This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142307.roa File: AS142307.roa (raw, json) Hash identifier: 2AGTtaZ1zLnZK7kvWeb+82CeiWd6YO1TMPdqpQNzyyc= Subject key identifier: 8C:10:45:29:6A:DA:57:61:64:A1:18:8D:E8:0E:8B:DA:31:7A:67:15 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 765BF22C67681D37472725EFA7AF9C9C69480C8E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142307.roa Signing time: Tue 11 Nov 2025 06:00:14 +0000 ROA not before: Tue 11 Nov 2025 05:55:14 +0000 ROA not after: Tue 10 Nov 2026 06:00:14 +0000 asID: 142307 IP address blocks: 103.168.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:5b:f2:2c:67:68:1d:37:47:27:25:ef:a7:af:9c:9c:69:48:0c:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 11 05:55:14 2025 GMT Not After : Nov 10 06:00:14 2026 GMT Subject: CN=8C1045296ADA576164A1188DE80E8BDA317A6715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6a:70:8c:c2:3e:b3:ce:9c:7b:f6:af:8e:83: 10:2c:73:3e:ae:90:c9:fd:2e:7c:28:3b:0e:46:d0: e6:e1:df:b8:5f:02:55:92:13:9a:d4:82:ec:9a:64: 94:e0:7c:80:ec:2b:fe:ba:b0:95:96:1e:60:02:25: a4:a0:6d:6a:11:b1:bd:de:01:3f:6d:81:8f:24:74: 2c:14:43:5e:6f:ae:45:35:f3:4f:6a:bb:24:21:ea: 77:7b:4b:f9:bf:15:6f:81:37:ff:fd:7a:07:a1:88: fe:00:e2:92:82:bd:47:33:ca:19:17:2b:86:58:5a: d2:40:c8:8f:aa:34:2d:af:db:8e:53:c6:15:45:56: 4b:45:9e:99:02:cf:5a:8b:d1:c1:97:44:fc:58:c2: b4:2e:fb:d3:29:48:32:40:28:db:a5:10:83:f7:c4: 99:43:0e:b8:84:e9:db:5e:f3:ca:3f:75:1c:d9:3c: 64:25:ec:86:22:60:29:8f:07:15:54:e7:29:70:bf: 85:cd:eb:a8:87:7e:bf:c9:5c:d5:54:ae:6e:7d:28: 47:d0:e6:97:ad:c5:e4:61:2b:5d:e3:4a:3a:09:9d: 79:e4:cd:33:b1:45:6f:1b:dd:52:8a:c7:7c:02:96: 69:9e:f6:4b:76:b8:12:74:ec:60:0a:dc:7f:3c:71: c7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:10:45:29:6A:DA:57:61:64:A1:18:8D:E8:0E:8B:DA:31:7A:67:15 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142307.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.44.0/24 Signature Algorithm: sha256WithRSAEncryption 10:42:39:26:f5:dd:a2:a9:cd:4f:db:fb:dc:6f:b6:b4:fd:fa: a7:bd:44:88:5e:99:b6:33:8e:80:ae:ee:da:9c:85:41:35:0e: 52:66:99:c2:81:1d:8d:8c:cb:e8:3a:b0:67:93:04:5d:aa:0c: e7:c6:e7:6c:53:04:68:de:a3:92:60:ba:a0:23:82:6b:d2:e0: cc:9c:eb:8c:e7:0a:cc:3e:1f:a9:05:44:76:2a:44:b6:a8:34: ba:e3:7d:ef:77:c7:03:49:6b:65:2f:be:4f:8c:e4:64:1f:17: bc:3c:92:34:4f:78:9a:1a:38:b8:46:6c:18:3e:2b:1d:5f:33: ec:a4:85:70:28:8f:f3:77:ec:89:34:5b:9f:cc:9e:65:65:c7: 30:61:bc:d9:d5:da:87:1f:1e:ec:ce:03:24:c1:ed:2a:07:45: 2e:2f:84:b5:da:b9:17:1a:c6:9e:e2:43:64:5f:07:7d:fa:44: a6:7f:25:8d:ec:59:20:96:5a:04:b7:67:f2:f1:c3:0b:d5:2c: d1:93:cf:7c:5d:6c:13:c2:ef:5a:9e:14:cb:20:70:f4:2d:a4: 35:53:b4:ca:7b:87:77:11:d1:9a:9b:96:eb:cd:80:a2:4f:ec: 5a:74:a3:f9:8c:94:78:c5:3f:f8:69:3e:a5:86:ed:3e:70:a6: f2:12:7d:08 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUdlvyLGdoHTdHJyXvp6+cnGlIDI4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTA1NTUxNFoX DTI2MTExMDA2MDAxNFowMzExMC8GA1UEAxMoOEMxMDQ1Mjk2QURBNTc2MTY0QTEx ODhERTgwRThCREEzMTdBNjcxNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMlqcIzCPrPOnHv2r46DECxzPq6Qyf0ufCg7DkbQ5uHfuF8CVZITmtSC7Jpk lOB8gOwr/rqwlZYeYAIlpKBtahGxvd4BP22BjyR0LBRDXm+uRTXzT2q7JCHqd3tL +b8Vb4E3//16B6GI/gDikoK9RzPKGRcrhlha0kDIj6o0La/bjlPGFUVWS0WemQLP WovRwZdE/FjCtC770ylIMkAo26UQg/fEmUMOuITp217zyj91HNk8ZCXshiJgKY8H FVTnKXC/hc3rqId+v8lc1VSubn0oR9Dml63F5GErXeNKOgmdeeTNM7FFbxvdUorH fAKWaZ72S3a4EnTsYArcfzxxx9cCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSMEEUp atpXYWShGI3oDovaMXpnFTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjMwNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGeoLDANBgkqhkiG9w0BAQsFAAOCAQEAEEI5JvXdoqnNT9v73G+2 tP36p71EiF6ZtjOOgK7u2pyFQTUOUmaZwoEdjYzL6DqwZ5MEXaoM58bnbFMEaN6j kmC6oCOCa9LgzJzrjOcKzD4fqQVEdipEtqg0uuN973fHA0lrZS++T4zkZB8XvDyS NE94mho4uEZsGD4rHV8z7KSFcCiP83fsiTRbn8yeZWXHMGG82dXahx8e7M4DJMHt KgdFLi+Etdq5FxrGnuJDZF8HffpEpn8ljexZIJZaBLdn8vHDC9Us0ZPPfF1sE8Lv Wp4UyyBw9C2kNVO0ynuHdxHRmpuW682Aok/sWnSj+YyUeMU/+Gk+pYbtPnCm8hJ9 CA== -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:52 2025 by rpki-client