This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139205.roa File: AS139205.roa (raw, json) Hash identifier: KGl7ZQkn9PwQVIAxYYyWqi2f0YS/AXT4WBYKVA8AmU0= Subject key identifier: F9:31:0D:CD:6F:E9:C3:F4:EE:CA:B0:FE:75:C7:24:AA:9F:0D:3F:56 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 14267CBEE6F2D857E997C3E7612FB9B312546C9E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139205.roa Signing time: Fri 02 Jan 2026 01:46:59 +0000 ROA not before: Fri 02 Jan 2026 01:41:59 +0000 ROA not after: Fri 01 Jan 2027 01:46:59 +0000 asID: 139205 IP address blocks: 2001:df6:7840::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Jan 2026 11:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:26:7c:be:e6:f2:d8:57:e9:97:c3:e7:61:2f:b9:b3:12:54:6c:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 2 01:41:59 2026 GMT Not After : Jan 1 01:46:59 2027 GMT Subject: CN=F9310DCD6FE9C3F4EECAB0FE75C724AA9F0D3F56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bd:13:5b:a0:c5:9f:0a:e0:aa:6c:ec:94:47: 25:1c:12:51:73:d9:cc:a3:2a:2e:36:13:15:73:94: ee:be:0a:c2:4e:b4:5f:72:03:f7:4f:3e:7e:4a:3c: 30:7d:e3:fb:f1:36:08:50:66:06:15:a6:32:23:02: 84:2c:b5:4e:73:89:52:cf:b8:8a:e1:ce:29:3b:fd: 2c:d3:c3:94:2a:ae:92:ee:0c:a2:5b:38:a6:20:63: b9:a7:55:12:6d:6a:24:cb:5a:bd:bd:43:8e:e2:6e: 68:fc:d5:bb:53:80:e9:5e:cc:ed:5d:54:24:a7:9b: 28:24:a9:71:70:73:d0:59:ab:37:c0:02:dc:9b:6e: ba:f7:3c:90:eb:ce:fa:58:ce:5b:f0:1f:ed:31:35: 49:5f:09:3c:9b:af:be:87:47:7f:2e:79:7a:9b:29: 83:69:59:4a:25:53:01:66:96:b3:72:11:f7:a9:b5: 10:b0:a7:da:66:29:dd:1b:b3:49:39:70:0e:71:fa: 98:9b:67:87:fd:8f:98:22:bb:36:f0:2c:2f:2d:8e: db:cf:30:c8:f4:69:82:63:21:8e:fd:21:e9:13:61: c6:d7:3e:6e:36:d9:a7:39:4f:50:94:c8:00:b7:65: 81:f2:50:85:ba:60:d5:a5:02:db:dc:31:b9:2e:9f: c7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:31:0D:CD:6F:E9:C3:F4:EE:CA:B0:FE:75:C7:24:AA:9F:0D:3F:56 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139205.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:7840::/48 Signature Algorithm: sha256WithRSAEncryption 26:71:f2:69:fb:24:d2:af:0a:2f:43:c2:25:ee:0d:23:32:aa: 73:50:9b:b1:ae:eb:4a:19:3f:9e:3e:25:55:e0:5b:b1:3f:6d: 0b:a5:18:29:53:d0:d2:f1:22:32:e3:70:9d:83:01:79:0d:ef: ad:eb:69:36:e1:95:bb:b2:d4:cf:42:af:d6:f5:ac:bb:b1:fc: 14:3a:d5:ff:3e:1a:1c:8a:5f:8d:2c:1e:13:a3:5c:7d:d8:69: 7e:1b:35:d3:aa:aa:ab:15:35:0b:12:fa:d2:64:bf:5f:f3:bd: 27:ad:24:5a:62:02:4b:cc:52:14:81:8f:f1:9e:32:0f:26:60: 98:17:3e:63:2f:81:5c:31:51:9e:36:45:b0:fa:74:6c:a1:d1: 36:b6:15:61:83:c1:f8:14:05:f0:38:b5:96:8d:09:26:11:70: 0f:4f:d3:09:c7:e8:cf:18:cc:80:fb:9d:5c:c9:2b:1e:61:d0: bd:4a:8f:89:e5:3b:66:d4:f9:0e:f3:6f:68:4f:60:07:03:a6: 01:02:fd:11:39:8c:80:d3:63:e8:e8:82:90:86:7d:9b:83:6c: 43:ff:37:82:93:76:48:1a:bd:de:2e:eb:19:a9:f1:ba:f8:11: c1:5b:3f:7a:63:4a:d4:7c:af:52:e2:a0:a0:29:24:37:64:fb: 15:73:54:6a -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUFCZ8vuby2Ffpl8PnYS+5sxJUbJ4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDEwMjAxNDE1OVoX DTI3MDEwMTAxNDY1OVowMzExMC8GA1UEAxMoRjkzMTBEQ0Q2RkU5QzNGNEVFQ0FC MEZFNzVDNzI0QUE5RjBEM0Y1NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALu9E1ugxZ8K4Kps7JRHJRwSUXPZzKMqLjYTFXOU7r4Kwk60X3ID908+fko8 MH3j+/E2CFBmBhWmMiMChCy1TnOJUs+4iuHOKTv9LNPDlCquku4Mols4piBjuadV Em1qJMtavb1DjuJuaPzVu1OA6V7M7V1UJKebKCSpcXBz0FmrN8AC3Jtuuvc8kOvO +ljOW/Af7TE1SV8JPJuvvodHfy55epspg2lZSiVTAWaWs3IR96m1ELCn2mYp3Ruz STlwDnH6mJtnh/2PmCK7NvAsLy2O288wyPRpgmMhjv0h6RNhxtc+bjbZpzlPUJTI ALdlgfJQhbpg1aUC29wxuS6fxzsCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBT5MQ3N b+nD9O7KsP51xySqnw0/VjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzOTIwNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfZ4QDANBgkqhkiG9w0BAQsFAAOCAQEAJnHyafsk0q8KL0PC Je4NIzKqc1Cbsa7rShk/nj4lVeBbsT9tC6UYKVPQ0vEiMuNwnYMBeQ3vretpNuGV u7LUz0Kv1vWsu7H8FDrV/z4aHIpfjSweE6Ncfdhpfhs106qqqxU1CxL60mS/X/O9 J60kWmICS8xSFIGP8Z4yDyZgmBc+Yy+BXDFRnjZFsPp0bKHRNrYVYYPB+BQF8Di1 lo0JJhFwD0/TCcfozxjMgPudXMkrHmHQvUqPieU7ZtT5DvNvaE9gBwOmAQL9ETmM gNNj6OiCkIZ9m4NsQ/83gpN2SBq93i7rGanxuvgRwVs/emNK1HyvUuKgoCkkN2T7 FXNUag== -----END CERTIFICATE-----Generated at Sat Jan 10 22:06:57 2026 by rpki-client