This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139938.roa File: AS139938.roa (raw, json) Hash identifier: oibmrDVvuyUtaVlS0ts+RYkbZn3i0THkXo+xDGvHZyo= Subject key identifier: EB:D8:E1:D2:F5:EC:C2:27:0F:4C:B3:32:37:4D:01:55:3B:84:30:EC Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4F8CB41B24DB70968D5CBB9018B0AA683DD99BD6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139938.roa Signing time: Fri 28 Nov 2025 06:00:00 +0000 ROA not before: Fri 28 Nov 2025 05:55:00 +0000 ROA not after: Fri 27 Nov 2026 06:00:00 +0000 asID: 139938 IP address blocks: 103.145.220.0/23 maxlen: 24 2001:df2:2c80::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:8c:b4:1b:24:db:70:96:8d:5c:bb:90:18:b0:aa:68:3d:d9:9b:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 28 05:55:00 2025 GMT Not After : Nov 27 06:00:00 2026 GMT Subject: CN=EBD8E1D2F5ECC2270F4CB332374D01553B8430EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c5:4c:8d:d3:0c:5c:2e:99:99:64:4a:4b:ee: 65:66:52:e9:6c:4b:84:73:76:7f:14:c8:26:4e:46: ca:c7:74:40:44:ba:a5:f8:fc:15:98:bf:16:d5:0f: 22:7d:1b:dc:21:ea:35:dc:d7:47:36:ad:c0:ab:02: 09:86:0e:2b:6b:81:03:9d:ec:55:a9:49:bb:83:bb: 34:75:ca:fc:1b:0f:d7:e1:75:4f:01:97:4f:62:72: de:74:95:11:05:a3:01:12:85:15:11:f7:1a:cf:34: 89:25:9c:30:c6:cc:d5:36:bf:00:a6:96:00:44:0f: df:b8:3a:77:57:4c:ce:a3:bc:de:37:72:79:70:23: 57:28:8b:a4:f2:04:6d:46:f1:20:f7:7b:f9:fc:52: 57:bf:10:0c:8a:88:0d:02:ca:c0:f8:11:b2:76:db: fc:a2:9e:29:d1:8e:f2:48:04:c0:c9:f8:71:c8:65: 50:69:8b:e7:ad:27:30:c9:cd:5c:70:db:7b:f7:d0: 3d:6c:8b:76:cb:0e:57:80:f3:85:d7:b4:96:72:1b: 56:8d:06:27:2f:b3:6c:32:56:ad:fa:f9:b4:0a:82: eb:89:a2:7c:44:11:2f:f7:1f:9e:79:74:c8:fd:a3: 53:9e:8b:6c:d0:01:d4:63:95:39:99:94:bb:df:6e: b1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:D8:E1:D2:F5:EC:C2:27:0F:4C:B3:32:37:4D:01:55:3B:84:30:EC X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.145.220.0/23 IPv6: 2001:df2:2c80::/48 Signature Algorithm: sha256WithRSAEncryption 16:57:d6:45:18:97:a2:81:e0:c9:c7:f9:10:a3:6b:49:20:eb: 3e:4e:39:b8:c5:aa:a1:8a:fc:3d:e2:5f:3f:5c:39:6f:cd:1d: e4:0b:0a:a7:08:38:dc:15:c6:3f:ad:ea:76:b8:de:f8:cf:0f: e2:4d:62:74:0c:06:44:d8:3d:39:22:19:92:a2:dc:55:64:70: 68:9c:91:bf:8c:59:32:dc:88:ae:f6:1a:10:b4:5c:a1:24:98: 72:c5:5f:25:33:21:9a:25:e7:62:af:3c:fc:a6:27:fa:69:92: ce:6e:29:9f:90:aa:81:a6:98:9b:e8:24:67:30:3e:41:3e:6b: dd:34:2f:f0:a4:65:98:8f:1d:46:23:9f:56:66:aa:00:7c:84: ff:2d:42:49:57:c3:0b:c5:e5:5b:c1:84:e8:a7:77:7c:17:fc: 11:1f:86:35:02:2d:d3:31:24:d4:5d:ba:23:3f:90:27:e8:c5: 71:da:5f:0f:de:7b:47:d2:4e:cf:da:3a:d9:6a:4a:4f:54:5e: 4d:b3:21:37:a8:4e:a9:0f:53:77:17:b8:87:4a:74:31:17:2d: e4:be:d0:83:4b:c0:00:33:da:da:eb:6b:f0:ff:ee:7c:16:8c: 8d:67:a3:ca:9b:45:e3:ca:e4:91:6a:4a:a4:1d:61:53:13:95: 3d:bc:4d:58 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUT4y0GyTbcJaNXLuQGLCqaD3Zm9YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTEyODA1NTUwMFoX DTI2MTEyNzA2MDAwMFowMzExMC8GA1UEAxMoRUJEOEUxRDJGNUVDQzIyNzBGNENC MzMyMzc0RDAxNTUzQjg0MzBFQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALHFTI3TDFwumZlkSkvuZWZS6WxLhHN2fxTIJk5Gysd0QES6pfj8FZi/FtUP In0b3CHqNdzXRzatwKsCCYYOK2uBA53sValJu4O7NHXK/BsP1+F1TwGXT2Jy3nSV EQWjARKFFRH3Gs80iSWcMMbM1Ta/AKaWAEQP37g6d1dMzqO83jdyeXAjVyiLpPIE bUbxIPd7+fxSV78QDIqIDQLKwPgRsnbb/KKeKdGO8kgEwMn4cchlUGmL560nMMnN XHDbe/fQPWyLdssOV4Dzhde0lnIbVo0GJy+zbDJWrfr5tAqC64mifEQRL/cfnnl0 yP2jU56LbNAB1GOVOZmUu99useECAwEAAaOCAeEwggHdMB0GA1UdDgQWBBTr2OHS 9ezCJw9MszI3TQFVO4Qw7DAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzOTkzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAWeR3DAPBAIAAjAJAwcAIAEN8iyAMA0GCSqGSIb3DQEBCwUAA4IB AQAWV9ZFGJeigeDJx/kQo2tJIOs+Tjm4xaqhivw94l8/XDlvzR3kCwqnCDjcFcY/ rep2uN74zw/iTWJ0DAZE2D05IhmSotxVZHBonJG/jFky3Iiu9hoQtFyhJJhyxV8l MyGaJedirzz8pif6aZLObimfkKqBppib6CRnMD5BPmvdNC/wpGWYjx1GI59WZqoA fIT/LUJJV8MLxeVbwYTop3d8F/wRH4Y1Ai3TMSTUXbojP5An6MVx2l8P3ntH0k7P 2jrZakpPVF5NsyE3qE6pD1N3F7iHSnQxFy3kvtCDS8AAM9ra62vw/+58FoyNZ6PK m0XjyuSRakqkHWFTE5U9vE1Y -----END CERTIFICATE-----Generated at Wed Dec 3 13:55:17 2025 by rpki-client