This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138854.roa File: AS138854.roa (raw, json) Hash identifier: IfnEXd95Eyu4Y+mBZ/Z2RjlBjstyIL1VHLTxhwUF8wY= Subject key identifier: 2E:00:18:34:77:DC:0C:AE:32:4A:CF:48:D8:AB:0C:0C:8F:75:B1:0F Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6B6AEAE59E54DC9B0FB41929155FC9E18F8FC868 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138854.roa Signing time: Wed 12 Nov 2025 03:16:42 +0000 ROA not before: Wed 12 Nov 2025 03:11:42 +0000 ROA not after: Wed 11 Nov 2026 03:16:42 +0000 asID: 138854 IP address blocks: 103.138.218.0/23 maxlen: 24 103.178.88.0/24 maxlen: 24 103.178.89.0/24 maxlen: 24 163.61.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:6a:ea:e5:9e:54:dc:9b:0f:b4:19:29:15:5f:c9:e1:8f:8f:c8:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 12 03:11:42 2025 GMT Not After : Nov 11 03:16:42 2026 GMT Subject: CN=2E00183477DC0CAE324ACF48D8AB0C0C8F75B10F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:31:e2:62:13:8b:b1:c9:ac:d4:a6:9d:21:27: c0:9e:73:c1:dd:8c:9b:22:0c:87:6c:cd:2c:1d:db: b3:45:f4:37:ca:79:98:e2:70:49:97:fc:94:e2:a6: 7e:1b:a3:ea:0a:47:88:21:b4:28:13:4c:f4:42:48: 1c:15:91:f8:e5:bc:47:53:0b:0e:40:40:ef:f0:18: fa:fb:62:d0:63:14:d1:f0:74:ae:d1:9c:ea:1d:fb: 56:71:26:34:a2:48:d9:fa:7d:21:34:98:9b:1e:b2: f1:b7:89:73:38:97:8a:a2:53:d2:90:4e:1d:7c:77: 83:7a:7d:4b:42:ea:19:eb:a9:ac:06:9c:e1:95:f1: 10:bf:b7:db:cd:ff:71:e0:0f:84:69:16:23:54:7f: 9b:e4:b5:19:c3:28:6f:75:8f:76:5d:80:84:25:7a: 06:8a:0f:3d:d5:42:95:d7:8b:70:ec:9e:31:96:8e: c0:f9:f8:18:8e:af:a2:40:0e:2b:28:b8:7e:ab:63: 45:71:a6:6b:7b:74:d0:2f:d2:65:39:3f:5b:a6:ca: c8:a5:9a:1d:d3:54:12:b0:82:fa:00:62:72:7f:13: 78:27:23:54:61:40:11:c1:81:61:db:6d:49:1e:47: ff:95:9f:28:67:a8:36:24:a6:a7:ea:df:04:ee:34: 92:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:00:18:34:77:DC:0C:AE:32:4A:CF:48:D8:AB:0C:0C:8F:75:B1:0F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138854.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.138.218.0/23 103.178.88.0/23 163.61.191.0/24 Signature Algorithm: sha256WithRSAEncryption 97:af:af:e2:82:d0:70:8a:b8:a9:2d:7c:67:6f:b2:57:9e:76: fb:b2:bb:c8:e6:b9:e9:3c:c6:1f:9e:2b:38:b3:03:de:41:27: bc:d1:4d:a6:00:48:b3:00:1e:61:a4:ed:f7:a5:27:d1:a6:f2: 60:3f:76:ba:5f:fe:8a:b7:97:00:ba:19:3b:f1:fd:92:00:70: 64:2c:2a:b1:d4:69:09:85:cb:fa:be:ec:67:d4:79:18:4a:b1: c2:92:a1:8f:5b:1a:f0:fb:eb:32:11:16:32:15:30:55:74:48: 9d:57:37:f1:7e:a9:29:7b:af:9d:f7:df:69:f5:00:6c:15:a8: af:e0:69:77:ec:78:a8:3c:fa:01:b2:5a:c1:1b:48:ff:42:2b: ae:e8:4f:d6:b9:66:e8:5d:05:3b:c8:af:f4:7a:b8:07:9c:e6: 30:44:cd:c3:84:47:2b:90:1b:93:ad:f9:44:97:12:9c:49:3c: 9f:51:00:e7:9e:24:4c:0a:e1:4a:28:43:d2:c7:2f:81:58:15: 3b:e8:3a:9f:21:fb:4c:15:7f:ca:cf:25:2f:72:ec:04:9d:4b: 54:78:0f:e9:07:e7:b6:0d:a9:d4:f1:75:cb:e7:97:e9:07:6f: c4:20:f9:10:82:9c:6d:63:02:6f:f8:29:df:76:9c:e9:1c:e5: b5:0e:70:47 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgIUa2rq5Z5U3JsPtBkpFV/J4Y+PyGgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMjAzMTE0MloX DTI2MTExMTAzMTY0MlowMzExMC8GA1UEAxMoMkUwMDE4MzQ3N0RDMENBRTMyNEFD RjQ4RDhBQjBDMEM4Rjc1QjEwRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALMx4mITi7HJrNSmnSEnwJ5zwd2MmyIMh2zNLB3bs0X0N8p5mOJwSZf8lOKm fhuj6gpHiCG0KBNM9EJIHBWR+OW8R1MLDkBA7/AY+vti0GMU0fB0rtGc6h37VnEm NKJI2fp9ITSYmx6y8beJcziXiqJT0pBOHXx3g3p9S0LqGeuprAac4ZXxEL+3283/ ceAPhGkWI1R/m+S1GcMob3WPdl2AhCV6BooPPdVCldeLcOyeMZaOwPn4GI6vokAO Kyi4fqtjRXGma3t00C/SZTk/W6bKyKWaHdNUErCC+gBicn8TeCcjVGFAEcGBYdtt SR5H/5WfKGeoNiSmp+rfBO40kt0CAwEAAaOCAdwwggHYMB0GA1UdDgQWBBQuABg0 d9wMrjJKz0jYqwwMj3WxDzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzODg1NC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBow GAQCAAEwEgMEAWeK2gMEAWeyWAMEAKM9vzANBgkqhkiG9w0BAQsFAAOCAQEAl6+v 4oLQcIq4qS18Z2+yV552+7K7yOa56TzGH54rOLMD3kEnvNFNpgBIswAeYaTt96Un 0abyYD92ul/+ireXALoZO/H9kgBwZCwqsdRpCYXL+r7sZ9R5GEqxwpKhj1sa8Pvr MhEWMhUwVXRInVc38X6pKXuvnfffafUAbBWor+Bpd+x4qDz6AbJawRtI/0IrruhP 1rlm6F0FO8iv9Hq4B5zmMETNw4RHK5Abk635RJcSnEk8n1EA554kTArhSihD0scv gVgVO+g6nyH7TBV/ys8lL3LsBJ1LVHgP6Qfntg2p1PF1y+eX6QdvxCD5EIKcbWMC b/gp33ac6RzltQ5wRw== -----END CERTIFICATE-----Generated at Wed Dec 3 13:15:08 2025 by rpki-client