This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142190.roa
File: AS142190.roa (raw, json)
Hash identifier: VkDsUGPeL2hk7wunvN952YkCTUV7u8TbSSA3tP+KzZ4=
Subject key identifier: 1C:41:63:D3:5A:BC:D3:36:4B:63:C4:B8:CE:4D:D1:C1:B4:1E:C1:64
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 5767723E975F37A0E7492BFB4B08F3B780BB1AC7
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142190.roa
Signing time: Tue 20 Jan 2026 06:24:51 +0000
ROA not before: Tue 20 Jan 2026 06:19:51 +0000
ROA not after: Tue 19 Jan 2027 06:24:51 +0000
asID: 142190
IP address blocks: 192.232.36.0/24 maxlen: 24
192.232.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 13:35:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:67:72:3e:97:5f:37:a0:e7:49:2b:fb:4b:08:f3:b7:80:bb:1a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Validity
Not Before: Jan 20 06:19:51 2026 GMT
Not After : Jan 19 06:24:51 2027 GMT
Subject: CN=1C4163D35ABCD3364B63C4B8CE4DD1C1B41EC164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fb:c4:3e:45:c6:62:c5:2c:80:5a:06:43:44:
7e:3c:78:79:32:c1:e9:fc:bc:83:9f:85:bb:bc:81:
e6:ac:50:a2:f1:3c:ac:a2:9e:ef:60:9c:a7:a2:a8:
8b:5d:cc:2a:67:1b:c9:4a:1e:c9:9b:97:22:83:12:
99:35:68:04:88:c3:87:9c:24:29:08:c2:e5:2d:71:
6a:2f:c0:b5:d0:fe:47:8e:c9:96:76:e9:bf:25:ed:
56:e8:ce:c4:ed:d5:16:16:2d:d2:ac:6b:7f:77:8c:
4b:40:f0:56:8c:50:52:d4:22:6d:fa:61:c2:0d:77:
2d:38:6f:06:3a:ba:e0:68:04:8e:86:40:57:9a:5f:
02:5f:4d:63:9d:ec:1a:46:1b:13:e7:c1:ee:cd:e7:
ec:b7:e5:30:7b:fa:ab:93:d1:ea:fb:59:3f:e9:21:
57:39:2c:c4:f3:91:39:f0:ea:11:be:67:b3:6a:c5:
e3:4e:16:e0:d0:81:87:34:f0:1f:61:94:c2:70:5e:
59:27:11:16:37:72:54:21:a4:38:25:83:6c:c7:cb:
d7:0b:8a:a3:bf:6d:29:2a:63:d8:b2:46:e2:df:90:
6d:a0:7c:02:04:c2:2b:23:89:de:a9:1a:32:bd:c6:
64:c9:4e:5b:3c:e1:4b:39:3a:58:f6:18:dd:1d:7e:
36:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:41:63:D3:5A:BC:D3:36:4B:63:C4:B8:CE:4D:D1:C1:B4:1E:C1:64
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142190.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.232.36.0/23
Signature Algorithm: sha256WithRSAEncryption
33:96:e2:16:a0:d7:24:aa:ff:73:9a:11:cb:cd:6c:34:db:4e:
c0:aa:77:d4:04:36:e1:e9:b4:12:7c:3e:6b:84:c8:6b:92:f7:
d9:52:76:b5:9d:a9:60:58:0c:25:c6:e1:02:d0:50:a2:3a:4a:
a2:22:45:8e:92:0a:f6:61:d7:85:32:a1:4b:13:4f:7e:04:2d:
6a:e2:0d:7f:f1:1f:ec:98:e8:8e:c1:2e:01:bb:36:b8:0f:4a:
37:88:80:9d:91:e7:60:3f:7d:39:32:2d:6f:b6:94:42:27:c6:
5f:3e:36:59:5f:ab:f7:ca:fe:2a:f4:a6:f9:4c:e6:45:69:33:
6a:99:6d:02:26:02:0a:96:89:c0:7d:8d:58:9c:5a:26:5b:a7:
14:ad:9e:2b:b5:41:f5:db:2e:03:25:0b:5b:fc:e4:9c:75:2e:
d6:67:8e:84:90:a9:98:30:29:d7:99:0d:0a:cf:4a:ea:59:cc:
23:7b:b2:2d:4f:06:9a:0d:e4:31:d6:c6:97:4e:bc:b7:f8:ae:
86:b7:c4:21:aa:e6:77:99:a3:da:8d:0c:a8:05:97:31:d3:8d:
ac:18:31:70:86:29:e5:f6:f9:b7:7e:fe:47:7d:ff:b4:9e:a8:
4e:5a:e7:3a:ca:41:e9:9f:a9:f9:d1:54:91:b8:36:66:10:2c:
d3:06:c9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 10:27:55 2026 by rpki-client