This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137379.roa File: AS137379.roa (raw, json) Hash identifier: YHOOgFC1fmMQlQJwbHkC9mz9k01iviz1JX3drkAB77A= Subject key identifier: 6D:D6:CF:CE:8E:D2:B3:C7:A8:F3:53:4D:30:B4:3C:23:D5:CC:64:10 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5C309BF3F21CF509A801996CFB93A637F4D029E0 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137379.roa Signing time: Wed 17 Dec 2025 08:00:00 +0000 ROA not before: Wed 17 Dec 2025 07:55:00 +0000 ROA not after: Wed 16 Dec 2026 08:00:00 +0000 asID: 137379 IP address blocks: 103.119.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 13:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:30:9b:f3:f2:1c:f5:09:a8:01:99:6c:fb:93:a6:37:f4:d0:29:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 17 07:55:00 2025 GMT Not After : Dec 16 08:00:00 2026 GMT Subject: CN=6DD6CFCE8ED2B3C7A8F3534D30B43C23D5CC6410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5f:ee:64:3b:ce:46:02:90:cb:70:77:10:c4: 01:e4:14:d9:dc:cd:49:41:3b:00:13:92:0d:5e:12: 37:df:69:4d:e8:d0:59:bd:14:30:12:1c:c7:91:86: 8b:ee:50:86:e0:59:5c:05:a3:96:a8:2b:3c:e6:f5: 5f:e8:ab:42:c9:cd:2e:a3:11:06:bb:6e:50:cb:48: 16:35:6c:b7:e5:7b:3d:3b:49:61:ab:b8:a7:64:e9: 24:ed:d9:dd:64:7b:a6:f9:12:23:85:33:b5:62:64: 3d:51:44:44:38:51:c2:e7:3a:eb:74:b5:25:f9:e5: ca:93:ef:6b:b9:4e:9b:a4:cc:47:d7:fc:26:8e:12: ca:79:bb:12:89:40:c5:16:8e:6a:ba:fb:e9:52:ac: 56:c4:f6:11:e6:b4:96:11:cb:2c:6a:01:f5:32:ab: e9:78:95:96:86:6f:46:89:fb:e9:28:f7:b8:f5:69: b7:49:c7:c9:56:45:77:93:1e:91:7d:77:4c:9a:8e: 3e:80:3a:1c:24:78:66:5a:76:a0:e9:bb:dd:c2:75: d1:7a:f7:43:a9:b3:e9:70:32:b2:f8:04:88:60:2e: 26:7f:e1:8f:14:5c:ef:ad:c4:c5:12:e6:2d:a8:04: 51:54:19:cc:5d:77:81:bd:f6:c6:e3:94:0d:12:84: 14:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D6:CF:CE:8E:D2:B3:C7:A8:F3:53:4D:30:B4:3C:23:D5:CC:64:10 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137379.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.119.138.0/24 Signature Algorithm: sha256WithRSAEncryption 23:9b:97:f8:b7:99:c3:56:43:88:3a:76:c2:50:e3:f4:63:91: b6:24:62:e3:f4:9f:c8:85:79:b9:60:50:0f:55:13:ff:de:3f: be:ac:f6:56:26:5e:7a:b1:46:47:c2:2d:0c:41:64:01:cb:8d: 66:fe:3b:a9:e9:f2:03:9f:56:8a:f5:a4:c0:66:f2:df:fb:d4: 40:af:10:bc:02:46:44:26:80:9a:90:ad:09:4c:f5:0e:5f:28: 0f:e4:6b:ec:7e:dd:61:de:50:a9:c5:be:ba:f7:8d:f7:26:fd: 2f:1b:9d:9f:28:23:66:58:d3:58:18:96:50:86:c2:8a:af:86: ca:39:0e:58:ba:93:21:2e:cb:fb:f2:46:c4:c9:3c:be:cb:56: 7b:4d:c7:4b:78:01:63:eb:36:93:a3:13:5f:bf:4f:90:eb:45: cd:72:d2:a7:61:46:24:13:d8:06:7a:0f:59:3f:52:1a:6a:20: 81:b3:0f:f9:57:8f:ed:45:f0:c9:4d:4c:9d:36:01:64:f9:de: 1a:e2:a7:9d:62:b1:68:58:aa:7c:96:b3:70:5c:7a:a4:b0:1c: 7e:38:51:bc:40:24:cb:40:ed:09:0e:ad:c4:6c:70:5b:c9:b7: 09:f3:9d:d5:e8:65:6c:67:13:82:ef:d0:b7:39:36:10:19:a5: 8a:91:1a:e1 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUXDCb8/Ic9QmoAZls+5OmN/TQKeAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIxNzA3NTUwMFoX DTI2MTIxNjA4MDAwMFowMzExMC8GA1UEAxMoNkRENkNGQ0U4RUQyQjNDN0E4RjM1 MzREMzBCNDNDMjNENUNDNjQxMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKlf7mQ7zkYCkMtwdxDEAeQU2dzNSUE7ABOSDV4SN99pTejQWb0UMBIcx5GG i+5QhuBZXAWjlqgrPOb1X+irQsnNLqMRBrtuUMtIFjVst+V7PTtJYau4p2TpJO3Z 3WR7pvkSI4UztWJkPVFERDhRwuc663S1JfnlypPva7lOm6TMR9f8Jo4Synm7EolA xRaOarr76VKsVsT2Eea0lhHLLGoB9TKr6XiVloZvRon76Sj3uPVpt0nHyVZFd5Me kX13TJqOPoA6HCR4Zlp2oOm73cJ10Xr3Q6mz6XAysvgEiGAuJn/hjxRc763ExRLm LagEUVQZzF13gb32xuOUDRKEFFcCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRt1s/O jtKzx6jzU00wtDwj1cxkEDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNzM3OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGd3ijANBgkqhkiG9w0BAQsFAAOCAQEAI5uX+LeZw1ZDiDp2wlDj 9GORtiRi4/SfyIV5uWBQD1UT/94/vqz2ViZeerFGR8ItDEFkAcuNZv47qenyA59W ivWkwGby3/vUQK8QvAJGRCaAmpCtCUz1Dl8oD+Rr7H7dYd5QqcW+uveN9yb9Lxud nygjZljTWBiWUIbCiq+GyjkOWLqTIS7L+/JGxMk8vstWe03HS3gBY+s2k6MTX79P kOtFzXLSp2FGJBPYBnoPWT9SGmoggbMP+VeP7UXwyU1MnTYBZPneGuKnnWKxaFiq fJazcFx6pLAcfjhRvEAky0DtCQ6txGxwW8m3CfOd1ehlbGcTgu/Qtzk2EBmlipEa 4Q== -----END CERTIFICATE-----Generated at Fri Dec 19 01:20:55 2025 by rpki-client