This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142369.roa
File: AS142369.roa (raw, json)
Hash identifier: yYeQjRmVOVtMf66XAr6FRr+5Z2hVjpp3bnVfRCARc0w=
Subject key identifier: 53:2E:17:4F:CE:CA:5A:34:B0:78:01:84:BF:FF:F0:00:27:3D:1F:C9
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 0345355BC8419B47FB69128FB059997FF9B4BC2C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142369.roa
Signing time: Tue 11 Nov 2025 06:00:04 +0000
ROA not before: Tue 11 Nov 2025 05:55:04 +0000
ROA not after: Tue 10 Nov 2026 06:00:04 +0000
asID: 142369
IP address blocks: 2001:df0:1740::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 12:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:45:35:5b:c8:41:9b:47:fb:69:12:8f:b0:59:99:7f:f9:b4:bc:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Nov 11 05:55:04 2025 GMT
Not After : Nov 10 06:00:04 2026 GMT
Subject: CN=532E174FCECA5A34B0780184BFFFF000273D1FC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f5:86:0c:1b:ad:26:af:42:0a:a2:be:5b:59:
b6:0a:0a:e7:e0:b8:2d:aa:fe:10:9d:56:79:2b:ea:
7d:2f:93:0e:df:c4:3f:31:19:06:69:b2:b9:6a:75:
3f:04:e0:55:6d:bd:46:f5:5f:24:4d:03:fc:4a:f5:
35:9a:a1:fc:55:a6:c5:76:8a:dd:da:79:aa:31:ab:
8c:ab:fa:13:a5:5b:cb:61:a2:20:8c:3b:35:f1:1c:
8d:a2:40:75:3d:b8:bf:98:e4:8f:74:12:6d:3a:cb:
2a:0d:16:3d:69:fb:41:41:bb:b9:ff:a3:8b:55:8a:
91:24:09:11:51:fb:6a:36:87:c9:34:7a:31:b6:9d:
e8:ee:5b:14:3e:24:6e:f1:10:66:89:c8:a6:3c:35:
ce:3f:a9:6e:22:a7:9f:e1:55:95:69:77:fd:f4:20:
d3:88:49:82:b6:b0:40:af:91:c9:5c:ed:97:61:81:
fa:75:bf:eb:ff:4a:d5:0d:ec:a3:41:14:01:64:bd:
a0:2c:84:50:56:86:a5:d6:51:35:63:1a:89:a9:d6:
2a:39:69:65:2c:f8:d4:fa:a9:2c:82:f4:b7:d7:cc:
c0:50:16:cc:c7:ef:61:97:7a:9f:4c:2b:6a:e3:73:
1e:65:4e:ca:45:09:7a:ea:15:4f:2e:2c:57:d7:46:
df:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2E:17:4F:CE:CA:5A:34:B0:78:01:84:BF:FF:F0:00:27:3D:1F:C9
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142369.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df0:1740::/48
Signature Algorithm: sha256WithRSAEncryption
5c:66:22:92:30:78:6d:40:29:55:44:bf:1e:14:23:5f:4e:3d:
62:8a:93:6f:41:d1:03:92:1e:0f:ff:d4:84:42:03:33:ad:63:
41:58:50:8f:bf:1d:69:2a:1e:a6:8e:c7:06:63:b9:d3:58:96:
99:57:7e:09:59:77:46:72:d8:2b:b7:d1:8a:64:87:2f:3e:d7:
78:eb:54:e1:ac:24:3e:96:00:67:1f:c7:3f:10:1d:43:1a:54:
6d:26:e6:c8:32:f2:19:d7:8d:9c:9d:66:95:56:95:19:b7:c5:
57:9b:85:21:93:3c:18:45:03:be:92:c2:cd:31:83:a2:e9:f4:
9c:fa:5b:4c:f9:78:6b:f8:e3:f7:ba:3a:0c:da:35:a6:b0:de:
0c:50:ec:0e:ad:f3:26:6b:ef:da:ba:7a:6b:f5:1e:08:08:1a:
7b:09:80:c3:35:6c:f8:1b:91:f8:b6:b8:f5:81:66:57:ed:3b:
04:34:3e:6b:96:0e:17:b4:c6:78:21:12:99:92:f2:3b:1c:49:
5a:04:9a:72:3c:df:f2:c1:79:f5:7a:fd:58:e9:cc:a6:d5:42:
4b:f3:8c:68:ab:96:7d:71:d4:96:47:50:92:d5:aa:af:cb:c9:
b5:b4:c9:22:93:7b:30:ca:50:95:19:e3:32:84:d8:2b:c5:9a:
83:38:22:64
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUA0U1W8hBm0f7aRKPsFmZf/m0vCwwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTA1NTUwNFoX
DTI2MTExMDA2MDAwNFowMzExMC8GA1UEAxMoNTMyRTE3NEZDRUNBNUEzNEIwNzgw
MTg0QkZGRkYwMDAyNzNEMUZDOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ/1hgwbrSavQgqivltZtgoK5+C4Lar+EJ1WeSvqfS+TDt/EPzEZBmmyuWp1
PwTgVW29RvVfJE0D/Er1NZqh/FWmxXaK3dp5qjGrjKv6E6Vby2GiIIw7NfEcjaJA
dT24v5jkj3QSbTrLKg0WPWn7QUG7uf+ji1WKkSQJEVH7ajaHyTR6Mbad6O5bFD4k
bvEQZonIpjw1zj+pbiKnn+FVlWl3/fQg04hJgrawQK+RyVztl2GB+nW/6/9K1Q3s
o0EUAWS9oCyEUFaGpdZRNWMaianWKjlpZSz41PqpLIL0t9fMwFAWzMfvYZd6n0wr
auNzHmVOykUJeuoVTy4sV9dG39ECAwEAAaOCAdMwggHPMB0GA1UdDgQWBBRTLhdP
zspaNLB4AYS///AAJz0fyTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjM2OS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACABDfAXQDANBgkqhkiG9w0BAQsFAAOCAQEAXGYikjB4bUApVUS/
HhQjX049YoqTb0HRA5IeD//UhEIDM61jQVhQj78daSoepo7HBmO501iWmVd+CVl3
RnLYK7fRimSHLz7XeOtU4awkPpYAZx/HPxAdQxpUbSbmyDLyGdeNnJ1mlVaVGbfF
V5uFIZM8GEUDvpLCzTGDoun0nPpbTPl4a/jj97o6DNo1prDeDFDsDq3zJmvv2rp6
a/UeCAgaewmAwzVs+BuR+La49YFmV+07BDQ+a5YOF7TGeCESmZLyOxxJWgSacjzf
8sF59Xr9WOnMptVCS/OMaKuWfXHUlkdQktWqr8vJtbTJIpN7MMpQlRnjMoTYK8Wa
gzgiZA==
-----END CERTIFICATE-----
Generated at Wed Dec 3 13:15:26 2025 by rpki-client