This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38156.roa File: AS38156.roa (raw, json) Hash identifier: EYmVsXrrJOIsj9ueFj9cnDrA/Htz6Jg0qCnedCnVfSk= Subject key identifier: 5C:F6:AB:79:7B:9E:94:AF:03:37:2F:74:08:8C:C9:CF:BE:C8:F6:DB Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3CB3427EADE848F651D61D53A043FD9014552706 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38156.roa Signing time: Tue 11 Nov 2025 06:00:13 +0000 ROA not before: Tue 11 Nov 2025 05:55:13 +0000 ROA not after: Tue 10 Nov 2026 06:00:13 +0000 asID: 38156 IP address blocks: 103.161.62.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:b3:42:7e:ad:e8:48:f6:51:d6:1d:53:a0:43:fd:90:14:55:27:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 11 05:55:13 2025 GMT Not After : Nov 10 06:00:13 2026 GMT Subject: CN=5CF6AB797B9E94AF03372F74088CC9CFBEC8F6DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:89:f2:29:4b:c2:51:f8:72:a8:db:ad:1b:f0: f3:0c:9c:43:ea:d9:4f:c9:5c:42:26:bf:e3:67:47: 1d:3a:c7:bd:dd:9c:e6:54:77:06:95:2e:02:c4:b8: bf:17:c2:03:32:3b:88:dc:f9:2e:2a:6d:6e:62:14: e5:29:8b:36:1b:2b:de:46:ba:10:bd:7d:ad:66:fd: 4f:1a:f1:1c:51:78:6a:b2:d7:d2:55:07:67:c9:79: c9:81:57:00:50:2a:3e:b3:a4:c7:84:e5:da:37:22: bf:82:b2:9a:a0:78:f2:ef:5f:23:cc:aa:fb:5f:9f: c9:0d:a6:82:00:76:7f:45:1f:5b:09:13:f5:6d:fa: e5:c3:9c:24:d3:6e:a4:77:81:40:ea:9c:88:45:ae: 69:74:c5:57:e8:ce:49:6e:d2:94:7d:0a:14:36:24: 6f:c6:d9:db:cb:95:1f:84:3d:0a:bf:b9:e1:3e:44: cf:1e:dc:45:74:fc:24:a6:aa:dc:d3:44:8c:77:88: d8:62:8e:57:44:d0:38:3d:70:74:52:7a:a5:73:43: 07:61:2a:12:63:76:d4:0a:d1:bc:73:f3:14:08:03: 81:9d:b4:d4:c8:8f:e1:58:16:11:f2:9f:36:6a:b6: 40:21:1a:7f:58:90:df:7c:de:6b:4d:8c:31:1f:0d: 1d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F6:AB:79:7B:9E:94:AF:03:37:2F:74:08:8C:C9:CF:BE:C8:F6:DB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38156.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.62.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:91:40:e3:19:6f:54:b2:33:64:8e:57:a4:95:79:bb:dc:e1: a8:3c:53:b8:70:a4:63:b7:3b:53:67:d2:6c:02:e7:36:40:1a: 5b:be:10:25:76:db:33:dd:a2:94:e9:f1:4e:08:96:74:ef:3d: c4:05:c1:9c:30:bc:9b:8f:98:4a:10:47:15:06:bb:c2:f2:4a: c2:b2:45:75:12:65:63:a3:ec:37:35:57:f7:fa:fe:8b:a8:44: a5:fb:0c:bb:3e:2c:ad:df:c5:12:df:cc:c2:39:64:b4:44:66: 17:d0:41:ca:34:1b:97:81:dd:b0:d6:60:d0:43:4d:80:b0:b8: bc:11:74:4f:e4:ac:03:1e:15:41:d8:e5:9b:92:30:21:4e:ee: 88:45:2f:f1:dd:91:9e:18:ea:df:d2:9a:b3:65:32:d0:6c:e0: db:4a:4c:69:ba:92:ad:0c:ad:88:aa:92:37:ed:99:92:cd:8b: 8a:f5:53:ea:72:b4:39:ba:a0:c7:75:fc:af:fc:88:4f:a3:f4: 0b:3b:a6:26:77:32:9e:94:26:8d:36:40:f2:4a:57:53:ab:5e: 33:1b:42:76:f0:3d:1d:d8:ae:7b:90:12:14:4c:62:80:c5:0b: 83:29:88:9f:92:6b:38:53:ea:2a:78:62:96:79:11:ee:52:06: a9:84:79:a5 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUPLNCfq3oSPZR1h1ToEP9kBRVJwYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTA1NTUxM1oX DTI2MTExMDA2MDAxM1owMzExMC8GA1UEAxMoNUNGNkFCNzk3QjlFOTRBRjAzMzcy Rjc0MDg4Q0M5Q0ZCRUM4RjZEQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKWJ8ilLwlH4cqjbrRvw8wycQ+rZT8lcQia/42dHHTrHvd2c5lR3BpUuAsS4 vxfCAzI7iNz5LiptbmIU5SmLNhsr3ka6EL19rWb9TxrxHFF4arLX0lUHZ8l5yYFX AFAqPrOkx4Tl2jciv4KymqB48u9fI8yq+1+fyQ2mggB2f0UfWwkT9W365cOcJNNu pHeBQOqciEWuaXTFV+jOSW7SlH0KFDYkb8bZ28uVH4Q9Cr+54T5Ezx7cRXT8JKaq 3NNEjHeI2GKOV0TQOD1wdFJ6pXNDB2EqEmN21ArRvHPzFAgDgZ201MiP4VgWEfKf Nmq2QCEaf1iQ33zea02MMR8NHbkCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBRc9qt5 e56UrwM3L3QIjMnPvsj22zAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzM4MTU2LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ6E+MA0GCSqGSIb3DQEBCwUAA4IBAQBtkUDjGW9UsjNkjleklXm7 3OGoPFO4cKRjtztTZ9JsAuc2QBpbvhAldtsz3aKU6fFOCJZ07z3EBcGcMLybj5hK EEcVBrvC8krCskV1EmVjo+w3NVf3+v6LqESl+wy7Piyt38US38zCOWS0RGYX0EHK NBuXgd2w1mDQQ02AsLi8EXRP5KwDHhVB2OWbkjAhTu6IRS/x3ZGeGOrf0pqzZTLQ bODbSkxpupKtDK2IqpI37ZmSzYuK9VPqcrQ5uqDHdfyv/IhPo/QLO6YmdzKelCaN NkDySldTq14zG0J28D0d2K57kBIUTGKAxQuDKYifkms4U+oqeGKWeRHuUgaphHml -----END CERTIFICATE-----Generated at Wed Dec 3 13:16:09 2025 by rpki-client