This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136068.roa File: AS136068.roa (raw, json) Hash identifier: FS22Ku9q/NcqabNotE1eAg701qHyesCmo7FVHS2Et+g= Subject key identifier: 89:FC:9E:D0:2B:65:4B:3D:05:11:9E:4F:F1:3B:8F:37:AA:65:2C:AA Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7028D982E9B498F97606894537D3F065F494FD3E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136068.roa Signing time: Wed 26 Nov 2025 03:07:26 +0000 ROA not before: Wed 26 Nov 2025 03:02:26 +0000 ROA not after: Wed 25 Nov 2026 03:07:26 +0000 asID: 136068 IP address blocks: 103.82.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:28:d9:82:e9:b4:98:f9:76:06:89:45:37:d3:f0:65:f4:94:fd:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 26 03:02:26 2025 GMT Not After : Nov 25 03:07:26 2026 GMT Subject: CN=89FC9ED02B654B3D05119E4FF13B8F37AA652CAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5a:28:e1:f0:37:a9:4d:70:34:29:93:d1:b9: 01:ee:2e:64:2b:b5:2e:e0:0a:7c:65:03:3a:53:b3: e0:de:e8:59:e2:27:a6:28:c8:77:75:70:06:34:50: 17:33:62:21:c4:5b:fa:e4:34:73:a3:31:d2:bc:cc: 8f:e5:ca:59:34:d5:82:ad:4d:eb:e2:45:e3:80:31: ab:7a:2e:fe:38:29:56:b7:a5:23:ba:72:de:ac:3a: b6:3a:f0:ba:51:f8:e2:3a:b7:5e:26:d4:a4:4b:cf: 1d:80:64:70:9e:d9:d5:f0:3b:d6:35:5e:00:1f:3f: 44:71:81:1a:2c:9d:a0:57:a4:4a:e6:4c:c7:78:0f: 5b:d3:8f:58:d2:49:89:21:77:eb:9f:80:89:24:93: 94:ff:70:d0:13:3d:98:cb:e6:9f:62:09:13:17:b5: 8c:e7:3d:ab:7b:05:37:03:ac:59:27:f7:7a:9d:16: 21:0a:6b:76:cc:7a:d4:6d:2e:ed:04:4a:02:29:fd: e5:f4:3a:41:35:b2:8c:d5:ca:7b:da:71:63:a5:8e: 9a:a7:74:71:a5:86:09:db:3a:5e:ba:b9:98:b4:f2: 46:e3:0c:ec:08:66:96:72:bd:ac:67:9a:1f:8b:2c: d7:9a:5e:b4:50:30:e7:f7:4a:5e:ff:84:54:c8:1b: 89:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:FC:9E:D0:2B:65:4B:3D:05:11:9E:4F:F1:3B:8F:37:AA:65:2C:AA X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136068.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.82.7.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:b3:87:05:6e:84:d0:70:d2:52:bb:bb:41:52:7e:b9:fe:d2: f2:00:94:30:de:a0:ad:d7:c0:b9:d0:b8:27:71:b6:f7:51:34: 5b:e2:36:62:ea:02:3c:74:b9:07:76:7d:dd:71:99:99:b1:32: fe:2e:03:74:94:04:e3:f0:27:57:c2:7f:c4:a6:2b:bf:84:5e: e2:48:d9:fb:08:ae:46:a1:18:d3:a8:33:e6:91:68:74:21:87: fc:00:6d:4e:a9:f0:02:99:31:bd:91:7f:bb:37:46:af:a8:d6: 4e:82:0d:f7:1b:43:34:18:ac:42:b6:f0:8d:5f:31:2d:a7:97: 0f:ec:a4:b8:51:57:be:42:3a:3e:e6:85:54:51:97:29:39:8e: b5:14:68:7d:fa:8d:9b:1e:5f:bb:16:1f:4a:0b:da:d2:5f:1c: 47:38:d8:bc:cb:65:9a:66:cc:1d:53:a8:cb:60:17:fd:fd:0b: 45:07:3d:90:28:0f:fc:0e:be:68:2a:2b:eb:32:f2:8e:0d:e4: ee:c3:e3:35:ae:de:fe:67:ca:3e:fe:3f:b0:7b:87:61:72:72: 98:bb:7d:b0:37:f8:e6:5b:d3:b2:f2:93:32:90:6a:65:85:7a: 04:a2:7b:a1:17:44:02:cd:8b:93:a4:97:ba:13:42:9c:eb:a4: 07:f5:c8:d6 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUcCjZgum0mPl2BolFN9PwZfSU/T4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTEyNjAzMDIyNloX DTI2MTEyNTAzMDcyNlowMzExMC8GA1UEAxMoODlGQzlFRDAyQjY1NEIzRDA1MTE5 RTRGRjEzQjhGMzdBQTY1MkNBQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ1aKOHwN6lNcDQpk9G5Ae4uZCu1LuAKfGUDOlOz4N7oWeInpijId3VwBjRQ FzNiIcRb+uQ0c6Mx0rzMj+XKWTTVgq1N6+JF44Axq3ou/jgpVrelI7py3qw6tjrw ulH44jq3XibUpEvPHYBkcJ7Z1fA71jVeAB8/RHGBGiydoFekSuZMx3gPW9OPWNJJ iSF365+AiSSTlP9w0BM9mMvmn2IJExe1jOc9q3sFNwOsWSf3ep0WIQprdsx61G0u 7QRKAin95fQ6QTWyjNXKe9pxY6WOmqd0caWGCds6Xrq5mLTyRuMM7AhmlnK9rGea H4ss15petFAw5/dKXv+EVMgbiQMCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSJ/J7Q K2VLPQURnk/xO483qmUsqjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNjA2OC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGdSBzANBgkqhkiG9w0BAQsFAAOCAQEAHbOHBW6E0HDSUru7QVJ+ uf7S8gCUMN6grdfAudC4J3G291E0W+I2YuoCPHS5B3Z93XGZmbEy/i4DdJQE4/An V8J/xKYrv4Re4kjZ+wiuRqEY06gz5pFodCGH/ABtTqnwApkxvZF/uzdGr6jWToIN 9xtDNBisQrbwjV8xLaeXD+ykuFFXvkI6PuaFVFGXKTmOtRRoffqNmx5fuxYfSgva 0l8cRzjYvMtlmmbMHVOoy2AX/f0LRQc9kCgP/A6+aCor6zLyjg3k7sPjNa7e/mfK Pv4/sHuHYXJymLt9sDf45lvTsvKTMpBqZYV6BKJ7oRdEAs2Lk6SXuhNCnOukB/XI 1g== -----END CERTIFICATE-----Generated at Wed Dec 3 14:50:01 2025 by rpki-client