OUNFRTFBOTIwRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALBa5S7K2gXAivw58jjMdNibR4PQrSvvEfIJWWtHfFmu265moKBYYh7CpLhz s5LULOwfAfc0Nb4OQu0d/BR/UM02/jckHMiGsGDahz9mwp5bSQdUidmWxsMwT+DQ kWUfhqI73MkvE9e8nrAuAUnUeKH8Q7UMX+HuYI81wq6C+z62npEm7zT/wk98TcSH X0CGe24KyEvEoLSN8rAhPPmxe7DBjdAjU9XURCpzx8V9toJvDFie95jOD3+97FGZ JUoTGLyYRV6nJ9sI20b/3tQmp3ooQreZ6fOh2lhRpc3GfVNtFYy4IQZZLqV6rmNy R9iWwv2G4GVbj+xMnUC/oXkX1IkCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTLOlzW kPg7PGZdWGORdxWc7hqSDTAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzEzOTQyOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAZ0UsDANBgkqhkiG9w0BAQsFAAOCAQEAGFNKTWb2c4/FsA5Wv4mE /TqeeP8egX7vgPWR2F4U9yvN08Z6PoGeCifFpqmw8k268ls76hTzluNNJyfCh9z8 CPPtSkA3KSrrPPjL+2m0hgPZSR4lcZcykZ+eQPtTe7QYAI0ZREKC3E4gbQZUk9mt svCWcpkVCvxTaT8w5JBxxsL4ZGuReaUmIxw2TZEFB7k8fjsx7PQEjdYwkRE+0chm 9DzEl97AJIXdYoItcO7Jvr86ezfe4dpS9czb2tNpjPLG9/JfE7NKEojGV+/SfQGc R0yvIqTI3IL9JdKuZIf/LSSeFZ7fj5zgd7BU2LcQdDIhmdyJrpzY96IJu6zdif6/ IQ== -----END CERTIFICATE-----Generated at Wed Jan 21 10:30:33 2026 by rpki-client