This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142385.roa
File: AS142385.roa (raw, json)
Hash identifier: kAybdiazXqFEKfOD2rnLeHZsJ60gMhUTR2klRwOrZPY=
Subject key identifier: E5:F3:8B:EC:E2:12:B7:59:5F:81:8E:8E:75:A7:C7:11:79:D9:EC:4A
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 26CCAE35593F5BE8ED7B3CA9A11C83367B517FD7
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142385.roa
Signing time: Tue 04 Nov 2025 09:00:00 +0000
ROA not before: Tue 04 Nov 2025 08:55:00 +0000
ROA not after: Tue 03 Nov 2026 09:00:00 +0000
asID: 142385
IP address blocks: 103.172.43.0/24 maxlen: 24
2001:df2:ad40::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 12:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:cc:ae:35:59:3f:5b:e8:ed:7b:3c:a9:a1:1c:83:36:7b:51:7f:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Nov 4 08:55:00 2025 GMT
Not After : Nov 3 09:00:00 2026 GMT
Subject: CN=E5F38BECE212B7595F818E8E75A7C71179D9EC4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:00:55:5f:75:03:a1:03:0c:a7:18:0f:0e:c1:
20:70:bb:6f:14:35:25:2f:6b:df:ab:f8:6b:14:33:
d5:dc:83:57:0e:4d:72:ae:ce:84:03:70:e9:fb:f3:
dd:09:3e:94:f6:72:c8:0f:1c:72:37:c6:e9:2d:0b:
39:38:e1:d2:9e:9e:3a:e7:e9:5d:f1:2b:eb:1b:4b:
3f:e8:cc:d5:3c:c7:6a:b2:ef:e8:a2:a5:55:a2:94:
3b:e9:c8:12:10:9f:72:de:e2:27:8e:cd:2b:0b:29:
df:7e:f6:cc:1f:21:c0:6a:a2:00:ee:12:d9:9a:7b:
69:94:d1:29:48:0f:72:89:48:f1:1b:c0:87:c9:11:
8c:ef:11:d0:f7:1d:81:a1:3b:f3:65:51:65:dd:1b:
53:32:fa:f7:f4:6a:67:75:a0:9f:45:2e:23:ba:87:
89:58:36:e2:ce:96:80:9a:69:7d:6a:37:47:4f:92:
a5:77:c7:04:38:53:5c:40:ac:cc:7a:b1:63:dd:49:
4d:29:78:91:63:4a:6f:8a:38:15:ed:09:9a:13:ce:
a2:10:8c:69:70:bf:3d:47:27:a2:45:cc:23:89:fb:
8f:66:4f:d1:ae:ad:51:c7:5a:c0:97:7d:f9:02:81:
df:26:13:dc:80:d4:5a:7b:a0:7f:6f:41:1e:48:bb:
b8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F3:8B:EC:E2:12:B7:59:5F:81:8E:8E:75:A7:C7:11:79:D9:EC:4A
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142385.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.172.43.0/24
IPv6:
2001:df2:ad40::/48
Signature Algorithm: sha256WithRSAEncryption
4e:df:10:59:ac:ad:3e:d3:17:57:d3:9f:9a:76:da:5e:29:fa:
92:4d:c0:98:34:7e:d2:71:02:70:3f:2c:bb:99:7a:0c:a6:d8:
c0:56:a7:0c:bd:b5:91:f1:2c:75:bd:18:50:6c:7d:eb:57:f7:
d3:d7:cd:05:7d:a8:25:4f:3e:5b:af:eb:5a:8b:47:60:e1:21:
e7:a9:99:1a:ab:bf:db:82:69:6e:aa:b0:d5:ba:72:d1:f0:5f:
cb:47:3d:eb:c3:b4:5d:d2:40:ee:08:74:96:6b:c3:11:3d:aa:
17:0b:b0:71:cb:5f:6f:6c:da:50:c4:61:3b:0c:a8:0c:44:c5:
f8:8d:b8:c8:70:9e:35:1c:2e:ab:ba:1f:bc:2b:4a:37:b4:fc:
20:b7:8c:16:91:7a:b6:40:2e:1d:02:66:c1:87:14:af:44:96:
56:08:41:85:ba:2f:99:ed:7d:e6:ea:b3:8b:81:b3:30:da:59:
61:e1:66:88:c0:48:d8:a1:d1:b5:5f:70:ba:5d:c9:1b:7e:45:
de:5d:80:3a:5a:22:f5:b5:12:f7:70:93:01:aa:eb:6f:4e:36:
a1:38:35:c2:5c:de:66:e4:a0:d7:73:43:c5:40:96:f7:b0:42:
6a:da:be:b9:9e:74:ac:b2:d9:8a:20:49:0c:a5:e6:10:96:65:
ca:d0:6f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:15:17 2025 by rpki-client