This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139974.roa File: AS139974.roa (raw, json) Hash identifier: /WPYbe+WEEb36MklZC5s/1ajxHYKU8Mxgx5TkYFo0eM= Subject key identifier: EE:23:3C:04:35:69:1A:C1:0B:56:1A:66:66:E1:98:63:EA:E1:4D:A9 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 16C84C3E26C8618755F7B552DBAA3FC7DE7EB4EF Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139974.roa Signing time: Tue 11 Nov 2025 06:00:25 +0000 ROA not before: Tue 11 Nov 2025 05:55:25 +0000 ROA not after: Tue 10 Nov 2026 06:00:25 +0000 asID: 139974 IP address blocks: 103.147.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:c8:4c:3e:26:c8:61:87:55:f7:b5:52:db:aa:3f:c7:de:7e:b4:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 11 05:55:25 2025 GMT Not After : Nov 10 06:00:25 2026 GMT Subject: CN=EE233C0435691AC10B561A6666E19863EAE14DA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:dd:cd:7d:92:d2:f9:67:e3:6c:16:db:45:73: 8d:06:f5:b0:ac:1f:a5:66:5a:1e:5c:58:bf:b0:17: 4b:72:f0:be:71:df:a9:29:d2:d5:8e:e3:96:45:2c: 2d:19:7c:83:be:06:46:30:2c:e4:00:ad:7b:8e:b4: 54:3a:7c:9a:8c:38:fa:8a:e1:ec:3b:46:5d:ce:a4: ee:a8:dc:00:7c:3f:0b:b5:76:3b:e2:65:4d:6c:4b: df:e0:f2:49:52:38:c7:7f:4e:dc:6e:a9:3d:d8:be: f1:35:2b:a1:9f:93:e9:90:10:0e:1a:84:d2:c8:90: 2d:2c:ef:c0:7e:76:5e:5e:d3:df:83:e0:76:51:3c: 7f:fd:e3:2a:66:74:d0:9f:77:b1:14:19:be:68:83: df:d7:61:9d:1d:f3:c3:91:fa:6e:28:91:8a:e1:ee: cd:5f:b6:95:21:4c:73:74:34:8b:ac:c7:18:db:b2: 44:82:7d:4b:fd:91:a1:27:16:0b:0e:01:22:b5:69: 27:39:db:d3:4d:b5:b3:dc:13:6b:6e:77:1c:e3:11: fc:b4:4d:d8:1c:d4:16:fd:c0:b3:a8:eb:e4:88:a5: 72:cd:98:e0:3f:73:f2:20:53:20:a7:fa:14:d4:6b: b8:28:e1:ef:54:39:97:fc:47:6d:c6:89:10:e1:e5: 96:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:23:3C:04:35:69:1A:C1:0B:56:1A:66:66:E1:98:63:EA:E1:4D:A9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139974.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.251.0/24 Signature Algorithm: sha256WithRSAEncryption 28:38:1a:64:4b:ae:06:cb:8a:8f:58:0e:82:bd:93:c7:15:2d: d6:2d:18:c5:fa:be:86:f9:18:80:fc:44:45:eb:c3:31:f5:04: 68:67:c8:82:a7:ab:8f:f9:88:03:51:8c:b0:b3:b9:be:29:a2: 34:64:76:15:27:f8:fb:99:d5:d8:fe:b8:fe:40:93:82:00:92: 60:35:63:4b:77:9a:50:b5:45:68:05:d5:13:84:3f:83:ce:7a: 61:64:26:ae:ac:b5:fa:98:8c:6b:66:6f:1b:4f:b9:d8:5f:c6: 03:93:ef:be:e4:15:e3:da:f9:5e:42:aa:f3:e4:e2:88:69:60: 65:86:b0:c6:78:f6:f4:85:ba:c4:d6:84:d3:8f:54:49:39:91: 37:7c:b1:3c:17:73:44:e7:03:80:d6:ff:30:43:cc:2c:5d:f9: 3b:e8:00:2b:c7:21:8c:5a:03:ac:13:da:ad:a8:86:06:28:f8: 30:36:96:22:4f:42:0a:c5:a2:6b:ef:1d:bc:23:e1:57:01:ec: d3:fb:e2:a8:de:4d:64:77:c1:39:ac:6f:6f:f1:d9:bf:40:99: 03:8d:04:0b:b3:9f:a3:18:f2:e3:0f:a6:b8:60:7e:ca:34:f5: ba:97:6e:81:c7:5b:77:77:10:97:96:68:61:9b:a3:d9:f2:1a: b6:8b:79:fd -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUFshMPibIYYdV97VS26o/x95+tO8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTA1NTUyNVoX DTI2MTExMDA2MDAyNVowMzExMC8GA1UEAxMoRUUyMzNDMDQzNTY5MUFDMTBCNTYx QTY2NjZFMTk4NjNFQUUxNERBOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMHdzX2S0vln42wW20VzjQb1sKwfpWZaHlxYv7AXS3LwvnHfqSnS1Y7jlkUs LRl8g74GRjAs5ACte460VDp8mow4+orh7DtGXc6k7qjcAHw/C7V2O+JlTWxL3+Dy SVI4x39O3G6pPdi+8TUroZ+T6ZAQDhqE0siQLSzvwH52Xl7T34PgdlE8f/3jKmZ0 0J93sRQZvmiD39dhnR3zw5H6biiRiuHuzV+2lSFMc3Q0i6zHGNuyRIJ9S/2RoScW Cw4BIrVpJznb0021s9wTa253HOMR/LRN2BzUFv3As6jr5Iilcs2Y4D9z8iBTIKf6 FNRruCjh71Q5l/xHbcaJEOHllukCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTuIzwE NWkawQtWGmZm4Zhj6uFNqTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzOTk3NC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGeT+zANBgkqhkiG9w0BAQsFAAOCAQEAKDgaZEuuBsuKj1gOgr2T xxUt1i0Yxfq+hvkYgPxERevDMfUEaGfIgqerj/mIA1GMsLO5vimiNGR2FSf4+5nV 2P64/kCTggCSYDVjS3eaULVFaAXVE4Q/g856YWQmrqy1+piMa2ZvG0+52F/GA5Pv vuQV49r5XkKq8+TiiGlgZYawxnj29IW6xNaE049USTmRN3yxPBdzROcDgNb/MEPM LF35O+gAK8chjFoDrBParaiGBij4MDaWIk9CCsWia+8dvCPhVwHs0/viqN5NZHfB Oaxvb/HZv0CZA40EC7Ofoxjy4w+muGB+yjT1updugcdbd3cQl5ZoYZuj2fIatot5 /Q== -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:57 2025 by rpki-client