This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS212238.roa File: AS212238.roa (raw, json) Hash identifier: EuC7pgE4o8eWW8ZCANrarDvm1H/8lPkZnUha+Wj/H74= Subject key identifier: E4:D6:2C:42:7D:79:05:09:4B:5B:DA:6E:07:45:39:2D:1F:EB:C0:2E Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 771D4881823DDA0E6085DE1245E925B09B67F461 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS212238.roa Signing time: Mon 10 Nov 2025 08:08:59 +0000 ROA not before: Mon 10 Nov 2025 08:03:59 +0000 ROA not after: Mon 09 Nov 2026 08:08:59 +0000 asID: 212238 IP address blocks: 103.149.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:1d:48:81:82:3d:da:0e:60:85:de:12:45:e9:25:b0:9b:67:f4:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 10 08:03:59 2025 GMT Not After : Nov 9 08:08:59 2026 GMT Subject: CN=E4D62C427D7905094B5BDA6E0745392D1FEBC02E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:29:d0:43:37:91:53:18:6f:81:0f:4c:61:79: b3:00:3c:3f:c9:fd:b7:5c:ff:08:c9:8a:ec:9c:73: fe:bc:a9:2b:4e:05:84:82:16:ce:94:08:c3:d4:f5: 45:b7:93:1d:f2:58:ee:ae:c5:eb:28:45:c6:f9:49: 1f:c8:da:ca:bb:7b:3d:34:dc:55:fe:bd:aa:07:a0: d8:ac:cf:b5:ff:49:5b:9f:0c:0d:a0:da:2f:5a:5c: e2:14:63:5b:5b:90:9a:f7:f2:ac:a3:1a:f5:3e:b1: a8:53:83:04:36:e4:e5:e2:7f:5d:27:6e:fa:09:f2: f0:c9:64:e4:a7:3b:f7:18:18:67:70:95:f2:cd:81: 8e:f8:4d:ff:a9:4f:03:a8:2e:8e:02:78:27:95:78: e6:6b:97:ca:7e:af:a9:6e:17:98:de:e0:d5:26:0c: 13:eb:52:13:51:f1:3a:81:5e:1c:02:ad:22:48:be: 57:35:63:07:19:a6:db:26:8e:47:60:4d:18:fa:2c: 13:30:c3:35:91:11:77:57:73:82:18:61:1e:2f:60: 78:2b:0b:2b:c5:5e:26:34:9a:ce:7d:ad:cb:c8:54: 8c:18:09:86:eb:f3:21:cc:74:e5:da:02:e7:88:c0: e2:7b:e0:08:0c:8b:94:2c:f6:73:46:6d:f5:77:9f: fe:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D6:2C:42:7D:79:05:09:4B:5B:DA:6E:07:45:39:2D:1F:EB:C0:2E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS212238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.149.115.0/24 Signature Algorithm: sha256WithRSAEncryption 61:6b:5a:74:64:ba:d9:5a:98:9d:a1:20:c1:e8:70:3f:93:50: a1:7d:dc:6c:f4:1b:5b:d5:64:63:25:98:65:c7:fb:2b:2e:4a: 8c:d8:da:cd:62:5b:9f:98:9c:8e:e4:ee:ff:22:00:75:48:e4: 7b:ba:fa:65:9f:a9:df:9b:75:86:aa:05:c6:51:55:93:32:7d: 26:2a:3e:d2:a0:71:c0:0c:9a:26:d6:c8:71:02:6c:4f:f3:b6: 17:75:8d:86:cb:1d:6f:fc:30:d2:74:a3:7c:22:a3:cb:80:b8: 7a:98:dc:50:8e:74:71:10:8d:d0:f5:65:f7:28:8c:c4:72:a8: 90:57:a5:5d:08:87:46:67:8e:8a:72:be:11:a5:01:b2:5a:30: db:5e:46:72:59:06:f3:ef:13:94:85:21:b2:0e:81:28:08:84: c4:e0:93:4f:8f:43:a0:51:36:ff:c4:ee:4d:db:21:c9:a5:eb: 19:b8:b3:f2:3f:b2:d3:06:59:f0:ac:3c:75:4f:c3:57:57:27: 1d:0f:51:94:f9:c1:fa:70:d9:d0:cb:47:6d:70:d1:7c:47:9d: 5f:da:99:11:58:36:cc:ff:a0:80:b0:e4:02:38:57:36:8b:d4: 55:8d:b5:fd:e9:8b:4c:fd:09:e6:80:f0:bd:56:80:be:cf:d4: 56:20:9a:50 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUdx1IgYI92g5ghd4SReklsJtn9GEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMDA4MDM1OVoX DTI2MTEwOTA4MDg1OVowMzExMC8GA1UEAxMoRTRENjJDNDI3RDc5MDUwOTRCNUJE QTZFMDc0NTM5MkQxRkVCQzAyRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOop0EM3kVMYb4EPTGF5swA8P8n9t1z/CMmK7Jxz/rypK04FhIIWzpQIw9T1 RbeTHfJY7q7F6yhFxvlJH8jayrt7PTTcVf69qgeg2KzPtf9JW58MDaDaL1pc4hRj W1uQmvfyrKMa9T6xqFODBDbk5eJ/XSdu+gny8Mlk5Kc79xgYZ3CV8s2BjvhN/6lP A6gujgJ4J5V45muXyn6vqW4XmN7g1SYME+tSE1HxOoFeHAKtIki+VzVjBxmm2yaO R2BNGPosEzDDNZERd1dzghhhHi9geCsLK8VeJjSazn2ty8hUjBgJhuvzIcx05doC 54jA4nvgCAyLlCz2c0Zt9Xef/iMCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTk1ixC fXkFCUtb2m4HRTktH+vALjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzIxMjIzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGeVczANBgkqhkiG9w0BAQsFAAOCAQEAYWtadGS62VqYnaEgwehw P5NQoX3cbPQbW9VkYyWYZcf7Ky5KjNjazWJbn5icjuTu/yIAdUjke7r6ZZ+p35t1 hqoFxlFVkzJ9Jio+0qBxwAyaJtbIcQJsT/O2F3WNhssdb/ww0nSjfCKjy4C4epjc UI50cRCN0PVl9yiMxHKokFelXQiHRmeOinK+EaUBslow215GclkG8+8TlIUhsg6B KAiExOCTT49DoFE2/8TuTdshyaXrGbiz8j+y0wZZ8Kw8dU/DV1cnHQ9RlPnB+nDZ 0MtHbXDRfEedX9qZEVg2zP+ggLDkAjhXNovUVY21/emLTP0J5oDwvVaAvs/UViCa UA== -----END CERTIFICATE-----Generated at Wed Dec 3 12:02:10 2025 by rpki-client