This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138554.roa File: AS138554.roa (raw, json) Hash identifier: cy3sC/T6b/0PTCbbwrUn4nQVy+rqGslFSsGhkAkg8MY= Subject key identifier: 77:1A:30:E4:9A:C5:A0:9E:37:7A:66:41:24:16:EC:27:FA:94:B8:77 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 78D6C8DB7550D83742511F408554E5056BA002DD Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138554.roa Signing time: Fri 07 Nov 2025 02:19:58 +0000 ROA not before: Fri 07 Nov 2025 02:14:58 +0000 ROA not after: Fri 06 Nov 2026 02:19:58 +0000 asID: 138554 IP address blocks: 2001:df6:3d40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:d6:c8:db:75:50:d8:37:42:51:1f:40:85:54:e5:05:6b:a0:02:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 7 02:14:58 2025 GMT Not After : Nov 6 02:19:58 2026 GMT Subject: CN=771A30E49AC5A09E377A66412416EC27FA94B877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2e:f7:d9:e0:d5:19:2e:be:81:f8:23:c1:c5: d6:4c:1d:3a:3e:7e:b4:6a:5e:d5:82:2f:fc:9a:2d: cb:31:dc:38:6b:99:0f:50:e8:e3:b8:73:c8:51:0e: de:c4:b6:55:a0:ec:f6:0f:aa:73:da:17:18:4f:a4: d5:0c:96:53:dd:e2:42:f0:1e:e9:26:0b:7e:6c:c2: bf:4c:f4:29:ba:85:d8:63:5a:be:65:8f:68:d1:14: e3:5c:4f:e1:28:e9:8e:77:91:61:0e:de:1d:68:e6: 76:0d:54:d8:9f:96:d1:26:42:82:bd:cd:c5:97:3a: c5:b5:2a:6b:40:3e:f6:11:6f:d9:cb:f1:44:27:f0: 4c:0a:3d:c6:16:29:a6:c9:d4:21:f7:e8:d8:83:43: a6:71:b3:5a:ab:dc:a4:ea:cb:87:fc:24:2f:d2:b0: cd:64:df:3d:e5:98:82:e1:a3:77:7d:86:97:26:26: 4f:a7:c0:36:09:23:3a:5e:46:2c:51:d7:6d:d0:63: d7:c1:b2:e3:61:01:84:1d:75:a1:cd:a6:57:bf:a3: 85:e8:94:27:e4:d7:8c:18:81:fb:3a:0e:8d:ab:ff: 44:16:95:b3:44:b8:94:73:46:1e:b3:c5:24:e5:c8: da:ac:e5:d1:ce:fe:fe:2f:75:da:da:c9:79:fc:08: 59:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:1A:30:E4:9A:C5:A0:9E:37:7A:66:41:24:16:EC:27:FA:94:B8:77 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138554.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:3d40::/48 Signature Algorithm: sha256WithRSAEncryption 24:c6:80:65:68:80:dd:29:33:7a:53:a2:c3:bb:fb:8e:5a:6e: b7:19:30:79:10:8e:d2:39:97:c5:90:8c:71:a4:c8:31:aa:85: fd:79:a3:c6:37:d1:cd:d3:94:d9:ff:30:e0:17:4b:2f:f1:16: d3:38:bb:0b:57:b7:fc:4a:a3:2f:84:0e:51:56:55:13:e9:0a: 85:6a:46:fb:16:2e:3a:6c:da:75:79:bb:55:8a:91:08:23:ee: a6:31:76:96:51:50:5b:84:89:9e:08:88:2f:bc:a5:9e:5f:cc: d7:07:a2:c7:57:14:a8:ca:da:33:36:3a:b7:42:03:6a:7c:0e: bd:7b:ff:fd:74:ff:51:9a:89:94:ab:ad:29:76:bf:cc:ec:e4: 07:ac:6b:5c:b6:1e:74:4c:67:ba:69:eb:db:ba:7f:2f:27:36: 0b:00:98:a4:f0:ae:8e:7c:26:c5:68:75:e0:a8:0e:b7:aa:00: 07:2b:a3:78:97:60:e2:a1:e5:52:31:8e:7b:ab:2c:d1:9b:4f: 83:16:f9:24:dd:27:ab:f1:68:28:9e:6f:8a:35:84:1c:26:4a: 99:03:2f:7c:f8:d1:8f:b8:00:a5:4f:18:4f:06:2d:9e:c9:79: 27:e1:1d:72:ee:9c:cc:6d:33:e1:18:f4:3e:f6:f5:58:61:e2: 81:f1:30:82 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUeNbI23VQ2DdCUR9AhVTlBWugAt0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTEwNzAyMTQ1OFoX DTI2MTEwNjAyMTk1OFowMzExMC8GA1UEAxMoNzcxQTMwRTQ5QUM1QTA5RTM3N0E2 NjQxMjQxNkVDMjdGQTk0Qjg3NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALAu99ng1RkuvoH4I8HF1kwdOj5+tGpe1YIv/JotyzHcOGuZD1Do47hzyFEO 3sS2VaDs9g+qc9oXGE+k1QyWU93iQvAe6SYLfmzCv0z0KbqF2GNavmWPaNEU41xP 4SjpjneRYQ7eHWjmdg1U2J+W0SZCgr3NxZc6xbUqa0A+9hFv2cvxRCfwTAo9xhYp psnUIffo2INDpnGzWqvcpOrLh/wkL9KwzWTfPeWYguGjd32GlyYmT6fANgkjOl5G LFHXbdBj18Gy42EBhB11oc2mV7+jheiUJ+TXjBiB+zoOjav/RBaVs0S4lHNGHrPF JOXI2qzl0c7+/i912trJefwIWbcCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBR3GjDk msWgnjd6ZkEkFuwn+pS4dzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzODU1NC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfY9QDANBgkqhkiG9w0BAQsFAAOCAQEAJMaAZWiA3SkzelOi w7v7jlputxkweRCO0jmXxZCMcaTIMaqF/XmjxjfRzdOU2f8w4BdLL/EW0zi7C1e3 /EqjL4QOUVZVE+kKhWpG+xYuOmzadXm7VYqRCCPupjF2llFQW4SJngiIL7ylnl/M 1weix1cUqMraMzY6t0IDanwOvXv//XT/UZqJlKutKXa/zOzkB6xrXLYedExnumnr 27p/Lyc2CwCYpPCujnwmxWh14KgOt6oAByujeJdg4qHlUjGOe6ss0ZtPgxb5JN0n q/FoKJ5vijWEHCZKmQMvfPjRj7gApU8YTwYtnsl5J+Edcu6czG0z4Rj0Pvb1WGHi gfEwgg== -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:37 2025 by rpki-client