This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137368.roa
File: AS137368.roa (raw, json)
Hash identifier: 13U55rJRathgKf2iq3KAfzKlrkZEp+P6Xhl7n6VBEBY=
Subject key identifier: B2:C5:1B:27:88:AE:85:5B:F4:C3:0A:5F:5E:F4:0A:CA:18:9B:E9:D8
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 1B95BC70BA812497D7CE7C80D877764EAF407C6A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137368.roa
Signing time: Tue 11 Nov 2025 06:00:12 +0000
ROA not before: Tue 11 Nov 2025 05:55:12 +0000
ROA not after: Tue 10 Nov 2026 06:00:12 +0000
asID: 137368
IP address blocks: 103.116.210.0/24 maxlen: 24
2001:df3:ff00::/48 maxlen: 48
2001:df5:7b00::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 12:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:95:bc:70:ba:81:24:97:d7:ce:7c:80:d8:77:76:4e:af:40:7c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Nov 11 05:55:12 2025 GMT
Not After : Nov 10 06:00:12 2026 GMT
Subject: CN=B2C51B2788AE855BF4C30A5F5EF40ACA189BE9D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1c:45:68:27:24:53:39:33:a1:74:a3:a6:6f:
2d:8d:f9:88:4a:e4:c7:8b:f1:80:50:d7:2a:da:e4:
45:1c:e6:f0:3b:e9:d7:40:bf:a0:82:ff:d2:9b:b6:
42:9f:63:55:a9:28:3b:94:8e:ae:45:b3:c0:8d:22:
03:21:28:9d:71:6b:b4:54:50:5b:c7:28:3f:03:7e:
9a:8b:9d:7d:b1:7a:e8:5e:c6:c4:fa:11:6e:d7:b8:
e0:f5:23:9e:7e:38:a8:24:f8:1f:9e:27:d2:1a:22:
84:ac:20:fa:6c:0e:0b:8a:e4:4b:2e:29:b7:00:54:
51:4f:79:17:af:e3:07:07:17:99:f9:b1:97:6c:0a:
37:4b:51:05:59:b7:81:1a:1d:b5:ec:c6:1c:0d:53:
a1:43:24:4f:75:7d:0b:96:30:c0:f9:b2:3c:b5:47:
d5:8f:90:c0:7f:97:a3:94:c8:17:a5:84:5e:e3:77:
a3:eb:7f:27:76:32:d5:10:8f:d8:29:0f:15:35:21:
72:24:92:88:32:7a:84:d5:1e:c6:b6:e7:0b:f8:ec:
a5:95:e3:60:b0:6e:71:31:de:af:20:30:f3:cc:87:
20:98:55:05:ce:e8:ce:9a:44:09:26:70:9f:63:4a:
64:4f:10:5c:50:d5:c0:2c:93:2b:98:d6:1b:b5:36:
0d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C5:1B:27:88:AE:85:5B:F4:C3:0A:5F:5E:F4:0A:CA:18:9B:E9:D8
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137368.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.116.210.0/24
IPv6:
2001:df3:ff00::/48
2001:df5:7b00::/48
Signature Algorithm: sha256WithRSAEncryption
5d:1e:bb:16:c3:ad:0a:55:70:8d:41:f6:91:75:44:59:05:a4:
34:82:b5:c9:b8:8f:07:73:55:d9:55:eb:db:fe:63:a9:39:cb:
ab:f7:4c:38:f8:c0:ed:48:e4:0c:b2:d1:3f:7b:77:fa:ea:43:
ec:dc:71:2a:8d:79:8d:f6:a5:14:06:79:3c:7b:a5:87:19:cb:
96:18:5a:87:58:8f:c1:7a:31:db:67:d9:03:9e:5f:68:9a:51:
b6:59:68:8e:20:38:b2:54:a0:74:73:c4:eb:d9:33:3d:30:88:
51:b7:4e:0a:9f:7f:f7:33:cc:ab:06:37:a0:53:1a:7d:a4:5c:
8e:f4:9a:37:7d:3e:80:18:06:8e:69:29:6d:e2:3b:8e:35:02:
2e:de:03:6f:0e:ad:98:5e:7e:a2:5a:da:51:b8:0b:c0:96:43:
d5:b8:53:70:0d:21:e5:17:29:c7:f4:83:4e:ef:59:f3:64:cc:
09:23:a6:0e:05:b6:9f:f0:46:24:b1:8b:ad:b1:a1:2b:67:6b:
1d:e9:b4:f4:9b:07:ec:d0:03:9c:01:c7:bd:eb:7c:7c:03:e2:
15:9c:64:b8:31:59:ff:f4:1d:5e:05:bc:f4:41:0b:c8:bc:3a:
9a:1b:64:06:41:4a:f3:b9:58:d8:3e:37:7c:35:9e:ae:c1:89:
e2:0b:9a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:15:06 2025 by rpki-client