This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141644.roa
File: AS141644.roa (raw, json)
Hash identifier: Gby5dQLj/cg3b7kUCGW6VxPuOwbL22Nt3if/yM7ndKk=
Subject key identifier: 3E:3B:FA:F0:31:61:59:E4:A0:76:AF:04:31:1A:A8:03:97:C4:A3:DA
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 7502F2606B463E2F7495A3A8B797D6B28C3C636D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141644.roa
Signing time: Tue 11 Nov 2025 06:00:08 +0000
ROA not before: Tue 11 Nov 2025 05:55:08 +0000
ROA not after: Tue 10 Nov 2026 06:00:08 +0000
asID: 141644
IP address blocks: 103.162.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 12:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:02:f2:60:6b:46:3e:2f:74:95:a3:a8:b7:97:d6:b2:8c:3c:63:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Nov 11 05:55:08 2025 GMT
Not After : Nov 10 06:00:08 2026 GMT
Subject: CN=3E3BFAF0316159E4A076AF04311AA80397C4A3DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bd:17:56:32:4e:54:ee:f6:b8:c9:47:5f:7e:
16:e7:27:49:82:4d:8b:a8:86:e7:b4:d6:ac:80:d9:
2a:19:3f:d5:e8:b3:a7:33:c7:8e:95:2a:38:f9:d7:
20:5d:3b:80:e6:fe:1d:e7:87:6e:5c:7e:90:ae:a9:
f1:6e:b2:29:d9:d7:b6:a1:a0:1c:6f:51:85:4b:e0:
da:ef:b7:26:3d:a5:5d:f3:c5:c7:e0:1a:8e:5d:f3:
f4:cf:bf:d9:b1:9d:a3:e2:53:f7:fe:13:4e:5c:90:
c1:cc:58:4a:74:54:ae:ba:5b:8a:fe:80:05:b1:dc:
fb:70:a6:b2:ef:24:da:45:c4:c8:94:76:88:49:bd:
85:04:20:22:dc:34:d9:29:68:3f:5f:ec:e2:ed:76:
a2:73:e6:b9:70:fc:9a:6a:52:5c:a1:14:5b:6d:78:
d7:c1:6b:13:55:da:f5:42:34:20:fc:dd:9c:cf:c5:
dd:c1:b2:cb:08:22:56:51:0b:45:ca:17:12:5f:52:
99:17:3f:c1:77:70:4a:68:8c:a8:40:d4:44:c8:80:
ab:88:8e:b3:49:29:25:b3:36:21:50:f3:65:94:b8:
e5:1a:bd:76:64:a6:43:fd:33:e7:27:be:df:f3:72:
b0:a1:2f:4e:11:1e:8d:df:03:28:a2:fa:4f:4a:6d:
fd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3B:FA:F0:31:61:59:E4:A0:76:AF:04:31:1A:A8:03:97:C4:A3:DA
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141644.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.162.69.0/24
Signature Algorithm: sha256WithRSAEncryption
48:49:a1:25:94:b6:9e:3d:f1:2b:66:2f:b3:7d:31:a6:b1:a0:
c9:1c:3d:34:59:8a:8d:8b:fb:33:4b:09:b9:34:44:9e:1f:bc:
a3:88:cc:51:b2:a3:d1:f3:2f:4d:6a:85:6b:47:d6:c9:60:15:
5d:fe:53:9f:d0:98:4d:1b:d0:aa:e2:c2:e8:df:ac:d3:cd:34:
00:a9:49:be:a9:83:d8:a1:f0:fb:61:4a:0f:ba:a8:64:da:55:
c2:15:98:28:11:98:2f:e5:74:f5:61:b0:3c:0c:90:e4:10:3b:
fc:15:61:bf:f9:a1:47:b2:33:b6:d9:a7:ec:5d:22:c3:c1:34:
38:da:d8:22:55:00:19:d0:40:98:c2:7a:1d:b1:58:f5:97:6c:
7a:08:38:8f:82:e0:22:e0:1d:cc:fe:a1:f7:c9:42:03:ea:6c:
37:8d:0e:e5:cb:d2:e0:fa:7c:48:be:af:de:7f:c8:b0:13:f1:
05:ca:52:02:d7:cc:b7:d6:41:25:83:c1:12:73:ed:52:43:0a:
c4:1a:84:94:f5:c5:90:44:a8:70:97:0e:54:7c:b9:b2:eb:30:
39:f4:4c:9c:c8:a5:81:1e:eb:97:f1:97:e4:07:17:2c:d6:71:
f0:6e:34:75:c7:fb:ea:99:79:ee:59:3d:41:b1:bb:48:61:67:
a5:5d:fb:5c
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUdQLyYGtGPi90laOot5fWsow8Y20wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTA1NTUwOFoX
DTI2MTExMDA2MDAwOFowMzExMC8GA1UEAxMoM0UzQkZBRjAzMTYxNTlFNEEwNzZB
RjA0MzExQUE4MDM5N0M0QTNEQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALG9F1YyTlTu9rjJR19+FucnSYJNi6iG57TWrIDZKhk/1eizpzPHjpUqOPnX
IF07gOb+HeeHblx+kK6p8W6yKdnXtqGgHG9RhUvg2u+3Jj2lXfPFx+Aajl3z9M+/
2bGdo+JT9/4TTlyQwcxYSnRUrrpbiv6ABbHc+3Cmsu8k2kXEyJR2iEm9hQQgItw0
2SloP1/s4u12onPmuXD8mmpSXKEUW21418FrE1Xa9UI0IPzdnM/F3cGyywgiVlEL
RcoXEl9SmRc/wXdwSmiMqEDURMiAq4iOs0kpJbM2IVDzZZS45Rq9dmSmQ/0z5ye+
3/NysKEvThEejd8DKKL6T0pt/QsCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQ+O/rw
MWFZ5KB2rwQxGqgDl8Sj2jAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTY0NC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGeiRTANBgkqhkiG9w0BAQsFAAOCAQEASEmhJZS2nj3xK2Yvs30x
prGgyRw9NFmKjYv7M0sJuTREnh+8o4jMUbKj0fMvTWqFa0fWyWAVXf5Tn9CYTRvQ
quLC6N+s0800AKlJvqmD2KHw+2FKD7qoZNpVwhWYKBGYL+V09WGwPAyQ5BA7/BVh
v/mhR7Izttmn7F0iw8E0ONrYIlUAGdBAmMJ6HbFY9Zdsegg4j4LgIuAdzP6h98lC
A+psN40O5cvS4Pp8SL6v3n/IsBPxBcpSAtfMt9ZBJYPBEnPtUkMKxBqElPXFkESo
cJcOVHy5suswOfRMnMilgR7rl/GX5AcXLNZx8G40dcf76pl57lk9QbG7SGFnpV37
XA==
-----END CERTIFICATE-----
Generated at Wed Dec 3 13:15:27 2025 by rpki-client