This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149392.roa
File: AS149392.roa (raw, json)
Hash identifier: jdQr+smzAgGyoRr6pyOfckvtep66RSV9XUVYm/FJutw=
Subject key identifier: 80:2A:88:B6:01:B9:91:C3:E6:AA:D3:EF:77:8F:EE:5C:02:C7:81:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 13F9B1D6DE74104C12ABE9A616D2FD1CF1FFDE8A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149392.roa
Signing time: Fri 21 Nov 2025 07:00:00 +0000
ROA not before: Fri 21 Nov 2025 06:55:00 +0000
ROA not after: Fri 20 Nov 2026 07:00:00 +0000
asID: 149392
IP address blocks: 103.181.78.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 12:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:f9:b1:d6:de:74:10:4c:12:ab:e9:a6:16:d2:fd:1c:f1:ff:de:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Nov 21 06:55:00 2025 GMT
Not After : Nov 20 07:00:00 2026 GMT
Subject: CN=802A88B601B991C3E6AAD3EF778FEE5C02C7816B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:33:3f:4e:40:5d:6e:ce:aa:53:fb:6c:40:7d:
8e:e5:1f:ae:61:9e:9a:37:d9:0c:fb:63:16:a7:69:
6e:26:df:83:87:3b:23:6c:f0:45:4d:c9:50:13:a2:
b5:90:4f:4e:85:8b:f0:2c:09:5d:3a:c2:8b:17:a5:
56:aa:ef:bd:24:35:b0:92:73:c2:e4:51:06:03:74:
f2:dd:3c:ff:77:24:55:e7:77:25:d9:14:46:b7:58:
37:28:9a:c8:06:09:92:19:41:eb:5c:5d:8a:7b:4f:
6d:89:33:54:d4:9f:0f:46:51:74:13:4a:e9:9b:af:
08:5b:fc:c9:98:04:0c:cb:19:71:d7:cf:0a:1e:83:
78:3b:9a:3f:98:ae:40:5a:4c:01:e9:c0:cf:8b:3f:
41:42:f8:32:ac:f7:18:a0:12:b4:5d:3a:0d:0d:38:
9c:33:61:42:3b:78:6b:46:ee:f3:ed:ad:63:8d:e9:
16:72:07:21:d8:ae:b7:65:41:c0:f2:38:62:ea:85:
bd:2b:a9:61:dc:5e:6a:fb:cc:e5:1f:6b:d4:f9:c1:
d3:7b:dc:d8:1a:57:94:40:d1:1d:4b:2a:1e:eb:e8:
9b:34:e4:5c:2c:ca:90:69:b7:68:44:b0:11:40:8b:
92:5d:48:97:68:9b:a0:0e:59:1c:f1:63:1a:23:17:
85:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2A:88:B6:01:B9:91:C3:E6:AA:D3:EF:77:8F:EE:5C:02:C7:81:6B
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149392.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.181.78.0/23
Signature Algorithm: sha256WithRSAEncryption
63:55:e6:6f:80:6c:b5:b4:98:73:6a:76:25:01:d8:6f:fd:79:
f9:58:58:69:89:a6:72:93:b9:93:f3:12:ce:60:65:1d:84:31:
35:5b:f4:24:3e:63:5e:c7:ba:b2:7a:c2:c0:ff:f9:d1:a9:9f:
51:a2:4b:92:7a:29:92:8e:15:73:7e:82:35:fe:fa:ae:4c:6c:
30:13:7f:e0:47:46:25:b1:e4:f6:b8:ee:88:2b:04:eb:00:c0:
5b:7c:bf:a6:e5:09:2a:71:c6:80:76:9c:c0:f1:69:f7:7a:28:
5d:d4:92:81:df:07:e4:1c:16:01:6b:1a:39:cb:75:1b:4b:f9:
2f:cb:5a:d3:5a:c0:97:bc:c0:80:50:f8:6d:3d:8c:5e:ba:f2:
6a:15:6f:f1:2e:fb:61:1d:85:f2:f1:64:5c:55:7e:1e:aa:22:
f4:14:25:6e:8e:19:37:50:57:32:ff:23:2f:0b:1a:ea:74:f5:
47:cb:77:02:98:41:2e:c5:07:f8:4e:ab:1c:33:24:6e:19:35:
fc:b2:2b:85:6c:3b:32:ec:4c:95:4f:23:f0:eb:d7:43:8d:93:
f7:5f:91:a4:6c:66:8f:69:f3:73:51:f0:58:22:f5:31:a7:af:
11:33:e7:ce:a1:4b:2d:07:e2:ad:17:a2:df:c8:e6:2e:89:d3:
62:48:69:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:14:51 2025 by rpki-client