This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139995.roa
File: AS139995.roa (raw, json)
Hash identifier: 8kpr7pMJ2pCCEEAKygXpjhZY3XvfNkRQtQnKhgNlhfk=
Subject key identifier: 03:3D:C1:8A:93:49:14:25:D8:6D:30:C0:40:40:5B:07:09:DA:B6:9B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 799FA49696B573A2643B3B032BB69EA50C028092
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139995.roa
Signing time: Tue 11 Nov 2025 06:00:24 +0000
ROA not before: Tue 11 Nov 2025 05:55:24 +0000
ROA not after: Tue 10 Nov 2026 06:00:24 +0000
asID: 139995
IP address blocks: 103.148.192.0/23 maxlen: 24
2001:df2:e580::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 12:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:9f:a4:96:96:b5:73:a2:64:3b:3b:03:2b:b6:9e:a5:0c:02:80:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Nov 11 05:55:24 2025 GMT
Not After : Nov 10 06:00:24 2026 GMT
Subject: CN=033DC18A93491425D86D30C040405B0709DAB69B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c8:7f:4c:1e:59:ea:f6:7e:e8:9c:13:9c:6b:
c8:b3:c2:2b:c7:c9:ff:cd:fa:23:f6:a4:0e:b7:a0:
af:32:58:bd:70:94:6b:b5:23:32:32:9a:bd:0b:9c:
c2:8d:21:29:15:e8:6f:91:be:9b:f7:b5:37:ed:50:
5c:64:33:5b:35:db:ac:9c:a8:06:93:96:b0:ee:52:
a0:bd:64:4b:e6:76:26:02:0b:09:2d:58:d7:53:10:
eb:48:10:3b:e9:92:09:2e:cf:77:8d:17:25:66:94:
00:c8:80:5b:fb:cb:4f:bf:2e:d6:c0:e7:08:56:20:
a2:e2:0f:5b:0e:e0:24:2b:27:ed:f0:0b:66:5b:bc:
ec:ba:b0:27:9d:e8:a7:a4:4b:b6:a9:12:eb:99:86:
ed:15:f1:20:8d:2c:e4:61:7a:a3:89:d7:39:3d:52:
78:93:59:9d:52:b0:dd:69:c1:62:61:b8:31:d2:ee:
46:d8:2e:2b:11:52:c5:54:bc:d4:04:eb:9a:a7:62:
6b:11:8f:b6:50:8f:36:5a:ab:22:67:01:82:be:40:
b5:91:ef:8c:43:8f:1c:0c:73:42:1e:da:5d:b8:46:
96:d8:4a:ca:20:54:13:aa:c2:68:4e:79:34:7d:40:
ae:17:ff:8f:0e:5b:b4:4e:99:ee:2a:1a:27:85:f4:
e5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3D:C1:8A:93:49:14:25:D8:6D:30:C0:40:40:5B:07:09:DA:B6:9B
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139995.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.148.192.0/23
IPv6:
2001:df2:e580::/48
Signature Algorithm: sha256WithRSAEncryption
4e:de:ae:d7:39:07:a9:e3:64:25:e9:29:54:54:36:78:97:b0:
fd:a5:1f:47:56:3f:fc:a0:e8:6f:2c:aa:0e:5a:20:fa:51:a5:
ea:4f:e5:38:c3:90:95:2b:b3:fd:90:2b:81:18:32:5b:2b:53:
33:52:9f:66:b0:a0:12:4a:d3:37:6c:37:48:9e:79:bb:12:ed:
09:03:d5:df:e4:a6:88:eb:bf:be:dc:e6:a7:3a:c6:8d:d5:12:
d1:c0:ec:d2:33:c3:38:9a:60:1b:16:f6:58:a3:98:6f:bb:98:
21:32:5e:bf:0d:6b:88:4d:a3:e8:6b:f5:be:71:9d:1a:8e:2a:
f2:2c:ec:e2:b7:86:bb:8e:88:5c:4d:16:82:72:39:ef:be:28:
e2:e4:1b:85:17:31:5b:19:6e:bc:d5:2d:08:f6:4b:71:16:32:
29:1d:b5:ee:dd:e7:29:45:3b:b6:6c:78:48:be:ae:86:f5:7d:
f9:a0:ec:a1:52:ae:3b:9c:6c:27:39:f2:7f:02:55:0c:3f:a9:
65:6d:ce:21:ef:ea:3a:67:f2:68:f3:45:c0:f7:65:9d:22:a5:
e5:36:19:9e:0d:cd:50:27:fe:ec:4e:bd:08:66:a4:b8:cc:a7:
5c:cf:67:18:40:71:d5:de:1e:1b:04:f7:9d:44:ac:67:b1:da:
41:c8:96:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:15:34 2025 by rpki-client