This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147129.roa
File: AS147129.roa (raw, json)
Hash identifier: dOnrxDHvg8b8+nDJ2YalNOR3/QY6GVLLGfAXAeoa5wE=
Subject key identifier: F1:07:36:00:67:D1:EC:23:56:77:6B:0B:56:EC:A4:FC:E9:5C:E4:7A
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 3835ADD154FCAC7306EC038CD06C34207111A1AC
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147129.roa
Signing time: Tue 11 Nov 2025 06:00:22 +0000
ROA not before: Tue 11 Nov 2025 05:55:22 +0000
ROA not after: Tue 10 Nov 2026 06:00:22 +0000
asID: 147129
IP address blocks: 103.176.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 12:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:35:ad:d1:54:fc:ac:73:06:ec:03:8c:d0:6c:34:20:71:11:a1:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Nov 11 05:55:22 2025 GMT
Not After : Nov 10 06:00:22 2026 GMT
Subject: CN=F107360067D1EC2356776B0B56ECA4FCE95CE47A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b5:ba:c1:cf:cf:2b:75:c5:bf:85:39:84:d4:
ed:15:f1:e5:5b:8d:62:0d:62:4d:be:99:e2:09:6f:
42:9a:00:7b:22:62:a9:4c:ae:18:8d:0e:fb:98:65:
32:55:7d:b2:1d:63:bf:4a:80:d7:ae:7d:22:86:7d:
70:8b:16:d0:cc:c0:49:bf:bb:48:de:36:44:ed:4d:
77:19:2a:f2:8d:d5:1c:f0:89:cb:15:17:bf:2c:05:
f0:2d:f0:c3:a0:1e:a0:c3:d9:d7:8c:dd:9e:ba:3b:
17:04:b0:6c:e0:f2:dd:74:5d:e5:28:26:fc:9f:1b:
cd:6d:d8:7a:94:36:b9:94:df:9c:d6:1d:79:04:40:
58:77:0b:6b:7c:3b:cf:df:71:3e:fd:dd:f2:1b:fe:
c1:e2:8d:65:ae:62:ae:b8:55:ce:b1:ce:dd:d3:8e:
0f:48:a7:db:06:50:35:a5:cb:2b:e7:da:75:85:20:
0d:20:cb:90:54:e3:75:f6:45:11:6a:c7:99:4f:d0:
f7:d5:bf:24:05:6f:70:eb:aa:57:ed:8a:a8:ce:b0:
03:c2:07:ea:82:45:d7:68:bd:a8:c7:12:48:2f:6c:
4a:b8:4f:51:6b:bb:22:f7:98:41:f8:b9:a1:a2:29:
9c:b7:3c:96:cc:2a:ec:16:42:67:f1:92:31:85:c7:
2d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:07:36:00:67:D1:EC:23:56:77:6B:0B:56:EC:A4:FC:E9:5C:E4:7A
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147129.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.176.69.0/24
Signature Algorithm: sha256WithRSAEncryption
12:b3:35:0b:ff:ce:e9:98:c3:53:28:c6:5d:d8:57:23:ee:96:
28:ec:24:a2:19:24:90:60:d3:87:04:88:a1:b3:d9:d0:36:62:
b7:c6:de:31:76:f8:c0:6f:22:a9:56:1a:30:54:1f:3b:f9:33:
9a:d5:b6:82:d3:69:db:d9:a6:c6:d9:1f:eb:c2:94:25:07:c7:
b6:8d:80:ab:f6:ea:4a:e1:e8:8f:ba:c3:d0:ca:b2:1e:7a:34:
8e:1a:3f:08:f1:0c:24:6e:d1:d4:11:e1:88:c1:62:96:98:63:
dd:0c:9c:04:17:1e:cd:8b:cc:83:97:6c:16:a7:a9:b5:a9:49:
3b:39:ca:57:52:5b:89:77:43:11:9f:50:20:21:10:5d:5d:04:
35:c9:1a:81:0c:59:ea:73:34:1e:c3:af:4e:18:25:65:b1:23:
f1:99:ed:55:a4:8a:94:54:82:46:01:ab:80:b8:b7:38:3f:cf:
78:e5:50:eb:72:7c:03:2e:49:a1:74:0d:66:38:84:91:b2:c3:
a4:6b:66:7b:b3:84:f3:54:48:00:e9:a4:79:a2:17:67:a1:1a:
7c:e2:d4:cd:15:3f:8a:48:77:a2:5c:64:d1:dd:f5:96:52:75:
57:16:30:4f:d5:c5:f6:0c:cb:40:79:92:f7:20:4b:e7:54:fc:
50:2b:cb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:14:59 2025 by rpki-client