This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142332.roa File: AS142332.roa (raw, json) Hash identifier: SOr4JV5z3f5y0I+qLJGULFP16kqa0gKojgcjNFXVMGY= Subject key identifier: 2A:2F:E0:D0:8F:FF:E8:49:CF:1D:1E:C8:7C:A8:8B:0B:84:55:65:23 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 6942A9E1377BAECA8660B61B3BD7CB287674584D Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142332.roa Signing time: Mon 17 Nov 2025 04:30:35 +0000 ROA not before: Mon 17 Nov 2025 04:25:35 +0000 ROA not after: Mon 16 Nov 2026 04:30:35 +0000 asID: 142332 IP address blocks: 160.22.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 11:07:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:42:a9:e1:37:7b:ae:ca:86:60:b6:1b:3b:d7:cb:28:76:74:58:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Nov 17 04:25:35 2025 GMT Not After : Nov 16 04:30:35 2026 GMT Subject: CN=2A2FE0D08FFFE849CF1D1EC87CA88B0B84556523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:49:fe:4a:98:03:67:d2:06:71:43:9a:63:ab: 3d:1e:cc:34:25:37:f3:9f:26:7f:9f:c6:cf:87:15: 78:1d:43:3d:1a:17:30:c7:ca:5b:81:03:c3:b7:af: b7:75:b8:62:be:c0:6e:9c:3c:c9:8d:43:19:21:c9: 42:30:f9:08:e4:68:66:a1:47:d2:11:0a:f0:26:de: 2e:74:35:59:9e:96:90:de:a5:ab:98:e3:a4:b0:64: 91:36:b5:6f:a3:29:72:6c:03:87:9c:19:47:e1:59: a6:37:ab:b0:72:47:e6:84:c6:47:b8:ee:cd:04:d5: aa:81:13:56:d4:71:0d:54:81:76:d0:6b:9c:55:ff: 35:b7:20:45:fb:c1:cb:77:a2:94:cc:a0:e5:45:bc: 64:82:6e:2d:1c:50:17:e4:ed:75:df:8e:0f:af:eb: 98:48:d7:03:fd:9f:14:e8:28:20:bf:6b:06:5e:ab: 18:40:87:19:6f:27:ad:b8:bf:ef:5d:ef:dd:2c:a9: 56:bf:93:0b:40:54:44:82:9c:6e:e7:59:06:69:97: 39:c0:66:3c:8e:c5:7b:d7:43:a5:46:91:fe:1f:65: 32:80:78:68:38:9c:46:f2:f7:03:0a:41:ae:29:41: 2d:3b:fa:05:0e:ec:cb:0a:ed:32:f5:c3:d1:83:45: ed:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:2F:E0:D0:8F:FF:E8:49:CF:1D:1E:C8:7C:A8:8B:0B:84:55:65:23 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.236.0/23 Signature Algorithm: sha256WithRSAEncryption 26:3d:da:b1:24:64:13:8b:33:5e:a5:22:2e:6c:51:67:ae:b7: 24:fb:29:40:a1:59:01:b2:4e:82:8d:ef:50:c3:2b:d0:b7:96: 43:7d:e0:4d:0b:90:33:af:d4:30:58:bb:2a:fd:4e:50:7d:3b: 37:d9:a5:5c:17:22:79:c5:46:69:9a:d6:a1:ac:6a:62:cf:9d: 2d:12:e0:67:76:ce:1f:0c:17:ea:95:c3:c7:19:cd:b9:1c:e1: 89:2c:0e:e3:7e:27:b1:b7:2c:f4:3e:0f:ba:db:33:91:73:c2: da:23:3f:71:6c:e7:3c:61:e9:c8:bc:a2:44:81:b4:dc:81:7a: 56:3c:3c:52:da:eb:1e:50:2b:95:fa:e7:ef:24:80:6b:27:f0: 34:7c:91:9d:3c:02:12:61:27:4f:41:84:b9:34:73:c8:49:9b: 7c:18:ce:fe:77:eb:64:96:2d:d0:4f:21:b4:d9:4d:e5:3a:05: 6c:a3:a6:e8:ad:83:16:91:5c:d4:3a:68:3b:c7:a6:44:4a:fb: 53:f8:cd:71:8b:0d:52:35:91:f1:bc:07:53:28:0d:8f:88:d8: 93:1f:6f:6c:10:6e:e3:42:69:cd:f0:9d:16:b3:c0:65:67:05: fb:4e:e9:56:db:df:78:80:85:1e:f0:2f:97:fd:d3:2f:21:e8: e4:ea:cd:6d -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUaUKp4Td7rsqGYLYbO9fLKHZ0WE0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTExNzA0MjUzNVoX DTI2MTExNjA0MzAzNVowMzExMC8GA1UEAxMoMkEyRkUwRDA4RkZGRTg0OUNGMUQx RUM4N0NBODhCMEI4NDU1NjUyMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN5J/kqYA2fSBnFDmmOrPR7MNCU3858mf5/Gz4cVeB1DPRoXMMfKW4EDw7ev t3W4Yr7Abpw8yY1DGSHJQjD5CORoZqFH0hEK8CbeLnQ1WZ6WkN6lq5jjpLBkkTa1 b6MpcmwDh5wZR+FZpjersHJH5oTGR7juzQTVqoETVtRxDVSBdtBrnFX/NbcgRfvB y3eilMyg5UW8ZIJuLRxQF+Ttdd+OD6/rmEjXA/2fFOgoIL9rBl6rGECHGW8nrbi/ 713v3SypVr+TC0BURIKcbudZBmmXOcBmPI7Fe9dDpUaR/h9lMoB4aDicRvL3AwpB rilBLTv6BQ7sywrtMvXD0YNF7UkCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQqL+DQ j//oSc8dHsh8qIsLhFVlIzAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE0MjMzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaAW7DANBgkqhkiG9w0BAQsFAAOCAQEAJj3asSRkE4szXqUiLmxR Z663JPspQKFZAbJOgo3vUMMr0LeWQ33gTQuQM6/UMFi7Kv1OUH07N9mlXBciecVG aZrWoaxqYs+dLRLgZ3bOHwwX6pXDxxnNuRzhiSwO434nsbcs9D4PutszkXPC2iM/ cWznPGHpyLyiRIG03IF6Vjw8UtrrHlArlfrn7ySAayfwNHyRnTwCEmEnT0GEuTRz yEmbfBjO/nfrZJYt0E8htNlN5ToFbKOm6K2DFpFc1DpoO8emREr7U/jNcYsNUjWR 8bwHUygNj4jYkx9vbBBu40JpzfCdFrPAZWcF+07pVtvfeICFHvAvl/3TLyHo5OrN bQ== -----END CERTIFICATE-----Generated at Wed Dec 3 17:12:36 2025 by rpki-client