This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142196.roa File: AS142196.roa (raw, json) Hash identifier: 3SY9Itm9sChpL8HRnaQnhNX568qW23O3QfY1/0tkD38= Subject key identifier: 8D:07:5C:D2:8B:20:4C:85:73:AF:38:1A:BC:77:5A:64:C8:29:76:BD Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1B114FF5B979A8FEF60B16A5ED9D15687814B84D Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142196.roa Signing time: Thu 15 Jan 2026 07:35:48 +0000 ROA not before: Thu 15 Jan 2026 07:30:48 +0000 ROA not after: Thu 14 Jan 2027 07:35:48 +0000 asID: 142196 IP address blocks: 2001:df6:7c40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 13:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:11:4f:f5:b9:79:a8:fe:f6:0b:16:a5:ed:9d:15:68:78:14:b8:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 15 07:30:48 2026 GMT Not After : Jan 14 07:35:48 2027 GMT Subject: CN=8D075CD28B204C8573AF381ABC775A64C82976BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:75:79:f6:0c:f4:a8:8d:45:d2:2f:bd:da:14: 90:e6:dd:1b:4c:b7:da:0c:96:10:1b:41:6b:39:93: a1:c2:9e:89:34:30:c8:8a:e7:38:94:56:04:3e:30: a2:44:71:68:5f:50:8b:39:47:38:5c:6c:8e:e9:e7: 53:4b:cc:e5:b5:00:c5:e0:c9:b4:fb:33:61:73:81: f2:9f:5c:7b:7f:d8:3c:cb:51:ed:c3:5d:8f:e8:01: 25:a5:00:2e:f2:e5:b1:0f:99:0c:6f:b4:18:f0:4c: b5:b6:4f:4b:05:7e:7c:bd:88:3a:ad:27:96:19:fd: 59:c9:6e:7f:f9:91:9f:78:4b:dd:94:3c:f1:03:21: 96:a7:e0:b9:48:c4:0c:c5:8d:ce:ec:b5:dc:4d:26: e2:eb:87:9c:81:10:75:91:45:9f:24:71:b7:a7:71: 02:96:71:71:18:c9:7a:3f:7a:03:23:1a:aa:cb:3d: 2b:c3:fb:4c:03:c6:bc:98:a5:47:84:c8:b4:17:67: 31:bd:25:e8:e4:c6:7b:63:60:0c:d9:8c:6d:19:76: 15:3c:20:c6:d1:b7:e2:c4:ae:b5:4f:e0:5c:13:a7: 0a:23:8f:f9:eb:c8:df:aa:9d:bb:5b:04:ef:a2:fd: 42:91:06:de:05:3b:b4:d1:6e:41:03:22:f2:73:62: 5e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:07:5C:D2:8B:20:4C:85:73:AF:38:1A:BC:77:5A:64:C8:29:76:BD X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142196.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:7c40::/48 Signature Algorithm: sha256WithRSAEncryption 13:9b:c1:56:d5:73:98:c5:ff:86:92:8b:e9:27:f9:ef:a3:33: 2d:2f:6d:5c:33:6c:5e:40:3f:73:32:c3:33:74:d4:92:75:1d: 69:44:a8:e4:83:74:d2:11:4e:a6:78:77:69:07:b4:e8:42:c4: 2f:7d:9e:cc:86:14:5a:d5:2c:0d:54:81:b5:a5:8e:5c:ed:01: 13:5d:ea:2e:00:85:9f:e1:3d:57:d9:6c:62:0f:f7:5f:5d:80: d6:f2:37:06:96:fb:25:04:c3:61:71:0a:eb:09:ad:24:0e:09: fa:79:09:86:de:5a:55:93:87:a8:90:41:5f:63:30:14:f3:10: 68:56:a0:2d:92:59:dd:5c:31:d6:7e:35:56:1f:27:0f:b0:7d: 10:29:59:4a:d1:17:f8:9c:60:e7:7c:4c:98:60:28:57:66:8e: 66:8b:82:5b:35:72:1d:79:26:73:69:45:14:d4:2f:1b:33:92: 48:2f:a5:25:1a:9b:fd:13:9d:7f:b5:34:4d:bc:8e:f5:e9:1c: 26:88:5b:23:92:47:ce:cf:cd:62:68:1f:88:76:26:b1:0f:c9: 3a:0e:ef:5b:bb:ba:3a:fa:b9:89:f5:08:48:48:a9:ea:bd:d2: 51:c7:1c:3b:e5:73:f8:f6:f4:21:44:71:e5:3d:b0:be:39:50: 48:d8:3c:58 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUGxFP9bl5qP72Cxal7Z0VaHgUuE0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDExNTA3MzA0OFoX DTI3MDExNDA3MzU0OFowMzExMC8GA1UEAxMoOEQwNzVDRDI4QjIwNEM4NTczQUYz ODFBQkM3NzVBNjRDODI5NzZCRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANR1efYM9KiNRdIvvdoUkObdG0y32gyWEBtBazmTocKeiTQwyIrnOJRWBD4w okRxaF9QizlHOFxsjunnU0vM5bUAxeDJtPszYXOB8p9ce3/YPMtR7cNdj+gBJaUA LvLlsQ+ZDG+0GPBMtbZPSwV+fL2IOq0nlhn9Wcluf/mRn3hL3ZQ88QMhlqfguUjE DMWNzuy13E0m4uuHnIEQdZFFnyRxt6dxApZxcRjJej96AyMaqss9K8P7TAPGvJil R4TItBdnMb0l6OTGe2NgDNmMbRl2FTwgxtG34sSutU/gXBOnCiOP+evI36qdu1sE 76L9QpEG3gU7tNFuQQMi8nNiXhECAwEAAaOCAdMwggHPMB0GA1UdDgQWBBSNB1zS iyBMhXOvOBq8d1pkyCl2vTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjE5Ni5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfZ8QDANBgkqhkiG9w0BAQsFAAOCAQEAE5vBVtVzmMX/hpKL 6Sf576MzLS9tXDNsXkA/czLDM3TUknUdaUSo5IN00hFOpnh3aQe06ELEL32ezIYU WtUsDVSBtaWOXO0BE13qLgCFn+E9V9lsYg/3X12A1vI3Bpb7JQTDYXEK6wmtJA4J +nkJht5aVZOHqJBBX2MwFPMQaFagLZJZ3Vwx1n41Vh8nD7B9EClZStEX+Jxg53xM mGAoV2aOZouCWzVyHXkmc2lFFNQvGzOSSC+lJRqb/ROdf7U0TbyO9ekcJohbI5JH zs/NYmgfiHYmsQ/JOg7vW7u6Ovq5ifUISEip6r3SUcccO+Vz+Pb0IURx5T2wvjlQ SNg8WA== -----END CERTIFICATE-----Generated at Wed Jan 21 14:30:06 2026 by rpki-client