This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140030.roa File: AS140030.roa (raw, json) Hash identifier: ZxcRGFA+SGg4jyZemSMlhyaCkDoymUdhbReFCYdujWU= Subject key identifier: 05:98:51:94:CE:7F:AB:44:9B:C1:78:CA:84:43:B0:CD:CB:59:55:11 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1F0F61F26DC5A6BC6EDD07CA6D6E26956DB922F9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140030.roa Signing time: Tue 11 Nov 2025 06:00:21 +0000 ROA not before: Tue 11 Nov 2025 05:55:21 +0000 ROA not after: Tue 10 Nov 2026 06:00:21 +0000 asID: 140030 IP address blocks: 103.149.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:0f:61:f2:6d:c5:a6:bc:6e:dd:07:ca:6d:6e:26:95:6d:b9:22:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 11 05:55:21 2025 GMT Not After : Nov 10 06:00:21 2026 GMT Subject: CN=05985194CE7FAB449BC178CA8443B0CDCB595511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:77:63:22:86:94:77:8a:7d:e3:fb:cb:d3:d4: a5:37:77:9a:3b:55:9c:ad:77:79:7e:a9:e9:96:55: e3:31:3b:d0:c5:dc:6d:68:e4:e5:61:02:fd:40:2d: 1d:86:cc:e4:24:86:24:3c:18:d5:3d:60:6b:75:62: c9:f4:91:84:42:c3:fe:be:cf:9a:55:61:04:b6:24: e7:d5:73:14:a6:4b:49:92:27:4f:bc:20:1e:8a:6a: a9:82:1a:6b:56:a5:75:14:26:71:c4:fd:68:e6:68: 4b:7b:7e:fe:08:c0:5d:f7:93:8b:56:6d:61:b3:e1: cc:97:87:b8:39:0a:ff:07:2a:e5:f2:50:e4:f5:b0: ca:ec:cb:49:ed:a0:23:5d:7a:db:62:60:c0:58:2d: f0:dd:17:a8:ae:14:81:17:5c:08:b4:ad:8f:ee:79: ef:8d:a5:81:ab:5b:ae:ae:7e:1c:2f:f1:47:6c:1b: b1:4c:99:ad:c0:27:78:e9:93:fd:e9:8a:fb:c0:0b: 34:8b:ca:22:43:6d:d8:35:64:67:51:00:e8:aa:aa: 8f:d8:cc:ef:00:df:31:97:cd:b8:aa:dc:65:a9:d0: 2a:70:2f:ea:56:b6:82:92:df:03:a3:49:1f:cb:f0: 06:8b:44:0e:d1:dd:f7:2d:07:09:6e:c2:ab:44:69: 76:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:98:51:94:CE:7F:AB:44:9B:C1:78:CA:84:43:B0:CD:CB:59:55:11 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.149.203.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:b8:45:3c:2b:1b:ea:09:7a:da:87:12:fa:2e:26:7a:ca:15: ec:8c:89:9f:90:f3:d8:91:be:52:d2:81:11:9a:7e:7d:b1:5f: 41:e0:9d:47:15:83:95:bd:26:83:1f:c5:fa:09:4e:c0:9d:5b: 54:1d:55:a4:1d:ff:10:96:97:f9:06:fe:a6:91:2c:9a:67:5c: 0b:35:70:37:a6:a6:c8:03:a1:7e:52:de:61:60:04:86:4d:ae: 8c:ac:b3:22:8a:d4:cc:ec:60:60:b9:b8:6a:79:a8:b9:76:dd: dc:94:02:b3:ca:51:8c:93:7a:60:66:6a:34:0d:03:b8:d4:f1: bd:54:79:e9:10:74:d0:ec:ae:b7:bb:de:71:fa:7b:f9:78:ba: 29:4b:12:1b:1b:dc:fa:be:3a:17:19:6c:46:92:a9:63:c1:25: 34:c3:0a:e9:9e:59:a3:b7:27:20:25:27:72:f3:9c:6b:c5:b4: d2:1a:ac:09:9f:d2:7b:21:40:5b:3e:87:d7:1a:99:9b:06:b1: 5d:17:21:82:8a:5a:d9:82:1f:13:3d:9f:b5:74:8d:72:8d:24: c6:62:86:4f:4e:e7:01:9f:64:57:bc:ee:cf:15:3d:85:54:d2: bf:3b:44:70:e4:fd:4a:ed:06:fd:a6:f3:91:bd:ac:2a:8a:1e: 3e:da:c4:00 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUHw9h8m3Fprxu3QfKbW4mlW25IvkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTA1NTUyMVoX DTI2MTExMDA2MDAyMVowMzExMC8GA1UEAxMoMDU5ODUxOTRDRTdGQUI0NDlCQzE3 OENBODQ0M0IwQ0RDQjU5NTUxMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKJ3YyKGlHeKfeP7y9PUpTd3mjtVnK13eX6p6ZZV4zE70MXcbWjk5WEC/UAt HYbM5CSGJDwY1T1ga3ViyfSRhELD/r7PmlVhBLYk59VzFKZLSZInT7wgHopqqYIa a1aldRQmccT9aOZoS3t+/gjAXfeTi1ZtYbPhzJeHuDkK/wcq5fJQ5PWwyuzLSe2g I11622JgwFgt8N0XqK4UgRdcCLStj+55742lgatbrq5+HC/xR2wbsUyZrcAneOmT /emK+8ALNIvKIkNt2DVkZ1EA6Kqqj9jM7wDfMZfNuKrcZanQKnAv6la2gpLfA6NJ H8vwBotEDtHd9y0HCW7Cq0RpdskCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQFmFGU zn+rRJvBeMqEQ7DNy1lVETAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MDAzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGeVyzANBgkqhkiG9w0BAQsFAAOCAQEADrhFPCsb6gl62ocS+i4m esoV7IyJn5Dz2JG+UtKBEZp+fbFfQeCdRxWDlb0mgx/F+glOwJ1bVB1VpB3/EJaX +Qb+ppEsmmdcCzVwN6amyAOhflLeYWAEhk2ujKyzIorUzOxgYLm4anmouXbd3JQC s8pRjJN6YGZqNA0DuNTxvVR56RB00Oyut7vecfp7+Xi6KUsSGxvc+r46FxlsRpKp Y8ElNMMK6Z5Zo7cnICUncvOca8W00hqsCZ/SeyFAWz6H1xqZmwaxXRchgopa2YIf Ez2ftXSNco0kxmKGT07nAZ9kV7zuzxU9hVTSvztEcOT9Su0G/abzkb2sKooePtrE AA== -----END CERTIFICATE-----Generated at Wed Dec 3 13:15:28 2025 by rpki-client