This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS59142.roa File: AS59142.roa (raw, json) Hash identifier: HQGGFQ+OeDdnC/kS3ZvGmHpNRyTvGQOjPh7jbrz5dzE= Subject key identifier: D8:9C:34:85:2C:82:EB:A4:E3:C6:B9:B1:77:47:9E:0E:8D:57:2D:24 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 57387717E6F62A97BA77D42FEF9546ACFE064191 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS59142.roa Signing time: Tue 27 Jan 2026 08:32:18 +0000 ROA not before: Tue 27 Jan 2026 08:27:18 +0000 ROA not after: Tue 26 Jan 2027 08:32:18 +0000 asID: 59142 IP address blocks: 160.25.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 04:03:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:38:77:17:e6:f6:2a:97:ba:77:d4:2f:ef:95:46:ac:fe:06:41:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jan 27 08:27:18 2026 GMT Not After : Jan 26 08:32:18 2027 GMT Subject: CN=D89C34852C82EBA4E3C6B9B177479E0E8D572D24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:91:84:ad:5c:c4:e4:49:5e:42:c9:37:90:04: e9:a4:9c:cf:5a:b7:78:46:bd:91:0d:56:11:64:17: 20:4e:7e:cc:e7:8a:f7:e4:66:c9:a1:9a:4e:ce:9a: af:25:e4:e9:1f:f3:ca:c5:e7:fe:c7:f2:66:90:d7: 45:d3:98:f8:39:ac:8d:f2:a7:21:79:f7:2d:50:84: bc:84:46:b5:ec:e0:37:19:9a:8d:62:06:66:f0:df: 8e:ca:b5:50:2e:16:79:60:12:bb:1c:f7:90:fc:c0: aa:22:a2:84:a1:3b:fa:dd:17:f8:f3:42:d8:96:35: 56:ac:3d:38:cc:58:9f:6f:f4:7a:ad:f7:e2:26:2f: 67:c4:03:43:91:e7:be:b5:6d:8f:2e:1b:4b:c3:5f: c5:2f:fc:c5:92:99:8e:8b:c4:57:61:15:c6:37:e5: 43:ad:58:f7:b2:d7:d8:da:e4:f3:50:88:c0:12:85: 48:3b:0a:44:c2:22:48:d0:a4:4c:92:aa:dd:9e:88: c7:89:27:4e:10:c6:28:31:e3:b1:dd:71:0a:01:ea: 9c:29:a0:49:86:92:25:34:26:ec:b4:b3:46:2e:bd: 04:02:2d:61:a6:c6:a4:fc:17:d5:1a:f3:62:a9:f6: fe:7a:66:ec:29:c6:5c:fc:a6:a5:46:47:86:a3:87: aa:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:9C:34:85:2C:82:EB:A4:E3:C6:B9:B1:77:47:9E:0E:8D:57:2D:24 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS59142.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.212.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:07:f4:3a:d8:e3:d2:cb:a5:12:f7:19:31:11:a7:33:45:62: 5a:da:d7:27:67:f1:50:2c:e9:82:41:1b:4b:67:a9:b5:f4:c1: 0c:d2:7b:ed:5e:d6:7a:11:67:05:84:41:59:85:80:46:c2:43: 41:70:ab:fc:c1:11:e4:0a:86:75:f5:bc:7c:5a:4b:a5:24:e4: a4:6a:38:2f:f4:8b:7c:16:48:e4:c8:52:39:83:b9:04:c8:f7: 2b:ff:4e:0e:a4:d5:e1:db:b9:da:56:26:3c:6f:42:51:c6:56: 2a:34:25:0a:f6:ef:76:ff:d6:f4:16:00:81:d6:c8:88:70:af: 85:cf:4b:56:1c:2a:e1:36:d5:e1:99:88:62:f6:e6:2f:48:02: e5:7b:58:50:3a:89:6e:72:a7:a3:b8:5a:4e:16:0d:b4:02:4c: e7:19:2f:7a:92:9b:b9:ce:0d:ae:cc:8d:86:8b:9f:5c:08:fb: af:96:0c:d1:e2:ab:f9:b1:c9:55:07:20:d8:0a:a7:bc:11:89: 9e:5c:a4:c5:2a:3d:ba:73:92:54:26:cc:49:c9:49:da:c4:5e: cf:9d:23:9f:6f:14:f4:0c:c7:73:b4:f8:e2:ab:9b:67:47:49: 6b:20:18:d1:9d:77:ae:9c:5a:04:20:22:17:e7:d4:6d:de:e3: a7:9b:0e:ec -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUVzh3F+b2Kpe6d9Qv75VGrP4GQZEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDEyNzA4MjcxOFoX DTI3MDEyNjA4MzIxOFowMzExMC8GA1UEAxMoRDg5QzM0ODUyQzgyRUJBNEUzQzZC OUIxNzc0NzlFMEU4RDU3MkQyNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMqRhK1cxORJXkLJN5AE6aScz1q3eEa9kQ1WEWQXIE5+zOeK9+RmyaGaTs6a ryXk6R/zysXn/sfyZpDXRdOY+DmsjfKnIXn3LVCEvIRGtezgNxmajWIGZvDfjsq1 UC4WeWASuxz3kPzAqiKihKE7+t0X+PNC2JY1Vqw9OMxYn2/0eq334iYvZ8QDQ5Hn vrVtjy4bS8NfxS/8xZKZjovEV2EVxjflQ61Y97LX2Nrk81CIwBKFSDsKRMIiSNCk TJKq3Z6Ix4knThDGKDHjsd1xCgHqnCmgSYaSJTQm7LSzRi69BAItYabGpPwX1Rrz Yqn2/npm7CnGXPympUZHhqOHqjUCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBTYnDSF LILrpOPGubF3R54OjVctJDAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzU5MTQyLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAoBnUMA0GCSqGSIb3DQEBCwUAA4IBAQA9B/Q62OPSy6US9xkxEacz RWJa2tcnZ/FQLOmCQRtLZ6m19MEM0nvtXtZ6EWcFhEFZhYBGwkNBcKv8wRHkCoZ1 9bx8WkulJOSkajgv9It8FkjkyFI5g7kEyPcr/04OpNXh27naViY8b0JRxlYqNCUK 9u92/9b0FgCB1siIcK+Fz0tWHCrhNtXhmYhi9uYvSALle1hQOolucqejuFpOFg20 AkznGS96kpu5zg2uzI2Gi59cCPuvlgzR4qv5sclVByDYCqe8EYmeXKTFKj26c5JU JsxJyUnaxF7PnSOfbxT0DMdztPjiq5tnR0lrIBjRnXeunFoEICIX59Rt3uOnmw7s -----END CERTIFICATE-----Generated at Mon Feb 2 19:15:16 2026 by rpki-client