This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141646.roa File: AS141646.roa (raw, json) Hash identifier: LaAyhMzyef8bmEvxgUNUmp4oQLcWioVBqDaRwu7kubM= Subject key identifier: 1B:57:CD:FF:1D:59:51:59:04:2F:AD:D2:F5:BD:5F:0E:0D:0F:8E:1B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 106D2C2A5C9B70153A8E75C691982A33261F2247 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141646.roa Signing time: Mon 08 Dec 2025 09:00:00 +0000 ROA not before: Mon 08 Dec 2025 08:55:00 +0000 ROA not after: Mon 07 Dec 2026 09:00:00 +0000 asID: 141646 IP address blocks: 103.162.72.0/24 maxlen: 24 103.234.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 03:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:6d:2c:2a:5c:9b:70:15:3a:8e:75:c6:91:98:2a:33:26:1f:22:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 8 08:55:00 2025 GMT Not After : Dec 7 09:00:00 2026 GMT Subject: CN=1B57CDFF1D595159042FADD2F5BD5F0E0D0F8E1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c1:30:de:83:4f:72:0a:bd:3e:bb:50:0b:2e: 54:43:5f:4f:b1:42:55:a8:4a:33:04:f2:ab:ee:9b: 3a:fd:a4:59:d3:37:87:8f:f8:46:4c:7b:73:b7:66: e4:be:91:50:d9:ba:1c:b6:fd:b0:a4:ff:fd:08:ff: 0d:9f:a6:48:3d:85:65:8e:34:fa:53:96:e8:0d:5f: 69:7d:43:96:65:20:da:46:1e:7a:15:3e:27:79:fe: e9:aa:3a:9f:eb:fa:58:e0:53:cf:20:2e:ee:d6:c6: f6:ad:94:93:5c:3c:aa:2f:7a:61:0e:91:aa:7d:65: 99:c8:dd:79:5a:be:f2:f1:f6:dd:82:3a:97:2a:2b: ae:c6:ed:1a:9a:8b:a7:62:4b:3c:17:c7:67:9b:9d: ee:ca:e4:4e:64:8d:d0:eb:10:c8:d9:f4:c4:59:bd: 20:df:f5:19:ea:b8:aa:38:9f:e4:83:a8:34:e3:b4: 62:7b:d2:49:8f:e3:7b:97:9d:f1:71:52:a1:19:64: 7a:a0:2b:a6:f4:8c:e3:d9:36:20:9d:4f:53:98:5b: 65:f3:d7:ae:b0:df:4a:b4:0c:22:98:2d:39:3f:6c: e5:08:ce:69:db:ca:f6:a1:a4:09:12:e2:04:84:f4: 4a:a4:ae:d2:bd:fa:5d:52:b6:da:64:d8:aa:58:5e: 06:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:57:CD:FF:1D:59:51:59:04:2F:AD:D2:F5:BD:5F:0E:0D:0F:8E:1B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141646.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.72.0/24 103.234.95.0/24 Signature Algorithm: sha256WithRSAEncryption 38:23:85:77:fb:ef:88:9a:46:f7:d4:96:d6:ba:f7:bf:b7:fb: 3b:4f:46:08:b4:fd:e4:49:c2:af:6f:0f:ba:75:f5:72:f8:a7: 68:39:13:95:66:74:00:4b:96:53:8a:7c:04:9d:5e:0a:ef:cf: fd:34:30:6b:8d:18:db:b1:65:8c:05:b5:69:16:dd:74:a2:30: 15:ff:a8:69:bc:b8:49:b8:37:9a:6f:f5:3f:72:cd:30:e9:7f: 09:5a:ff:d7:6a:8a:d2:7d:07:0b:72:44:ef:86:40:ef:28:3b: 0d:e4:a6:a6:83:f9:a6:75:39:f5:9a:6a:00:e6:d3:ec:be:47: 00:44:59:0e:77:ee:48:73:78:4d:39:b0:6b:2b:61:bf:4a:e3: 12:73:3a:cb:e4:d5:4c:d1:d8:02:8f:42:83:fe:48:2d:66:b2: cd:39:ee:de:a2:02:cd:d1:15:08:40:af:d1:ea:c2:67:e5:90: 2a:00:da:41:44:b2:67:5d:d2:35:c4:d2:35:e0:6c:a0:31:95: da:2d:3b:91:9c:72:91:7c:ba:de:47:82:c2:ab:d3:a4:4e:3b: 19:5b:4c:08:58:b2:c5:52:45:26:4e:9c:17:d9:31:89:62:c7: de:9e:fd:3f:45:9c:0b:05:c0:cf:2c:d5:4f:23:c4:f1:a4:84: 32:15:36:b6 -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUEG0sKlybcBU6jnXGkZgqMyYfIkcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIwODA4NTUwMFoX DTI2MTIwNzA5MDAwMFowMzExMC8GA1UEAxMoMUI1N0NERkYxRDU5NTE1OTA0MkZB REQyRjVCRDVGMEUwRDBGOEUxQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKnBMN6DT3IKvT67UAsuVENfT7FCVahKMwTyq+6bOv2kWdM3h4/4Rkx7c7dm 5L6RUNm6HLb9sKT//Qj/DZ+mSD2FZY40+lOW6A1faX1DlmUg2kYeehU+J3n+6ao6 n+v6WOBTzyAu7tbG9q2Uk1w8qi96YQ6Rqn1lmcjdeVq+8vH23YI6lyorrsbtGpqL p2JLPBfHZ5ud7srkTmSN0OsQyNn0xFm9IN/1Geq4qjif5IOoNOO0YnvSSY/je5ed 8XFSoRlkeqArpvSM49k2IJ1PU5hbZfPXrrDfSrQMIpgtOT9s5QjOadvK9qGkCRLi BIT0SqSu0r36XVK22mTYqlheBlUCAwEAAaOCAdYwggHSMB0GA1UdDgQWBBQbV83/ HVlRWQQvrdL1vV8ODQ+OGzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTY0Ni5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAGeiSAMEAGfqXzANBgkqhkiG9w0BAQsFAAOCAQEAOCOFd/vviJpG 99SW1rr3v7f7O09GCLT95EnCr28PunX1cvinaDkTlWZ0AEuWU4p8BJ1eCu/P/TQw a40Y27FljAW1aRbddKIwFf+oaby4Sbg3mm/1P3LNMOl/CVr/12qK0n0HC3JE74ZA 7yg7DeSmpoP5pnU59ZpqAObT7L5HAERZDnfuSHN4TTmwaythv0rjEnM6y+TVTNHY Ao9Cg/5ILWayzTnu3qICzdEVCECv0erCZ+WQKgDaQUSyZ13SNcTSNeBsoDGV2i07 kZxykXy63keCwqvTpE47GVtMCFiyxVJFJk6cF9kxiWLH3p79P0WcCwXAzyzVTyPE 8aSEMhU2tg== -----END CERTIFICATE-----Generated at Fri Dec 19 06:39:12 2025 by rpki-client