This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141613.roa
File: AS141613.roa (raw, json)
Hash identifier: JryUUukv7S7JhMBzC+b0Sqw90PV9HIeg+7Srmuj5IuU=
Subject key identifier: 40:87:36:BF:F1:B0:98:66:A8:57:15:7C:33:D6:4A:A3:F9:09:00:AF
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 5B21B358BAAE9D69EFCB52DD18893CFB58137812
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141613.roa
Signing time: Wed 17 Sep 2025 07:00:00 +0000
ROA not before: Wed 17 Sep 2025 06:55:00 +0000
ROA not after: Wed 16 Sep 2026 07:00:00 +0000
asID: 141613
IP address blocks: 2001:df1:9d40::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 12:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:21:b3:58:ba:ae:9d:69:ef:cb:52:dd:18:89:3c:fb:58:13:78:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Sep 17 06:55:00 2025 GMT
Not After : Sep 16 07:00:00 2026 GMT
Subject: CN=408736BFF1B09866A857157C33D64AA3F90900AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:91:e4:26:75:61:ab:a5:00:3f:bf:61:ad:c6:
94:c1:eb:6d:4a:19:ea:9d:28:b0:05:37:02:fe:3e:
e5:fc:58:15:14:ae:13:2f:cd:05:a1:ae:0f:24:5a:
99:31:1d:c2:99:06:3b:01:ad:db:40:39:52:32:7b:
8c:90:a5:cc:58:ba:9c:18:52:cd:c0:2d:7e:43:da:
aa:dc:72:07:aa:ab:e2:73:9e:b2:c4:07:93:2a:02:
c2:6c:d6:fa:75:8f:c9:4f:3c:e0:d2:35:a4:f4:26:
59:19:ff:aa:5b:ba:a1:e1:f2:04:d3:00:70:d3:0c:
2e:47:2e:ab:21:ee:84:99:b6:45:4a:1f:ad:28:4a:
d4:96:79:87:21:54:d6:19:db:d6:73:b5:db:b7:4c:
8e:3c:25:80:03:5f:36:af:03:1d:0c:7b:32:21:34:
5c:21:36:66:35:12:0f:e9:62:b8:62:60:d4:4a:7d:
e6:61:31:1f:23:78:d0:5c:24:77:7c:68:80:46:5e:
12:94:ba:07:ce:1d:0b:ad:e7:c9:57:85:76:06:a2:
7a:40:70:5d:5a:4c:c2:3d:f1:31:e4:5b:4f:6b:03:
77:3d:1f:6a:80:c1:0b:d6:a1:89:99:50:1b:0b:ea:
ac:e7:ac:06:d2:e1:de:e6:85:67:58:e9:60:e3:bd:
8f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:87:36:BF:F1:B0:98:66:A8:57:15:7C:33:D6:4A:A3:F9:09:00:AF
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141613.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df1:9d40::/48
Signature Algorithm: sha256WithRSAEncryption
26:90:b7:ac:62:1a:36:68:df:f8:51:f8:5a:39:8b:26:65:91:
d9:de:50:6d:1f:f9:7e:e0:c4:32:9e:6f:3b:60:d5:7a:44:60:
1d:10:0a:e4:4b:0d:45:e8:7c:a3:32:bf:52:f1:ed:9b:c4:67:
77:68:80:d1:0b:9f:24:0f:62:1c:4b:8e:ee:79:03:67:4d:a9:
e3:56:f8:d7:67:f8:e2:52:61:4a:9c:ae:40:42:39:9d:34:a9:
2e:1a:4c:56:5e:40:93:5b:e5:47:b9:6a:8f:eb:de:24:02:0e:
41:a2:c9:60:f6:b8:34:42:f6:05:06:0b:4c:d1:bc:f0:03:6e:
41:d7:29:21:8b:e0:b5:a2:19:d6:c2:3b:a6:2f:29:b6:6c:6e:
aa:90:28:ab:47:6f:a7:a5:80:b2:8c:ba:76:51:a7:47:d9:74:
ad:50:04:4f:f7:c4:90:9b:9e:e7:2d:9b:dc:92:9a:96:99:ad:
ce:35:93:08:7f:03:0b:6e:bd:bb:61:8d:df:11:0b:c4:b4:aa:
6c:4c:a2:95:ef:8c:d4:3f:75:db:43:5b:fb:bb:ae:b5:4f:fe:
8a:a7:d7:69:76:22:51:43:62:4d:de:14:0e:b0:b7:e6:c0:cf:
dd:d5:8d:47:2e:b7:d1:82:0d:ee:c6:c7:38:82:b1:4a:db:69:
1c:93:db:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:15:53 2025 by rpki-client