This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139406.roa File: AS139406.roa (raw, json) Hash identifier: KmMN/3omF7mzyZTxUcSpKL+VFZn0Q9426yvFsG0Vh5c= Subject key identifier: 10:31:8C:C3:9E:F8:C9:11:33:73:0B:CA:32:FD:CF:25:53:1E:0A:2F Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 340A55C4A1211FDB018E57410736C02AB9657AE2 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139406.roa Signing time: Tue 11 Nov 2025 05:00:00 +0000 ROA not before: Tue 11 Nov 2025 04:55:00 +0000 ROA not after: Tue 10 Nov 2026 05:00:00 +0000 asID: 139406 IP address blocks: 103.143.198.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:0a:55:c4:a1:21:1f:db:01:8e:57:41:07:36:c0:2a:b9:65:7a:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 11 04:55:00 2025 GMT Not After : Nov 10 05:00:00 2026 GMT Subject: CN=10318CC39EF8C91133730BCA32FDCF25531E0A2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:bc:1d:ac:ff:16:76:0d:e1:22:73:67:18:6e: 55:39:bf:99:a3:38:7f:17:c4:2d:0a:d7:aa:04:5f: 86:60:d7:65:d6:07:a1:46:bf:31:32:1e:9b:2e:3f: 65:39:2a:d3:e5:9d:5a:55:72:db:84:f2:a7:0a:5c: 7d:c2:1a:57:e4:89:8a:62:fc:87:0f:77:de:9f:2f: 74:c6:ab:bd:75:52:fd:1b:49:51:9c:bc:5e:06:cd: 55:2a:13:a1:66:53:d9:ca:29:1e:40:94:a9:59:76: c1:4e:63:0a:77:a2:d4:4e:dd:a8:c7:5a:02:8a:1e: 67:25:e5:25:30:88:65:22:de:32:71:ee:9c:b1:4a: 7e:4a:30:9b:08:0e:38:ad:f4:2a:e7:26:40:72:08: 39:7e:23:63:6f:74:f6:a9:f6:fd:9f:7f:14:a0:7c: 09:ae:31:f8:c6:7a:47:be:51:b2:94:25:90:ad:b2: b2:66:63:d7:50:09:3e:07:59:90:8b:42:32:32:a7: 2e:a8:32:d0:0a:9a:13:aa:a5:3c:f2:9b:df:8a:6c: bb:17:2c:03:6b:4b:7a:eb:90:3b:d3:a3:01:d0:c5: 57:58:15:bd:c7:96:c6:21:8b:d5:da:8e:a5:c2:84: 81:2d:65:6f:bb:85:fa:73:52:86:03:95:4f:a0:4e: c4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:31:8C:C3:9E:F8:C9:11:33:73:0B:CA:32:FD:CF:25:53:1E:0A:2F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139406.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.198.0/23 Signature Algorithm: sha256WithRSAEncryption 08:fc:52:13:12:b7:46:6e:ee:46:49:e1:98:bb:5a:f8:e1:f0: a2:c6:99:93:8c:14:c0:d4:a5:30:f8:9d:f1:43:cc:4e:a0:ee: f1:25:bc:2d:b2:d1:3e:c9:99:15:c5:78:f4:59:c3:3a:d1:d5: c6:ae:70:c4:8b:c2:26:3e:a6:58:17:6f:2c:34:e5:35:74:b9: e4:7e:1d:8b:36:a6:f0:9f:33:56:73:5c:64:00:99:7d:06:85: f4:fa:54:fa:8c:15:a7:5f:ef:18:f5:08:fd:1e:98:6c:89:79: 37:37:fd:dd:99:cc:1e:87:8d:a0:12:4f:73:e5:e8:66:6b:ed: 47:98:db:96:83:cb:0f:39:43:b9:a2:b0:ed:e4:93:fb:01:00: 2c:e3:ff:51:90:ab:4b:a3:fa:c5:c5:8e:0e:2b:bb:45:78:87: f7:ea:f2:51:7d:e5:22:b7:87:9f:97:47:e2:50:5a:d0:68:06: fa:06:df:22:b5:94:5b:16:02:f8:82:2d:8f:2a:d7:d6:13:9e: f5:a8:78:21:80:16:1f:0d:5e:0f:d8:fa:09:6a:e9:9d:72:91: 62:dd:d4:98:ed:f5:47:2e:86:9f:df:6c:24:b4:77:19:fd:15: bb:8d:0f:74:ce:2a:8a:82:89:ac:a2:bb:14:f8:cb:e3:a3:3c: 52:b6:ff:b2 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUNApVxKEhH9sBjldBBzbAKrlleuIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTA0NTUwMFoX DTI2MTExMDA1MDAwMFowMzExMC8GA1UEAxMoMTAzMThDQzM5RUY4QzkxMTMzNzMw QkNBMzJGRENGMjU1MzFFMEEyRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMa8Haz/FnYN4SJzZxhuVTm/maM4fxfELQrXqgRfhmDXZdYHoUa/MTIemy4/ ZTkq0+WdWlVy24TypwpcfcIaV+SJimL8hw933p8vdMarvXVS/RtJUZy8XgbNVSoT oWZT2copHkCUqVl2wU5jCnei1E7dqMdaAooeZyXlJTCIZSLeMnHunLFKfkowmwgO OK30KucmQHIIOX4jY2909qn2/Z9/FKB8Ca4x+MZ6R75RspQlkK2ysmZj11AJPgdZ kItCMjKnLqgy0AqaE6qlPPKb34psuxcsA2tLeuuQO9OjAdDFV1gVvceWxiGL1dqO pcKEgS1lb7uF+nNShgOVT6BOxK0CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQQMYzD nvjJETNzC8oy/c8lUx4KLzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzOTQwNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWePxjANBgkqhkiG9w0BAQsFAAOCAQEACPxSExK3Rm7uRknhmLta +OHwosaZk4wUwNSlMPid8UPMTqDu8SW8LbLRPsmZFcV49FnDOtHVxq5wxIvCJj6m WBdvLDTlNXS55H4dizam8J8zVnNcZACZfQaF9PpU+owVp1/vGPUI/R6YbIl5Nzf9 3ZnMHoeNoBJPc+XoZmvtR5jbloPLDzlDuaKw7eST+wEALOP/UZCrS6P6xcWODiu7 RXiH9+ryUX3lIreHn5dH4lBa0GgG+gbfIrWUWxYC+IItjyrX1hOe9ah4IYAWHw1e D9j6CWrpnXKRYt3UmO31Ry6Gn99sJLR3Gf0Vu40PdM4qioKJrKK7FPjL46M8Urb/ sg== -----END CERTIFICATE-----Generated at Wed Dec 3 13:16:05 2025 by rpki-client