This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140010.roa
File: AS140010.roa (raw, json)
Hash identifier: DwHaYADqmzFzHqfOfcVmfkw4qxlqjbK3L/0SwjCZY1I=
Subject key identifier: 6B:B7:38:8C:61:F7:28:F2:8E:37:D3:A0:93:42:D6:4C:C1:5D:80:57
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 5EC44D19A8B7D64DDDF67A1CBEBF4CCC058AEEB0
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140010.roa
Signing time: Wed 05 Nov 2025 10:02:26 +0000
ROA not before: Wed 05 Nov 2025 09:57:26 +0000
ROA not after: Wed 04 Nov 2026 10:02:26 +0000
asID: 140010
IP address blocks: 103.147.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 12:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:c4:4d:19:a8:b7:d6:4d:dd:f6:7a:1c:be:bf:4c:cc:05:8a:ee:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Nov 5 09:57:26 2025 GMT
Not After : Nov 4 10:02:26 2026 GMT
Subject: CN=6BB7388C61F728F28E37D3A09342D64CC15D8057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8c:ba:d9:8e:d6:cb:e5:83:9e:45:78:47:05:
88:f3:50:83:b1:c8:88:c4:55:36:aa:bd:83:b1:3e:
20:c5:8e:32:89:ff:6d:8e:8b:7b:6f:7a:3e:9b:df:
d0:cd:f4:3a:a2:c2:4a:09:03:97:0e:38:07:87:ce:
f2:41:b5:fa:f4:1b:47:95:fa:87:3c:58:f1:de:8f:
6a:a9:05:3b:20:b2:41:6e:b1:e9:f8:be:df:36:1a:
ca:85:ca:37:b9:29:c3:6b:f3:d9:cc:34:c4:bb:04:
3b:23:c5:85:0c:5b:09:7c:84:e0:94:e1:49:7f:be:
44:28:a0:b4:5d:8c:b5:07:18:ad:14:13:f2:c3:3c:
3d:37:d0:a0:29:71:83:6d:53:51:43:c4:5f:9f:6e:
ae:dc:86:48:70:fe:08:c9:7d:7a:76:77:f4:0e:20:
56:15:59:59:2e:fb:6b:67:6a:8f:3a:be:cd:ba:cc:
92:cf:b8:06:62:f7:9d:14:2b:d3:0f:56:3f:52:4e:
17:0f:5c:7f:9a:da:fd:b5:d7:ba:ab:24:6a:72:76:
07:3b:6e:49:82:b3:2f:98:63:55:50:e1:cb:3c:9e:
1c:01:81:40:d7:10:02:6d:a3:50:eb:42:b0:4b:43:
dd:58:67:3e:ee:d1:b0:79:7c:f9:60:e6:c1:87:b2:
09:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B7:38:8C:61:F7:28:F2:8E:37:D3:A0:93:42:D6:4C:C1:5D:80:57
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140010.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.147.241.0/24
Signature Algorithm: sha256WithRSAEncryption
07:ca:b1:6f:0c:8a:d1:54:dc:d1:47:f0:aa:f1:1d:f0:72:3c:
65:01:d4:75:c5:a4:1e:3f:07:0a:fe:9f:3f:a0:3a:01:1b:97:
ab:07:0b:20:b3:ef:dc:be:29:36:da:d8:2e:9f:9c:8b:9a:57:
c8:04:c3:26:2f:16:cb:16:11:ed:7b:51:64:bb:e9:e4:78:12:
6c:0e:1e:ad:19:49:28:40:15:b3:01:0d:5b:31:fc:85:c8:b3:
06:02:00:94:39:72:24:c0:e8:38:41:bf:e1:0f:7d:54:b4:64:
29:d2:8f:18:a3:67:61:51:bd:4a:63:f6:1b:ce:47:ad:aa:a5:
7a:07:e9:c8:a2:b8:21:38:5d:3e:9f:b1:7a:97:0f:2c:00:27:
49:52:45:e4:86:11:f3:6d:99:c0:c3:01:2b:fd:b0:43:01:98:
61:34:c9:b9:1f:18:1e:dc:f8:a3:10:fa:11:2d:e0:20:4e:28:
cd:d0:14:b5:96:84:2e:85:03:e8:95:db:93:49:41:00:d7:02:
9a:37:9b:af:d8:ed:75:43:37:e8:a3:0f:bd:b2:45:a8:77:cd:
b3:a7:2e:f7:84:33:11:2a:f2:a7:3f:9a:4b:d5:10:f0:52:09:
59:88:55:aa:e1:38:75:47:c0:08:89:e2:59:08:4e:a1:79:d9:
28:9b:4e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:58:54 2025 by rpki-client