This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139380.roa
File: AS139380.roa (raw, json)
Hash identifier: z78nw+cwb0rFQ4PDMaLK6q931GxPCF70f/SBdp+aBhc=
Subject key identifier: 56:9B:B1:60:E7:44:B8:27:56:CF:54:BE:4B:61:4B:93:42:CA:D6:C1
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 20873C56E9850982CDCD1FEC358809F926E61A8A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139380.roa
Signing time: Mon 08 Sep 2025 07:00:00 +0000
ROA not before: Mon 08 Sep 2025 06:55:00 +0000
ROA not after: Mon 07 Sep 2026 07:00:00 +0000
asID: 139380
IP address blocks: 103.239.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 12:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:87:3c:56:e9:85:09:82:cd:cd:1f:ec:35:88:09:f9:26:e6:1a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Sep 8 06:55:00 2025 GMT
Not After : Sep 7 07:00:00 2026 GMT
Subject: CN=569BB160E744B82756CF54BE4B614B9342CAD6C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:63:5d:8e:48:9f:32:5b:76:17:bd:b0:a0:28:
80:73:d5:01:79:fc:9e:cd:d9:b0:71:45:4e:15:33:
10:bd:83:c3:d9:33:ff:57:fe:84:a5:ad:a3:76:bd:
3d:c4:6b:26:0d:f0:82:7c:d6:d5:48:01:95:fa:9b:
5c:38:d2:95:c4:e8:16:08:b4:b5:fc:32:9d:0e:47:
d9:8f:d0:fe:84:29:d9:9f:af:4b:af:a2:39:ab:f6:
06:c8:09:b3:ef:0a:01:65:53:db:b5:48:9f:0d:67:
00:15:b1:74:9c:5d:67:e3:3b:9b:28:7e:61:b6:bd:
3a:f6:a3:a7:a5:f2:9d:08:3e:76:59:8f:51:02:96:
1c:be:29:bb:8d:43:ea:66:3e:10:ac:14:7a:52:b8:
fc:4d:7d:0d:0b:da:9b:3e:e4:5c:6f:ae:98:1e:83:
19:1b:82:d2:8c:b0:65:1f:fd:3a:9f:06:8c:be:6f:
85:ca:f2:0f:ce:cb:67:e7:dc:f8:fe:71:be:4a:0e:
be:1d:e5:d2:62:54:27:39:33:78:91:83:03:11:e3:
66:d1:a4:40:64:8c:82:66:37:f8:db:d9:67:5e:b2:
33:52:5b:fb:29:6f:8d:7d:5f:c0:5c:1f:f3:1d:c4:
ab:a6:4f:98:25:f3:36:3c:a7:38:2e:52:c7:1c:e7:
e5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9B:B1:60:E7:44:B8:27:56:CF:54:BE:4B:61:4B:93:42:CA:D6:C1
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139380.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.239.126.0/24
Signature Algorithm: sha256WithRSAEncryption
79:19:a3:d7:96:06:82:84:66:86:1e:8d:01:62:12:db:af:47:
3f:0c:b0:2a:19:f8:43:f9:63:73:a0:7f:cd:ee:ce:ea:19:0c:
6b:52:25:78:11:ca:64:89:c3:70:98:e5:de:01:e2:31:08:07:
ee:01:05:79:fc:1f:15:b8:c9:e8:ed:cd:d7:53:d7:a3:cc:5e:
fd:7e:9e:68:9d:a1:16:20:3a:b8:cb:d8:e6:08:81:08:a9:c9:
fe:66:a7:e3:73:45:e5:80:69:58:31:ad:e5:3d:7d:50:7f:3a:
be:c4:7b:cd:f0:51:6e:3a:c1:ee:b5:55:2f:64:a4:d1:8c:35:
be:c9:2a:f3:9d:5d:21:e6:25:7a:93:e4:ce:e6:d1:69:68:3b:
62:6d:02:5c:e7:82:31:b5:74:4a:1d:74:9c:7f:49:ec:f3:ad:
75:75:09:f2:ef:25:95:27:47:b2:57:ae:c9:6d:3a:6f:af:62:
b3:bb:32:65:72:12:a5:c2:d5:0d:97:55:40:af:36:b4:6f:b5:
2f:bc:d0:b6:f4:35:f1:a4:06:0a:08:0e:6d:13:df:cf:8c:b5:
81:ac:cd:db:a4:44:6f:93:80:34:43:c0:0f:e7:97:3a:a4:3c:
19:55:27:6b:f3:f2:99:e3:e8:04:87:68:ad:95:7f:2b:34:02:
90:c2:6e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:15:41 2025 by rpki-client