This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142348.roa File: AS142348.roa (raw, json) Hash identifier: vESY0dEX/SedN3EismPBsQRs+Lb/BAYGiQzrRSfJPfg= Subject key identifier: 55:D7:C1:26:55:3A:E6:99:B8:5D:39:A9:37:BB:47:F3:29:B7:61:3A Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 35D541B9C367F46EEF2CFEE0A4F35369BB3DE9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142348.roa Signing time: Tue 11 Nov 2025 06:00:22 +0000 ROA not before: Tue 11 Nov 2025 05:55:22 +0000 ROA not after: Tue 10 Nov 2026 06:00:22 +0000 asID: 142348 IP address blocks: 2001:df0:3140::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:d5:41:b9:c3:67:f4:6e:ef:2c:fe:e0:a4:f3:53:69:bb:3d:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 11 05:55:22 2025 GMT Not After : Nov 10 06:00:22 2026 GMT Subject: CN=55D7C126553AE699B85D39A937BB47F329B7613A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:22:4d:7f:33:ee:0b:40:2d:73:3e:bb:9d:11: 25:fa:88:59:f6:99:60:f7:76:2f:78:9c:ed:45:49: a6:37:ac:c7:e7:1b:aa:db:87:ae:3f:72:41:42:70: fb:8d:58:09:96:60:a6:18:88:a3:43:7b:72:2c:e3: 3d:bb:77:bc:e2:1f:e1:a1:35:91:dd:90:d9:5d:a0: 54:d3:cc:1c:a9:04:65:78:9d:28:22:29:61:9f:7c: 37:de:af:de:1b:dd:d8:1c:83:16:e4:e8:ab:a1:6d: 31:61:d5:66:0c:73:62:74:ee:05:9c:10:9b:12:5d: 0e:de:20:60:bf:7f:66:c2:81:38:c5:71:15:8b:1e: d5:2e:3b:12:86:bf:3c:7b:17:e9:d9:cd:15:ad:cb: f0:bf:21:79:ed:97:cf:06:fd:e2:c2:b8:3e:17:6c: c6:29:74:14:be:7d:02:59:b0:d8:56:d5:d5:9d:10: c4:3a:c3:fc:3c:4d:ae:e3:31:3d:ef:52:75:7a:09: 9b:14:bf:27:cb:dc:5d:4e:cb:8f:c1:3f:5e:47:b1: 08:d0:00:ca:a8:62:fd:db:ba:ed:07:6d:9b:03:27: bd:6b:b1:c6:79:61:c9:43:3c:41:f9:10:03:41:84: d0:0f:07:d0:6b:af:d0:4c:29:32:cf:9e:ca:88:54: 7d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:D7:C1:26:55:3A:E6:99:B8:5D:39:A9:37:BB:47:F3:29:B7:61:3A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142348.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df0:3140::/48 Signature Algorithm: sha256WithRSAEncryption 49:fa:cd:fb:23:81:6d:61:83:cc:91:6a:7c:54:98:d9:85:3e: 80:fa:25:95:dc:23:16:70:32:73:35:ee:94:ac:fd:fc:b9:0a: 62:ec:02:b6:e3:88:91:cd:47:d2:2c:ee:dd:84:dd:ef:5f:a9: 86:a1:eb:5e:1e:19:7c:df:b5:0c:9c:6f:37:22:76:b9:ed:71: 08:f7:71:69:65:1e:06:53:04:44:07:51:f1:7d:d4:eb:eb:28: 1b:6e:17:b6:a9:14:4a:93:04:8b:7a:b2:61:72:e2:8c:8b:2b: 67:a6:be:d7:f5:90:05:25:e3:0c:ae:2e:f1:f1:18:fd:36:39: 64:54:21:42:32:1d:c3:37:77:75:9c:5b:f3:16:53:f7:c2:cd: 48:f3:4a:fc:2e:9a:93:5a:5e:58:8d:01:04:2e:7e:00:cc:5b: 65:5b:4a:36:95:09:d3:04:53:55:10:f6:cb:df:f5:6d:b0:58: 56:16:f3:3a:08:1a:05:f0:67:20:0c:b7:3f:89:01:44:1f:c3: 5e:bf:1c:b2:44:64:92:3d:1a:49:46:8a:b8:af:f7:ca:b0:3f: dc:d7:3e:1f:05:a4:92:50:6c:cb:e5:f8:77:eb:57:b3:96:49: 47:a3:6a:16:75:fb:43:f6:a9:fd:95:5f:3c:06:d7:19:dd:a1: 8c:f7:db:ab -----BEGIN CERTIFICATE----- MIIE3zCCA8egAwIBAgITNdVBucNn9G7vLP7gpPNTabs96TANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTE4NjIxNDAwMDAxMTAvBgNVBAUTKEJBOEY3N0QyMUU1 OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIwHhcNMjUxMTExMDU1NTIyWhcN MjYxMTEwMDYwMDIyWjAzMTEwLwYDVQQDEyg1NUQ3QzEyNjU1M0FFNjk5Qjg1RDM5 QTkzN0JCNDdGMzI5Qjc2MTNBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlSJNfzPuC0Atcz67nREl+ohZ9plg93YveJztRUmmN6zH5xuq24euP3JBQnD7 jVgJlmCmGIijQ3tyLOM9u3e84h/hoTWR3ZDZXaBU08wcqQRleJ0oIilhn3w33q/e G93YHIMW5OiroW0xYdVmDHNidO4FnBCbEl0O3iBgv39mwoE4xXEVix7VLjsShr88 exfp2c0VrcvwvyF57ZfPBv3iwrg+F2zGKXQUvn0CWbDYVtXVnRDEOsP8PE2u4zE9 71J1egmbFL8ny9xdTsuPwT9eR7EI0ADKqGL927rtB22bAye9a7HGeWHJQzxB+RAD QYTQDwfQa6/QTCkyz57KiFR9CwIDAQABo4IB0zCCAc8wHQYDVR0OBBYEFFXXwSZV OuaZuF05qTe7R/Mpt2E6MB8GA1UdIwQYMBaAFLqPd9IeWP6ck5prcOJYVhfhgzdr MA4GA1UdDwEB/wQEAwIHgDBpBgNVHR8EYjBgMF6gXKBahlhyc3luYzovL3JlcG8t cnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0JBOEY3N0QyMUU1OEZFOUM5 MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggr BgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdF RjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3VvOTMwaDVZX3B5VG1tdHc0bGhX Ri1HRE4ycy5jZXIwVAYIKwYBBQUHAQsESDBGMEQGCCsGAQUFBzALhjhyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FTMTQyMzQ4LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN8DFAMA0GCSqGSIb3DQEBCwUAA4IBAQBJ+s37I4FtYYPMkWp8 VJjZhT6A+iWV3CMWcDJzNe6UrP38uQpi7AK244iRzUfSLO7dhN3vX6mGoeteHhl8 37UMnG83Ina57XEI93FpZR4GUwREB1HxfdTr6ygbbhe2qRRKkwSLerJhcuKMiytn pr7X9ZAFJeMMri7x8Rj9NjlkVCFCMh3DN3d1nFvzFlP3ws1I80r8LpqTWl5YjQEE Ln4AzFtlW0o2lQnTBFNVEPbL3/VtsFhWFvM6CBoF8GcgDLc/iQFEH8NevxyyRGSS PRpJRoq4r/fKsD/c1z4fBaSSUGzL5fh361ezlklHo2oWdftD9qn9lV88BtcZ3aGM 99ur -----END CERTIFICATE-----Generated at Wed Dec 3 13:15:26 2025 by rpki-client