This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137316.roa File: AS137316.roa (raw, json) Hash identifier: lj9J/kVMiWyJboVtAQKlwyBUcu/ZWuzEbPLZyqYGljM= Subject key identifier: 3E:14:87:77:EB:3B:27:33:7B:AF:D2:A3:3E:56:36:93:CD:F4:2C:51 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 25DBFD0F0138576B36F0DF35814B7AE7D5BC4329 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137316.roa Signing time: Thu 13 Nov 2025 02:33:05 +0000 ROA not before: Thu 13 Nov 2025 02:28:05 +0000 ROA not after: Thu 12 Nov 2026 02:33:05 +0000 asID: 137316 IP address blocks: 203.26.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:db:fd:0f:01:38:57:6b:36:f0:df:35:81:4b:7a:e7:d5:bc:43:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 13 02:28:05 2025 GMT Not After : Nov 12 02:33:05 2026 GMT Subject: CN=3E148777EB3B27337BAFD2A33E563693CDF42C51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b0:ca:8a:d8:a2:67:67:b1:ef:09:80:7c:7d: 19:b1:bc:2b:e3:18:fa:bb:b3:fa:9a:94:14:7b:e1: c5:93:1b:62:b5:45:f3:85:28:e9:ec:f6:69:51:1f: 25:bd:75:a6:86:aa:2a:05:b0:9f:3e:73:02:6f:ab: 74:3e:3c:c6:c0:60:b7:9c:64:19:ed:60:06:12:fd: 01:dd:be:9f:fb:83:b6:fe:f9:73:ab:41:ca:b5:69: be:07:72:c1:1e:f8:65:40:e4:bd:ba:20:dc:fe:ff: 90:8c:94:28:39:47:35:7b:1d:d7:24:3c:8a:c2:f7: 8d:22:4b:8b:78:34:21:6a:8b:8f:2d:22:27:c9:7d: 5f:e0:c7:58:92:38:19:cb:52:ec:dd:94:6d:b0:b0: 90:3a:d6:b9:0b:70:75:25:f4:8f:0c:a1:59:59:87: c5:f7:0e:bd:4d:9d:cb:63:82:1e:2c:65:a7:f2:83: 73:30:1d:21:94:ba:a1:fd:cc:e0:55:37:c3:8a:c2: 95:53:8a:6a:0c:20:cc:f3:27:88:5e:76:5d:a9:6f: f1:7f:0c:07:c9:48:b8:df:c7:fe:6d:38:da:4d:78: 65:18:46:0f:0e:34:1f:8d:2a:19:ac:95:38:f6:df: bd:25:a5:e4:45:09:b4:b0:59:dc:bb:2d:98:42:e4: 51:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:14:87:77:EB:3B:27:33:7B:AF:D2:A3:3E:56:36:93:CD:F4:2C:51 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137316.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.26.47.0/24 Signature Algorithm: sha256WithRSAEncryption 84:04:ad:a2:4b:f5:8d:16:2b:c3:c9:26:ed:99:53:ad:6c:8c: 00:9e:a5:dc:71:27:bb:cf:eb:6f:0e:31:ad:39:51:7b:c9:fd: 61:6d:a5:d4:e9:97:e1:51:fb:13:9b:63:6d:81:8c:0a:26:a0: 7d:eb:57:ae:d6:c9:21:e0:80:8f:e7:24:7c:96:3e:e7:38:16: 6e:89:23:4e:16:6b:c8:64:bf:f6:de:18:32:f0:1a:c1:9b:e1: 45:9e:b0:61:7a:16:a7:78:a5:56:2d:38:59:5c:d9:b5:82:e7: c7:9f:ff:d7:0b:d6:b1:c4:99:77:42:3b:49:f2:4a:24:fd:81: 86:03:7f:77:de:f8:0c:c3:e0:f9:0c:12:b2:e4:1f:06:d3:68: d6:bd:3d:c3:12:72:01:a3:a0:0a:0d:1d:8d:d5:23:58:89:cc: 94:54:ea:61:7e:ba:57:63:fd:58:6f:b9:f9:d3:95:61:23:31: 95:97:3e:14:a8:88:53:1f:c9:50:6e:58:16:6c:6b:3e:87:4b: cb:db:a1:0e:df:ea:a4:1f:4a:28:f6:19:73:24:ce:c6:3b:07: 57:65:ec:31:22:e2:96:94:dd:5b:33:49:5e:83:fa:55:f2:37: 4f:d0:18:bb:5e:87:19:5d:54:83:78:ce:ea:4f:14:f5:cb:b7: f1:35:eb:52 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUJdv9DwE4V2s28N81gUt659W8QykwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMzAyMjgwNVoX DTI2MTExMjAyMzMwNVowMzExMC8GA1UEAxMoM0UxNDg3NzdFQjNCMjczMzdCQUZE MkEzM0U1NjM2OTNDREY0MkM1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJuwyorYomdnse8JgHx9GbG8K+MY+ruz+pqUFHvhxZMbYrVF84Uo6ez2aVEf Jb11poaqKgWwnz5zAm+rdD48xsBgt5xkGe1gBhL9Ad2+n/uDtv75c6tByrVpvgdy wR74ZUDkvbog3P7/kIyUKDlHNXsd1yQ8isL3jSJLi3g0IWqLjy0iJ8l9X+DHWJI4 GctS7N2UbbCwkDrWuQtwdSX0jwyhWVmHxfcOvU2dy2OCHixlp/KDczAdIZS6of3M 4FU3w4rClVOKagwgzPMniF52Xalv8X8MB8lIuN/H/m042k14ZRhGDw40H40qGayV OPbfvSWl5EUJtLBZ3LstmELkUdcCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQ+FId3 6zsnM3uv0qM+VjaTzfQsUTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNzMxNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMsaLzANBgkqhkiG9w0BAQsFAAOCAQEAhAStokv1jRYrw8km7ZlT rWyMAJ6l3HEnu8/rbw4xrTlRe8n9YW2l1OmX4VH7E5tjbYGMCiagfetXrtbJIeCA j+ckfJY+5zgWbokjThZryGS/9t4YMvAawZvhRZ6wYXoWp3ilVi04WVzZtYLnx5// 1wvWscSZd0I7SfJKJP2BhgN/d974DMPg+QwSsuQfBtNo1r09wxJyAaOgCg0djdUj WInMlFTqYX66V2P9WG+5+dOVYSMxlZc+FKiIUx/JUG5YFmxrPodLy9uhDt/qpB9K KPYZcyTOxjsHV2XsMSLilpTdWzNJXoP6VfI3T9AYu16HGV1Ug3jO6k8U9cu38TXr Ug== -----END CERTIFICATE-----Generated at Wed Dec 3 14:50:04 2025 by rpki-client