This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141914.roa
File: AS141914.roa (raw, json)
Hash identifier: Aa67tiYtOTBlPabOuz1r1bTIyjWsd5/yGPTgGFels30=
Subject key identifier: 4A:D7:EF:F4:16:5D:A4:12:44:6C:C3:B5:4E:ED:60:92:62:63:4A:86
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 2E3A1543BB5F08E9A77CC1C3387402921B4F685F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141914.roa
Signing time: Thu 06 Nov 2025 04:19:47 +0000
ROA not before: Thu 06 Nov 2025 04:14:47 +0000
ROA not after: Thu 05 Nov 2026 04:19:47 +0000
asID: 141914
IP address blocks: 103.165.0.0/23 maxlen: 24
103.165.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 12:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:3a:15:43:bb:5f:08:e9:a7:7c:c1:c3:38:74:02:92:1b:4f:68:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Nov 6 04:14:47 2025 GMT
Not After : Nov 5 04:19:47 2026 GMT
Subject: CN=4AD7EFF4165DA412446CC3B54EED609262634A86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:56:73:fa:82:0f:eb:8d:1c:b0:c6:c4:70:4d:
5f:98:8e:1d:02:f8:f8:2c:51:1b:90:3f:04:f7:ff:
36:17:75:d3:dc:31:0c:f6:21:a2:9d:95:4c:66:57:
4f:1e:3f:0c:ba:70:0d:f5:5c:37:1e:74:d2:09:cd:
66:0c:d0:7b:0a:18:91:12:7d:3c:42:61:0d:f8:11:
46:69:f4:24:8d:9d:ee:08:9f:ae:0e:4c:5b:07:5f:
21:bd:d1:71:8a:52:27:3b:f9:2d:e3:f0:89:2b:b6:
03:d4:eb:c1:f1:b3:6d:d2:3e:50:86:41:25:85:fb:
72:31:4d:9a:f5:b4:86:23:a1:d9:89:03:29:1c:d7:
72:f2:77:a9:55:69:86:48:e1:36:f1:b4:67:3e:2d:
24:a6:51:b9:d6:6e:38:34:f4:7c:9e:12:31:b0:6d:
14:02:93:e0:0f:f1:fc:a5:51:5e:fd:18:e8:0e:48:
a2:ab:18:8a:a8:34:6d:0f:dc:be:c8:6e:2f:56:4f:
6a:14:78:09:c4:fa:fb:a1:7b:3b:7e:04:52:fc:fc:
93:46:34:58:d9:cd:fd:ce:9a:47:da:66:39:f3:7d:
28:7b:53:e8:b7:01:b9:f9:3d:7c:db:43:1f:2d:3d:
58:54:e7:b6:0c:91:da:e7:87:aa:66:c7:6a:b2:69:
23:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D7:EF:F4:16:5D:A4:12:44:6C:C3:B5:4E:ED:60:92:62:63:4A:86
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141914.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.165.0.0/23
Signature Algorithm: sha256WithRSAEncryption
86:06:43:1d:0a:92:83:51:37:06:c6:e6:63:9c:19:64:13:7d:
e9:fc:38:92:70:1c:e1:59:c1:1e:36:21:55:e5:21:cf:f3:7b:
0c:11:2d:ef:f7:9d:0a:f5:3b:64:df:5d:b9:6f:15:cc:53:b3:
be:8c:0d:6f:ba:2d:9d:24:22:26:f3:5f:44:d6:9d:b5:1f:e8:
cc:59:9b:a0:44:ab:5e:a4:e6:4f:68:e4:5f:fe:d4:0a:c6:e1:
1b:07:59:bf:7f:67:b0:62:86:f1:dd:8d:87:47:8a:07:4a:a1:
8c:0a:50:f9:c7:fa:a8:d5:d9:c4:fa:49:db:4f:22:83:ca:39:
7e:c3:35:8f:1e:07:14:3c:21:7b:be:9a:3e:a0:8d:d1:09:c4:
c5:bc:76:b9:fb:35:10:37:ed:93:be:0b:70:32:66:2c:09:bf:
1a:20:f0:87:59:67:e2:9d:59:9e:78:b2:1c:e7:56:a8:3e:cf:
42:49:f0:a2:49:14:a9:ec:28:b9:4b:9d:9b:6c:be:3a:ca:8d:
24:f1:3c:81:09:09:2c:61:b0:1d:96:02:72:58:70:e1:a4:ce:
5e:25:4d:fe:c3:be:0e:6b:8b:67:93:5d:f0:e0:d4:ba:33:60:
6e:e5:a2:72:97:6b:d5:43:d1:b0:73:cc:8b:2e:2a:2f:57:c4:
72:36:d4:06
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIULjoVQ7tfCOmnfMHDOHQCkhtPaF8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTEwNjA0MTQ0N1oX
DTI2MTEwNTA0MTk0N1owMzExMC8GA1UEAxMoNEFEN0VGRjQxNjVEQTQxMjQ0NkND
M0I1NEVFRDYwOTI2MjYzNEE4NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANJWc/qCD+uNHLDGxHBNX5iOHQL4+CxRG5A/BPf/Nhd109wxDPYhop2VTGZX
Tx4/DLpwDfVcNx500gnNZgzQewoYkRJ9PEJhDfgRRmn0JI2d7gifrg5MWwdfIb3R
cYpSJzv5LePwiSu2A9TrwfGzbdI+UIZBJYX7cjFNmvW0hiOh2YkDKRzXcvJ3qVVp
hkjhNvG0Zz4tJKZRudZuODT0fJ4SMbBtFAKT4A/x/KVRXv0Y6A5IoqsYiqg0bQ/c
vshuL1ZPahR4CcT6+6F7O34EUvz8k0Y0WNnN/c6aR9pmOfN9KHtT6LcBufk9fNtD
Hy09WFTntgyR2ueHqmbHarJpIwMCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRK1+/0
Fl2kEkRsw7VO7WCSYmNKhjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTkxNC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWelADANBgkqhkiG9w0BAQsFAAOCAQEAhgZDHQqSg1E3BsbmY5wZ
ZBN96fw4knAc4VnBHjYhVeUhz/N7DBEt7/edCvU7ZN9duW8VzFOzvowNb7otnSQi
JvNfRNadtR/ozFmboESrXqTmT2jkX/7UCsbhGwdZv39nsGKG8d2Nh0eKB0qhjApQ
+cf6qNXZxPpJ208ig8o5fsM1jx4HFDwhe76aPqCN0QnExbx2ufs1EDftk74LcDJm
LAm/GiDwh1ln4p1ZnniyHOdWqD7PQknwokkUqewouUudm2y+OsqNJPE8gQkJLGGw
HZYCclhw4aTOXiVN/sO+DmuLZ5Nd8ODUujNgbuWicpdr1UPRsHPMiy4qL1fEcjbU
Bg==
-----END CERTIFICATE-----
Generated at Wed Dec 3 13:16:06 2025 by rpki-client