This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141976.roa File: AS141976.roa (raw, json) Hash identifier: i+a/yjp/UVOwJz5YGI3ZFSaJws3JLYL39vKl+5ZlQm0= Subject key identifier: 8D:BE:00:A0:60:D4:37:92:05:6D:51:E3:EC:57:D9:38:C7:41:EF:DA Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0D990B8D5576132DC9DC02FC1CF3CDD85EC1D17C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141976.roa Signing time: Tue 11 Nov 2025 06:00:23 +0000 ROA not before: Tue 11 Nov 2025 05:55:23 +0000 ROA not after: Tue 10 Nov 2026 06:00:23 +0000 asID: 141976 IP address blocks: 103.167.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:99:0b:8d:55:76:13:2d:c9:dc:02:fc:1c:f3:cd:d8:5e:c1:d1:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 11 05:55:23 2025 GMT Not After : Nov 10 06:00:23 2026 GMT Subject: CN=8DBE00A060D43792056D51E3EC57D938C741EFDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e0:d8:2d:08:86:95:44:5d:11:7a:2c:de:e3: 6b:e1:d4:d3:98:ac:ab:fb:b1:32:ef:f9:20:55:f7: 09:56:65:3e:38:10:43:46:71:fc:e0:62:11:2d:c8: 35:cc:63:35:3b:c4:f2:d4:19:d3:74:67:e4:c3:e8: 75:d3:01:87:fd:9a:6e:5a:49:2b:c0:3a:2c:96:1d: 88:a1:f6:26:8c:69:f1:92:67:cb:dd:c6:40:b3:b7: 6f:28:56:22:e7:d8:45:8a:b6:1a:61:86:83:25:c5: 71:7b:43:99:65:c9:f9:48:f9:1f:97:9e:b4:84:b1: 66:bc:1a:e3:af:0d:3e:f5:60:23:f8:23:1e:3f:71: 3c:7b:78:fd:38:39:e3:52:79:87:56:cd:6f:de:66: 08:92:7e:1a:5b:f1:cd:4f:6a:fc:e0:ba:57:dc:11: 9a:d7:32:9d:08:c7:fc:47:e3:e7:44:16:d9:4c:ae: a5:c2:4e:ac:1c:37:95:ad:73:fe:58:a3:3d:44:3f: 03:4c:8f:82:6e:ff:36:49:3c:88:42:e1:f2:1d:a6: 69:77:ed:ab:18:87:8f:3d:d5:a8:ba:54:5c:13:29: 00:80:c7:fc:aa:fd:5d:a3:50:8f:72:dd:47:3f:10: bd:87:c0:cd:e6:6e:6d:84:a3:2d:2a:0f:ac:35:38: 44:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:BE:00:A0:60:D4:37:92:05:6D:51:E3:EC:57:D9:38:C7:41:EF:DA X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141976.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.167.114.0/24 Signature Algorithm: sha256WithRSAEncryption 72:18:2b:7b:ba:e6:03:3a:dd:e5:70:95:d8:c3:38:ee:c5:5e: e7:55:fd:75:86:cd:54:c6:85:34:c2:ea:c1:3d:f4:42:5c:e8: 05:b0:76:09:e9:cf:66:28:5e:73:ed:58:c1:3b:4e:f2:23:d2: 64:9a:96:73:e8:f8:be:6f:26:6e:7e:70:66:d6:1a:98:cd:74: 0a:26:cf:6d:24:7a:4e:fc:2b:33:eb:98:47:b3:40:32:af:1c: dd:af:13:87:14:93:08:b3:41:4a:02:33:40:93:95:ad:c1:10: 6d:b9:08:01:ea:e1:fc:fd:4f:f2:76:40:c7:65:36:99:1d:4f: 78:29:6b:3c:48:b1:7c:5c:f6:44:ed:1d:94:ab:96:c2:71:6e: 55:49:c1:1a:3d:44:54:cb:97:41:ba:25:ff:20:0d:aa:ef:54: 65:27:d3:a2:e1:a3:1d:71:84:69:01:9b:ba:6f:c6:a5:87:22: ba:74:41:67:e5:88:aa:2a:19:71:f3:e5:55:d3:23:f0:06:c6: b4:77:8a:12:60:25:d3:ac:8f:16:38:c8:39:81:74:c1:44:a5: dc:13:e2:c2:e1:25:3b:41:3e:82:5f:5d:c6:84:7c:a4:e7:ec: 37:e7:72:73:03:75:07:33:74:9f:7d:f7:74:45:d8:cc:bb:97: 95:00:5b:a0 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUDZkLjVV2Ey3J3AL8HPPN2F7B0XwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTA1NTUyM1oX DTI2MTExMDA2MDAyM1owMzExMC8GA1UEAxMoOERCRTAwQTA2MEQ0Mzc5MjA1NkQ1 MUUzRUM1N0Q5MzhDNzQxRUZEQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALjg2C0IhpVEXRF6LN7ja+HU05isq/uxMu/5IFX3CVZlPjgQQ0Zx/OBiES3I NcxjNTvE8tQZ03Rn5MPoddMBh/2ablpJK8A6LJYdiKH2Joxp8ZJny93GQLO3byhW IufYRYq2GmGGgyXFcXtDmWXJ+Uj5H5eetISxZrwa468NPvVgI/gjHj9xPHt4/Tg5 41J5h1bNb95mCJJ+GlvxzU9q/OC6V9wRmtcynQjH/Efj50QW2UyupcJOrBw3la1z /lijPUQ/A0yPgm7/Nkk8iELh8h2maXftqxiHjz3VqLpUXBMpAIDH/Kr9XaNQj3Ld Rz8QvYfAzeZubYSjLSoPrDU4RDkCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSNvgCg YNQ3kgVtUePsV9k4x0Hv2jAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTk3Ni5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGencjANBgkqhkiG9w0BAQsFAAOCAQEAchgre7rmAzrd5XCV2MM4 7sVe51X9dYbNVMaFNMLqwT30QlzoBbB2CenPZihec+1YwTtO8iPSZJqWc+j4vm8m bn5wZtYamM10CibPbSR6TvwrM+uYR7NAMq8c3a8ThxSTCLNBSgIzQJOVrcEQbbkI Aerh/P1P8nZAx2U2mR1PeClrPEixfFz2RO0dlKuWwnFuVUnBGj1EVMuXQbol/yAN qu9UZSfTouGjHXGEaQGbum/GpYciunRBZ+WIqioZcfPlVdMj8AbGtHeKEmAl06yP FjjIOYF0wUSl3BPiwuElO0E+gl9dxoR8pOfsN+dycwN1BzN0n333dEXYzLuXlQBb oA== -----END CERTIFICATE-----Generated at Wed Dec 3 13:55:11 2025 by rpki-client