This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139943.roa File: AS139943.roa (raw, json) Hash identifier: Brn9d2zttbhen9ixZ/m70fzCUEjB4zJE5b3MUTQz/Qw= Subject key identifier: 5B:A6:2E:86:8B:78:7E:33:00:50:EC:78:B2:2E:00:74:FE:09:E0:1E Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 742D0A0F881D1E900088962D7D810B9D935F2774 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139943.roa Signing time: Tue 02 Dec 2025 08:16:35 +0000 ROA not before: Tue 02 Dec 2025 08:11:35 +0000 ROA not after: Tue 01 Dec 2026 08:16:35 +0000 asID: 139943 IP address blocks: 103.134.85.0/24 maxlen: 24 2001:df7:c500::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:2d:0a:0f:88:1d:1e:90:00:88:96:2d:7d:81:0b:9d:93:5f:27:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 2 08:11:35 2025 GMT Not After : Dec 1 08:16:35 2026 GMT Subject: CN=5BA62E868B787E330050EC78B22E0074FE09E01E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:32:cd:66:dd:75:3d:fc:f7:14:48:26:86:4a: 08:11:77:16:05:00:17:da:b3:16:a3:73:53:1b:46: 90:e4:fa:46:5d:d3:59:8e:7d:d1:00:1e:28:cf:0f: b9:89:c0:f6:be:eb:80:ee:d2:33:ae:e8:6d:5a:c2: 22:82:3f:57:0e:1b:4f:5a:f1:7b:e9:53:68:af:e2: 5c:b9:d3:ca:ca:ac:0f:88:8c:35:02:bf:46:25:af: 79:6f:6f:b0:e6:84:9f:8a:18:71:a4:db:dc:40:39: 07:b5:1b:68:92:1b:fa:de:94:a8:71:ae:92:2b:36: 4e:4b:a5:3e:70:e0:d7:2d:8e:f7:ca:53:b3:a9:55: 92:9a:47:40:bf:b9:49:e6:9a:1f:fe:f2:60:a1:27: 4d:12:79:d7:7f:66:1b:40:d0:7c:e3:2a:f3:53:a3: b9:49:de:8a:6a:ff:8d:b0:55:0f:ee:fe:0d:cf:ca: a2:40:78:e2:3e:b3:a3:7d:65:b0:3b:1d:34:70:4a: 85:f4:66:de:9f:fe:8b:a5:01:a7:a9:5b:58:a2:03: 50:55:69:7d:2d:db:6e:0d:4b:eb:e8:dd:50:ba:1f: 0b:58:67:5b:e9:98:4b:e9:28:26:67:ec:78:50:c0: 29:d9:0f:ba:e8:00:0d:03:85:b0:69:a6:1b:4e:3b: 59:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A6:2E:86:8B:78:7E:33:00:50:EC:78:B2:2E:00:74:FE:09:E0:1E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139943.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.134.85.0/24 IPv6: 2001:df7:c500::/48 Signature Algorithm: sha256WithRSAEncryption 81:db:a7:7b:09:58:a4:5d:f3:35:4c:04:bb:9e:af:4c:2f:9e: 23:e1:38:1e:0d:2e:a5:1e:13:14:db:aa:0b:56:50:5f:61:2e: 41:e1:a4:20:c2:02:27:ac:81:12:d1:6d:85:20:f5:6f:44:f2: 8f:67:cf:a3:08:76:d9:ee:f0:33:14:c2:e3:06:a8:85:86:74: 33:95:4b:63:0e:18:ba:5c:3b:a3:49:17:2f:be:04:5a:c6:47: 12:8c:55:5f:1b:54:d7:67:12:ee:32:45:18:4f:35:2b:77:2b: 74:7e:3b:f9:9d:19:23:db:d1:74:2f:e3:19:98:3d:6d:62:02: 6b:2e:f4:cc:1c:ae:61:94:e3:aa:a4:86:38:e1:08:cc:fe:bb: fd:f5:51:ce:bc:85:92:0f:29:b7:36:75:a3:21:eb:4f:76:20: fb:28:f8:a8:3a:5f:51:40:0d:c0:5c:64:19:8c:c5:d9:1c:66: 53:08:ef:f3:1b:c4:1a:d3:75:69:3f:7d:32:f6:0f:d5:14:f6: 7d:1e:60:06:19:da:15:83:53:4f:9d:db:de:28:58:b8:ff:2b: 13:c1:03:44:45:c1:8c:1d:56:ae:c5:68:a1:ed:6d:1d:0f:f3: 8b:17:1c:65:e8:96:57:e5:79:1b:cf:dd:fb:9d:c0:a3:92:d1: bc:0d:33:aa -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUdC0KD4gdHpAAiJYtfYELnZNfJ3QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIwMjA4MTEzNVoX DTI2MTIwMTA4MTYzNVowMzExMC8GA1UEAxMoNUJBNjJFODY4Qjc4N0UzMzAwNTBF Qzc4QjIyRTAwNzRGRTA5RTAxRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANkyzWbddT389xRIJoZKCBF3FgUAF9qzFqNzUxtGkOT6Rl3TWY590QAeKM8P uYnA9r7rgO7SM67obVrCIoI/Vw4bT1rxe+lTaK/iXLnTysqsD4iMNQK/RiWveW9v sOaEn4oYcaTb3EA5B7UbaJIb+t6UqHGukis2TkulPnDg1y2O98pTs6lVkppHQL+5 SeaaH/7yYKEnTRJ5139mG0DQfOMq81OjuUneimr/jbBVD+7+Dc/KokB44j6zo31l sDsdNHBKhfRm3p/+i6UBp6lbWKIDUFVpfS3bbg1L6+jdULofC1hnW+mYS+koJmfs eFDAKdkPuugADQOFsGmmG047WXMCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBRbpi6G i3h+MwBQ7HiyLgB0/gngHjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzOTk0My5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAGeGVTAPBAIAAjAJAwcAIAEN98UAMA0GCSqGSIb3DQEBCwUAA4IB AQCB26d7CVikXfM1TAS7nq9ML54j4TgeDS6lHhMU26oLVlBfYS5B4aQgwgInrIES 0W2FIPVvRPKPZ8+jCHbZ7vAzFMLjBqiFhnQzlUtjDhi6XDujSRcvvgRaxkcSjFVf G1TXZxLuMkUYTzUrdyt0fjv5nRkj29F0L+MZmD1tYgJrLvTMHK5hlOOqpIY44QjM /rv99VHOvIWSDym3NnWjIetPdiD7KPioOl9RQA3AXGQZjMXZHGZTCO/zG8Qa03Vp P30y9g/VFPZ9HmAGGdoVg1NPndveKFi4/ysTwQNERcGMHVauxWih7W0dD/OLFxxl 6JZX5Xkbz937ncCjktG8DTOq -----END CERTIFICATE-----Generated at Wed Dec 3 14:50:01 2025 by rpki-client