This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138123.roa File: AS138123.roa (raw, json) Hash identifier: nqp+Go0EeSHJTRESq3Gs7LnCUjAJPF53YGaFDuK5A5Q= Subject key identifier: 4F:8B:57:29:A8:69:8E:D2:90:E8:B3:39:67:6D:3F:DC:91:80:3D:9C Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 43BA98957437FB15DC79B90E2CEDBBF8000CF9F0 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138123.roa Signing time: Tue 11 Nov 2025 06:00:14 +0000 ROA not before: Tue 11 Nov 2025 05:55:14 +0000 ROA not after: Tue 10 Nov 2026 06:00:14 +0000 asID: 138123 IP address blocks: 103.132.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:ba:98:95:74:37:fb:15:dc:79:b9:0e:2c:ed:bb:f8:00:0c:f9:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 11 05:55:14 2025 GMT Not After : Nov 10 06:00:14 2026 GMT Subject: CN=4F8B5729A8698ED290E8B339676D3FDC91803D9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:57:2b:13:0e:e2:01:05:84:70:3b:56:35:0e: 26:ed:3d:2c:c0:87:3f:36:1e:54:e9:1a:cf:40:f2: bd:8d:88:b2:bc:57:13:3c:4a:72:e9:40:5b:4d:fa: ac:dc:61:14:6f:b5:ec:f4:91:e2:c6:27:c7:56:42: ff:1c:62:9f:63:ac:60:b6:38:cd:17:3b:1d:15:f5: b2:3c:7d:74:aa:f1:b7:93:ff:03:5b:b6:f5:aa:1d: 22:2e:4d:de:5c:de:c4:5d:e7:4d:79:99:42:fe:69: 07:2a:3f:e8:6f:53:34:45:42:5d:41:28:ab:14:60: c3:76:32:67:24:1e:09:73:f0:07:ac:8f:db:0f:42: 94:c1:60:cb:6a:c6:0e:d5:a0:a5:c5:a5:dc:fa:bf: 5c:c5:71:a0:40:6e:e5:db:8f:c9:0a:6e:92:b3:a8: 33:ab:10:a5:d4:ea:df:e4:11:f2:53:a6:9d:c9:10: 1b:c2:d8:28:9d:d1:64:b1:2c:b5:e1:d0:e4:3c:63: 8b:c7:f8:3a:cc:65:96:81:b2:c7:a2:68:c1:47:2d: d8:a2:23:7d:69:95:70:ff:d1:04:e5:0b:2d:66:43: 18:7d:63:76:3a:4c:c5:32:ea:f2:87:e6:b1:59:cd: f0:19:c3:bf:ed:92:75:72:3b:88:c8:85:09:41:8e: ac:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:8B:57:29:A8:69:8E:D2:90:E8:B3:39:67:6D:3F:DC:91:80:3D:9C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138123.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.132.52.0/22 Signature Algorithm: sha256WithRSAEncryption 45:fd:6f:ca:97:24:47:71:24:12:e1:e6:93:3b:68:a8:c3:b5: 3e:2b:36:22:b9:e8:75:98:36:db:60:94:03:f6:ec:a1:2c:0a: 22:a9:2d:02:e1:f1:4c:24:f8:c9:d0:20:34:45:a1:b4:66:f4: e4:77:31:2c:1e:c1:e2:b0:ba:86:b7:87:56:fe:06:26:6f:a6: a1:d5:da:3b:c3:54:ac:f7:b0:9b:90:c4:79:6f:2b:fa:f4:e6: dc:79:2b:4e:98:41:bb:38:7f:3b:51:bb:d7:47:55:20:5c:4c: 21:32:ca:41:7a:38:61:41:0e:b8:52:cb:af:54:91:83:f2:4a: 0b:ae:8c:b3:2f:a3:91:7d:d2:1e:2e:30:a2:b9:3b:7e:68:92: 21:52:7f:a0:2e:e0:26:a5:7b:f7:22:22:aa:a4:64:1f:b9:cc: 81:e3:0a:45:59:b2:0e:c5:76:08:9b:1f:bb:43:be:5e:eb:8e: 66:16:b6:c3:66:e9:a4:ee:a9:d8:3a:b5:12:4d:e2:32:95:57: ef:2d:df:1a:bf:95:72:f3:cf:3a:28:28:f0:6d:70:05:b1:8e: 02:4e:52:21:f2:06:65:d5:0f:31:23:c9:98:de:25:ab:ea:9b: 70:82:e1:70:e5:c6:eb:28:94:84:84:c7:f7:c9:d3:d0:36:dc: 02:4e:04:bb -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUQ7qYlXQ3+xXcebkOLO27+AAM+fAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTA1NTUxNFoX DTI2MTExMDA2MDAxNFowMzExMC8GA1UEAxMoNEY4QjU3MjlBODY5OEVEMjkwRThC MzM5Njc2RDNGREM5MTgwM0Q5QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMVXKxMO4gEFhHA7VjUOJu09LMCHPzYeVOkaz0DyvY2IsrxXEzxKculAW036 rNxhFG+17PSR4sYnx1ZC/xxin2OsYLY4zRc7HRX1sjx9dKrxt5P/A1u29aodIi5N 3lzexF3nTXmZQv5pByo/6G9TNEVCXUEoqxRgw3YyZyQeCXPwB6yP2w9ClMFgy2rG DtWgpcWl3Pq/XMVxoEBu5duPyQpukrOoM6sQpdTq3+QR8lOmnckQG8LYKJ3RZLEs teHQ5Dxji8f4OsxlloGyx6JowUct2KIjfWmVcP/RBOULLWZDGH1jdjpMxTLq8ofm sVnN8BnDv+2SdXI7iMiFCUGOrLECAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRPi1cp qGmO0pDoszlnbT/ckYA9nDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzODEyMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmeENDANBgkqhkiG9w0BAQsFAAOCAQEARf1vypckR3EkEuHmkzto qMO1Pis2IrnodZg222CUA/bsoSwKIqktAuHxTCT4ydAgNEWhtGb05HcxLB7B4rC6 hreHVv4GJm+modXaO8NUrPewm5DEeW8r+vTm3HkrTphBuzh/O1G710dVIFxMITLK QXo4YUEOuFLLr1SRg/JKC66Msy+jkX3SHi4work7fmiSIVJ/oC7gJqV79yIiqqRk H7nMgeMKRVmyDsV2CJsfu0O+XuuOZha2w2bppO6p2Dq1Ek3iMpVX7y3fGr+VcvPP Oigo8G1wBbGOAk5SIfIGZdUPMSPJmN4lq+qbcILhcOXG6yiUhITH98nT0DbcAk4E uw== -----END CERTIFICATE-----Generated at Wed Dec 3 13:15:00 2025 by rpki-client