This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS134621.roa File: AS134621.roa (raw, json) Hash identifier: k9m/CTQcmZx3wjgFO8VAnrxg2RdHPvL8LMwg4oL+Xsw= Subject key identifier: 7C:2D:F3:A7:4C:BC:91:A7:0A:78:94:88:03:43:05:E4:49:E3:C5:02 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 61ED1FCC0781A88BFCD14DC76BF2DF0C3D15C622 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS134621.roa Signing time: Tue 11 Nov 2025 06:00:02 +0000 ROA not before: Tue 11 Nov 2025 05:55:02 +0000 ROA not after: Tue 10 Nov 2026 06:00:02 +0000 asID: 134621 IP address blocks: 103.197.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:ed:1f:cc:07:81:a8:8b:fc:d1:4d:c7:6b:f2:df:0c:3d:15:c6:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 11 05:55:02 2025 GMT Not After : Nov 10 06:00:02 2026 GMT Subject: CN=7C2DF3A74CBC91A70A789488034305E449E3C502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2e:51:7f:10:42:92:8a:64:86:91:d6:0d:ee: ef:36:c9:46:47:a8:8c:48:a9:0c:89:9a:fe:39:bc: da:ce:53:49:c5:26:7d:f5:bb:8c:ab:f6:c0:ab:98: 8d:bd:49:62:14:2b:4f:c4:41:58:27:ac:d0:ec:31: 79:ee:7b:aa:63:0b:9c:a9:e1:67:76:f5:df:d3:17: 35:46:c6:72:9c:61:23:c1:f7:bc:16:3d:50:dd:4b: c3:52:7e:a0:b5:23:af:1d:16:c9:45:0b:e6:56:64: 9a:fd:9e:fc:d0:c5:0f:29:cd:32:89:3e:7e:60:9e: 83:80:38:60:ac:31:d0:b9:7a:71:41:7a:23:a1:31: bd:91:fd:f2:a6:10:90:c1:6a:2a:ea:60:19:05:cd: dd:f8:b0:4c:92:da:37:b6:91:00:67:a5:11:9b:75: 5c:c4:38:09:e2:79:99:3a:2f:ef:bf:75:54:5d:56: 92:23:ab:43:b8:db:3a:43:ec:9f:8a:53:4c:0c:5d: 5c:41:ff:c5:7d:08:28:4b:03:22:5b:4f:95:30:3e: 41:5f:4a:7c:f7:8e:d2:bf:84:8d:9c:cf:83:6a:36: 96:4a:e5:4d:e0:81:01:b9:6f:b1:f0:64:a3:f5:97: 29:f1:9f:b7:f1:0c:d0:a6:af:e3:8c:1a:93:12:4b: a5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:2D:F3:A7:4C:BC:91:A7:0A:78:94:88:03:43:05:E4:49:E3:C5:02 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS134621.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.197.89.0/24 Signature Algorithm: sha256WithRSAEncryption 05:c1:90:a0:e4:f4:58:83:5b:24:1e:48:47:f0:da:88:5f:c4: 06:67:2d:91:87:17:25:d9:a5:e3:7a:48:7b:54:c4:a4:5b:08: bf:bb:64:9b:be:0c:36:ce:12:d4:b2:56:6e:8b:2d:7b:e9:78: 38:1a:6b:6e:19:90:ee:40:0c:cc:94:8e:71:81:0f:ad:2e:99: 15:e3:10:eb:7b:a5:f2:2e:73:33:51:79:76:ed:7b:cd:88:67: 37:6b:bc:75:d3:6f:2e:56:42:20:39:80:4f:f2:76:78:c8:79: ef:3c:ad:67:6f:c7:ea:c0:09:09:4f:14:d9:39:69:64:19:a4: 0d:cb:87:08:7b:b7:c8:cc:dc:42:9b:ef:60:b6:be:d2:94:81: bd:7e:9b:05:99:ab:72:1c:60:70:8e:4f:2e:88:90:21:28:2e: 71:29:4a:a7:5f:22:08:05:37:ee:6c:a0:c6:e5:3d:fd:18:36: 2d:f9:c0:6e:da:64:e4:02:ed:ad:9a:06:49:95:da:b1:85:ee: 08:a7:b5:ee:0f:a3:90:60:1f:01:ba:8d:43:16:47:a7:f8:e6: 0f:a8:a8:ff:48:1b:c3:63:be:67:14:77:5e:fb:6f:a8:db:8f: 32:30:c1:9b:fd:76:c1:2e:cb:45:52:d8:26:3f:cf:28:4b:06: 52:d0:c9:79 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUYe0fzAeBqIv80U3Ha/LfDD0VxiIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTA1NTUwMloX DTI2MTExMDA2MDAwMlowMzExMC8GA1UEAxMoN0MyREYzQTc0Q0JDOTFBNzBBNzg5 NDg4MDM0MzA1RTQ0OUUzQzUwMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMAuUX8QQpKKZIaR1g3u7zbJRkeojEipDIma/jm82s5TScUmffW7jKv2wKuY jb1JYhQrT8RBWCes0Owxee57qmMLnKnhZ3b139MXNUbGcpxhI8H3vBY9UN1Lw1J+ oLUjrx0WyUUL5lZkmv2e/NDFDynNMok+fmCeg4A4YKwx0Ll6cUF6I6ExvZH98qYQ kMFqKupgGQXN3fiwTJLaN7aRAGelEZt1XMQ4CeJ5mTov7791VF1WkiOrQ7jbOkPs n4pTTAxdXEH/xX0IKEsDIltPlTA+QV9KfPeO0r+EjZzPg2o2lkrlTeCBAblvsfBk o/WXKfGft/EM0Kav44wakxJLpRkCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBR8LfOn TLyRpwp4lIgDQwXkSePFAjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNDYyMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGfFWTANBgkqhkiG9w0BAQsFAAOCAQEABcGQoOT0WINbJB5IR/Da iF/EBmctkYcXJdml43pIe1TEpFsIv7tkm74MNs4S1LJWboste+l4OBprbhmQ7kAM zJSOcYEPrS6ZFeMQ63ul8i5zM1F5du17zYhnN2u8ddNvLlZCIDmAT/J2eMh57zyt Z2/H6sAJCU8U2TlpZBmkDcuHCHu3yMzcQpvvYLa+0pSBvX6bBZmrchxgcI5PLoiQ ISgucSlKp18iCAU37mygxuU9/Rg2LfnAbtpk5ALtrZoGSZXasYXuCKe17g+jkGAf AbqNQxZHp/jmD6io/0gbw2O+ZxR3XvtvqNuPMjDBm/12wS7LRVLYJj/PKEsGUtDJ eQ== -----END CERTIFICATE-----Generated at Wed Dec 3 13:55:27 2025 by rpki-client