This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141103.roa File: AS141103.roa (raw, json) Hash identifier: 8HX72+htcdbpCawjie3JCDcc2O3QCLSDYwFTBu6kJ0s= Subject key identifier: 68:31:F4:EE:D3:FF:36:BB:C8:F4:C1:83:81:F0:C9:33:C2:A8:8D:6A Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 09A273E30160FEC7C5FD5067C2B045F01F5CDAF2 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141103.roa Signing time: Tue 11 Nov 2025 06:00:15 +0000 ROA not before: Tue 11 Nov 2025 05:55:15 +0000 ROA not after: Tue 10 Nov 2026 06:00:15 +0000 asID: 141103 IP address blocks: 103.156.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:a2:73:e3:01:60:fe:c7:c5:fd:50:67:c2:b0:45:f0:1f:5c:da:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 11 05:55:15 2025 GMT Not After : Nov 10 06:00:15 2026 GMT Subject: CN=6831F4EED3FF36BBC8F4C18381F0C933C2A88D6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:84:40:f0:86:ba:2d:cf:4e:d9:0b:dd:7f:5a: 11:28:3f:52:75:69:b3:14:b7:2a:fe:f8:47:df:04: d5:09:8c:99:67:62:c6:76:f9:11:32:23:0c:12:69: d9:75:25:44:b7:56:82:df:65:84:99:11:7f:5f:b6: 38:87:45:c3:49:a5:01:c5:ab:ce:bb:45:9b:b5:a2: 63:77:5e:f2:e5:3b:8f:50:c4:7c:70:30:4a:5a:26: ee:0f:41:3f:0f:7a:3e:e1:cd:3f:68:71:0a:d9:b3: d5:05:cb:29:e6:a0:16:36:5a:4b:37:9b:2d:cb:08: a7:0d:75:51:1b:f9:8d:31:73:08:cb:0e:8b:ba:56: 28:52:dd:95:89:76:02:fb:8d:90:83:8f:cf:04:80: 63:36:fc:29:e3:64:09:2d:be:1f:73:0b:fc:f2:7e: 25:51:9d:72:ef:c5:81:c9:aa:1a:fe:cf:49:d7:6a: b8:4c:42:88:38:ae:87:90:b6:31:c4:c6:3c:32:d0: 43:8b:47:10:5a:82:90:ce:e6:69:f9:0e:8f:94:f6: 20:cc:05:57:41:ac:b0:6e:83:17:45:af:27:49:74: ca:8f:41:5e:be:9f:dc:1d:6f:a6:d0:35:34:a7:9d: c4:84:93:35:3b:91:50:b5:46:99:a9:aa:8e:48:e5: 90:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:31:F4:EE:D3:FF:36:BB:C8:F4:C1:83:81:F0:C9:33:C2:A8:8D:6A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141103.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.252.0/23 Signature Algorithm: sha256WithRSAEncryption 82:b3:66:84:c4:f2:81:4b:16:d6:35:c3:4c:05:c0:27:ce:5d: c0:30:86:69:f2:80:09:d8:47:48:f6:5a:6e:c9:9e:c1:e6:e7: 1a:62:6c:2f:15:dd:37:f0:e3:f6:f3:6a:cb:45:06:7c:60:3e: e7:73:d0:2f:0d:13:3a:1c:9c:48:7f:93:99:87:9c:98:24:0b: 3c:f1:ee:6b:0c:03:b5:17:74:ba:84:21:06:a3:e6:e9:c1:64: 68:d8:b1:31:7f:73:50:96:e7:e7:7f:7f:d2:46:08:8e:ac:ae: 6f:9e:7c:b9:3e:44:47:98:72:38:49:62:31:56:0b:c8:fd:5c: 51:0b:a9:73:77:72:6b:1a:97:76:11:66:b0:52:70:12:de:51: 3e:2d:b2:d5:52:ef:7d:c3:24:a7:02:a9:b7:dd:47:7e:a5:45: 2e:19:3e:3e:68:f2:4f:c9:16:9d:29:ed:c2:be:8f:1f:26:7f: ca:69:09:f6:e7:82:45:e2:7d:c4:7f:8f:82:84:bb:dd:19:95: 15:ea:fb:ee:a9:3a:77:59:60:ab:74:34:93:81:53:a7:06:bf: a4:2c:93:b7:13:68:4a:5e:4a:22:33:d7:0d:39:eb:d1:eb:e2: 57:fe:20:0a:0a:b8:1d:72:23:8b:1c:ff:a0:a8:67:69:07:54: 90:b6:26:bd -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUCaJz4wFg/sfF/VBnwrBF8B9c2vIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTA1NTUxNVoX DTI2MTExMDA2MDAxNVowMzExMC8GA1UEAxMoNjgzMUY0RUVEM0ZGMzZCQkM4RjRD MTgzODFGMEM5MzNDMkE4OEQ2QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKGEQPCGui3PTtkL3X9aESg/UnVpsxS3Kv74R98E1QmMmWdixnb5ETIjDBJp 2XUlRLdWgt9lhJkRf1+2OIdFw0mlAcWrzrtFm7WiY3de8uU7j1DEfHAwSlom7g9B Pw96PuHNP2hxCtmz1QXLKeagFjZaSzebLcsIpw11URv5jTFzCMsOi7pWKFLdlYl2 AvuNkIOPzwSAYzb8KeNkCS2+H3ML/PJ+JVGdcu/FgcmqGv7PSddquExCiDiuh5C2 McTGPDLQQ4tHEFqCkM7mafkOj5T2IMwFV0GssG6DF0WvJ0l0yo9BXr6f3B1vptA1 NKedxISTNTuRULVGmamqjkjlkKMCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRoMfTu 0/82u8j0wYOB8MkzwqiNajAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTEwMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWec/DANBgkqhkiG9w0BAQsFAAOCAQEAgrNmhMTygUsW1jXDTAXA J85dwDCGafKACdhHSPZabsmewebnGmJsLxXdN/Dj9vNqy0UGfGA+53PQLw0TOhyc SH+TmYecmCQLPPHuawwDtRd0uoQhBqPm6cFkaNixMX9zUJbn539/0kYIjqyub558 uT5ER5hyOEliMVYLyP1cUQupc3dyaxqXdhFmsFJwEt5RPi2y1VLvfcMkpwKpt91H fqVFLhk+PmjyT8kWnSntwr6PHyZ/ymkJ9ueCReJ9xH+PgoS73RmVFer77qk6d1lg q3Q0k4FTpwa/pCyTtxNoSl5KIjPXDTnr0eviV/4gCgq4HXIjixz/oKhnaQdUkLYm vQ== -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:55 2025 by rpki-client