This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139257.roa File: AS139257.roa (raw, json) Hash identifier: nhaXik2s8zYf5O0k95P5yeM/ZGxZBGW/NxtYbuLC88M= Subject key identifier: C6:20:8A:33:FE:BC:E8:4E:64:15:0D:26:70:F8:7D:63:C9:DB:72:77 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6993CE2428EEF4061CCD61E86A7503E7E3D0B696 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139257.roa Signing time: Fri 12 Dec 2025 04:33:52 +0000 ROA not before: Fri 12 Dec 2025 04:28:52 +0000 ROA not after: Fri 11 Dec 2026 04:33:52 +0000 asID: 139257 IP address blocks: 2001:df6:57c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 03:03:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:93:ce:24:28:ee:f4:06:1c:cd:61:e8:6a:75:03:e7:e3:d0:b6:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 12 04:28:52 2025 GMT Not After : Dec 11 04:33:52 2026 GMT Subject: CN=C6208A33FEBCE84E64150D2670F87D63C9DB7277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ac:16:ee:1a:de:7d:bc:f2:4d:3d:a9:e4:a1: 91:c5:b2:74:74:49:d5:5b:c9:bf:30:49:04:57:dd: 1d:11:d3:9b:65:cb:6e:37:ad:27:74:17:0c:5a:43: 8f:8e:93:bf:da:1f:a6:cb:b1:90:df:20:d9:eb:5d: 48:65:93:43:01:03:18:6d:55:17:f3:11:38:9f:00: 32:cc:56:a2:ea:6b:80:b3:15:07:7b:de:e5:4e:96: e8:3b:66:4b:00:fe:2a:55:b5:7f:21:da:49:28:db: 03:02:ef:b6:7d:db:7e:b0:fd:17:18:f0:40:a1:9e: 4d:0d:25:53:81:08:cd:f4:09:c8:c2:df:37:4d:1e: e9:88:95:b2:ce:40:da:bc:96:25:e0:3a:72:29:4a: 1f:5e:40:61:e9:37:1a:51:46:d9:f8:b2:94:d8:8d: 95:3d:0c:3f:4a:e1:65:2f:9b:eb:df:2d:51:b0:b5: ed:79:76:f7:bd:55:8e:15:a4:42:31:5d:47:96:6e: 5e:1b:81:25:a7:2b:23:d9:bf:ed:a5:6d:8c:8b:91: c9:28:09:08:95:b4:5d:ef:f4:7d:d6:fa:11:83:3c: 1c:2b:75:cd:7b:9f:92:c7:38:bb:18:d7:36:9d:ba: ef:31:92:9b:4d:77:a8:ae:b7:08:a7:b1:41:4a:2e: 99:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:20:8A:33:FE:BC:E8:4E:64:15:0D:26:70:F8:7D:63:C9:DB:72:77 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139257.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:57c0::/48 Signature Algorithm: sha256WithRSAEncryption 06:95:dd:23:75:f4:94:15:68:e6:fc:ee:a7:09:da:3e:43:d4: 73:67:60:83:2e:bf:3a:81:d4:d8:39:d1:d6:a8:5a:24:b0:45: 2f:98:42:61:9d:4e:19:d4:0c:7b:23:3d:d5:e9:87:d8:7f:1b: 30:5d:19:26:17:2a:0f:0b:3e:6f:9b:94:a6:dd:cf:89:ee:4e: cf:e2:37:76:6e:d3:49:47:7e:69:f6:2b:52:b9:5e:b3:a7:3f: 96:56:f4:16:7e:44:16:d4:f9:96:9c:e6:d3:d9:5c:5e:62:37: 63:a5:95:8c:ec:d4:d8:c4:6b:46:1d:37:ad:e4:e3:d7:88:a3: 14:7e:1f:e9:03:59:6c:a1:b6:cc:f3:cb:37:76:d1:47:14:00: 3c:3f:6c:f1:91:d3:ef:06:84:58:74:8f:09:6b:c9:87:7f:de: 38:54:f3:94:9d:67:53:5e:c4:8b:1d:26:6f:f4:86:36:0c:d8: a1:07:bb:20:c8:74:36:e1:cd:ae:f2:72:1e:56:7c:02:b2:09: 62:88:05:96:d2:8e:bc:74:b0:83:c3:42:89:04:cc:f7:a6:95: 94:f5:de:2a:b5:1c:2e:bb:28:28:dd:6b:53:6f:6e:80:c9:58: 5b:36:6f:18:9c:fd:8c:40:16:f2:fd:0d:af:c5:77:0b:3b:de: 66:62:f6:9c -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUaZPOJCju9AYczWHoanUD5+PQtpYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIxMjA0Mjg1MloX DTI2MTIxMTA0MzM1MlowMzExMC8GA1UEAxMoQzYyMDhBMzNGRUJDRTg0RTY0MTUw RDI2NzBGODdENjNDOURCNzI3NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANSsFu4a3n288k09qeShkcWydHRJ1VvJvzBJBFfdHRHTm2XLbjetJ3QXDFpD j46Tv9ofpsuxkN8g2etdSGWTQwEDGG1VF/MROJ8AMsxWouprgLMVB3ve5U6W6Dtm SwD+KlW1fyHaSSjbAwLvtn3bfrD9FxjwQKGeTQ0lU4EIzfQJyMLfN00e6YiVss5A 2ryWJeA6cilKH15AYek3GlFG2fiylNiNlT0MP0rhZS+b698tUbC17Xl2971VjhWk QjFdR5ZuXhuBJacrI9m/7aVtjIuRySgJCJW0Xe/0fdb6EYM8HCt1zXufksc4uxjX Np267zGSm013qK63CKexQUoumQMCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBTGIIoz /rzoTmQVDSZw+H1jydtydzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzOTI1Ny5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfZXwDANBgkqhkiG9w0BAQsFAAOCAQEABpXdI3X0lBVo5vzu pwnaPkPUc2dggy6/OoHU2DnR1qhaJLBFL5hCYZ1OGdQMeyM91emH2H8bMF0ZJhcq Dws+b5uUpt3Pie5Oz+I3dm7TSUd+afYrUrles6c/llb0Fn5EFtT5lpzm09lcXmI3 Y6WVjOzU2MRrRh03reTj14ijFH4f6QNZbKG2zPPLN3bRRxQAPD9s8ZHT7waEWHSP CWvJh3/eOFTzlJ1nU17Eix0mb/SGNgzYoQe7IMh0NuHNrvJyHlZ8ArIJYogFltKO vHSwg8NCiQTM96aVlPXeKrUcLrsoKN1rU29ugMlYWzZvGJz9jEAW8v0Nr8V3Czve ZmL2nA== -----END CERTIFICATE-----Generated at Tue Dec 16 23:58:11 2025 by rpki-client