This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS18059.roa File: AS18059.roa (raw, json) Hash identifier: SM2R/pfxH5RbMOj4xVxB3YNZR3kFJS1Bp9aH2QaN9qE= Subject key identifier: 8E:F7:A4:FA:E6:0F:E0:3A:55:A1:89:FC:60:63:31:C1:07:57:7A:71 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 43CB0FABE981DA99E2B465B2FA1932FA97B9E733 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS18059.roa Signing time: Sun 30 Mar 2025 04:47:48 +0000 ROA not before: Sun 30 Mar 2025 04:42:48 +0000 ROA not after: Sun 29 Mar 2026 04:47:48 +0000 asID: 18059 IP address blocks: 103.168.114.0/23 maxlen: 24 103.168.116.0/23 maxlen: 24 103.168.118.0/23 maxlen: 24 103.168.120.0/23 maxlen: 24 163.61.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:cb:0f:ab:e9:81:da:99:e2:b4:65:b2:fa:19:32:fa:97:b9:e7:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 30 04:42:48 2025 GMT Not After : Mar 29 04:47:48 2026 GMT Subject: CN=8EF7A4FAE60FE03A55A189FC606331C107577A71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:23:ee:21:30:56:5a:76:b9:d2:8d:a0:c1:60: b8:24:0e:d1:9a:3d:f3:29:dd:04:9a:c6:92:00:e3: 6f:27:73:b2:21:79:a1:84:9d:2d:5c:c4:2f:34:8b: 35:4b:66:ce:5b:be:70:b4:93:47:8f:03:5d:48:0b: 71:cc:4f:d7:1d:21:7d:61:cf:ff:a9:76:77:d2:a4: 17:6f:7e:d3:e2:8c:b9:dc:31:51:dd:bb:b6:60:29: 12:fb:d0:4d:2f:3c:7c:05:66:d3:ae:28:d3:5e:80: 9f:dc:a6:51:6c:a1:18:dd:f4:13:d8:0b:68:c5:91: bd:ea:6b:99:74:8d:95:d3:fe:47:43:83:ca:c5:f7: 4d:33:4d:8d:44:59:fc:aa:e2:48:f8:ea:78:ab:78: 75:aa:07:fb:e8:e7:96:25:ea:da:c0:91:9e:88:07: 96:af:c3:27:9b:f8:22:f9:e2:47:86:03:e1:75:69: eb:e7:fe:5a:2d:b2:07:2e:4e:d8:c5:5b:3e:90:6b: 78:8f:7a:4d:62:65:15:53:72:2c:8c:4e:12:ab:36: 02:c7:32:d5:b6:1c:46:f4:09:75:e3:44:f2:2c:f8: b6:e6:ab:c9:9b:b9:8c:a2:13:2c:4c:5b:8a:c5:75: c2:00:5b:41:45:e7:ed:0c:1d:ed:96:8a:f3:6c:8c: 33:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:F7:A4:FA:E6:0F:E0:3A:55:A1:89:FC:60:63:31:C1:07:57:7A:71 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS18059.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.114.0-103.168.121.255 163.61.77.0/24 Signature Algorithm: sha256WithRSAEncryption 58:12:d8:cb:24:c4:db:a6:98:95:f9:b0:5a:d5:b4:0d:e4:8a: d1:be:4d:94:5c:ca:47:b6:de:b6:8a:b8:b6:f4:ca:f9:2e:21: 73:ad:df:05:43:ff:8c:3b:f0:7f:11:1d:59:ef:fb:9d:58:e5: 3a:53:ae:30:89:4f:08:23:97:0d:2e:a8:89:71:7c:8c:24:da: 3b:19:48:76:49:cf:91:b7:06:31:73:4f:50:e3:3c:91:5b:1d: 31:84:f0:dc:cc:03:2e:44:01:7c:94:91:31:04:03:54:1c:f3: a5:6d:80:f3:ca:ba:e9:ff:f3:e1:4f:21:3a:dc:53:d9:86:79: 61:59:56:2e:d8:57:76:04:d6:51:e9:6f:a1:cb:72:dc:30:6d: fa:d1:89:e8:81:16:87:b3:b9:dd:e5:af:95:10:9c:0b:e3:b8: 32:b4:e8:be:39:10:fc:40:4e:a4:37:7a:33:d4:c1:ab:fb:57: bc:b2:c3:d8:f8:4e:90:54:20:18:95:f6:af:a5:12:d6:d8:b0: 44:d5:e9:41:f2:b6:e0:e9:fe:73:da:7b:8a:47:62:b0:82:de: c1:3c:cd:80:0c:75:25:c6:6a:4e:0f:09:13:04:d0:fb:88:0d: 24:ee:fa:71:9f:06:2d:c0:e3:cc:c6:f5:88:1b:8d:5d:02:d1: b0:d9:08:d8 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUQ8sPq+mB2pnitGWy+hky+pe55zMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDMzMDA0NDI0OFoX DTI2MDMyOTA0NDc0OFowMzExMC8GA1UEAxMoOEVGN0E0RkFFNjBGRTAzQTU1QTE4 OUZDNjA2MzMxQzEwNzU3N0E3MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALYj7iEwVlp2udKNoMFguCQO0Zo98yndBJrGkgDjbydzsiF5oYSdLVzELzSL NUtmzlu+cLSTR48DXUgLccxP1x0hfWHP/6l2d9KkF29+0+KMudwxUd27tmApEvvQ TS88fAVm064o016An9ymUWyhGN30E9gLaMWRveprmXSNldP+R0ODysX3TTNNjURZ /KriSPjqeKt4daoH++jnliXq2sCRnogHlq/DJ5v4IvniR4YD4XVp6+f+Wi2yBy5O 2MVbPpBreI96TWJlFVNyLIxOEqs2Ascy1bYcRvQJdeNE8iz4tuaryZu5jKITLExb isV1wgBbQUXn7Qwd7ZaK82yMMzMCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBSO96T6 5g/gOlWhifxgYzHBB1d6cTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE4MDU5LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUMAwDBAFnqHIDBAFnqHgDBACjPU0wDQYJKoZIhvcNAQELBQADggEBAFgS 2MskxNummJX5sFrVtA3kitG+TZRcyke23raKuLb0yvkuIXOt3wVD/4w78H8RHVnv +51Y5TpTrjCJTwgjlw0uqIlxfIwk2jsZSHZJz5G3BjFzT1DjPJFbHTGE8NzMAy5E AXyUkTEEA1Qc86VtgPPKuun/8+FPITrcU9mGeWFZVi7YV3YE1lHpb6HLctwwbfrR ieiBFoezud3lr5UQnAvjuDK06L45EPxATqQ3ejPUwav7V7yyw9j4TpBUIBiV9q+l EtbYsETV6UHytuDp/nPae4pHYrCC3sE8zYAMdSXGak4PCRME0PuIDSTu+nGfBi3A 48zG9YgbjV0C0bDZCNg= -----END CERTIFICATE-----Generated at Wed Dec 3 13:55:27 2025 by rpki-client