This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139409.roa File: AS139409.roa (raw, json) Hash identifier: kl7LBgDUhkmVcEvahs27VOXWX1OzSt+Jg14ScmiYMng= Subject key identifier: D6:29:88:4C:19:B0:B8:2A:D9:49:70:26:6E:8B:C2:86:D6:D8:81:36 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 55EB1D6B6C8CDD70E3DE841120783C68265C2ACB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139409.roa Signing time: Tue 11 Nov 2025 06:00:19 +0000 ROA not before: Tue 11 Nov 2025 05:55:19 +0000 ROA not after: Tue 10 Nov 2026 06:00:19 +0000 asID: 139409 IP address blocks: 103.143.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:eb:1d:6b:6c:8c:dd:70:e3:de:84:11:20:78:3c:68:26:5c:2a:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 11 05:55:19 2025 GMT Not After : Nov 10 06:00:19 2026 GMT Subject: CN=D629884C19B0B82AD94970266E8BC286D6D88136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:55:98:cf:34:1c:c2:8e:60:69:86:73:cc:bc: 97:0a:e4:cc:10:7a:e1:25:d7:3b:da:b3:30:1d:2d: 58:91:bf:dc:3c:37:25:95:ea:10:69:97:76:5f:a1: b9:46:a4:fc:cb:95:e4:cc:d0:f2:92:99:74:a6:15: e6:cc:72:10:e7:c1:ef:c7:96:70:be:50:aa:8a:b0: 9a:34:72:d9:e9:a8:3b:18:e8:ad:60:2a:11:98:fe: 45:59:01:0b:22:e0:50:ba:3f:3c:dc:37:16:e3:f1: 09:3d:8e:fb:1e:ff:98:d7:36:9a:16:f8:8b:f2:3b: 06:59:a6:4c:44:ad:78:12:4b:8b:9e:c4:aa:42:b9: cd:46:74:24:bc:00:1a:79:fc:d7:82:f5:16:4f:87: 56:04:f2:67:43:e5:8b:79:9e:de:3a:5f:4b:53:38: ee:ec:44:a7:ac:97:06:ad:de:51:45:cb:9a:71:2f: cc:f4:31:37:66:d0:b6:13:d4:4b:a6:e4:38:a7:cb: bb:85:b7:b0:4b:33:94:43:af:a1:72:ac:72:0d:05: 58:0b:6c:6b:03:7c:44:5c:1f:9e:7c:9a:ff:cc:12: ed:e7:cd:c4:40:0f:dd:a1:aa:ac:7f:d4:0e:4c:43: 22:bb:99:ba:19:77:e3:c1:25:b7:35:c2:59:e2:d3: 08:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:29:88:4C:19:B0:B8:2A:D9:49:70:26:6E:8B:C2:86:D6:D8:81:36 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139409.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.196.0/23 Signature Algorithm: sha256WithRSAEncryption 58:91:f9:31:86:14:0d:11:38:14:99:01:76:54:fe:bf:37:a3: 6e:ac:bb:2a:90:cd:fc:03:98:58:40:6b:48:57:d4:93:ab:db: 09:9f:d1:59:76:c5:e0:f6:91:4c:7f:ea:d1:93:3f:e2:a4:f4: 63:a7:30:bf:8a:f0:91:6e:18:3c:a7:48:8e:83:8e:12:5e:c6: 7e:fb:55:0f:12:2a:24:48:cc:fe:57:f3:75:7d:41:9e:4c:cd: e8:f1:38:30:8e:25:88:d3:af:ef:18:85:66:bd:b5:86:9c:af: ca:1b:35:3c:7c:c2:01:1e:7b:f3:1b:b2:47:a6:56:6c:51:6d: 21:59:9d:bf:cf:e3:bc:4c:15:8e:82:4b:3b:49:cb:7a:9f:f3: a0:42:f2:7e:03:c2:03:e8:c3:2c:f5:58:f7:7a:80:a3:ff:72: 8b:90:18:02:91:57:36:0c:28:c0:02:d6:e6:f4:6d:83:d2:14: eb:4b:af:e4:5c:2c:0d:96:bc:ec:65:e0:51:cf:b0:38:8c:91: f8:36:57:e0:f7:32:12:07:68:ae:4c:9a:07:44:5d:a3:fc:09: 03:b8:31:8a:8a:3f:22:bb:55:c6:ff:96:a0:44:2f:8f:48:25: 82:3d:bb:80:20:d2:f7:71:4c:12:e2:82:a7:05:67:92:ae:ee: f3:30:71:02 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUVesda2yM3XDj3oQRIHg8aCZcKsswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTA1NTUxOVoX DTI2MTExMDA2MDAxOVowMzExMC8GA1UEAxMoRDYyOTg4NEMxOUIwQjgyQUQ5NDk3 MDI2NkU4QkMyODZENkQ4ODEzNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM5VmM80HMKOYGmGc8y8lwrkzBB64SXXO9qzMB0tWJG/3Dw3JZXqEGmXdl+h uUak/MuV5MzQ8pKZdKYV5sxyEOfB78eWcL5QqoqwmjRy2emoOxjorWAqEZj+RVkB CyLgULo/PNw3FuPxCT2O+x7/mNc2mhb4i/I7BlmmTESteBJLi57EqkK5zUZ0JLwA Gnn814L1Fk+HVgTyZ0Pli3me3jpfS1M47uxEp6yXBq3eUUXLmnEvzPQxN2bQthPU S6bkOKfLu4W3sEszlEOvoXKscg0FWAtsawN8RFwfnnya/8wS7efNxEAP3aGqrH/U DkxDIruZuhl348EltzXCWeLTCLcCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTWKYhM GbC4KtlJcCZui8KG1tiBNjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzOTQwOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWePxDANBgkqhkiG9w0BAQsFAAOCAQEAWJH5MYYUDRE4FJkBdlT+ vzejbqy7KpDN/AOYWEBrSFfUk6vbCZ/RWXbF4PaRTH/q0ZM/4qT0Y6cwv4rwkW4Y PKdIjoOOEl7GfvtVDxIqJEjM/lfzdX1BnkzN6PE4MI4liNOv7xiFZr21hpyvyhs1 PHzCAR578xuyR6ZWbFFtIVmdv8/jvEwVjoJLO0nLep/zoELyfgPCA+jDLPVY93qA o/9yi5AYApFXNgwowALW5vRtg9IU60uv5FwsDZa87GXgUc+wOIyR+DZX4PcyEgdo rkyaB0Rdo/wJA7gxioo/IrtVxv+WoEQvj0glgj27gCDS93FMEuKCpwVnkq7u8zBx Ag== -----END CERTIFICATE-----Generated at Wed Dec 3 13:16:11 2025 by rpki-client