This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS139742.roa File: AS139742.roa (raw, json) Hash identifier: V8LjX3g5WVmw1q0FRwqESxXKAfqTAntZKpPesl7hkZo= Subject key identifier: 66:76:98:EF:79:4E:5E:B6:F1:D7:41:F5:D5:4E:9C:32:91:E8:23:33 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 6385CD5C425B44C88310ADF217973F775B5A2194 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS139742.roa Signing time: Wed 14 Jan 2026 02:09:08 +0000 ROA not before: Wed 14 Jan 2026 02:04:08 +0000 ROA not after: Wed 13 Jan 2027 02:09:08 +0000 asID: 139742 IP address blocks: 192.42.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 13:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:85:cd:5c:42:5b:44:c8:83:10:ad:f2:17:97:3f:77:5b:5a:21:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jan 14 02:04:08 2026 GMT Not After : Jan 13 02:09:08 2027 GMT Subject: CN=667698EF794E5EB6F1D741F5D54E9C3291E82333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:77:dd:67:c9:fc:9c:57:40:d9:ef:86:47:10: e7:8b:e9:56:51:0e:0c:4e:89:24:df:0f:b0:45:90: 5e:24:a2:f4:7a:7c:52:b3:a4:9b:41:94:ac:d0:c3: 88:a0:ea:54:10:63:69:a6:69:18:c6:01:2f:c9:72: 69:de:00:b7:e4:cf:ad:8e:2b:75:47:11:48:12:cd: 25:ee:91:f2:be:3c:d9:92:c6:2f:75:fe:6e:6e:ec: df:09:23:66:bd:39:db:87:cd:04:29:57:87:fa:2d: a0:e5:8d:b7:6a:6d:80:df:d6:9b:6a:7b:a8:f1:92: 73:38:4c:74:37:58:44:b0:a7:95:7c:f8:76:4e:7e: dc:57:5b:42:e0:21:3d:f9:4e:b0:24:a7:76:b4:98: 7c:bb:9d:d7:3e:e0:ce:95:e2:5c:41:cd:e4:a4:b1: 81:c6:25:2a:0c:84:6c:ad:90:a2:c5:dc:7a:af:e0: 0a:26:0b:84:6a:dd:4d:3d:6c:9c:be:59:d1:ad:d4: 9d:f3:be:65:73:c3:db:57:31:59:48:20:9d:a8:91: 3d:25:c9:3f:c4:d4:c7:56:c5:c6:77:ca:8a:a6:01: fe:73:7e:5b:e6:ef:fc:92:5e:dd:21:28:0f:22:78: 68:76:13:50:01:3f:1f:4b:0c:43:e0:1f:d1:4e:d3: 19:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:76:98:EF:79:4E:5E:B6:F1:D7:41:F5:D5:4E:9C:32:91:E8:23:33 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS139742.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.42.85.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:d4:59:b7:21:4d:9b:7e:16:38:c8:b6:6b:95:41:67:64:44: 4e:df:96:f7:e3:27:58:85:d6:ed:95:4c:9d:10:b2:05:c2:4a: b1:e9:8d:95:fd:76:74:2f:d5:9a:60:38:ef:73:95:64:51:4e: d0:69:ca:40:e3:82:fa:47:4a:56:68:03:8e:3d:b5:1d:3a:26: 24:30:ee:3c:68:c5:07:b5:ae:c3:12:27:e6:c6:9d:73:90:e7: 25:82:f0:d3:2b:14:3f:c2:c0:cd:90:cc:c1:9d:f6:2d:b9:19: 71:b5:7d:ab:21:74:10:e4:3a:7a:c7:f6:56:bc:83:70:2c:82: c2:a0:94:bf:68:a0:80:31:6e:f7:03:75:1e:15:e2:a6:9d:8f: 89:6c:e3:75:f5:60:e5:0d:97:f0:c2:61:b7:97:14:b6:9e:7f: 9e:93:c0:24:95:e9:4c:2c:a6:c4:bc:e8:8e:c9:ce:ce:f7:db: f6:93:f5:07:e0:07:6e:8e:f9:0b:46:95:d4:0a:66:99:fb:97: fd:92:77:91:c4:1f:bd:9f:64:dc:57:2e:e0:02:c3:91:e0:8d: bc:01:87:56:ea:18:b0:c3:23:1c:ad:6d:2b:c3:9f:e9:09:ca: 7a:22:7a:b4:8d:cb:1c:5b:49:aa:04:7e:46:39:00:e2:7e:36: 18:32:f6:e5 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUY4XNXEJbRMiDEK3yF5c/d1taIZQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDExNDAyMDQwOFoX DTI3MDExMzAyMDkwOFowMzExMC8GA1UEAxMoNjY3Njk4RUY3OTRFNUVCNkYxRDc0 MUY1RDU0RTlDMzI5MUU4MjMzMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK133WfJ/JxXQNnvhkcQ54vpVlEODE6JJN8PsEWQXiSi9Hp8UrOkm0GUrNDD iKDqVBBjaaZpGMYBL8lyad4At+TPrY4rdUcRSBLNJe6R8r482ZLGL3X+bm7s3wkj Zr0524fNBClXh/otoOWNt2ptgN/Wm2p7qPGSczhMdDdYRLCnlXz4dk5+3FdbQuAh PflOsCSndrSYfLud1z7gzpXiXEHN5KSxgcYlKgyEbK2QosXceq/gCiYLhGrdTT1s nL5Z0a3UnfO+ZXPD21cxWUggnaiRPSXJP8TUx1bFxnfKiqYB/nN+W+bv/JJe3SEo DyJ4aHYTUAE/H0sMQ+Af0U7TGYECAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRmdpjv eU5etvHXQfXVTpwykegjMzAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzEzOTc0Mi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMAqVTANBgkqhkiG9w0BAQsFAAOCAQEAe9RZtyFNm34WOMi2a5VB Z2RETt+W9+MnWIXW7ZVMnRCyBcJKsemNlf12dC/VmmA473OVZFFO0GnKQOOC+kdK VmgDjj21HTomJDDuPGjFB7WuwxIn5sadc5DnJYLw0ysUP8LAzZDMwZ32LbkZcbV9 qyF0EOQ6esf2VryDcCyCwqCUv2iggDFu9wN1HhXipp2PiWzjdfVg5Q2X8MJht5cU tp5/npPAJJXpTCymxLzojsnOzvfb9pP1B+AHbo75C0aV1ApmmfuX/ZJ3kcQfvZ9k 3Fcu4ALDkeCNvAGHVuoYsMMjHK1tK8Of6QnKeiJ6tI3LHFtJqgR+RjkA4n42GDL2 5Q== -----END CERTIFICATE-----Generated at Wed Jan 21 10:27:54 2026 by rpki-client