This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142196.roa File: AS142196.roa (raw, json) Hash identifier: BEY4zlFiQsEvC360NDdXMBTTuUW3bq+9mn8ae/vCASk= Subject key identifier: 3C:8E:BE:10:82:03:F4:2F:B3:B3:32:E5:9E:D9:2F:DD:03:87:56:CD Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 097B2234C9AF8CD1ADB8B6B3937E72A6BA872B2C Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142196.roa Signing time: Thu 15 Jan 2026 07:34:11 +0000 ROA not before: Thu 15 Jan 2026 07:29:11 +0000 ROA not after: Thu 14 Jan 2027 07:34:11 +0000 asID: 142196 IP address blocks: 144.79.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 13:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:7b:22:34:c9:af:8c:d1:ad:b8:b6:b3:93:7e:72:a6:ba:87:2b:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jan 15 07:29:11 2026 GMT Not After : Jan 14 07:34:11 2027 GMT Subject: CN=3C8EBE108203F42FB3B332E59ED92FDD038756CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:44:c3:ad:0f:67:3b:67:55:fa:a0:fb:6d:d4: 31:5c:57:e7:bb:c3:26:af:a7:c6:0e:94:cc:7d:fd: 4f:00:8e:37:a5:36:dc:e6:b2:0b:34:d8:78:f2:56: f3:3a:b7:3b:5a:1b:d0:c3:b9:e4:04:9e:86:75:8e: df:ca:4b:4f:6d:e7:d3:cd:c4:97:2a:3c:b8:09:7a: 97:1b:2f:37:96:14:01:6d:ac:74:0b:c0:41:0d:36: ab:f5:d2:9d:55:97:3a:66:e3:11:8c:c8:97:0e:e5: e8:bb:cc:95:48:5e:95:60:a1:f4:2f:11:89:ac:a9: 3b:7b:ca:e7:8f:8a:f3:84:ba:17:09:04:1c:16:ad: 98:c9:a3:54:65:b3:a4:03:56:55:77:43:95:59:a5: b0:05:f2:80:e3:80:52:a7:84:2a:cb:84:df:d8:c5: bf:73:84:45:3e:94:fb:32:0b:4b:40:71:bf:df:5f: 8b:4f:53:dc:09:a5:cd:e3:34:1c:27:e0:be:db:71: 78:0c:69:cd:a0:33:48:3d:7d:1e:36:89:4c:be:87: fb:8b:da:2b:63:80:c3:c9:ee:bc:37:bd:9c:b6:3b: 81:32:e8:8e:d3:8b:ad:39:51:cd:c3:08:f6:51:f6: 68:08:16:94:3f:af:6a:5b:ee:04:a4:2a:69:38:57: 0e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:8E:BE:10:82:03:F4:2F:B3:B3:32:E5:9E:D9:2F:DD:03:87:56:CD X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142196.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.79.242.0/23 Signature Algorithm: sha256WithRSAEncryption 88:d6:8a:02:8f:0d:41:9b:f3:36:24:39:47:8c:cf:9f:fd:2b: e3:61:d9:54:fc:7b:ca:4b:fc:64:ce:b2:ed:a9:25:27:8e:35: dd:4f:92:a8:99:8a:b3:dd:55:d9:5b:f4:c2:59:18:56:2d:16: be:c0:ac:a8:03:a5:14:1d:d7:93:a7:04:71:54:e7:1a:a0:48: 74:76:87:13:fc:6e:d9:e0:d2:08:cc:2d:cc:f7:e3:88:55:2b: ec:6c:cf:6b:ed:43:e3:3b:89:69:39:b0:84:0a:c0:41:fe:90: f4:b7:e1:34:2e:60:1a:d8:28:fe:55:58:11:46:05:ff:f5:36: c5:1d:51:02:38:73:72:73:26:83:9b:1b:42:80:aa:aa:33:06: 7a:f0:ba:e1:49:3c:69:a0:d9:d3:f5:77:f4:11:e7:33:d2:ad: 4a:52:17:58:21:3f:29:a5:81:3e:53:6b:0d:61:ed:01:3d:ae: 7a:83:22:dc:2b:bc:6a:8e:39:88:1f:1d:16:bf:91:bf:59:39: 3b:9d:b8:96:50:06:c9:59:8d:89:a9:5e:57:97:be:0a:4a:04: 87:23:af:2a:e2:2b:6c:5b:cb:e9:2d:1a:44:da:58:ae:92:97: 61:55:97:17:9d:c2:73:9f:10:b8:73:90:b1:79:00:e9:f6:ef: c0:ba:7e:60 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUCXsiNMmvjNGtuLazk35yprqHKywwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDExNTA3MjkxMVoX DTI3MDExNDA3MzQxMVowMzExMC8GA1UEAxMoM0M4RUJFMTA4MjAzRjQyRkIzQjMz MkU1OUVEOTJGREQwMzg3NTZDRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANNEw60PZztnVfqg+23UMVxX57vDJq+nxg6UzH39TwCON6U23OayCzTYePJW 8zq3O1ob0MO55ASehnWO38pLT23n083Elyo8uAl6lxsvN5YUAW2sdAvAQQ02q/XS nVWXOmbjEYzIlw7l6LvMlUhelWCh9C8RiaypO3vK54+K84S6FwkEHBatmMmjVGWz pANWVXdDlVmlsAXygOOAUqeEKsuE39jFv3OERT6U+zILS0Bxv99fi09T3AmlzeM0 HCfgvttxeAxpzaAzSD19HjaJTL6H+4vaK2OAw8nuvDe9nLY7gTLojtOLrTlRzcMI 9lH2aAgWlD+valvuBKQqaThXDvUCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQ8jr4Q ggP0L7OzMuWe2S/dA4dWzTAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE0MjE5Ni5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAZBP8jANBgkqhkiG9w0BAQsFAAOCAQEAiNaKAo8NQZvzNiQ5R4zP n/0r42HZVPx7ykv8ZM6y7aklJ4413U+SqJmKs91V2Vv0wlkYVi0WvsCsqAOlFB3X k6cEcVTnGqBIdHaHE/xu2eDSCMwtzPfjiFUr7GzPa+1D4zuJaTmwhArAQf6Q9Lfh NC5gGtgo/lVYEUYF//U2xR1RAjhzcnMmg5sbQoCqqjMGevC64Uk8aaDZ0/V39BHn M9KtSlIXWCE/KaWBPlNrDWHtAT2ueoMi3Cu8ao45iB8dFr+Rv1k5O524llAGyVmN ialeV5e+CkoEhyOvKuIrbFvL6S0aRNpYrpKXYVWXF53Cc58QuHOQsXkA6fbvwLp+ YA== -----END CERTIFICATE-----Generated at Wed Jan 21 10:27:57 2026 by rpki-client