This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133364.roa File: AS133364.roa (raw, json) Hash identifier: tAz61fErR934lKg9ffMVYWzTu1xNZZ4fHG8l3R2VDtc= Subject key identifier: 4A:C6:0D:32:89:3E:4D:C3:E0:7D:B2:AA:E6:AA:48:B8:83:6A:C2:8C Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3F452DAC264E435103A159F27E7FF468AA40F0DA Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133364.roa Signing time: Wed 24 Dec 2025 11:27:02 +0000 ROA not before: Wed 24 Dec 2025 11:22:02 +0000 ROA not after: Wed 23 Dec 2026 11:27:02 +0000 asID: 133364 IP address blocks: 103.36.14.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:45:2d:ac:26:4e:43:51:03:a1:59:f2:7e:7f:f4:68:aa:40:f0:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 24 11:22:02 2025 GMT Not After : Dec 23 11:27:02 2026 GMT Subject: CN=4AC60D32893E4DC3E07DB2AAE6AA48B8836AC28C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5f:ef:e0:62:66:01:5d:3a:f0:6c:79:41:df: 64:a1:43:60:5a:71:d5:8f:b5:36:ee:a1:f3:d7:c4: c6:0f:07:c8:61:eb:b3:4a:c2:ba:fb:49:14:7b:14: b6:47:f7:76:89:88:9f:75:c6:64:85:25:ab:2d:ba: 49:20:3a:1e:ed:02:89:25:31:2b:7c:08:4e:55:ef: 3c:35:7e:9d:36:1b:cf:e9:c6:14:18:b9:b2:66:6f: 10:ad:fd:e2:f3:cd:12:ad:03:59:f7:82:05:81:fd: 16:a1:00:74:3b:e9:e1:d0:43:a7:6d:cd:7f:28:f2: 02:98:1d:7d:61:96:c1:41:b1:b1:03:07:fb:49:80: 75:09:8f:71:be:e5:24:a1:94:7d:80:0a:e8:e9:bc: d5:0d:9c:69:7c:8f:84:1a:26:1f:c7:35:2e:90:94: 05:14:01:ad:f2:37:3d:88:2f:c3:9f:27:a1:09:20: c7:2d:21:bb:57:e1:a8:3a:f6:4c:42:66:44:4d:0e: 3b:dc:80:ac:36:69:b6:dd:ac:f2:68:d3:b2:e4:cc: 61:2f:30:59:45:61:cd:2b:9e:b1:25:b5:c5:57:35: 39:a4:4f:53:3a:22:bd:2b:99:d1:dc:d0:b7:b4:62: d1:76:89:8e:bf:28:a7:3a:d9:63:18:f3:74:15:db: ab:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C6:0D:32:89:3E:4D:C3:E0:7D:B2:AA:E6:AA:48:B8:83:6A:C2:8C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133364.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.36.14.0/23 Signature Algorithm: sha256WithRSAEncryption 42:e5:4d:43:55:58:ab:c5:fd:01:82:d6:c4:d0:75:32:1a:72: c0:3a:36:a9:b3:2d:78:4e:3c:ab:89:5c:f9:3f:f4:90:5d:c1: 25:1b:20:19:b2:2e:c2:87:26:c4:25:e1:4f:88:f6:6d:b2:d0: 24:9c:5a:c6:63:4f:1b:5f:11:48:03:4b:c0:5f:1b:a9:a3:8a: 79:64:0f:ce:b5:fb:2d:a8:43:ae:59:79:c0:da:ba:3e:d6:4e: 26:f4:34:57:66:20:e4:7d:55:84:79:64:0c:cd:50:95:4c:c2: 6b:d3:30:03:ab:c2:d4:92:99:df:e7:5e:f0:e4:21:d6:dc:67: 41:bb:b4:ae:95:0e:26:c4:4c:bb:1c:e5:c2:80:69:29:d7:93: a1:4f:7d:d6:bb:64:76:fc:7f:65:cd:95:bb:ef:5b:02:41:9d: 6a:51:86:d5:ec:bf:33:67:16:17:27:d6:02:04:46:42:0c:a3: 7d:0d:51:6c:2d:a0:e9:9f:8d:8a:c5:c9:57:86:60:50:a6:db: f1:7e:d6:96:70:b5:cb:be:96:90:03:cf:34:5a:0f:5b:5a:71: 82:ee:3d:23:95:61:7b:01:1a:23:57:cf:8a:9e:88:79:33:68: f0:d5:d6:6c:b8:74:09:ee:7a:ce:2c:bb:62:ec:54:20:db:9a: 01:53:00:da -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUP0UtrCZOQ1EDoVnyfn/0aKpA8NowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIyNDExMjIwMloX DTI2MTIyMzExMjcwMlowMzExMC8GA1UEAxMoNEFDNjBEMzI4OTNFNERDM0UwN0RC MkFBRTZBQTQ4Qjg4MzZBQzI4QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM9f7+BiZgFdOvBseUHfZKFDYFpx1Y+1Nu6h89fExg8HyGHrs0rCuvtJFHsU tkf3domIn3XGZIUlqy26SSA6Hu0CiSUxK3wITlXvPDV+nTYbz+nGFBi5smZvEK39 4vPNEq0DWfeCBYH9FqEAdDvp4dBDp23NfyjyApgdfWGWwUGxsQMH+0mAdQmPcb7l JKGUfYAK6Om81Q2caXyPhBomH8c1LpCUBRQBrfI3PYgvw58noQkgxy0hu1fhqDr2 TEJmRE0OO9yArDZptt2s8mjTsuTMYS8wWUVhzSuesSW1xVc1OaRPUzoivSuZ0dzQ t7Ri0XaJjr8opzrZYxjzdBXbq80CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRKxg0y iT5Nw+B9sqrmqki4g2rCjDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzMzM2NC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWckDjANBgkqhkiG9w0BAQsFAAOCAQEAQuVNQ1VYq8X9AYLWxNB1 MhpywDo2qbMteE48q4lc+T/0kF3BJRsgGbIuwocmxCXhT4j2bbLQJJxaxmNPG18R SANLwF8bqaOKeWQPzrX7LahDrll5wNq6PtZOJvQ0V2Yg5H1VhHlkDM1QlUzCa9Mw A6vC1JKZ3+de8OQh1txnQbu0rpUOJsRMuxzlwoBpKdeToU991rtkdvx/Zc2Vu+9b AkGdalGG1ey/M2cWFyfWAgRGQgyjfQ1RbC2g6Z+NisXJV4ZgUKbb8X7WlnC1y76W kAPPNFoPW1pxgu49I5VhewEaI1fPip6IeTNo8NXWbLh0Ce56ziy7YuxUINuaAVMA 2g== -----END CERTIFICATE-----Generated at Wed Dec 24 18:32:36 2025 by rpki-client