This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138897.roa File: AS138897.roa (raw, json) Hash identifier: YW5WyJZ7Za2qPI+BnrY+m9YS3ieuRwy2Lf83dy2qz9M= Subject key identifier: CA:3F:8A:9A:69:2B:15:EA:BF:06:90:C6:7B:59:02:8E:B7:8B:0A:2E Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4C848C04D7BBF36E9048E25C1E2DC3E48C7D8F4C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138897.roa Signing time: Tue 18 Nov 2025 09:00:00 +0000 ROA not before: Tue 18 Nov 2025 08:55:00 +0000 ROA not after: Tue 17 Nov 2026 09:00:00 +0000 asID: 138897 IP address blocks: 103.140.22.0/24 maxlen: 24 2001:df0:a380::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:84:8c:04:d7:bb:f3:6e:90:48:e2:5c:1e:2d:c3:e4:8c:7d:8f:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 18 08:55:00 2025 GMT Not After : Nov 17 09:00:00 2026 GMT Subject: CN=CA3F8A9A692B15EABF0690C67B59028EB78B0A2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ea:0c:ae:05:94:0b:b3:b6:1d:2c:24:35:9c: de:30:95:b9:8f:d3:6f:66:4d:8f:80:9d:bd:db:53: 86:b1:e9:a9:96:ca:fb:37:95:70:dc:07:84:89:67: 1b:9e:5f:a3:56:ff:db:f3:29:93:09:90:d7:5e:df: 0a:90:19:83:26:ab:a8:3f:9e:69:57:2c:62:7a:70: 7f:47:5b:c7:af:6a:75:6a:ce:f1:18:34:24:3b:39: 8e:96:24:9c:68:0b:9c:ac:bb:77:ba:b8:85:68:8a: cd:3c:70:e1:36:3b:fb:4d:64:78:eb:32:44:ee:4c: 57:9f:06:93:56:71:a2:e3:47:62:35:3f:de:60:84: da:72:4b:8c:09:d0:20:e1:98:0e:b1:de:f8:70:bd: ac:c0:ea:72:5d:f2:a5:aa:6f:b2:4a:bc:e1:2b:63: 47:b9:69:bf:17:40:28:c4:c0:a6:a5:2f:ae:75:ec: b0:9f:60:61:d2:96:09:b4:b5:15:3c:cc:5f:ea:70: 12:0f:a9:78:42:6e:56:ec:9c:10:43:df:79:f1:ff: 79:cc:33:72:94:0c:1f:93:eb:c1:95:e9:38:ee:57: 5c:68:e9:27:c7:84:c7:fb:45:fb:12:27:74:65:cc: dc:ea:aa:18:cc:d0:7a:98:06:3b:86:b9:c3:cb:35: 0d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:3F:8A:9A:69:2B:15:EA:BF:06:90:C6:7B:59:02:8E:B7:8B:0A:2E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138897.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.140.22.0/24 IPv6: 2001:df0:a380::/48 Signature Algorithm: sha256WithRSAEncryption 10:96:36:c8:9c:41:b7:34:15:8e:9d:bd:06:81:c2:5c:93:d4: 00:bd:ab:6c:a1:e4:26:77:1d:69:1a:bd:f3:a0:8b:41:9b:df: 74:4c:5f:64:9b:d0:67:bf:89:6c:9e:ca:9b:be:83:ba:17:fd: b8:e5:8a:f5:0f:b7:09:e0:01:53:80:02:53:c2:72:18:a1:32: ce:f3:11:30:42:f2:be:b8:62:ee:4c:cb:1b:ea:a5:d8:66:b0: df:63:d1:3d:e5:e0:3b:6b:e2:fa:60:17:5a:12:53:43:9c:a3: 5b:44:b2:16:48:c7:ce:33:c7:35:c2:2b:d9:d1:4f:06:d9:ad: 34:08:8c:62:02:7a:7b:6b:39:77:7e:ed:75:6c:3e:0e:34:a7: 19:de:54:af:10:28:75:10:80:af:e8:5c:ce:f9:13:47:fa:f2: 9c:43:e2:ec:25:28:58:6f:2d:ea:06:7f:2f:55:41:cd:6d:d6: 61:22:47:3d:21:c2:bf:18:2f:a0:57:97:5f:bb:d8:b0:e9:ed: d7:aa:15:dc:7a:a2:f3:2d:90:2c:c8:87:f8:f3:75:08:b6:aa: 1c:0c:31:a6:30:5e:cc:04:6f:28:b2:6b:d2:a5:e3:40:18:81: 5d:fe:11:f6:41:1a:1d:62:93:c5:62:81:11:14:90:2b:77:90: c5:d2:38:a1 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUTISMBNe7826QSOJcHi3D5Ix9j0wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExODA4NTUwMFoX DTI2MTExNzA5MDAwMFowMzExMC8GA1UEAxMoQ0EzRjhBOUE2OTJCMTVFQUJGMDY5 MEM2N0I1OTAyOEVCNzhCMEEyRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANbqDK4FlAuzth0sJDWc3jCVuY/Tb2ZNj4CdvdtThrHpqZbK+zeVcNwHhIln G55fo1b/2/MpkwmQ117fCpAZgyarqD+eaVcsYnpwf0dbx69qdWrO8Rg0JDs5jpYk nGgLnKy7d7q4hWiKzTxw4TY7+01keOsyRO5MV58Gk1ZxouNHYjU/3mCE2nJLjAnQ IOGYDrHe+HC9rMDqcl3ypapvskq84StjR7lpvxdAKMTApqUvrnXssJ9gYdKWCbS1 FTzMX+pwEg+peEJuVuycEEPfefH/ecwzcpQMH5PrwZXpOO5XXGjpJ8eEx/tF+xIn dGXM3OqqGMzQepgGO4a5w8s1DWUCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBTKP4qa aSsV6r8GkMZ7WQKOt4sKLjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzODg5Ny5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAGeMFjAPBAIAAjAJAwcAIAEN8KOAMA0GCSqGSIb3DQEBCwUAA4IB AQAQljbInEG3NBWOnb0GgcJck9QAvatsoeQmdx1pGr3zoItBm990TF9km9Bnv4ls nsqbvoO6F/245Yr1D7cJ4AFTgAJTwnIYoTLO8xEwQvK+uGLuTMsb6qXYZrDfY9E9 5eA7a+L6YBdaElNDnKNbRLIWSMfOM8c1wivZ0U8G2a00CIxiAnp7azl3fu11bD4O NKcZ3lSvECh1EICv6FzO+RNH+vKcQ+LsJShYby3qBn8vVUHNbdZhIkc9IcK/GC+g V5dfu9iw6e3XqhXceqLzLZAsyIf483UItqocDDGmMF7MBG8osmvSpeNAGIFd/hH2 QRodYpPFYoERFJArd5DF0jih -----END CERTIFICATE-----Generated at Wed Dec 3 14:41:40 2025 by rpki-client