This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138838.roa File: AS138838.roa (raw, json) Hash identifier: H48q7gLyIrKe7BCErha2sibqSt5KFnUxZ0y6HHhNChY= Subject key identifier: FE:54:02:7E:DA:EE:22:EB:04:AE:94:1C:45:0C:48:F4:DA:5A:68:1E Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: BB2F50F5468BE72056E47003FEE7BF76399900 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138838.roa Signing time: Tue 11 Nov 2025 06:00:07 +0000 ROA not before: Tue 11 Nov 2025 05:55:07 +0000 ROA not after: Tue 10 Nov 2026 06:00:07 +0000 asID: 138838 IP address blocks: 103.138.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: bb:2f:50:f5:46:8b:e7:20:56:e4:70:03:fe:e7:bf:76:39:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 11 05:55:07 2025 GMT Not After : Nov 10 06:00:07 2026 GMT Subject: CN=FE54027EDAEE22EB04AE941C450C48F4DA5A681E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c4:85:50:bd:e9:be:59:d1:b8:77:3c:f9:be: da:2c:4c:c1:c8:0d:c1:32:94:b7:5f:aa:0e:2a:87: 1c:d3:09:e0:65:84:fa:36:18:f3:8a:be:31:fb:67: 47:7b:1c:cf:90:9f:4c:bb:20:4b:6e:61:e3:ae:93: 21:12:d0:62:20:02:6a:da:62:21:19:21:fc:4f:c7: 0f:90:95:8f:47:48:4e:8b:18:37:0f:b2:5b:63:36: 2e:4b:a4:ff:fc:24:88:4b:28:f9:e3:05:78:9e:12: 72:88:ad:9d:10:f6:ab:6b:63:07:21:f6:cc:af:79: bf:cd:f3:6d:7d:3a:e6:0e:53:8e:b5:a6:db:94:88: c1:94:91:50:3d:7b:34:e6:a7:27:22:e4:e2:68:ee: 48:53:8c:60:07:02:4f:2a:51:74:30:9a:ad:d4:56: f2:3f:e2:85:60:8c:62:0c:1c:d9:fe:4e:d1:38:54: 49:21:a3:86:4f:c2:9c:f1:e6:d1:2a:bc:09:8a:21: 82:5e:17:51:db:35:42:a1:d9:09:5c:39:2f:82:87: 5e:29:74:6e:05:12:8d:cb:ae:c3:8b:ef:21:ab:61: 5e:db:18:52:2f:cb:2b:ef:3b:fa:ea:d3:02:8a:fd: 39:09:57:1e:b1:cf:8d:6c:2a:a7:aa:eb:6c:e8:32: 0e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:54:02:7E:DA:EE:22:EB:04:AE:94:1C:45:0C:48:F4:DA:5A:68:1E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.138.204.0/23 Signature Algorithm: sha256WithRSAEncryption 0e:10:32:49:da:3d:06:3a:19:a1:0e:e0:1b:34:ac:6a:b2:31: a7:51:1b:f2:08:c8:0a:91:25:74:c1:9f:f4:bb:cb:21:1d:5e: 3e:14:10:bf:47:55:df:d6:a4:74:e0:f0:4e:f1:06:48:e1:a8: a7:7b:5c:c9:ce:9b:67:3a:78:52:a3:ed:21:44:57:e0:b5:82: a6:5b:90:0e:89:07:3d:2a:07:97:f6:8a:84:ff:18:e8:0f:da: e8:1c:76:37:99:f0:1d:a5:ab:e5:0b:87:1d:fd:68:46:b2:24: f3:14:1e:e5:3a:5c:fb:fc:95:a1:8c:ad:f6:83:25:60:48:8f: 9c:7a:46:7c:7e:ef:a4:d5:3c:83:c5:e0:71:57:6c:ff:9f:e3: 99:6d:6c:50:84:1b:de:1a:86:e5:3c:21:56:09:27:af:4e:69: 1e:06:d4:84:42:e2:89:95:1f:f4:22:83:76:72:20:4a:74:97: b3:35:6a:4b:83:be:cb:f8:bc:07:71:2c:64:a2:b2:57:d9:fd: fa:fe:f7:3a:1e:a4:01:5e:2c:08:4e:b8:6c:3d:f5:7c:ba:6f: 2c:6c:af:d8:f6:b0:14:1e:21:8e:2f:53:4c:3b:b2:63:14:95: 83:51:42:55:8a:7d:79:33:1e:64:50:c5:41:26:c8:51:0f:55: 6f:c9:c8:f7 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUALsvUPVGi+cgVuRwA/7nv3Y5mQAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTA1NTUwN1oX DTI2MTExMDA2MDAwN1owMzExMC8GA1UEAxMoRkU1NDAyN0VEQUVFMjJFQjA0QUU5 NDFDNDUwQzQ4RjREQTVBNjgxRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKrEhVC96b5Z0bh3PPm+2ixMwcgNwTKUt1+qDiqHHNMJ4GWE+jYY84q+Mftn R3scz5CfTLsgS25h466TIRLQYiACatpiIRkh/E/HD5CVj0dITosYNw+yW2M2Lkuk //wkiEso+eMFeJ4ScoitnRD2q2tjByH2zK95v83zbX065g5TjrWm25SIwZSRUD17 NOanJyLk4mjuSFOMYAcCTypRdDCardRW8j/ihWCMYgwc2f5O0ThUSSGjhk/CnPHm 0Sq8CYohgl4XUds1QqHZCVw5L4KHXil0bgUSjcuuw4vvIathXtsYUi/LK+87+urT Aor9OQlXHrHPjWwqp6rrbOgyDrMCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBT+VAJ+ 2u4i6wSulBxFDEj02lpoHjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzODgzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWeKzDANBgkqhkiG9w0BAQsFAAOCAQEADhAySdo9BjoZoQ7gGzSs arIxp1Eb8gjICpEldMGf9LvLIR1ePhQQv0dV39akdODwTvEGSOGop3tcyc6bZzp4 UqPtIURX4LWCpluQDokHPSoHl/aKhP8Y6A/a6Bx2N5nwHaWr5QuHHf1oRrIk8xQe 5Tpc+/yVoYyt9oMlYEiPnHpGfH7vpNU8g8XgcVds/5/jmW1sUIQb3hqG5TwhVgkn r05pHgbUhELiiZUf9CKDdnIgSnSXszVqS4O+y/i8B3EsZKKyV9n9+v73Oh6kAV4s CE64bD31fLpvLGyv2PawFB4hji9TTDuyYxSVg1FCVYp9eTMeZFDFQSbIUQ9Vb8nI 9w== -----END CERTIFICATE-----Generated at Wed Dec 3 13:55:21 2025 by rpki-client