This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131702.roa
File: AS131702.roa (raw, json)
Hash identifier: kUgKqV8dZRnpY/eJ83ixitB3y700rEzJFP4yz4ZiLqE=
Subject key identifier: E9:6E:2F:13:7F:20:EC:80:C2:94:47:0B:DB:B3:F8:D2:9D:75:1A:71
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 161B3615473310A895FF1E6B687F476C7DBD8FFA
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131702.roa
Signing time: Thu 15 Jan 2026 08:00:00 +0000
ROA not before: Thu 15 Jan 2026 07:55:00 +0000
ROA not after: Thu 14 Jan 2027 08:00:00 +0000
asID: 131702
IP address blocks: 103.154.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Jan 2026 11:18:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:1b:36:15:47:33:10:a8:95:ff:1e:6b:68:7f:47:6c:7d:bd:8f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jan 15 07:55:00 2026 GMT
Not After : Jan 14 08:00:00 2027 GMT
Subject: CN=E96E2F137F20EC80C294470BDBB3F8D29D751A71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c6:5a:a1:9f:06:90:c8:4c:0b:60:3d:27:a7:
94:e1:1b:e6:2b:b0:00:1f:30:9d:4a:0b:21:dd:8c:
2b:9e:7e:f9:4b:4a:4e:e4:85:69:a3:61:c7:99:b4:
09:36:65:65:74:44:28:f7:cb:1e:7a:8f:26:0f:06:
0d:9f:4f:20:a9:59:a0:0e:22:45:b3:d6:03:0a:60:
df:e1:f4:b0:91:d0:99:04:3d:06:eb:21:ef:a5:4a:
ac:29:f8:fb:12:b6:93:96:fb:9d:90:46:9c:bb:14:
30:07:87:e1:7a:5d:70:59:4c:09:2f:d0:dd:be:26:
d6:ae:b2:28:4f:98:de:ac:c1:1c:5b:61:20:33:b6:
1a:25:ce:35:68:07:55:98:e3:9f:34:bd:0c:74:a6:
91:50:63:6d:2f:95:28:8f:0e:4d:88:1a:d4:49:ec:
d7:74:30:7c:0a:e4:c2:20:99:e3:3d:3b:d3:5f:41:
c3:83:11:29:28:3d:0e:f5:4a:b3:26:2f:5a:76:93:
76:1e:d9:17:dd:2d:11:59:bf:8d:b2:be:80:dd:91:
c8:a6:14:dd:40:55:a6:56:48:be:65:48:62:32:9e:
3f:46:44:0e:52:09:5e:45:63:ef:6b:24:e7:bf:5b:
86:84:67:ee:0e:bd:93:81:a0:84:53:0c:95:ff:f3:
40:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:6E:2F:13:7F:20:EC:80:C2:94:47:0B:DB:B3:F8:D2:9D:75:1A:71
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131702.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.154.227.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:4b:72:9f:78:b9:78:8b:df:cd:ea:bf:27:e4:ec:1d:3d:97:
e5:6a:a8:37:f7:be:b5:59:17:01:be:af:a1:c4:6f:31:cf:cb:
f0:c0:6f:0c:13:11:38:87:4b:aa:99:c4:5c:33:0e:85:21:85:
ee:2a:b5:15:2b:f6:a3:c1:1b:f1:59:9a:58:48:e1:35:bd:bb:
48:aa:b4:3b:1a:14:65:ba:32:f5:06:b3:e2:b5:0d:76:de:ab:
42:51:16:33:d4:67:bf:b4:bc:be:d0:c7:04:ac:e9:45:8f:33:
7d:e3:29:89:53:45:8a:68:d4:fc:b3:1f:49:b1:7c:c3:2b:ae:
27:53:1a:af:2b:94:9f:4f:37:c1:ed:50:e7:18:c3:53:63:7f:
30:ce:20:dc:b7:6d:af:eb:32:10:80:13:d4:d3:55:b8:b7:25:
1d:f7:df:79:06:1d:c2:28:25:44:61:8f:b8:66:3d:c5:6e:f8:
55:64:5f:5b:5f:dd:e3:51:53:f7:9a:cf:28:3d:39:54:d9:24:
75:51:4e:be:7b:b5:9a:74:0b:91:f3:c7:dc:c3:7c:a3:b0:a4:
c0:a0:2e:26:aa:97:c8:38:35:5c:8a:8c:8e:12:3f:92:10:7f:
72:16:71:91:e8:df:6d:89:35:88:dc:64:e3:9c:25:15:61:c3:
99:be:ff:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 14:15:11 2026 by rpki-client