This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142319.roa File: AS142319.roa (raw, json) Hash identifier: viy11sczbY7mL2uCqEz13QlYDs6II8DIWt7i26eGVK0= Subject key identifier: 81:8A:78:8D:5A:8D:57:3C:E7:E7:9B:AE:A0:D1:85:A8:F4:9E:BD:BB Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 5D7E6C500E78B061B43DD65D831815745E60B0D8 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142319.roa Signing time: Wed 14 Jan 2026 09:02:31 +0000 ROA not before: Wed 14 Jan 2026 08:57:31 +0000 ROA not after: Wed 13 Jan 2027 09:02:31 +0000 asID: 142319 IP address blocks: 204.51.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 13:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:7e:6c:50:0e:78:b0:61:b4:3d:d6:5d:83:18:15:74:5e:60:b0:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jan 14 08:57:31 2026 GMT Not After : Jan 13 09:02:31 2027 GMT Subject: CN=818A788D5A8D573CE7E79BAEA0D185A8F49EBDBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:49:fd:21:f1:90:be:ae:a3:d6:08:d9:9d:47: 66:24:92:ae:6d:64:b4:b5:18:71:5a:2a:08:9b:84: 28:9c:da:b3:82:bf:fb:8b:bb:c4:12:2b:02:1d:f4: a2:b6:81:54:b5:4d:1c:d2:bc:39:43:2b:f9:24:36: 0e:a0:80:8a:c1:ac:85:d3:60:55:30:cd:4a:6a:22: 9d:0f:ef:14:a2:d0:71:5f:1a:81:5c:6f:7b:c8:3e: f6:43:cc:63:43:4b:73:c2:f8:6d:f9:97:3a:1a:26: 82:1d:c2:5d:02:d0:ca:bb:73:5d:07:c1:3e:f9:f0: 17:e5:32:ef:bf:f9:bb:f7:2a:35:e4:d5:02:54:cc: 09:61:e7:7a:6b:30:83:3e:13:e2:2e:a0:6b:7d:57: 23:6b:45:e2:d0:1b:2b:8a:f3:84:5c:47:f2:32:d5: 6e:cf:f1:83:b4:4e:10:7a:83:c9:4c:29:70:12:30: e0:bd:28:8d:63:02:03:2c:fd:cf:82:68:6d:f0:f4: 2c:70:d7:c7:1e:64:f7:77:2e:55:ed:b3:b6:98:dd: 1a:9b:83:f1:22:04:7e:30:42:9d:9f:c6:4a:84:b1: ba:a2:8d:31:34:d0:ad:be:87:50:6e:bc:ca:fa:31: 98:11:41:ab:78:1e:51:17:82:a9:ce:f5:45:c7:b8: 11:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:8A:78:8D:5A:8D:57:3C:E7:E7:9B:AE:A0:D1:85:A8:F4:9E:BD:BB X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142319.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.51.0.0/18 Signature Algorithm: sha256WithRSAEncryption 6c:9c:8c:52:00:a6:b5:b0:23:0b:6b:15:95:1e:39:29:c5:c8: 7e:3b:b9:e1:8a:d4:21:00:06:ba:55:0a:95:ec:2f:dc:d3:8b: d5:71:e7:96:e7:c8:ee:8a:33:bd:91:9c:00:36:d9:e3:18:f9: 19:87:51:4e:1d:a6:f3:84:9d:6e:cb:cb:ed:1a:22:5a:c1:af: de:bb:de:b8:9e:b4:e7:f0:fa:69:8d:e6:34:57:cf:b8:80:7e: 3b:e2:a6:ed:76:6e:80:f7:e1:0d:d0:89:86:8d:86:eb:ca:b4: f4:6f:4c:40:1b:88:83:3e:26:fa:9d:c4:81:19:9b:12:fd:37: d8:22:e0:03:e2:17:17:67:35:cd:f1:e5:79:04:46:1c:91:58: 82:ea:a4:65:85:44:87:78:7e:d1:8c:eb:3f:d0:01:cc:72:2e: 46:ce:57:82:1d:ec:a3:5e:af:ce:14:48:45:b3:a0:ae:f9:59: a2:fb:7c:4c:4d:5c:6d:81:b8:e7:7b:55:7e:13:33:68:a2:73: e9:d7:13:98:04:8a:85:74:59:f3:f4:e4:e0:3f:cb:61:a6:24: a2:9f:c0:94:99:56:2f:f6:26:c2:13:ac:fc:ed:e7:01:b5:e5: a4:5d:dd:42:e2:27:64:1c:f5:97:20:0e:b0:f9:b9:13:f3:5f: fa:36:28:71 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUXX5sUA54sGG0PdZdgxgVdF5gsNgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDExNDA4NTczMVoX DTI3MDExMzA5MDIzMVowMzExMC8GA1UEAxMoODE4QTc4OEQ1QThENTczQ0U3RTc5 QkFFQTBEMTg1QThGNDlFQkRCQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMZJ/SHxkL6uo9YI2Z1HZiSSrm1ktLUYcVoqCJuEKJzas4K/+4u7xBIrAh30 oraBVLVNHNK8OUMr+SQ2DqCAisGshdNgVTDNSmoinQ/vFKLQcV8agVxve8g+9kPM Y0NLc8L4bfmXOhomgh3CXQLQyrtzXQfBPvnwF+Uy77/5u/cqNeTVAlTMCWHnemsw gz4T4i6ga31XI2tF4tAbK4rzhFxH8jLVbs/xg7ROEHqDyUwpcBIw4L0ojWMCAyz9 z4JobfD0LHDXxx5k93cuVe2ztpjdGpuD8SIEfjBCnZ/GSoSxuqKNMTTQrb6HUG68 yvoxmBFBq3geUReCqc71Rce4EdUCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSBiniN Wo1XPOfnm66g0YWo9J69uzAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE0MjMxOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBswzADANBgkqhkiG9w0BAQsFAAOCAQEAbJyMUgCmtbAjC2sVlR45 KcXIfju54YrUIQAGulUKlewv3NOL1XHnlufI7oozvZGcADbZ4xj5GYdRTh2m84Sd bsvL7RoiWsGv3rveuJ605/D6aY3mNFfPuIB+O+Km7XZugPfhDdCJho2G68q09G9M QBuIgz4m+p3EgRmbEv032CLgA+IXF2c1zfHleQRGHJFYguqkZYVEh3h+0YzrP9AB zHIuRs5Xgh3so16vzhRIRbOgrvlZovt8TE1cbYG453tVfhMzaKJz6dcTmASKhXRZ 8/Tk4D/LYaYkop/AlJlWL/YmwhOs/O3nAbXlpF3dQuInZBz1lyAOsPm5E/Nf+jYo cQ== -----END CERTIFICATE-----Generated at Wed Jan 21 10:27:50 2026 by rpki-client