This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142324.roa File: AS142324.roa (raw, json) Hash identifier: +wk/klIDgMr8HRXs8upRemjEqQg8GwtzygW4yANdmO8= Subject key identifier: 0F:E1:A1:CB:10:A7:69:A0:90:4A:D4:42:6E:C8:A6:25:87:CB:DF:14 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2137FE5301B29ABF06130DF8CF7B336F059602BB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142324.roa Signing time: Tue 18 Nov 2025 04:00:00 +0000 ROA not before: Tue 18 Nov 2025 03:55:00 +0000 ROA not after: Tue 17 Nov 2026 04:00:00 +0000 asID: 142324 IP address blocks: 103.168.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:37:fe:53:01:b2:9a:bf:06:13:0d:f8:cf:7b:33:6f:05:96:02:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 18 03:55:00 2025 GMT Not After : Nov 17 04:00:00 2026 GMT Subject: CN=0FE1A1CB10A769A0904AD4426EC8A62587CBDF14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:23:c4:96:99:2e:ca:43:18:be:c4:f0:d4:4b: 03:eb:92:7a:3a:83:23:f6:e3:d5:15:0a:fd:16:ab: 97:0a:3d:8d:03:40:7b:f4:25:b3:5f:9f:fb:b5:f5: d1:72:cc:58:a8:23:af:c9:9b:2a:ea:c6:ae:d1:53: 2c:33:9d:c4:4e:cb:7b:31:3d:d2:5a:bb:35:3e:7c: 93:56:e6:6b:f4:19:00:dd:f8:9c:a3:fe:29:74:9c: 15:5f:5c:2f:8a:cb:2a:b0:f3:a8:ea:59:28:ec:d3: 5f:ac:9c:b6:72:c4:f4:79:81:cc:a9:93:99:1a:16: 3c:1e:ec:e3:9c:94:eb:78:84:f8:07:77:5f:94:c1: b5:66:05:a7:4b:71:38:a2:79:d1:db:78:89:99:00: db:89:86:4b:cf:11:fd:37:5d:5a:8b:30:c2:dd:79: fb:e2:4e:cf:34:5f:94:33:78:a2:3d:e7:84:74:8e: 31:66:b6:61:be:74:ee:ce:0b:c7:97:12:6e:f4:8b: 5e:7f:7e:cc:a3:17:a0:ab:4b:ed:f6:10:59:18:19: 51:15:6c:49:46:db:d0:1a:97:a3:af:14:a1:b2:cd: 1f:f9:61:15:9e:01:54:15:4c:58:60:5e:dd:6c:c5: aa:a8:94:58:b6:0b:4d:a7:a4:4f:66:e3:01:34:ce: b5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:E1:A1:CB:10:A7:69:A0:90:4A:D4:42:6E:C8:A6:25:87:CB:DF:14 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142324.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.191.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:43:8d:5d:e9:50:93:6d:32:ac:c0:bf:4f:ca:d0:82:95:6a: 8b:b9:76:8f:ac:2c:9f:0a:60:ad:a2:b1:13:ee:ba:55:12:3b: be:72:b1:ee:74:2a:e4:e7:3f:d4:4f:59:df:5e:09:ec:29:b6: 08:8f:fa:58:cf:fa:28:10:85:d8:16:04:5d:fd:c2:d3:76:bf: 42:ba:c2:de:dc:f7:3d:da:ed:ac:96:3b:2b:1b:6e:a3:e8:2a: ba:ed:03:43:77:39:93:f8:c1:06:2c:31:a9:ab:29:02:72:b3: ee:81:e7:53:94:28:f5:9c:ec:73:18:fa:90:b7:ba:2a:df:41: 20:ba:ce:0b:0e:5d:a0:50:2a:02:15:84:2e:a7:45:90:82:d9: 0b:87:bb:92:41:4e:71:c3:26:8c:bb:34:f1:12:54:e3:b8:62: de:c5:20:63:14:d6:86:d6:d5:15:dd:a2:ad:2d:b6:07:e3:7c: c4:e2:dc:29:db:1c:67:eb:45:db:06:34:ee:ba:49:c3:41:aa: 8e:22:2c:66:66:a2:4d:02:68:a3:c9:ac:94:b2:2a:8f:5d:2f: 75:55:0b:15:0d:2d:10:4d:63:36:fa:9f:23:7d:1f:1e:1a:d3: e9:55:06:fd:9a:f7:15:74:f4:30:7e:6c:45:a1:0f:41:81:53: 94:66:75:4b -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUITf+UwGymr8GEw34z3szbwWWArswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExODAzNTUwMFoX DTI2MTExNzA0MDAwMFowMzExMC8GA1UEAxMoMEZFMUExQ0IxMEE3NjlBMDkwNEFE NDQyNkVDOEE2MjU4N0NCREYxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALIjxJaZLspDGL7E8NRLA+uSejqDI/bj1RUK/Rarlwo9jQNAe/Qls1+f+7X1 0XLMWKgjr8mbKurGrtFTLDOdxE7LezE90lq7NT58k1bma/QZAN34nKP+KXScFV9c L4rLKrDzqOpZKOzTX6yctnLE9HmBzKmTmRoWPB7s45yU63iE+Ad3X5TBtWYFp0tx OKJ50dt4iZkA24mGS88R/TddWoswwt15++JOzzRflDN4oj3nhHSOMWa2Yb507s4L x5cSbvSLXn9+zKMXoKtL7fYQWRgZURVsSUbb0BqXo68UobLNH/lhFZ4BVBVMWGBe 3WzFqqiUWLYLTaekT2bjATTOtb0CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQP4aHL EKdpoJBK1EJuyKYlh8vfFDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjMyNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGeovzANBgkqhkiG9w0BAQsFAAOCAQEAX0ONXelQk20yrMC/T8rQ gpVqi7l2j6wsnwpgraKxE+66VRI7vnKx7nQq5Oc/1E9Z314J7Cm2CI/6WM/6KBCF 2BYEXf3C03a/QrrC3tz3PdrtrJY7Kxtuo+gquu0DQ3c5k/jBBiwxqaspAnKz7oHn U5Qo9Zzscxj6kLe6Kt9BILrOCw5doFAqAhWELqdFkILZC4e7kkFOccMmjLs08RJU 47hi3sUgYxTWhtbVFd2irS22B+N8xOLcKdscZ+tF2wY07rpJw0GqjiIsZmaiTQJo o8mslLIqj10vdVULFQ0tEE1jNvqfI30fHhrT6VUG/Zr3FXT0MH5sRaEPQYFTlGZ1 Sw== -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:58 2025 by rpki-client