This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136111.roa File: AS136111.roa (raw, json) Hash identifier: QSB1pBXZHcwscT/YgHeMn5c5qngUUiqVLnIbZSa/ZbA= Subject key identifier: 12:B5:4B:6E:81:DF:B3:25:4B:35:50:90:88:69:2B:E9:50:D3:BD:F8 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2405EC3A46279A7785984FA1E488DBA6368EEC28 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136111.roa Signing time: Wed 10 Dec 2025 04:02:34 +0000 ROA not before: Wed 10 Dec 2025 03:57:34 +0000 ROA not after: Wed 09 Dec 2026 04:02:34 +0000 asID: 136111 IP address blocks: 103.94.212.0/24 maxlen: 24 103.138.58.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 15:22:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:05:ec:3a:46:27:9a:77:85:98:4f:a1:e4:88:db:a6:36:8e:ec:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 10 03:57:34 2025 GMT Not After : Dec 9 04:02:34 2026 GMT Subject: CN=12B54B6E81DFB3254B35509088692BE950D3BDF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5e:4a:9e:07:c6:c1:27:10:f4:9a:a9:26:96: 7a:26:21:e4:eb:77:c1:1f:e5:c4:5d:0c:98:9c:86: 76:80:8d:81:b3:6e:60:71:03:86:b1:c9:d3:13:79: 9a:61:fa:03:69:fa:ed:e8:50:cd:e4:cd:3f:d7:98: 76:65:81:13:19:98:24:64:1d:63:18:1e:0d:bb:82: fd:f3:2c:5a:b2:a6:16:b5:ad:72:ae:e5:1a:85:52: fd:06:e6:81:fc:1f:05:0e:65:da:30:ec:80:66:49: c5:00:e4:d7:f5:54:b1:00:75:9f:9c:18:36:f9:8a: ac:86:a8:b8:d0:2d:da:0c:cc:98:f5:ae:64:5c:bf: fa:af:47:26:52:3b:84:9f:54:f5:bb:d2:e7:97:b7: 05:19:42:0c:18:c0:6f:98:ee:e5:e5:01:66:f5:a2: 21:0b:70:89:62:c4:c7:ac:59:f7:68:a1:67:47:4b: 39:84:e6:9c:90:d5:74:0c:92:a9:49:aa:75:1a:a4: d2:fd:df:fe:3f:84:97:78:e4:61:39:d1:59:4b:a3: dc:28:9e:4b:8d:7a:25:c4:07:d7:16:f0:88:3e:0b: 08:95:44:dc:2e:85:66:a0:cb:95:4b:78:59:95:f1: 5c:10:1f:bf:ad:d5:3a:f5:cd:57:a1:f6:20:c2:9d: a7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B5:4B:6E:81:DF:B3:25:4B:35:50:90:88:69:2B:E9:50:D3:BD:F8 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136111.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.94.212.0/24 103.138.58.0/23 Signature Algorithm: sha256WithRSAEncryption 48:04:51:49:71:81:01:23:c6:3d:df:43:87:af:6a:5f:50:ee: 79:de:4d:73:02:41:b0:c5:48:7b:b3:96:c7:c3:23:20:cf:9f: 70:cf:61:26:97:b2:3f:7c:64:b3:1a:ad:67:f3:da:09:05:59: 71:f1:dd:5a:ca:5c:72:0b:cb:ee:38:3a:49:bb:cc:5e:26:b6: f0:f7:80:4b:9d:d0:18:ba:d9:51:09:df:0d:34:e9:a6:74:40: e9:ac:c2:db:b8:a1:7f:b8:73:f8:fa:ae:e0:06:94:56:ab:98: cf:c0:35:8f:ad:b6:7d:f1:aa:9a:e2:ca:05:91:bf:4b:f9:52: 63:49:0e:f8:f5:d8:72:7f:b6:cf:b9:b9:f8:4b:31:a2:e3:ee: c2:62:ed:4f:9b:34:1f:22:22:79:89:9c:11:3e:55:31:80:5e: 34:2f:d0:57:9e:cf:29:19:da:b5:a7:21:a9:f6:43:11:4c:f1: f0:60:27:8c:bb:94:ee:9d:77:e3:02:b2:e3:9f:95:14:c1:1a: 84:1c:ff:2c:49:11:d3:b5:08:8e:7d:1b:a7:22:e1:5d:18:b6: 12:d4:a5:d8:53:f5:65:21:26:d2:7d:ec:36:8c:85:af:b3:94: 13:e9:94:6d:13:b5:c2:06:f0:76:c9:9c:2a:3c:72:31:da:60: 89:b6:0b:c8 -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUJAXsOkYnmneFmE+h5IjbpjaO7CgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIxMDAzNTczNFoX DTI2MTIwOTA0MDIzNFowMzExMC8GA1UEAxMoMTJCNTRCNkU4MURGQjMyNTRCMzU1 MDkwODg2OTJCRTk1MEQzQkRGODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALZeSp4HxsEnEPSaqSaWeiYh5Ot3wR/lxF0MmJyGdoCNgbNuYHEDhrHJ0xN5 mmH6A2n67ehQzeTNP9eYdmWBExmYJGQdYxgeDbuC/fMsWrKmFrWtcq7lGoVS/Qbm gfwfBQ5l2jDsgGZJxQDk1/VUsQB1n5wYNvmKrIaouNAt2gzMmPWuZFy/+q9HJlI7 hJ9U9bvS55e3BRlCDBjAb5ju5eUBZvWiIQtwiWLEx6xZ92ihZ0dLOYTmnJDVdAyS qUmqdRqk0v3f/j+El3jkYTnRWUuj3CieS416JcQH1xbwiD4LCJVE3C6FZqDLlUt4 WZXxXBAfv63VOvXNV6H2IMKdpwECAwEAAaOCAdYwggHSMB0GA1UdDgQWBBQStUtu gd+zJUs1UJCIaSvpUNO9+DAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNjExMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAGde1AMEAWeKOjANBgkqhkiG9w0BAQsFAAOCAQEASARRSXGBASPG Pd9Dh69qX1Dued5NcwJBsMVIe7OWx8MjIM+fcM9hJpeyP3xksxqtZ/PaCQVZcfHd WspccgvL7jg6SbvMXia28PeAS53QGLrZUQnfDTTppnRA6azC27ihf7hz+Pqu4AaU VquYz8A1j622ffGqmuLKBZG/S/lSY0kO+PXYcn+2z7m5+EsxouPuwmLtT5s0HyIi eYmcET5VMYBeNC/QV57PKRnatachqfZDEUzx8GAnjLuU7p134wKy45+VFMEahBz/ LEkR07UIjn0bpyLhXRi2EtSl2FP1ZSEm0n3sNoyFr7OUE+mUbRO1wgbwdsmcKjxy MdpgibYLyA== -----END CERTIFICATE-----Generated at Wed Dec 17 11:20:50 2025 by rpki-client