This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139428.roa File: AS139428.roa (raw, json) Hash identifier: k9SULQeGlbRcZ1lz3rm8Ffnwyf/PCvhxWnr0K3AxBlg= Subject key identifier: 6C:F8:BA:F2:E6:F1:4C:9F:CA:24:A3:8F:5A:71:96:94:47:C3:AE:26 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4A62BD2F5EE2CD8C5A80FEB71C265667A6EE76B2 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139428.roa Signing time: Wed 19 Nov 2025 10:00:00 +0000 ROA not before: Wed 19 Nov 2025 09:55:00 +0000 ROA not after: Wed 18 Nov 2026 10:00:00 +0000 asID: 139428 IP address blocks: 103.144.146.0/23 maxlen: 24 103.183.98.0/23 maxlen: 24 2001:df1:c680::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:62:bd:2f:5e:e2:cd:8c:5a:80:fe:b7:1c:26:56:67:a6:ee:76:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 19 09:55:00 2025 GMT Not After : Nov 18 10:00:00 2026 GMT Subject: CN=6CF8BAF2E6F14C9FCA24A38F5A71969447C3AE26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a8:2e:ff:f8:c7:f9:3b:e9:f5:a6:80:1e:76: 2e:50:de:56:d9:37:88:62:97:67:c1:0b:91:f4:71: b2:47:00:ad:f1:0f:d8:2a:bb:f0:90:f9:b8:7f:c4: d2:4c:9f:a3:ef:cf:f8:84:9d:c1:4f:51:6d:04:61: ca:70:78:2c:4b:4c:f1:5b:60:62:13:70:df:b4:10: e8:8d:5d:5e:c6:0a:24:c7:11:73:0f:fe:11:3e:e4: 85:8e:14:0e:44:e0:e1:ce:01:27:47:3c:d9:f6:eb: f2:d6:ce:bd:3e:82:c3:b6:47:0f:6f:64:81:0a:47: a7:86:c7:b9:40:b2:3d:cc:ae:f0:3f:89:6f:14:6d: a0:f7:4d:2f:ce:d0:d8:63:df:01:aa:02:5e:27:cb: a5:06:5c:62:11:30:dc:51:2c:b5:e3:e6:d8:46:ca: b3:f3:a5:f9:16:f1:46:e1:c6:0b:cd:39:6c:9f:27: 8b:25:66:b1:8f:bf:03:11:ed:54:a0:cd:b6:54:47: c4:4c:da:8d:00:c7:9b:ec:a5:a3:b2:3c:d5:22:c5: d0:bb:3b:2c:5f:5e:3b:f1:bd:4e:cc:98:47:5d:01: 86:5d:b7:e2:8b:37:e6:31:bd:db:a2:2b:93:5b:ee: c2:22:35:3a:44:0e:22:17:18:f6:78:e3:4e:93:c0: f9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:F8:BA:F2:E6:F1:4C:9F:CA:24:A3:8F:5A:71:96:94:47:C3:AE:26 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139428.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.144.146.0/23 103.183.98.0/23 IPv6: 2001:df1:c680::/48 Signature Algorithm: sha256WithRSAEncryption 13:2d:bb:22:f6:ac:35:b7:3e:ac:c2:15:32:27:87:0c:07:20: d1:66:88:c5:78:ee:57:3d:9f:5a:aa:10:09:9a:2f:3e:50:cb: e1:dc:b4:f8:09:4d:c6:c3:e3:24:0e:34:7e:26:f7:31:13:77: 44:55:ed:26:0d:a7:b7:ae:9e:36:f9:43:09:fd:a1:7a:8f:3a: 54:e0:44:f0:d6:b9:3c:3d:76:21:5c:46:b7:e9:44:30:40:dc: b5:6c:99:6d:51:ab:e2:70:ce:c9:fa:14:a2:a2:d0:ef:35:01: 1f:64:d3:50:bc:f9:c2:fe:2b:f4:15:0b:9c:28:e0:1e:38:ab: d2:7c:62:d9:5d:e1:dc:08:85:1d:75:04:46:3b:19:c8:3d:f0: 36:19:55:bb:0a:fd:80:0c:d1:6b:e2:79:c6:43:d7:7b:17:c8: 1c:7d:80:e4:7c:97:8a:ca:61:dc:ea:c2:44:13:65:12:e3:65: 8f:4e:5b:5e:ac:1b:56:67:ca:55:b0:0b:e1:7b:f6:b4:8b:c8: 43:eb:e0:a8:86:67:cf:87:5b:3f:cd:62:39:a2:4a:ea:06:d6: 6c:0d:2a:d7:55:0e:35:5c:9b:c5:5d:9b:92:e4:93:5f:0b:3d: 58:8b:3a:41:0f:fd:d2:91:64:14:d0:04:6c:11:66:a6:50:f7: 75:f8:3c:02 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUSmK9L17izYxagP63HCZWZ6budrIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExOTA5NTUwMFoX DTI2MTExODEwMDAwMFowMzExMC8GA1UEAxMoNkNGOEJBRjJFNkYxNEM5RkNBMjRB MzhGNUE3MTk2OTQ0N0MzQUUyNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALuoLv/4x/k76fWmgB52LlDeVtk3iGKXZ8ELkfRxskcArfEP2Cq78JD5uH/E 0kyfo+/P+ISdwU9RbQRhynB4LEtM8VtgYhNw37QQ6I1dXsYKJMcRcw/+ET7khY4U DkTg4c4BJ0c82fbr8tbOvT6Cw7ZHD29kgQpHp4bHuUCyPcyu8D+JbxRtoPdNL87Q 2GPfAaoCXifLpQZcYhEw3FEstePm2EbKs/Ol+RbxRuHGC805bJ8niyVmsY+/AxHt VKDNtlRHxEzajQDHm+ylo7I81SLF0Ls7LF9eO/G9TsyYR10Bhl234os35jG926Ir k1vuwiI1OkQOIhcY9njjTpPA+VsCAwEAAaOCAecwggHjMB0GA1UdDgQWBBRs+Lry 5vFMn8oko49acZaUR8OuJjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzOTQyOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2BggrBgEFBQcBBwEB/wQnMCUw EgQCAAEwDAMEAWeQkgMEAWe3YjAPBAIAAjAJAwcAIAEN8caAMA0GCSqGSIb3DQEB CwUAA4IBAQATLbsi9qw1tz6swhUyJ4cMByDRZojFeO5XPZ9aqhAJmi8+UMvh3LT4 CU3Gw+MkDjR+JvcxE3dEVe0mDae3rp42+UMJ/aF6jzpU4ETw1rk8PXYhXEa36UQw QNy1bJltUavicM7J+hSiotDvNQEfZNNQvPnC/iv0FQucKOAeOKvSfGLZXeHcCIUd dQRGOxnIPfA2GVW7Cv2ADNFr4nnGQ9d7F8gcfYDkfJeKymHc6sJEE2US42WPTlte rBtWZ8pVsAvhe/a0i8hD6+CohmfPh1s/zWI5okrqBtZsDSrXVQ41XJvFXZuS5JNf Cz1YizpBD/3SkWQU0ARsEWamUPd1+DwC -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:53 2025 by rpki-client