This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141645.roa
File: AS141645.roa (raw, json)
Hash identifier: koFyMEbgjLmei2LQydn3Vk29ccn0qABsvT3TwwOFXMo=
Subject key identifier: C8:3E:6F:34:CE:67:71:E4:5F:90:73:BC:FF:A3:B5:B6:D5:C1:92:B9
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 5FFC2DC2C157476DB4F650DD4A9220B358E78905
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141645.roa
Signing time: Tue 11 Nov 2025 06:00:04 +0000
ROA not before: Tue 11 Nov 2025 05:55:04 +0000
ROA not after: Tue 10 Nov 2026 06:00:04 +0000
asID: 141645
IP address blocks: 103.162.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 12:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:fc:2d:c2:c1:57:47:6d:b4:f6:50:dd:4a:92:20:b3:58:e7:89:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Nov 11 05:55:04 2025 GMT
Not After : Nov 10 06:00:04 2026 GMT
Subject: CN=C83E6F34CE6771E45F9073BCFFA3B5B6D5C192B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1e:1c:fd:ea:90:d3:6d:29:30:e9:96:33:1d:
e7:c5:4b:7c:6a:00:b4:34:ec:ac:b7:38:fe:64:d2:
56:63:0a:d2:6d:4f:fc:fb:26:ff:60:d0:a9:51:9c:
35:0a:c2:95:43:b2:cd:61:02:f2:8a:21:cc:c0:dd:
d7:00:9e:0d:16:4f:dd:05:32:28:7c:a3:b8:02:47:
c8:4a:dc:8b:83:94:f3:fb:3c:b0:9f:05:82:a0:d7:
14:36:da:23:2a:08:2e:2c:dc:a8:7c:7a:e9:d3:df:
f7:cf:ab:52:80:9d:b6:a7:cd:c0:e9:cd:f7:8d:cb:
f5:f1:44:da:78:49:49:c9:5b:75:a6:89:f3:f9:63:
2c:ee:dd:a7:3b:d5:08:db:58:7e:29:c3:af:2a:95:
b3:50:35:ca:e4:4d:b6:3f:c1:f8:b2:1c:e7:bc:51:
72:da:02:58:b7:49:9b:aa:88:09:f9:49:e5:b6:d4:
90:a6:c8:3f:16:26:19:2f:d8:36:b4:fb:91:24:b0:
64:57:24:42:63:ed:5f:e1:e0:2b:c8:5d:ab:74:2c:
b9:b6:ee:58:2a:35:0f:7f:8f:d9:02:4c:db:bd:04:
26:7d:0e:25:e6:3f:71:d2:1e:34:d1:88:3b:5f:00:
3d:26:57:74:f8:b5:6b:47:62:6a:aa:3c:25:5d:c5:
c7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:3E:6F:34:CE:67:71:E4:5F:90:73:BC:FF:A3:B5:B6:D5:C1:92:B9
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141645.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.162.54.0/24
Signature Algorithm: sha256WithRSAEncryption
55:2d:7f:ac:12:0b:da:b1:f7:82:87:a0:3b:ef:06:6e:0f:86:
ff:9a:d4:13:5a:99:7a:f0:ed:80:1a:a2:8e:b9:50:9d:5b:cf:
07:28:0f:c0:fe:29:c9:6e:24:6c:d0:2b:52:f5:27:f4:72:3b:
36:3a:15:00:f7:d4:07:1b:96:bd:b7:fd:8f:4b:cb:68:0a:db:
35:a2:57:b2:ce:39:b0:c7:9c:44:bc:13:3c:27:b9:f2:af:4c:
78:b6:f9:05:a6:7a:54:64:63:8b:7b:31:aa:32:70:66:26:70:
76:9e:1f:2c:48:8b:39:bd:74:17:49:c6:d3:d9:64:71:76:60:
9f:f9:96:7f:0f:8d:07:84:d5:f8:b0:c2:68:d6:5b:73:35:08:
5b:11:4a:bd:d4:89:22:a9:12:9f:77:17:18:82:28:25:64:2e:
7d:11:61:a1:a3:57:0e:9c:2d:cb:1b:eb:18:9a:b7:63:11:91:
bd:7a:c9:6f:f1:f5:91:e6:f8:b4:80:ab:a7:45:37:48:79:cb:
85:37:af:62:8c:ea:29:cd:f6:f3:49:24:bc:9a:c3:aa:3b:ce:
49:8e:e5:cf:58:ed:09:cf:09:f0:71:45:01:90:37:2d:7f:db:
5e:a6:54:21:96:bb:16:0b:45:4c:8a:96:b2:d7:3d:95:5b:09:
7a:ce:19:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:15:24 2025 by rpki-client