This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS135485.roa
File: AS135485.roa (raw, json)
Hash identifier: LmpkGKm3ZBai8vIq14fkUlX/Qg11SQ6eGdgWQ3FqyCY=
Subject key identifier: 46:29:3B:02:D4:39:DA:F9:1B:E7:BE:1D:03:71:7B:1D:9C:5D:C4:76
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 1EB2377B7CCA63DEC4BACBCEC4F302DAA9174E89
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS135485.roa
Signing time: Thu 25 Dec 2025 04:00:39 +0000
ROA not before: Thu 25 Dec 2025 03:55:39 +0000
ROA not after: Thu 24 Dec 2026 04:00:39 +0000
asID: 135485
IP address blocks: 103.78.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:b2:37:7b:7c:ca:63:de:c4:ba:cb:ce:c4:f3:02:da:a9:17:4e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Dec 25 03:55:39 2025 GMT
Not After : Dec 24 04:00:39 2026 GMT
Subject: CN=46293B02D439DAF91BE7BE1D03717B1D9C5DC476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:84:f5:35:3a:4a:0d:42:c0:02:7f:30:97:f2:
81:2a:31:f7:50:37:ab:0c:ea:ff:f5:27:0e:ea:b2:
e7:25:1f:2e:81:10:92:70:69:a2:f4:73:ad:c3:77:
d4:25:44:84:46:b0:58:83:4d:c1:02:2e:b4:99:43:
2c:06:34:27:50:4d:e1:34:4f:ed:9f:3a:8d:52:01:
fe:ba:da:d2:4d:d1:55:d8:40:6e:58:93:5c:b3:8c:
d0:df:80:9e:27:06:16:cd:09:99:dc:58:22:04:fc:
36:49:7a:27:64:ae:a1:05:ff:61:7b:79:26:f9:d5:
4a:ca:fe:fb:39:6c:56:a7:50:8a:3d:c2:f1:e8:b4:
01:e9:0b:dc:ee:0b:00:a5:1c:b7:42:41:1c:e5:83:
2d:1b:ee:9a:34:c6:d8:83:98:68:58:92:59:76:cf:
b9:17:16:b8:00:cf:da:49:d7:84:4b:0b:21:2c:21:
2e:70:79:ee:0b:1c:7a:28:a7:09:0c:9b:3c:15:87:
3a:23:ea:10:71:4d:8a:0d:77:f9:35:e9:c5:73:14:
69:09:c4:97:bc:45:6d:26:90:f8:f8:2e:0e:6b:13:
77:81:5c:2d:dc:ed:5b:cc:8f:bf:17:42:b0:fd:86:
86:ea:7b:b7:b7:25:52:76:fc:35:6f:67:10:78:c5:
35:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:29:3B:02:D4:39:DA:F9:1B:E7:BE:1D:03:71:7B:1D:9C:5D:C4:76
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS135485.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.78.106.0/24
Signature Algorithm: sha256WithRSAEncryption
48:32:25:ac:1d:c4:03:d3:7f:ed:b0:0b:64:ef:11:cb:93:d7:
2b:9c:0f:f3:77:80:4d:36:c5:f1:16:96:13:6e:22:0c:b6:32:
b5:0c:77:3c:c9:69:a1:6c:ed:b3:2b:9b:5d:fc:69:44:8d:2e:
45:ec:a7:da:80:d2:31:ef:2d:62:3f:d6:c3:84:d2:97:9f:bf:
85:a2:d7:c9:7e:be:2a:5b:4e:fa:eb:c9:13:24:8d:ed:6f:ac:
05:07:f3:0a:4b:e0:d5:ea:fb:e1:2e:01:a3:0c:ab:50:85:d7:
5e:5b:e8:3f:ba:86:0b:a0:23:f4:88:c3:31:78:93:fe:1e:ec:
54:34:0d:43:6d:38:29:97:ca:ca:d7:96:d1:3b:73:30:b9:47:
14:40:ea:f7:00:90:d4:74:9e:0c:a9:0f:9b:90:3f:5c:5e:8e:
17:eb:5c:0e:04:ec:5e:56:90:4b:4a:a4:bb:47:f8:35:a2:59:
6c:e4:57:3a:13:36:3f:7e:e7:a8:6c:46:6a:8f:af:0e:c5:29:
7f:c5:d7:7f:38:8b:4b:3b:a0:89:e3:7c:22:8e:9a:70:91:c3:
a4:db:b7:39:59:d8:78:49:e9:32:c5:21:d9:04:13:a9:e5:7f:
59:d2:5b:49:44:9d:c4:1b:15:34:ff:71:82:30:23:84:29:7e:
8e:76:6d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:12:22 2026 by rpki-client