This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142170.roa File: AS142170.roa (raw, json) Hash identifier: jiFL5XeY6xIWkr9LXKh+3I98e7JiJpi1ihdFLn/YdWg= Subject key identifier: D7:86:9A:ED:00:10:94:18:3C:01:30:95:59:F2:A0:6D:9A:06:A6:FE Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 3B03BA684741120962A7CBD3E9A0BCCF758196C2 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142170.roa Signing time: Thu 08 Jan 2026 02:48:19 +0000 ROA not before: Thu 08 Jan 2026 02:43:19 +0000 ROA not after: Thu 07 Jan 2027 02:48:19 +0000 asID: 142170 IP address blocks: 144.79.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 13:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:03:ba:68:47:41:12:09:62:a7:cb:d3:e9:a0:bc:cf:75:81:96:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jan 8 02:43:19 2026 GMT Not After : Jan 7 02:48:19 2027 GMT Subject: CN=D7869AED001094183C01309559F2A06D9A06A6FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e0:27:e2:cc:17:86:66:72:75:1a:3d:f5:3b: c3:52:66:97:cb:06:2e:c6:97:87:13:b5:0b:8a:7a: b5:08:cc:ae:b8:8b:31:b5:47:68:89:e6:7a:87:b3: dd:e7:36:1d:e3:3e:28:c4:dd:06:c6:63:16:57:cf: 9d:23:d0:84:7e:77:42:65:e5:b5:f2:c4:39:a9:ad: 4d:1d:55:e8:9a:87:94:3c:90:bd:11:17:d1:7d:7f: 02:49:f1:b5:75:90:41:00:d6:68:77:03:c2:6e:10: 48:50:6f:c1:e5:87:f2:2d:81:d6:e4:d2:e8:f4:00: e8:86:43:b5:1b:d5:5f:b5:09:8d:04:47:38:37:24: 02:ed:ec:94:f6:14:38:91:0d:32:ca:9f:8a:86:ba: 53:93:a3:22:a5:87:bb:a8:13:60:ff:7a:fc:52:fe: 37:f1:d6:73:b6:32:c4:97:0f:cd:5c:6f:a9:07:6e: 04:cb:d5:a9:99:a0:ee:10:c2:33:09:66:d2:d2:07: b7:28:c9:30:0c:38:7f:a3:6a:eb:8d:c9:46:52:f0: 87:6d:1c:a7:52:0d:40:1c:08:3f:f5:3a:f7:dc:b5: c1:db:3f:cf:53:c7:ec:3b:22:09:6e:d5:2b:aa:db: 29:a1:34:d3:bc:02:ba:bb:47:16:b8:59:50:d4:e8: 8b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:86:9A:ED:00:10:94:18:3C:01:30:95:59:F2:A0:6D:9A:06:A6:FE X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142170.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.79.97.0/24 Signature Algorithm: sha256WithRSAEncryption 73:48:2a:7d:46:75:11:9a:f6:d4:3e:1a:39:5b:fe:d2:5c:4b: 34:7d:a3:79:89:7c:fa:57:6f:fa:4e:84:a3:18:28:18:78:02: ea:45:e5:0f:cd:55:34:92:7e:24:46:f2:e0:18:2d:0e:6e:36: be:02:18:1d:d4:9a:22:54:2f:ea:fc:13:32:ac:56:73:25:c1: da:d9:6a:c6:5a:c0:19:0c:3e:56:05:65:07:6d:bf:2f:f8:00: 81:c6:b0:82:78:d0:4c:78:98:72:f7:13:93:b8:b8:27:5c:d1: af:9d:d5:c6:ff:14:a8:54:d3:cf:c6:78:4c:8e:ee:eb:5b:01: 25:de:e7:4e:4d:8f:5a:9c:14:f6:26:3f:8e:91:bd:20:37:5b: de:19:cd:20:a5:1b:f7:7e:2c:78:3e:64:da:a0:9d:b1:53:1d: 60:51:91:c2:6d:c0:28:1f:1a:35:3c:0b:75:2f:28:7b:74:75: 0b:5b:6e:20:77:6d:72:07:27:e4:14:46:ff:1a:e8:52:74:5a: c5:58:2c:72:b7:60:be:05:55:65:b7:d2:5e:54:9d:15:c3:41: 7c:b2:d6:af:21:82:b5:df:78:e3:af:58:5f:c1:b5:70:e1:24: 57:68:20:f2:3c:27:99:3d:3e:c8:65:99:77:70:94:40:f2:7b: 06:42:bf:02 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUOwO6aEdBEglip8vT6aC8z3WBlsIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDEwODAyNDMxOVoX DTI3MDEwNzAyNDgxOVowMzExMC8GA1UEAxMoRDc4NjlBRUQwMDEwOTQxODNDMDEz MDk1NTlGMkEwNkQ5QTA2QTZGRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM3gJ+LMF4ZmcnUaPfU7w1Jml8sGLsaXhxO1C4p6tQjMrriLMbVHaInmeoez 3ec2HeM+KMTdBsZjFlfPnSPQhH53QmXltfLEOamtTR1V6JqHlDyQvREX0X1/Aknx tXWQQQDWaHcDwm4QSFBvweWH8i2B1uTS6PQA6IZDtRvVX7UJjQRHODckAu3slPYU OJENMsqfioa6U5OjIqWHu6gTYP96/FL+N/HWc7YyxJcPzVxvqQduBMvVqZmg7hDC Mwlm0tIHtyjJMAw4f6Nq643JRlLwh20cp1INQBwIP/U699y1wds/z1PH7DsiCW7V K6rbKaE007wCurtHFrhZUNToixECAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTXhprt ABCUGDwBMJVZ8qBtmgam/jAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE0MjE3MC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAJBPYTANBgkqhkiG9w0BAQsFAAOCAQEAc0gqfUZ1EZr21D4aOVv+ 0lxLNH2jeYl8+ldv+k6EoxgoGHgC6kXlD81VNJJ+JEby4BgtDm42vgIYHdSaIlQv 6vwTMqxWcyXB2tlqxlrAGQw+VgVlB22/L/gAgcawgnjQTHiYcvcTk7i4J1zRr53V xv8UqFTTz8Z4TI7u61sBJd7nTk2PWpwU9iY/jpG9IDdb3hnNIKUb934seD5k2qCd sVMdYFGRwm3AKB8aNTwLdS8oe3R1C1tuIHdtcgcn5BRG/xroUnRaxVgscrdgvgVV ZbfSXlSdFcNBfLLWryGCtd94469YX8G1cOEkV2gg8jwnmT0+yGWZd3CUQPJ7BkK/ Ag== -----END CERTIFICATE-----Generated at Wed Jan 21 10:27:57 2026 by rpki-client