This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133816.roa
File: AS133816.roa (raw, json)
Hash identifier: uzSymQlbiEAGX72y0+t7q9YWMCZYDMUuCK8BBBDcYH0=
Subject key identifier: AB:98:16:73:3C:48:17:FC:27:D4:F8:F9:76:A0:46:87:F7:55:8F:D6
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 57CDA37A0F7B9CEB88574FE30F4D87866B05D142
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133816.roa
Signing time: Tue 11 Nov 2025 06:00:25 +0000
ROA not before: Tue 11 Nov 2025 05:55:25 +0000
ROA not after: Tue 10 Nov 2026 06:00:25 +0000
asID: 133816
IP address blocks: 103.52.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 12:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:cd:a3:7a:0f:7b:9c:eb:88:57:4f:e3:0f:4d:87:86:6b:05:d1:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Nov 11 05:55:25 2025 GMT
Not After : Nov 10 06:00:25 2026 GMT
Subject: CN=AB9816733C4817FC27D4F8F976A04687F7558FD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d5:e0:5f:93:78:3d:97:54:08:a0:90:d1:ac:
b4:45:8f:1f:43:9a:63:6f:9c:b0:f0:04:67:30:b7:
7e:07:a1:40:70:ff:92:c8:c5:4c:84:2c:78:c4:61:
ab:a4:66:be:5a:2f:0a:23:49:14:b7:50:8f:4c:38:
d4:59:4d:7b:dd:15:5e:af:72:9a:b9:44:94:1c:08:
e1:b9:9d:15:e0:3d:21:e6:f4:df:d2:b1:db:48:18:
2a:bd:93:04:fa:62:54:a7:5e:78:cf:d7:95:c5:c5:
f3:e7:3e:b2:1b:d3:28:af:7b:1f:3d:b5:a3:44:fe:
9f:4d:f6:24:2a:e0:f1:9e:4e:1c:d0:2f:02:4b:36:
1c:ea:4d:f1:91:a9:b0:21:ce:5b:3b:e3:a7:95:1f:
5d:83:dc:1a:86:ad:1e:a2:8b:de:8e:51:13:ae:68:
f5:e7:b6:56:a4:0f:9f:4b:36:d5:24:51:0a:d2:d6:
80:86:1d:b7:9e:cb:ce:e2:eb:a8:94:37:80:22:e6:
2d:bc:56:47:a1:67:34:ec:b8:60:a0:1b:a2:e3:f8:
ed:0a:25:e2:13:19:c4:e6:75:f1:c3:a9:18:65:03:
6e:f6:7a:99:e2:b5:37:07:cb:6e:ca:ae:9d:4d:e0:
14:94:57:94:65:42:d0:15:4c:57:de:c6:0f:f4:ca:
13:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:98:16:73:3C:48:17:FC:27:D4:F8:F9:76:A0:46:87:F7:55:8F:D6
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133816.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.52.213.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:d1:58:50:b5:9c:d8:e3:d2:49:df:d2:7b:02:17:84:48:c0:
41:c5:3a:06:a1:93:09:4c:0c:67:72:64:68:fa:e4:c3:cb:1d:
f5:43:e6:df:8a:89:58:27:25:8b:88:79:3d:34:9b:ae:87:cf:
fc:1c:c3:0e:ca:fd:31:a0:24:ca:42:eb:51:a1:92:c4:c7:8d:
d0:6c:19:fd:d1:37:e4:9f:e8:dc:d5:38:95:00:b6:50:28:08:
f9:7b:23:df:c3:7b:dd:a9:19:e6:56:3d:ee:83:99:8e:c5:92:
b0:6d:39:cc:1c:ee:2e:f6:ce:d2:a9:1a:95:e0:70:8e:12:33:
da:82:ed:ac:b8:d1:ff:2e:d1:81:c2:9a:86:e8:3c:f5:c6:b6:
24:1c:e6:df:8b:d4:c2:f3:55:ae:8f:9c:b3:49:ff:88:79:72:
4b:b6:55:a0:73:ec:44:f9:3d:a2:b9:d4:8d:a2:05:b4:5a:d8:
1a:2d:57:31:b9:2d:cd:ba:5a:29:0a:06:8c:00:8b:49:b3:16:
ca:8c:d2:39:c8:00:92:0f:80:d3:19:ee:65:7d:06:05:a7:e4:
50:6a:fa:5b:86:8e:2b:e2:8a:aa:19:f1:8e:43:c5:ee:0f:1d:
fb:1b:64:fb:85:94:ea:03:a5:6d:46:61:48:08:b8:de:e5:14:
8e:34:df:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:55:14 2025 by rpki-client