This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138089.roa File: AS138089.roa (raw, json) Hash identifier: jnwNHXpv30Z/FdtJwTZ0tM4cC9W4Hc4uQYlgpiidTSI= Subject key identifier: D4:37:93:1A:A5:7D:05:08:0E:00:46:EE:A0:BC:15:F1:FC:EE:F1:7C Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 11DFA0D4000111CCB942FF8E802A7A504B396A96 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138089.roa Signing time: Mon 15 Dec 2025 04:00:00 +0000 ROA not before: Mon 15 Dec 2025 03:55:00 +0000 ROA not after: Mon 14 Dec 2026 04:00:00 +0000 asID: 138089 IP address blocks: 103.158.13.0/24 maxlen: 24 113.192.48.0/24 maxlen: 24 210.87.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 10:04:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:df:a0:d4:00:01:11:cc:b9:42:ff:8e:80:2a:7a:50:4b:39:6a:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 15 03:55:00 2025 GMT Not After : Dec 14 04:00:00 2026 GMT Subject: CN=D437931AA57D05080E0046EEA0BC15F1FCEEF17C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:dc:2c:24:bf:43:0c:5b:38:12:b6:89:37:b5: ed:9d:26:90:3a:45:65:2d:22:2d:67:ce:5d:ea:14: 92:97:54:dd:f9:e8:3f:2c:5f:dd:0d:07:d8:e4:69: ed:c7:b8:03:23:71:5c:3f:d5:cf:47:9d:5d:19:9a: 2c:bc:93:5f:fd:a9:e2:d2:00:8b:58:13:0b:cc:71: 41:83:0b:42:17:c0:80:8a:56:4e:d4:6b:54:dd:7b: 20:68:91:e2:0b:40:82:f5:fa:b6:75:53:91:be:a0: 44:af:95:71:ed:86:6b:42:a7:0c:d3:d0:89:04:ae: 66:ef:59:ef:e0:d7:2b:a6:4f:25:65:6b:62:f8:05: 99:fe:04:e1:13:36:81:32:49:0c:f4:e9:24:d4:05: 44:9b:40:9d:ff:3f:29:d1:d4:6b:29:a2:d1:f2:a5: 49:30:9f:51:69:26:07:12:03:eb:d0:6d:64:07:70: b3:83:6c:4e:ff:94:67:e0:de:c2:66:61:d8:27:8a: e3:7e:70:11:72:f9:00:9f:71:19:4f:6c:99:13:e5: f3:d0:01:e0:7f:48:d8:bb:f0:71:ca:71:3c:34:da: 7f:3d:d1:f6:22:4c:13:22:01:9c:d8:b6:66:54:7d: 88:c6:67:f5:4d:ef:07:d2:6b:fe:6f:45:b4:d0:5d: 7f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:37:93:1A:A5:7D:05:08:0E:00:46:EE:A0:BC:15:F1:FC:EE:F1:7C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138089.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.13.0/24 113.192.48.0/24 210.87.74.0/24 Signature Algorithm: sha256WithRSAEncryption 23:bd:2f:10:15:09:3f:4c:c2:a3:77:da:39:5d:fb:74:b3:c9: 71:65:86:1b:cb:f2:cd:72:88:a7:18:5f:ce:53:89:0a:5e:81: bc:7d:40:23:37:7f:2d:1f:2a:e0:97:d5:b9:67:0f:ef:84:78: b8:9c:ef:af:46:75:ab:4a:84:67:91:0b:5e:7d:d8:c0:6d:2d: 5f:00:d4:c1:76:4b:93:77:6d:d1:b7:8c:ec:22:1c:d1:d3:e8: e1:ae:50:58:f8:d4:5e:38:12:94:56:19:c0:eb:31:dd:a9:cc: 41:3d:24:0d:67:41:d4:4b:77:53:f6:7a:5d:56:64:4d:cf:65: 80:23:87:96:e2:8d:cc:a9:10:3c:31:a1:56:2e:56:1b:b0:68: a2:7e:df:70:8e:46:3d:cf:4a:c3:33:21:69:1b:f7:85:6a:b8: 6c:ef:5f:0b:b9:1f:60:a2:8c:e0:35:8a:04:4e:0b:3d:bc:72: 0e:66:bc:32:ca:cc:03:a6:e8:98:6f:c4:7a:5f:3a:49:64:a1: 34:ee:29:16:e6:0b:e1:2e:6f:af:e9:a1:4e:f4:4d:e8:ed:f9: 13:ef:a3:67:9f:c3:af:c4:f3:0f:ac:f7:cc:0c:2d:28:2b:c7: a1:66:da:8c:6b:fe:43:4c:4e:16:c0:f4:1b:27:c6:af:73:45: e0:d1:f9:50 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgIUEd+g1AABEcy5Qv+OgCp6UEs5apYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIxNTAzNTUwMFoX DTI2MTIxNDA0MDAwMFowMzExMC8GA1UEAxMoRDQzNzkzMUFBNTdEMDUwODBFMDA0 NkVFQTBCQzE1RjFGQ0VFRjE3QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMXcLCS/QwxbOBK2iTe17Z0mkDpFZS0iLWfOXeoUkpdU3fnoPyxf3Q0H2ORp 7ce4AyNxXD/Vz0edXRmaLLyTX/2p4tIAi1gTC8xxQYMLQhfAgIpWTtRrVN17IGiR 4gtAgvX6tnVTkb6gRK+Vce2Ga0KnDNPQiQSuZu9Z7+DXK6ZPJWVrYvgFmf4E4RM2 gTJJDPTpJNQFRJtAnf8/KdHUaymi0fKlSTCfUWkmBxID69BtZAdws4NsTv+UZ+De wmZh2CeK435wEXL5AJ9xGU9smRPl89AB4H9I2LvwccpxPDTafz3R9iJMEyIBnNi2 ZlR9iMZn9U3vB9Jr/m9FtNBdf8sCAwEAAaOCAdwwggHYMB0GA1UdDgQWBBTUN5Ma pX0FCA4ARu6gvBXx/O7xfDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzODA4OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBow GAQCAAEwEgMEAGeeDQMEAHHAMAMEANJXSjANBgkqhkiG9w0BAQsFAAOCAQEAI70v EBUJP0zCo3faOV37dLPJcWWGG8vyzXKIpxhfzlOJCl6BvH1AIzd/LR8q4JfVuWcP 74R4uJzvr0Z1q0qEZ5ELXn3YwG0tXwDUwXZLk3dt0beM7CIc0dPo4a5QWPjUXjgS lFYZwOsx3anMQT0kDWdB1Et3U/Z6XVZkTc9lgCOHluKNzKkQPDGhVi5WG7Boon7f cI5GPc9KwzMhaRv3hWq4bO9fC7kfYKKM4DWKBE4LPbxyDma8MsrMA6bomG/Eel86 SWShNO4pFuYL4S5vr+mhTvRN6O35E++jZ5/Dr8TzD6z3zAwtKCvHoWbajGv+Q0xO FsD0GyfGr3NF4NH5UA== -----END CERTIFICATE-----Generated at Thu Dec 18 09:54:41 2025 by rpki-client