This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38505.roa File: AS38505.roa (raw, json) Hash identifier: otjjCVxc4bN+G865aUqCDq+ZwC6WexvgznHTrboPbdM= Subject key identifier: 1A:EF:1A:BA:E2:8B:0F:CD:DA:96:2A:2D:68:92:02:96:EA:37:6C:38 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4D13BE7393C49678835A83CE0FDA8983F30EB259 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38505.roa Signing time: Tue 11 Nov 2025 06:00:01 +0000 ROA not before: Tue 11 Nov 2025 05:55:01 +0000 ROA not after: Tue 10 Nov 2026 06:00:01 +0000 asID: 38505 IP address blocks: 103.11.186.0/23 maxlen: 24 203.217.132.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:13:be:73:93:c4:96:78:83:5a:83:ce:0f:da:89:83:f3:0e:b2:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 11 05:55:01 2025 GMT Not After : Nov 10 06:00:01 2026 GMT Subject: CN=1AEF1ABAE28B0FCDDA962A2D68920296EA376C38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:99:6f:4a:78:a2:2d:87:b1:c0:91:26:1f:ee: 06:b0:c9:40:13:d9:a1:3a:e3:b1:04:7e:d5:95:a6: ff:b4:25:17:96:d2:4c:52:a3:99:0f:6f:66:96:56: 1d:0a:26:32:89:07:10:04:17:85:c5:4d:e8:0b:4d: 4b:2d:f9:4d:86:28:9b:5a:07:88:77:4a:f8:e1:ba: 0d:2c:a2:18:81:83:93:c6:d4:27:7d:a0:69:5d:76: 7f:c7:b1:38:f5:61:1e:df:45:26:00:7f:82:cd:ae: 6b:e4:5e:b3:9e:70:3b:04:44:65:59:0f:ef:4e:66: 70:f3:ee:6d:91:67:f0:6d:6f:35:07:e0:45:0c:ae: d7:1e:11:64:00:81:89:ab:ef:de:47:40:c8:9b:a9: 00:a1:b0:2b:6e:66:0d:1b:7e:f8:e9:30:a1:4d:5d: bc:4b:be:7b:8b:5d:1f:da:64:9f:f4:10:f1:96:18: c4:7c:f1:be:23:24:9b:9b:4f:e5:44:b1:40:93:77: b8:f1:8f:73:e1:5f:7c:62:53:89:f4:84:86:0c:01: 32:73:fd:a9:de:4c:f0:60:63:1d:cb:7c:19:8c:17: b9:5e:67:58:dd:c5:54:2f:8f:5e:0f:c1:1f:98:54: 41:4d:14:f5:d7:f6:37:ba:f9:d4:98:8e:c2:66:85: 56:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:EF:1A:BA:E2:8B:0F:CD:DA:96:2A:2D:68:92:02:96:EA:37:6C:38 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38505.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.11.186.0/23 203.217.132.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:68:82:07:b2:b1:f0:53:fc:56:94:37:ee:0d:10:0b:ac:77: c8:00:07:76:2b:3c:74:49:ce:d2:3b:6d:27:e2:ec:e7:21:d2: 63:c4:71:81:7e:de:13:eb:a3:ed:2c:7b:8f:fa:5f:50:15:22: 7f:0a:4f:24:ee:26:cf:b9:50:76:57:66:10:9b:ff:1d:6b:03: 63:71:4b:b7:fd:0a:aa:89:ee:53:a6:4e:0b:6c:39:52:0c:bc: fe:52:e0:be:aa:93:64:10:83:6f:88:ce:1b:8c:a1:55:e1:dc: a2:78:3e:a2:15:2b:69:32:05:dc:2e:99:a2:f1:b1:ea:55:ad: d0:3c:62:ff:38:16:15:3c:15:5b:6f:f6:88:d1:84:94:4e:17: 3a:89:7b:59:70:39:ab:27:22:92:0a:45:0e:c7:44:31:8a:34: 30:47:9b:4c:c4:c9:9c:08:93:d5:0c:67:75:f0:64:97:ae:44: 39:69:d0:8a:09:b5:cb:31:4e:11:a9:0a:75:ec:57:9f:44:23: 6e:67:15:df:71:f2:9e:e9:87:e2:aa:1d:1b:6b:ca:f5:ad:b1: 55:a0:10:44:a6:a0:ae:ba:9a:aa:fe:41:39:db:da:bf:dc:a0: 4e:58:13:38:c8:f9:34:a6:77:c8:cb:02:a8:64:8b:84:05:e3: 9f:0a:ca:d4 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUTRO+c5PElniDWoPOD9qJg/MOslkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTA1NTUwMVoX DTI2MTExMDA2MDAwMVowMzExMC8GA1UEAxMoMUFFRjFBQkFFMjhCMEZDRERBOTYy QTJENjg5MjAyOTZFQTM3NkMzODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKeZb0p4oi2HscCRJh/uBrDJQBPZoTrjsQR+1ZWm/7QlF5bSTFKjmQ9vZpZW HQomMokHEAQXhcVN6AtNSy35TYYom1oHiHdK+OG6DSyiGIGDk8bUJ32gaV12f8ex OPVhHt9FJgB/gs2ua+Res55wOwREZVkP705mcPPubZFn8G1vNQfgRQyu1x4RZACB iavv3kdAyJupAKGwK25mDRt++OkwoU1dvEu+e4tdH9pkn/QQ8ZYYxHzxviMkm5tP 5USxQJN3uPGPc+FffGJTifSEhgwBMnP9qd5M8GBjHct8GYwXuV5nWN3FVC+PXg/B H5hUQU0U9df2N7r51JiOwmaFVj0CAwEAAaOCAdUwggHRMB0GA1UdDgQWBBQa7xq6 4osPzdqWKi1okgKW6jdsODAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzM4NTA1LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBZwu6AwQBy9mEMA0GCSqGSIb3DQEBCwUAA4IBAQBtaIIHsrHwU/xW lDfuDRALrHfIAAd2Kzx0Sc7SO20n4uznIdJjxHGBft4T66PtLHuP+l9QFSJ/Ck8k 7ibPuVB2V2YQm/8dawNjcUu3/Qqqie5Tpk4LbDlSDLz+UuC+qpNkEINviM4bjKFV 4dyieD6iFStpMgXcLpmi8bHqVa3QPGL/OBYVPBVbb/aI0YSUThc6iXtZcDmrJyKS CkUOx0QxijQwR5tMxMmcCJPVDGd18GSXrkQ5adCKCbXLMU4RqQp17FefRCNuZxXf cfKe6Yfiqh0ba8r1rbFVoBBEpqCuupqq/kE529q/3KBOWBM4yPk0pnfIywKoZIuE BeOfCsrU -----END CERTIFICATE-----Generated at Wed Dec 3 13:15:40 2025 by rpki-client