This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137370.roa File: AS137370.roa (raw, json) Hash identifier: 1uZl6OeUxEljfGaLj5zx7lBNAE2jTaf8jzuTTrT7q1U= Subject key identifier: E6:EC:47:5F:6F:E3:04:CB:3E:9E:EE:4A:5A:68:FC:95:F0:A7:94:A3 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0907C8EB905391D8B7924EC47A44223D59C1813F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137370.roa Signing time: Tue 11 Nov 2025 06:00:02 +0000 ROA not before: Tue 11 Nov 2025 05:55:02 +0000 ROA not after: Tue 10 Nov 2026 06:00:02 +0000 asID: 137370 IP address blocks: 103.118.176.0/22 maxlen: 24 2403:3540::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:07:c8:eb:90:53:91:d8:b7:92:4e:c4:7a:44:22:3d:59:c1:81:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 11 05:55:02 2025 GMT Not After : Nov 10 06:00:02 2026 GMT Subject: CN=E6EC475F6FE304CB3E9EEE4A5A68FC95F0A794A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:55:19:ce:f1:2c:71:c7:26:f1:07:ad:67:0d: 1d:f9:cc:df:5a:86:51:ad:c7:a7:83:04:1d:ac:7d: e0:08:8c:f6:10:2d:1d:7b:f7:70:65:bb:4e:3c:c6: 19:9d:a9:ba:28:02:5b:95:1a:71:cb:c4:64:e3:8e: 13:3d:df:75:c5:69:82:3f:45:b9:91:31:00:d8:d8: 41:31:0b:2b:5d:66:44:fe:54:24:1d:29:a2:6d:d8: 99:53:b7:9c:9b:59:cd:46:30:5a:a1:87:14:b6:4d: 92:0d:c8:d2:56:01:c0:b8:7b:d4:c4:9f:f8:69:d2: 64:00:2e:80:df:99:f0:76:dd:2a:09:6f:30:b9:30: 0a:91:27:80:4c:c8:ed:99:dd:97:aa:ca:83:02:07: 42:9a:7a:8f:48:77:03:9a:50:07:99:52:68:e2:5b: 14:d9:c4:13:df:ca:40:dd:e4:78:95:86:d8:7c:38: 1a:c8:cb:60:80:b2:47:51:69:1f:f9:58:f1:62:a8: 9b:a8:c8:d1:70:d6:e9:85:52:bb:e2:d7:c5:5d:d5: 59:81:95:ac:26:75:1b:4b:f5:3d:22:31:15:30:ab: 9e:1d:66:4c:ac:8f:a0:63:1d:99:76:58:29:66:f3: 4f:17:2b:f9:08:99:6d:38:ab:b1:0a:53:0d:b7:7b: 4d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:EC:47:5F:6F:E3:04:CB:3E:9E:EE:4A:5A:68:FC:95:F0:A7:94:A3 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137370.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.118.176.0/22 IPv6: 2403:3540::/32 Signature Algorithm: sha256WithRSAEncryption 08:fa:a6:06:db:fe:c8:c7:da:78:c0:eb:9d:25:f8:36:f2:a6: 7c:24:0a:4c:75:3e:52:78:94:55:8d:78:09:39:3e:ac:76:11: a5:79:e0:5a:71:bb:ab:68:35:49:9e:1c:14:c3:89:12:ed:98: d5:1c:11:81:df:f2:99:c8:b5:cc:88:7c:64:ac:95:0d:9b:10: dc:4b:77:51:a5:9d:46:47:93:f2:94:3c:af:1b:5a:0c:8d:e4: a8:84:f8:9e:67:3e:fe:48:1d:ea:27:c9:b9:6f:c4:09:d2:75: 53:48:57:38:90:0c:76:34:97:cd:f4:26:cb:98:32:ff:9d:49: d3:39:f7:06:33:27:7d:d7:6a:cf:99:82:ea:64:44:f7:b8:49: f6:d9:20:2d:0e:7a:49:6c:d3:43:29:33:fa:19:94:83:7f:bf: c7:f8:9b:63:46:d4:db:89:33:9f:59:0c:f4:44:55:d6:b0:2a: 1e:cc:76:8f:bb:ff:41:bf:b6:70:c7:1b:5d:b8:b8:49:7c:d6: 3e:71:dd:fb:78:4a:01:39:b7:e9:c2:d4:4b:1f:5e:60:05:b6: fb:bb:83:75:e0:2a:46:af:d6:86:6c:1e:0e:b7:23:31:22:9c: 51:93:62:eb:c4:c6:18:b2:49:a9:76:40:30:e2:e1:bb:57:55: ee:b0:77:e0 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUCQfI65BTkdi3kk7EekQiPVnBgT8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTA1NTUwMloX DTI2MTExMDA2MDAwMlowMzExMC8GA1UEAxMoRTZFQzQ3NUY2RkUzMDRDQjNFOUVF RTRBNUE2OEZDOTVGMEE3OTRBMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMNVGc7xLHHHJvEHrWcNHfnM31qGUa3Hp4MEHax94AiM9hAtHXv3cGW7TjzG GZ2puigCW5UaccvEZOOOEz3fdcVpgj9FuZExANjYQTELK11mRP5UJB0pom3YmVO3 nJtZzUYwWqGHFLZNkg3I0lYBwLh71MSf+GnSZAAugN+Z8HbdKglvMLkwCpEngEzI 7Zndl6rKgwIHQpp6j0h3A5pQB5lSaOJbFNnEE9/KQN3keJWG2Hw4GsjLYICyR1Fp H/lY8WKom6jI0XDW6YVSu+LXxV3VWYGVrCZ1G0v1PSIxFTCrnh1mTKyPoGMdmXZY KWbzTxcr+QiZbTirsQpTDbd7TaUCAwEAAaOCAd8wggHbMB0GA1UdDgQWBBTm7Edf b+MEyz6e7kpaaPyV8KeUozAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNzM3MC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0w DAQCAAEwBgMEAmd2sDANBAIAAjAHAwUAJAM1QDANBgkqhkiG9w0BAQsFAAOCAQEA CPqmBtv+yMfaeMDrnSX4NvKmfCQKTHU+UniUVY14CTk+rHYRpXngWnG7q2g1SZ4c FMOJEu2Y1RwRgd/ymci1zIh8ZKyVDZsQ3Et3UaWdRkeT8pQ8rxtaDI3kqIT4nmc+ /kgd6ifJuW/ECdJ1U0hXOJAMdjSXzfQmy5gy/51J0zn3BjMnfddqz5mC6mRE97hJ 9tkgLQ56SWzTQykz+hmUg3+/x/ibY0bU24kzn1kM9ERV1rAqHsx2j7v/Qb+2cMcb Xbi4SXzWPnHd+3hKATm36cLUSx9eYAW2+7uDdeAqRq/WhmweDrcjMSKcUZNi68TG GLJJqXZAMOLhu1dV7rB34A== -----END CERTIFICATE-----Generated at Wed Dec 3 13:15:02 2025 by rpki-client