This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142329.roa File: AS142329.roa (raw, json) Hash identifier: LFqW8TFC3wxY/8RQ/NQGS5D20zez47GhmVVFOO8vS1o= Subject key identifier: EE:28:FE:43:C2:5F:65:DD:FB:1A:CF:32:7C:9B:0A:60:8F:A5:0E:AD Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 067F23BACE3394D4EE25B87559E49EA1FDA70D76 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142329.roa Signing time: Tue 11 Nov 2025 06:00:24 +0000 ROA not before: Tue 11 Nov 2025 05:55:24 +0000 ROA not after: Tue 10 Nov 2026 06:00:24 +0000 asID: 142329 IP address blocks: 103.168.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:7f:23:ba:ce:33:94:d4:ee:25:b8:75:59:e4:9e:a1:fd:a7:0d:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 11 05:55:24 2025 GMT Not After : Nov 10 06:00:24 2026 GMT Subject: CN=EE28FE43C25F65DDFB1ACF327C9B0A608FA50EAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7b:61:fd:0e:03:7d:ca:67:1c:66:01:c3:bb: 47:3e:ad:38:ca:9c:b9:0e:c7:7a:b1:bd:77:14:39: e9:d3:99:5c:9b:dc:d4:8b:fe:08:06:5f:a8:59:e7: 03:ff:10:4d:23:3d:a0:96:98:34:ac:87:a2:bb:48: f5:a7:4e:fa:89:e1:64:a4:1e:fd:e9:cc:4f:32:a7: 48:42:4b:66:18:4e:3d:28:12:a6:93:32:fe:8b:b6: 45:ed:13:05:5e:ec:2f:aa:36:2a:b4:b4:04:f1:fe: 2b:9f:89:96:4a:62:1c:e0:3c:61:f8:f5:0c:40:98: ae:da:b6:97:3b:87:17:79:a1:14:8c:c6:eb:71:23: 4d:69:60:be:1c:37:c6:68:7d:bb:30:63:41:35:c5: f9:94:90:8f:b9:95:20:3e:c6:a2:b8:33:e2:e4:32: cf:3e:9b:df:ca:54:40:a7:a5:bf:84:04:38:3b:51: 42:34:f7:1b:07:1a:11:e0:ec:f6:c2:8b:28:44:f1: 4e:c7:22:5c:0d:16:b5:3f:54:37:63:b7:83:4b:f5: 21:fe:35:71:13:9d:d7:47:2c:66:15:12:59:93:c8: c1:ec:61:3b:81:b1:0c:7f:39:83:8f:52:44:0c:55: 02:39:72:c2:b2:9e:86:27:b7:2a:c6:cd:b9:51:c8: 68:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:28:FE:43:C2:5F:65:DD:FB:1A:CF:32:7C:9B:0A:60:8F:A5:0E:AD X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142329.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.21.0/24 Signature Algorithm: sha256WithRSAEncryption 71:27:01:3e:2f:22:74:5b:f9:e1:01:fb:85:9b:6a:68:e1:1b: cd:df:cb:e0:be:cf:ed:aa:5c:a4:cc:d3:b0:a5:ca:1c:5d:d6: 7d:f1:f2:5a:92:58:39:22:ce:a3:69:c5:b5:39:29:9c:ce:5e: 6c:2a:f9:e5:5e:f4:70:54:20:f1:87:3c:60:e3:ed:e4:7e:dd: 01:17:77:3c:3e:6d:fa:c5:eb:3c:6d:ce:41:23:b8:fd:72:67: 91:a0:a1:3a:60:0a:eb:42:4e:54:8f:82:70:a0:44:a4:b5:50: 79:26:63:51:b1:78:0b:f4:cc:a4:29:22:53:99:2a:0f:ae:33: 07:ec:91:d8:fb:a0:dd:6a:1a:c9:62:01:50:6c:76:9f:08:e9: 36:7d:bb:ee:d4:05:19:d6:5d:02:5e:05:b5:bf:bf:a7:ef:8d: 7f:02:61:2d:0a:d4:63:c5:2c:e7:14:cc:4f:c9:37:85:28:18: c3:a4:2b:76:f8:b8:3a:fd:0e:06:fd:2e:e4:82:c2:77:3e:4a: 87:cb:d1:d9:d3:66:52:ec:1a:7e:6c:8b:c0:0d:ab:da:6a:c3: ae:fd:77:2a:e5:93:c7:3c:c7:6f:d4:92:9a:d6:49:d8:a5:01: ff:75:b9:66:20:d6:e6:49:6c:fc:8d:0b:f5:2b:b5:47:70:81: 8f:89:75:4d -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUBn8jus4zlNTuJbh1WeSeof2nDXYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTA1NTUyNFoX DTI2MTExMDA2MDAyNFowMzExMC8GA1UEAxMoRUUyOEZFNDNDMjVGNjVEREZCMUFD RjMyN0M5QjBBNjA4RkE1MEVBRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMZ7Yf0OA33KZxxmAcO7Rz6tOMqcuQ7HerG9dxQ56dOZXJvc1Iv+CAZfqFnn A/8QTSM9oJaYNKyHortI9adO+onhZKQe/enMTzKnSEJLZhhOPSgSppMy/ou2Re0T BV7sL6o2KrS0BPH+K5+JlkpiHOA8Yfj1DECYrtq2lzuHF3mhFIzG63EjTWlgvhw3 xmh9uzBjQTXF+ZSQj7mVID7Gorgz4uQyzz6b38pUQKelv4QEODtRQjT3GwcaEeDs 9sKLKETxTsciXA0WtT9UN2O3g0v1If41cROd10csZhUSWZPIwexhO4GxDH85g49S RAxVAjlywrKehie3KsbNuVHIaMUCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTuKP5D wl9l3fsazzJ8mwpgj6UOrTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjMyOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGeoFTANBgkqhkiG9w0BAQsFAAOCAQEAcScBPi8idFv54QH7hZtq aOEbzd/L4L7P7apcpMzTsKXKHF3WffHyWpJYOSLOo2nFtTkpnM5ebCr55V70cFQg 8Yc8YOPt5H7dARd3PD5t+sXrPG3OQSO4/XJnkaChOmAK60JOVI+CcKBEpLVQeSZj UbF4C/TMpCkiU5kqD64zB+yR2Pug3WoayWIBUGx2nwjpNn277tQFGdZdAl4Ftb+/ p++NfwJhLQrUY8Us5xTMT8k3hSgYw6Qrdvi4Ov0OBv0u5ILCdz5Kh8vR2dNmUuwa fmyLwA2r2mrDrv13KuWTxzzHb9SSmtZJ2KUB/3W5ZiDW5kls/I0L9Su1R3CBj4l1 TQ== -----END CERTIFICATE-----Generated at Wed Dec 3 13:15:18 2025 by rpki-client