This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139946.roa
File: AS139946.roa (raw, json)
Hash identifier: TatoZu3qPf8FOmfsLaqpCR76T7dO77QyG2l435g5RBU=
Subject key identifier: F8:8C:8F:E7:EF:E7:AE:7D:73:8A:74:5F:92:8E:33:8E:D3:BB:17:85
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 442011FBAEA20B526F5703FBECB7B06AD2D95C78
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139946.roa
Signing time: Tue 11 Nov 2025 06:00:12 +0000
ROA not before: Tue 11 Nov 2025 05:55:12 +0000
ROA not after: Tue 10 Nov 2026 06:00:12 +0000
asID: 139946
IP address blocks: 103.147.46.0/23 maxlen: 24
2405:a8c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 12:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:20:11:fb:ae:a2:0b:52:6f:57:03:fb:ec:b7:b0:6a:d2:d9:5c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Nov 11 05:55:12 2025 GMT
Not After : Nov 10 06:00:12 2026 GMT
Subject: CN=F88C8FE7EFE7AE7D738A745F928E338ED3BB1785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ec:53:e3:2c:b6:40:77:e3:47:23:64:50:a8:
2a:8d:96:ae:aa:5b:c1:a7:96:ef:9e:42:e5:46:d1:
01:96:31:2b:3d:f9:14:75:46:fc:df:42:4c:a4:b2:
0e:6a:d3:de:d8:38:fb:df:00:bb:f2:97:e2:0e:33:
01:71:22:b2:ad:91:01:06:b7:73:76:b5:13:e9:20:
c0:2c:ce:d5:98:29:c9:81:ed:0c:c3:1e:d2:a2:46:
9f:25:de:59:1f:e7:e1:8c:6d:16:88:d3:c7:a9:ea:
1f:27:c7:5f:36:af:b0:dd:84:e6:4a:1f:98:a6:62:
fd:f3:33:01:9e:36:ae:d0:f0:78:8d:63:a7:de:cc:
3b:70:b5:d3:33:1d:6c:b6:63:84:e5:7c:38:50:18:
66:ad:08:a6:72:24:cc:85:95:be:1d:f1:83:d0:91:
ec:2d:37:ad:64:4a:11:83:bf:98:fb:d5:59:d3:dd:
9b:38:a8:d0:b3:1f:61:00:53:73:1e:1c:a4:6f:2a:
11:da:89:14:5b:53:b1:8f:f2:5a:eb:6b:2e:59:2e:
f0:2b:54:5d:fc:6e:5c:8d:d3:40:f9:85:31:77:94:
13:2c:06:e5:44:04:bf:06:1a:58:dc:d6:cd:da:bd:
50:df:f4:d2:05:25:6a:b8:64:6e:f8:9f:37:ee:32:
8f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8C:8F:E7:EF:E7:AE:7D:73:8A:74:5F:92:8E:33:8E:D3:BB:17:85
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139946.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.147.46.0/23
IPv6:
2405:a8c0::/32
Signature Algorithm: sha256WithRSAEncryption
9b:16:e2:a0:3d:2c:21:ed:42:fa:51:0c:fa:0b:f6:78:da:6c:
27:7c:44:7a:f2:ea:eb:e7:3b:69:66:d1:51:28:0c:92:62:a2:
23:7e:19:9b:ce:09:fc:46:6b:72:35:d2:1c:90:4b:ea:2d:9c:
f5:96:d6:93:af:db:71:5c:37:29:82:03:67:f2:3f:c8:bd:92:
9a:4a:6f:ab:37:a9:03:9f:aa:89:cf:4b:7f:fc:a9:23:07:4a:
0c:0e:35:ac:85:9a:81:4b:ce:84:ce:f6:f6:9a:02:40:a9:37:
4d:4c:52:f9:36:d8:07:26:ea:45:5c:b2:2f:aa:50:43:78:e3:
fd:00:07:9e:ff:eb:36:bd:e1:2e:74:b5:8a:c5:44:94:d0:b1:
3c:5e:a4:08:1c:89:04:c1:c7:81:77:65:02:4f:1a:f0:13:01:
af:ed:9c:33:e4:fb:10:38:c2:d0:72:83:92:3e:dc:aa:c3:c7:
1a:d2:6c:86:10:43:e2:a3:70:64:73:71:ae:0d:3c:8a:e2:f2:
9c:67:a0:df:a4:0e:a8:23:12:2c:94:19:11:80:8c:59:2c:e1:
8c:8c:c1:28:c2:50:d5:53:06:32:76:b6:22:6d:bc:66:b1:fa:
8b:32:65:e2:20:47:af:01:89:b6:b8:16:4b:ed:b8:e6:57:d2:
22:6d:45:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:55:13 2025 by rpki-client