This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147135.roa
File: AS147135.roa (raw, json)
Hash identifier: Hp9NJ+z/LCUaVsbhS1yEcI9PWLK3BOUtruRT22XuaCA=
Subject key identifier: 2C:9C:44:E3:3B:CA:3C:74:75:B5:C4:85:97:28:E9:30:45:4A:8E:98
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 6418F8AC03E339C457FCDDDE734C0E1926C89A42
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147135.roa
Signing time: Tue 11 Nov 2025 06:00:19 +0000
ROA not before: Tue 11 Nov 2025 05:55:19 +0000
ROA not after: Tue 10 Nov 2026 06:00:19 +0000
asID: 147135
IP address blocks: 103.176.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 12:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:18:f8:ac:03:e3:39:c4:57:fc:dd:de:73:4c:0e:19:26:c8:9a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Nov 11 05:55:19 2025 GMT
Not After : Nov 10 06:00:19 2026 GMT
Subject: CN=2C9C44E33BCA3C7475B5C4859728E930454A8E98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:60:07:23:80:01:f6:31:5a:cb:df:ac:a3:04:
65:7e:01:b6:d3:ad:b4:8e:58:e8:94:82:e0:2a:2a:
bb:25:4f:25:07:8c:35:2a:17:d5:89:81:d4:aa:15:
f8:5b:1e:59:59:b8:77:24:22:9f:c6:1a:1d:3a:2f:
85:ff:33:8f:e6:4b:21:d8:b9:9f:b0:8b:35:93:1b:
91:d3:4f:9b:e1:a6:a4:2a:cb:6b:2e:78:da:da:1d:
e0:c3:47:1b:44:67:7a:2d:41:f7:8f:19:aa:7f:76:
15:21:5b:ac:14:4d:f8:06:d3:84:ea:27:e8:aa:42:
47:4c:fd:17:2a:55:8b:b3:3c:95:57:a5:bc:4c:c6:
31:a7:25:c5:16:e6:70:be:73:22:59:c5:8a:44:76:
6c:f7:13:96:c6:ff:09:d9:dc:56:1e:a4:37:05:ca:
90:3e:72:a9:89:44:6d:e2:2c:58:5d:69:96:97:93:
57:6b:fc:ce:b3:52:b3:80:cb:db:5b:e7:19:29:2e:
4e:b0:0d:63:68:0c:cf:e9:96:49:63:b1:99:17:bb:
75:31:26:1a:88:ed:9b:17:ba:7b:99:48:10:3f:cb:
1e:24:d4:d4:a6:94:bb:fb:62:62:97:5b:e4:8e:37:
51:35:f5:5e:45:d6:28:e6:d6:f1:b0:bc:da:cc:35:
68:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9C:44:E3:3B:CA:3C:74:75:B5:C4:85:97:28:E9:30:45:4A:8E:98
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.176.177.0/24
Signature Algorithm: sha256WithRSAEncryption
30:b0:6b:69:29:10:ac:a2:f2:f0:8e:3a:56:75:01:dd:2b:d4:
28:06:a6:04:13:f3:ad:77:98:06:a9:bf:65:4e:fc:58:d2:d0:
49:76:32:02:09:35:a3:88:18:90:40:3e:cc:27:e4:c9:b7:62:
d2:73:ca:b1:a4:70:64:87:a5:01:a0:93:db:cd:b6:19:f3:2b:
71:6e:a7:7a:0a:fe:77:3b:67:96:9c:f4:de:9d:66:f3:82:34:
75:bf:90:a8:93:15:2d:c8:28:a3:10:2d:e0:d9:77:f7:8b:f8:
9d:95:d9:c2:09:5c:b9:28:7f:65:05:5e:ef:58:7e:f5:3a:09:
81:d5:30:78:ba:a1:fc:0e:94:bb:7a:19:70:3c:18:30:e9:96:
9a:ac:72:4e:4b:41:72:fa:f5:2a:0a:ad:8c:22:02:8b:6a:bf:
a7:5e:ac:30:e8:4b:df:02:1a:73:07:8c:50:cd:ea:50:13:24:
83:74:fa:8a:ea:8e:41:2a:22:50:6b:bb:6f:11:29:ad:0f:c7:
51:14:f9:ba:2f:b8:a7:bd:53:bc:c9:02:3a:28:3c:c8:52:fb:
63:f7:cb:5d:2b:8c:fc:64:d3:91:a9:98:66:b5:5e:de:48:ae:
fc:5e:9d:c3:4b:af:0b:2c:46:ee:b3:a7:5a:fe:4b:a1:23:f4:
a5:0c:03:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:15:00 2025 by rpki-client