This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS139993.roa File: AS139993.roa (raw, json) Hash identifier: pw4dNBMNmPZ3DD3RgBvI6bis60pbtMUxwDP8A7F8ErA= Subject key identifier: 67:68:37:B4:98:7C:EE:90:61:AC:FB:98:22:F5:13:62:05:CC:4B:7B Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 0DCE6D2CCA2356B1FF710BB0F185AFD16CA6890E Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS139993.roa Signing time: Mon 05 Jan 2026 04:20:33 +0000 ROA not before: Mon 05 Jan 2026 04:15:33 +0000 ROA not after: Mon 04 Jan 2027 04:20:33 +0000 asID: 139993 IP address blocks: 157.10.190.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 13:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:ce:6d:2c:ca:23:56:b1:ff:71:0b:b0:f1:85:af:d1:6c:a6:89:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jan 5 04:15:33 2026 GMT Not After : Jan 4 04:20:33 2027 GMT Subject: CN=676837B4987CEE9061ACFB9822F5136205CC4B7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:54:db:cd:8b:39:5f:26:31:0f:6d:7a:c1:be: 34:52:b7:cf:45:63:63:76:55:9e:06:53:74:9c:25: c6:33:a6:ba:d4:cb:0d:bc:c1:5e:f5:f1:09:db:9d: a2:d9:c9:27:8a:29:13:de:93:8d:c1:2f:25:ce:1a: d8:f6:28:95:26:ca:69:be:72:1e:e0:a5:07:a4:ed: 1c:08:e4:ca:57:88:53:8f:96:a8:e2:df:7f:aa:53: b1:a5:83:8a:9f:4c:8f:33:2c:59:da:aa:9e:f7:fc: 83:d7:cb:82:62:7b:f6:ce:0f:e2:08:8e:ae:61:0f: fd:f6:93:ee:1d:52:17:42:af:e8:81:19:da:bd:d5: 60:c2:e3:a2:dd:39:82:78:55:e1:25:f6:92:01:3b: 8c:4e:51:a0:80:c8:25:0a:48:67:b2:c7:c7:6a:4a: a8:53:6e:5b:02:bb:6f:ac:86:88:4d:19:7b:e9:97: e5:04:ee:dc:5d:18:db:72:1f:b8:74:dc:a3:0a:79: dc:98:7a:e7:e5:ee:c0:02:1a:52:c9:be:81:b9:63: ef:ec:c5:c4:e3:98:2f:34:66:b3:da:cd:3a:3c:1d: 82:01:07:e3:df:0b:86:69:ce:d3:85:73:89:86:30: 35:d0:c9:23:9f:0d:b7:03:a1:74:57:d9:39:ef:cf: 94:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:68:37:B4:98:7C:EE:90:61:AC:FB:98:22:F5:13:62:05:CC:4B:7B X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS139993.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.10.190.0/23 Signature Algorithm: sha256WithRSAEncryption 73:8a:99:75:79:0e:f3:0d:a4:50:4b:ca:35:f2:1f:44:e6:0e: d8:0e:b5:d4:d2:9a:eb:e5:2f:fd:c8:b9:a4:5b:53:42:54:5d: e3:35:0e:94:8f:c0:b0:a0:b7:96:ee:7d:ea:2b:7e:36:2f:3a: 99:c2:84:0f:fd:b6:b4:a7:d0:1c:e8:60:e8:51:29:11:5e:20: 29:9c:6d:64:0a:d2:4a:05:d2:c5:37:37:e1:57:77:77:18:fd: ea:b0:be:78:b6:51:28:fb:f1:a8:0b:48:e1:09:81:5c:6f:4b: 73:8c:a5:5f:57:2f:be:04:9b:3c:2a:ad:35:8d:6a:fb:47:3e: 13:96:4e:68:e4:95:6b:c0:fe:5f:67:c6:9e:7f:0e:2d:5d:df: a5:e9:da:c8:a8:c4:69:b7:c6:2d:e0:82:6c:73:81:9b:05:8f: dc:5c:e0:ca:af:2a:8c:05:64:fb:f7:ec:6c:17:a6:4a:5a:17: 76:5d:4b:51:df:92:4f:8a:9d:3d:a9:51:32:39:1a:70:eb:0d: b0:b3:6f:e0:90:42:07:03:ab:36:c4:79:5b:cc:6a:7b:bd:31: a4:a0:64:2d:54:f0:f2:e9:a1:0d:1c:17:d5:30:22:b9:36:7d: e4:af:30:6a:29:8b:47:a9:28:7d:30:2b:f2:09:5e:60:e4:d9: cf:a4:0c:5b -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUDc5tLMojVrH/cQuw8YWv0WymiQ4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDEwNTA0MTUzM1oX DTI3MDEwNDA0MjAzM1owMzExMC8GA1UEAxMoNjc2ODM3QjQ5ODdDRUU5MDYxQUNG Qjk4MjJGNTEzNjIwNUNDNEI3QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJRU282LOV8mMQ9tesG+NFK3z0VjY3ZVngZTdJwlxjOmutTLDbzBXvXxCdud otnJJ4opE96TjcEvJc4a2PYolSbKab5yHuClB6TtHAjkyleIU4+WqOLff6pTsaWD ip9MjzMsWdqqnvf8g9fLgmJ79s4P4giOrmEP/faT7h1SF0Kv6IEZ2r3VYMLjot05 gnhV4SX2kgE7jE5RoIDIJQpIZ7LHx2pKqFNuWwK7b6yGiE0Ze+mX5QTu3F0Y23If uHTcowp53Jh65+XuwAIaUsm+gblj7+zFxOOYLzRms9rNOjwdggEH498LhmnO04Vz iYYwNdDJI58NtwOhdFfZOe/PlBMCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRnaDe0 mHzukGGs+5gi9RNiBcxLezAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzEzOTk5My5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAZ0KvjANBgkqhkiG9w0BAQsFAAOCAQEAc4qZdXkO8w2kUEvKNfIf ROYO2A611NKa6+Uv/ci5pFtTQlRd4zUOlI/AsKC3lu596it+Ni86mcKED/22tKfQ HOhg6FEpEV4gKZxtZArSSgXSxTc34Vd3dxj96rC+eLZRKPvxqAtI4QmBXG9Lc4yl X1cvvgSbPCqtNY1q+0c+E5ZOaOSVa8D+X2fGnn8OLV3fpenayKjEabfGLeCCbHOB mwWP3Fzgyq8qjAVk+/fsbBemSloXdl1LUd+ST4qdPalRMjkacOsNsLNv4JBCBwOr NsR5W8xqe70xpKBkLVTw8umhDRwX1TAiuTZ95K8waimLR6kofTAr8gleYOTZz6QM Ww== -----END CERTIFICATE-----Generated at Wed Jan 21 10:27:54 2026 by rpki-client