This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149723.roa File: AS149723.roa (raw, json) Hash identifier: W9O2FCC4UvvPovVXn+YhH93Pc6Lutm7c8UYu9ql1mf0= Subject key identifier: 8B:66:E0:DA:F6:FE:E7:4F:06:20:12:96:D2:FB:EB:56:D3:31:58:4D Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 659E847B7DEC16657F11332CC3CE9078E0B7CA20 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149723.roa Signing time: Mon 10 Nov 2025 08:00:00 +0000 ROA not before: Mon 10 Nov 2025 07:55:00 +0000 ROA not after: Mon 09 Nov 2026 08:00:00 +0000 asID: 149723 IP address blocks: 103.138.53.0/24 maxlen: 24 2001:df2:79c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:9e:84:7b:7d:ec:16:65:7f:11:33:2c:c3:ce:90:78:e0:b7:ca:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 10 07:55:00 2025 GMT Not After : Nov 9 08:00:00 2026 GMT Subject: CN=8B66E0DAF6FEE74F06201296D2FBEB56D331584D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:52:42:91:f4:e8:63:e4:c6:0b:2e:13:3b:a8: 5d:cb:34:25:9a:60:68:d7:d6:88:54:07:b0:9d:71: 54:d0:81:64:79:1c:25:22:6f:db:ff:03:2d:21:ad: 9f:a0:d9:2c:e6:6c:e9:ad:aa:d6:71:3d:ad:d9:87: 4a:4a:59:cd:77:cf:ff:cf:c2:b1:52:d9:5c:79:cc: 63:8d:45:da:73:d0:c1:a0:1e:3b:4b:dc:92:30:d6: 70:05:98:30:f6:8a:8a:e7:2e:21:29:d2:71:e8:53: 48:52:91:9a:07:2d:a4:e5:1f:84:31:04:30:7f:bb: 41:9c:9d:6d:17:71:a3:99:7c:77:04:2b:89:31:cd: d6:ec:2f:21:e2:3c:57:18:b8:ab:1c:02:5f:f5:e7: 71:5e:c5:5c:1d:e1:38:91:38:7f:e6:07:b1:e8:58: eb:f8:ec:c0:fe:e9:fc:1c:6d:a7:bb:a0:dc:33:1a: 49:4a:49:cc:d4:92:92:d9:70:43:9f:31:89:6b:6a: e8:3a:56:87:8a:ac:b9:2c:6c:f7:e9:60:e7:78:5b: ec:1f:ee:04:86:83:3a:51:db:3e:05:89:9c:0d:ba: d3:81:7c:00:da:d6:8f:0f:20:c9:18:6a:66:a8:a7: 68:d1:12:42:36:12:07:0c:84:05:fc:21:fc:1f:b8: 32:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:66:E0:DA:F6:FE:E7:4F:06:20:12:96:D2:FB:EB:56:D3:31:58:4D X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149723.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.138.53.0/24 IPv6: 2001:df2:79c0::/48 Signature Algorithm: sha256WithRSAEncryption 2f:13:df:c8:55:e0:03:40:b3:32:f6:65:ab:8f:3a:d4:4a:63: ff:40:bd:8a:cb:80:c4:f1:2d:55:4d:65:1d:4a:46:2a:f2:41: aa:cd:30:0b:31:a4:a5:a2:98:f4:aa:f4:06:a7:1a:03:40:c3: 5b:c5:5c:33:a2:09:ec:d6:90:16:79:80:04:75:11:86:ca:4d: 55:ad:38:c0:e2:6b:96:b8:a8:4a:7c:84:c7:d5:8e:6c:31:d9: 10:c9:73:5e:0a:2c:e2:6a:e6:0c:c5:59:bb:c9:72:b2:5e:d3: 00:f4:4e:e1:9e:81:d5:38:16:70:7d:5b:fe:0f:9b:4b:3a:a8: 33:26:69:73:59:2d:47:4c:f9:33:86:3b:4a:ad:f8:e9:78:c7: 05:a6:2f:ad:fc:66:c5:e9:f4:ae:47:66:2b:79:65:73:64:8b: f7:ff:98:26:64:07:08:2f:80:2a:3b:89:94:0e:38:f4:c5:66: 34:c6:e8:be:41:12:70:7b:1e:06:d4:f0:32:47:8f:0f:93:a3: 6c:91:63:9a:71:18:ff:c1:ca:9a:03:65:8c:bf:65:95:57:58: 3b:75:e9:a3:58:30:48:b4:0d:51:7f:cb:26:a5:70:e4:02:67: 42:e6:ad:60:d9:8c:a8:00:91:02:de:df:ba:cf:80:0c:a6:e4: e3:48:be:77 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUZZ6Ee33sFmV/ETMsw86QeOC3yiAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMDA3NTUwMFoX DTI2MTEwOTA4MDAwMFowMzExMC8GA1UEAxMoOEI2NkUwREFGNkZFRTc0RjA2MjAx Mjk2RDJGQkVCNTZEMzMxNTg0RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMNSQpH06GPkxgsuEzuoXcs0JZpgaNfWiFQHsJ1xVNCBZHkcJSJv2/8DLSGt n6DZLOZs6a2q1nE9rdmHSkpZzXfP/8/CsVLZXHnMY41F2nPQwaAeO0vckjDWcAWY MPaKiucuISnScehTSFKRmgctpOUfhDEEMH+7QZydbRdxo5l8dwQriTHN1uwvIeI8 Vxi4qxwCX/XncV7FXB3hOJE4f+YHsehY6/jswP7p/Bxtp7ug3DMaSUpJzNSSktlw Q58xiWtq6DpWh4qsuSxs9+lg53hb7B/uBIaDOlHbPgWJnA2604F8ANrWjw8gyRhq ZqinaNESQjYSBwyEBfwh/B+4MtMCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBSLZuDa 9v7nTwYgEpbS++tW0zFYTTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTcyMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAGeKNTAPBAIAAjAJAwcAIAEN8nnAMA0GCSqGSIb3DQEBCwUAA4IB AQAvE9/IVeADQLMy9mWrjzrUSmP/QL2Ky4DE8S1VTWUdSkYq8kGqzTALMaSlopj0 qvQGpxoDQMNbxVwzogns1pAWeYAEdRGGyk1VrTjA4muWuKhKfITH1Y5sMdkQyXNe CiziauYMxVm7yXKyXtMA9E7hnoHVOBZwfVv+D5tLOqgzJmlzWS1HTPkzhjtKrfjp eMcFpi+t/GbF6fSuR2YreWVzZIv3/5gmZAcIL4AqO4mUDjj0xWY0xui+QRJwex4G 1PAyR48Pk6NskWOacRj/wcqaA2WMv2WVV1g7demjWDBItA1Rf8smpXDkAmdC5q1g 2YyoAJEC3t+6z4AMpuTjSL53 -----END CERTIFICATE-----Generated at Wed Dec 3 13:55:25 2025 by rpki-client