This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136841.roa File: AS136841.roa (raw, json) Hash identifier: BLLrZFx2L7+qJ7Nzs72JgGTPlt+dUvfprJnt2TIJUz4= Subject key identifier: C7:41:03:BB:B6:24:4F:98:0C:B9:04:25:79:11:97:81:A6:C9:63:60 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6244670BBF03E2F3E0CD6BFB35E6F13B9AF1C0AE Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136841.roa Signing time: Mon 22 Dec 2025 05:00:00 +0000 ROA not before: Mon 22 Dec 2025 04:55:00 +0000 ROA not after: Mon 21 Dec 2026 05:00:00 +0000 asID: 136841 IP address blocks: 103.151.36.0/24 maxlen: 24 103.151.37.0/24 maxlen: 24 103.175.212.0/23 maxlen: 24 103.175.214.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Jan 2026 04:51:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:44:67:0b:bf:03:e2:f3:e0:cd:6b:fb:35:e6:f1:3b:9a:f1:c0:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 22 04:55:00 2025 GMT Not After : Dec 21 05:00:00 2026 GMT Subject: CN=C74103BBB6244F980CB9042579119781A6C96360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:55:fc:0f:14:dc:da:04:dd:57:0b:ea:32:86: 8f:fd:f8:dd:17:e7:ea:0f:3f:18:4e:b6:51:0a:98: 81:90:eb:a1:67:4b:60:30:63:58:53:54:19:dd:a4: da:b3:89:d2:39:f7:e3:24:62:13:2e:ba:d5:bd:34: 02:b5:ef:e5:ff:d4:a4:ec:f1:d3:eb:53:43:6c:b3: 27:64:d8:ab:13:bf:f7:58:f0:e1:e6:e8:c9:72:47: f1:f2:f4:25:e0:42:ed:c4:84:a4:c2:e3:7b:a6:c2: 67:85:a6:7a:ba:ff:53:28:96:7b:51:d4:d3:9c:3a: 33:0f:ad:6e:aa:10:7e:db:03:ae:64:78:57:7a:40: e9:f7:cf:7c:08:fc:99:2d:ee:62:29:87:09:36:18: ba:72:1b:65:47:f1:da:f0:23:6c:0f:38:7d:22:0a: b9:f1:3a:ae:7b:5a:82:b3:97:55:91:18:fc:25:f4: 4b:a1:5e:2a:9c:ec:ba:6b:ad:25:8c:e2:ac:b5:be: 00:38:04:f3:61:58:61:2c:c5:73:07:5f:cc:de:8b: 01:6c:2a:a3:bb:1f:7f:54:87:b0:b6:36:ab:d5:24: 7c:e1:c2:97:0d:5c:9f:5b:de:b9:71:44:14:4c:b8: 66:18:97:7a:d0:b2:e0:50:7b:11:29:a5:19:e7:20: 4b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:41:03:BB:B6:24:4F:98:0C:B9:04:25:79:11:97:81:A6:C9:63:60 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136841.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.151.36.0/23 103.175.212.0/22 Signature Algorithm: sha256WithRSAEncryption 90:07:ae:92:bb:33:62:fe:8b:bc:9d:0f:21:23:3f:18:a9:39: 62:68:b6:50:fa:46:9d:1f:37:02:fb:77:24:3c:55:35:fe:0b: de:16:f5:ae:31:0b:ea:0e:29:61:6f:07:34:bf:71:18:29:25: e3:e6:2f:92:07:c8:85:3d:21:57:0a:e1:65:fe:d6:5a:b3:f5: 76:d7:aa:f9:17:1f:00:e2:2b:9f:b9:66:d9:86:f2:4e:c8:08: ca:95:37:85:fe:8e:2b:47:ec:8f:26:ff:dc:dd:dc:0b:7d:51: 8c:ab:c8:87:e1:9f:ef:83:a1:62:eb:8c:fc:b9:7c:6b:d8:2b: 91:54:53:13:0a:ac:6e:5b:6b:3d:47:82:98:90:73:0c:43:53: cb:5b:00:18:a9:53:75:e1:00:ec:51:ca:30:38:50:27:7d:29: 8f:a4:3b:37:4d:17:6d:2a:0d:6d:14:ac:3e:ed:6d:02:9e:e1: d2:d8:a8:c4:0f:2b:0c:99:fc:e8:7a:4d:55:d2:e2:a9:e3:9e: 21:d5:6d:62:df:f1:3f:dc:aa:d5:7a:2f:b5:c6:ae:a9:c7:46: 73:24:f0:91:30:8e:b9:2e:a9:af:bf:99:bb:24:8c:98:b2:2a: d1:a7:fa:c0:cd:81:50:7c:15:48:d4:9e:3f:d7:72:92:69:df: 9b:c7:1f:49 -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUYkRnC78D4vPgzWv7NebxO5rxwK4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIyMjA0NTUwMFoX DTI2MTIyMTA1MDAwMFowMzExMC8GA1UEAxMoQzc0MTAzQkJCNjI0NEY5ODBDQjkw NDI1NzkxMTk3ODFBNkM5NjM2MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALpV/A8U3NoE3VcL6jKGj/343Rfn6g8/GE62UQqYgZDroWdLYDBjWFNUGd2k 2rOJ0jn34yRiEy661b00ArXv5f/UpOzx0+tTQ2yzJ2TYqxO/91jw4eboyXJH8fL0 JeBC7cSEpMLje6bCZ4Wmerr/UyiWe1HU05w6Mw+tbqoQftsDrmR4V3pA6ffPfAj8 mS3uYimHCTYYunIbZUfx2vAjbA84fSIKufE6rntagrOXVZEY/CX0S6FeKpzsumut JYzirLW+ADgE82FYYSzFcwdfzN6LAWwqo7sff1SHsLY2q9UkfOHClw1cn1veuXFE FEy4ZhiXetCy4FB7ESmlGecgS+ECAwEAAaOCAdYwggHSMB0GA1UdDgQWBBTHQQO7 tiRPmAy5BCV5EZeBpsljYDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNjg0MS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAWeXJAMEAmev1DANBgkqhkiG9w0BAQsFAAOCAQEAkAeukrszYv6L vJ0PISM/GKk5Ymi2UPpGnR83Avt3JDxVNf4L3hb1rjEL6g4pYW8HNL9xGCkl4+Yv kgfIhT0hVwrhZf7WWrP1dteq+RcfAOIrn7lm2YbyTsgIypU3hf6OK0fsjyb/3N3c C31RjKvIh+Gf74OhYuuM/Ll8a9grkVRTEwqsbltrPUeCmJBzDENTy1sAGKlTdeEA 7FHKMDhQJ30pj6Q7N00XbSoNbRSsPu1tAp7h0tioxA8rDJn86HpNVdLiqeOeIdVt Yt/xP9yq1XovtcauqcdGcyTwkTCOuS6pr7+ZuySMmLIq0af6wM2BUHwVSNSeP9dy kmnfm8cfSQ== -----END CERTIFICATE-----Generated at Thu Jan 8 20:07:12 2026 by rpki-client