This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138121.roa File: AS138121.roa (raw, json) Hash identifier: xHHE6zACXPSDMQ36n0dIsLCB5F+vO8n+Q6QlrdIggyM= Subject key identifier: 71:93:63:4A:5F:CA:6F:C2:6A:84:C0:F3:32:0C:BA:EC:F7:3A:3E:DB Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 32CFE3B4F72DEF03484ADC2B51014326D82CDE91 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138121.roa Signing time: Mon 26 Jan 2026 08:00:00 +0000 ROA not before: Mon 26 Jan 2026 07:55:00 +0000 ROA not after: Mon 25 Jan 2027 08:00:00 +0000 asID: 138121 IP address blocks: 103.91.12.0/23 maxlen: 24 103.133.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:cf:e3:b4:f7:2d:ef:03:48:4a:dc:2b:51:01:43:26:d8:2c:de:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 26 07:55:00 2026 GMT Not After : Jan 25 08:00:00 2027 GMT Subject: CN=7193634A5FCA6FC26A84C0F3320CBAECF73A3EDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fb:b0:96:eb:78:b4:07:ca:44:20:0c:05:b1: 4e:03:39:73:db:9e:e3:12:07:57:ec:6d:5a:5d:68: 2a:55:8e:16:29:0c:13:60:30:fe:8c:87:db:72:67: 41:13:b7:b3:61:a3:79:37:95:9c:94:a5:5b:5b:4e: 75:15:a3:15:e0:fc:12:9e:a0:90:3e:f8:62:26:15: 40:dc:fe:a7:11:d3:78:5e:9c:20:28:73:3a:d4:06: 8f:91:d4:a0:e1:13:b5:1d:34:a4:06:60:5e:39:73: e8:a1:c1:5a:0f:bb:5d:e6:1f:f5:81:3d:d2:12:71: 06:01:70:06:e5:e7:ca:91:54:e3:22:fc:c6:c2:4e: 4b:76:f3:d8:ce:7c:8f:6d:fe:a1:b1:3f:ae:f7:62: 13:2e:aa:b2:41:ca:57:7d:34:f9:77:56:aa:19:43: ff:1b:26:b1:ac:e4:26:53:da:13:9f:24:78:0f:72: 17:53:ec:33:92:39:41:af:e3:9a:b7:33:19:ae:07: 5b:b8:e2:b6:46:fc:3e:39:e2:5d:61:68:21:45:eb: 1c:03:19:b5:61:11:f9:f8:56:f6:ec:29:c4:eb:5b: 8a:24:bc:c6:c4:48:52:b0:a8:ae:ca:6d:a6:b7:40: 0b:48:c6:13:fb:06:a6:77:ad:85:f1:5b:39:4a:b1: 4c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:93:63:4A:5F:CA:6F:C2:6A:84:C0:F3:32:0C:BA:EC:F7:3A:3E:DB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138121.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.91.12.0/23 103.133.148.0/22 Signature Algorithm: sha256WithRSAEncryption 03:df:da:3c:5d:37:7a:de:e2:e2:62:8d:1d:52:ce:7c:bd:88: 58:9e:d2:a5:e6:d1:9d:cc:d3:1f:2d:12:10:5b:8b:c3:f5:36: d9:a4:c2:fe:87:d5:4c:d7:57:16:d4:6b:32:42:95:67:fd:d5: 26:51:f5:46:fe:79:8c:36:3d:20:96:1b:30:3f:d6:52:cb:d5: 96:73:00:1d:5e:ed:aa:9e:f2:b2:35:73:f3:9c:21:85:1c:19: a2:e7:74:79:f8:20:09:1f:b5:c5:65:1e:87:68:96:b6:50:13: 99:30:a1:fd:eb:88:b2:d4:7b:21:05:43:34:73:ff:ac:44:f9: f4:30:d1:dc:5c:a1:93:35:66:fa:3e:f0:43:91:b4:a4:71:22: 37:f2:0a:af:61:f0:f2:3e:6c:8e:04:46:cb:b2:54:4c:56:9a: 63:09:ca:9c:5c:52:ac:80:c6:52:e4:28:78:dc:28:e9:a1:fe: a6:01:bb:58:ec:05:f0:2d:6c:01:5e:e5:5a:6a:01:a8:32:66: ef:04:2d:b7:27:53:9b:47:6c:89:b5:9c:d5:16:ec:91:c1:5a: f3:09:17:1b:ce:83:95:61:c0:09:64:c5:30:12:24:65:69:27: bc:9d:62:40:b8:43:39:6d:ca:b9:dd:40:94:bb:46:18:03:44: cd:5e:98:d5 -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUMs/jtPct7wNIStwrUQFDJtgs3pEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDEyNjA3NTUwMFoX DTI3MDEyNTA4MDAwMFowMzExMC8GA1UEAxMoNzE5MzYzNEE1RkNBNkZDMjZBODRD MEYzMzIwQ0JBRUNGNzNBM0VEQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANP7sJbreLQHykQgDAWxTgM5c9ue4xIHV+xtWl1oKlWOFikME2Aw/oyH23Jn QRO3s2GjeTeVnJSlW1tOdRWjFeD8Ep6gkD74YiYVQNz+pxHTeF6cIChzOtQGj5HU oOETtR00pAZgXjlz6KHBWg+7XeYf9YE90hJxBgFwBuXnypFU4yL8xsJOS3bz2M58 j23+obE/rvdiEy6qskHKV300+XdWqhlD/xsmsazkJlPaE58keA9yF1PsM5I5Qa/j mrczGa4HW7jitkb8PjniXWFoIUXrHAMZtWER+fhW9uwpxOtbiiS8xsRIUrCorspt prdAC0jGE/sGpnethfFbOUqxTD0CAwEAAaOCAdYwggHSMB0GA1UdDgQWBBRxk2NK X8pvwmqEwPMyDLrs9zo+2zAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzODEyMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAWdbDAMEAmeFlDANBgkqhkiG9w0BAQsFAAOCAQEAA9/aPF03et7i 4mKNHVLOfL2IWJ7SpebRnczTHy0SEFuLw/U22aTC/ofVTNdXFtRrMkKVZ/3VJlH1 Rv55jDY9IJYbMD/WUsvVlnMAHV7tqp7ysjVz85whhRwZoud0efggCR+1xWUeh2iW tlATmTCh/euIstR7IQVDNHP/rET59DDR3FyhkzVm+j7wQ5G0pHEiN/IKr2Hw8j5s jgRGy7JUTFaaYwnKnFxSrIDGUuQoeNwo6aH+pgG7WOwF8C1sAV7lWmoBqDJm7wQt tydTm0dsibWc1RbskcFa8wkXG86DlWHACWTFMBIkZWknvJ1iQLhDOW3Kud1AlLtG GANEzV6Y1Q== -----END CERTIFICATE-----Generated at Mon Feb 2 08:12:36 2026 by rpki-client