This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138854.roa File: AS138854.roa (raw, json) Hash identifier: x3m63YgCxKvbE0kX8tUjiFl/7ludgF0TMZ4VRDM8Tm0= Subject key identifier: B7:D0:FF:EB:D7:36:B7:3F:5E:90:64:1B:E0:6F:49:F4:46:07:90:36 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4271901B97344A8240119C0DB56F179376CB3917 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138854.roa Signing time: Thu 11 Dec 2025 04:40:18 +0000 ROA not before: Thu 11 Dec 2025 04:35:18 +0000 ROA not after: Thu 10 Dec 2026 04:40:18 +0000 asID: 138854 IP address blocks: 103.138.218.0/23 maxlen: 24 103.178.88.0/24 maxlen: 24 103.178.89.0/24 maxlen: 24 163.61.190.0/24 maxlen: 24 163.61.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 03:03:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:71:90:1b:97:34:4a:82:40:11:9c:0d:b5:6f:17:93:76:cb:39:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 11 04:35:18 2025 GMT Not After : Dec 10 04:40:18 2026 GMT Subject: CN=B7D0FFEBD736B73F5E90641BE06F49F446079036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:47:c0:4c:8f:5b:ef:fb:1a:b6:9d:af:c0:ee: 8a:71:fb:63:ff:93:55:63:09:33:10:cc:92:28:39: 6c:a0:8c:90:38:e2:05:f5:0a:87:75:2b:75:b3:8e: a8:0e:eb:50:7f:81:53:0f:a8:29:6a:b9:32:cc:59: 47:96:c4:71:39:94:80:9a:6e:4b:7f:41:ab:62:9e: a7:66:57:10:c1:fa:5e:10:2a:e1:49:6d:c5:ee:c6: 2d:28:16:38:03:2b:9f:0b:26:e8:13:2c:c2:f1:c6: 04:c3:e1:2e:49:af:12:9a:bd:ce:9b:71:1c:9a:f3: b2:48:72:f4:ab:87:e4:e7:fe:5a:41:29:e5:2d:07: af:8d:a7:9b:67:9d:e9:ab:7d:73:2c:87:17:12:f6: d5:b0:34:c6:33:ee:a8:ca:79:9b:5f:f1:72:44:aa: 96:9f:a6:52:ef:b5:93:84:a5:3a:64:d3:24:30:ac: 28:d0:1e:eb:77:0e:86:f3:8a:be:2d:d9:d6:fc:ca: b5:40:37:91:db:1d:97:54:58:94:24:59:f7:28:b0: 1e:8f:34:d7:d5:78:e5:96:f3:d6:32:37:eb:fd:09: 37:d9:d9:0f:ff:a9:8e:73:f2:88:a4:ec:df:f6:bd: 20:2f:02:f6:2a:6f:fd:a1:c3:cf:c3:73:f9:16:df: 3d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D0:FF:EB:D7:36:B7:3F:5E:90:64:1B:E0:6F:49:F4:46:07:90:36 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138854.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.138.218.0/23 103.178.88.0/23 163.61.190.0/23 Signature Algorithm: sha256WithRSAEncryption 2d:42:68:69:b0:3d:b8:f1:de:93:7c:57:05:2d:23:65:91:90: 47:8b:a2:d5:e7:c8:5b:2c:24:a7:8e:f6:9d:96:35:52:75:4a: e6:9a:7f:f9:be:87:1b:53:28:59:48:bf:95:5f:ae:59:98:5f: 10:41:e4:84:09:84:c3:07:33:a1:13:21:ef:5e:c0:25:13:3a: 00:eb:80:ae:4b:5b:b2:26:ae:38:d8:ce:10:ce:78:88:52:84: 31:11:d4:91:2d:ac:eb:09:c4:7f:05:aa:65:6f:ac:dc:63:6e: dd:09:81:b7:0a:61:e0:0c:4d:54:9e:c6:59:d7:0a:4b:9c:59: a1:ed:06:5a:ad:f8:3e:3a:36:6e:7b:24:87:d7:0c:5f:42:d8: 60:8f:b1:b7:b5:0a:7d:58:34:4e:93:ab:8d:67:0b:8d:d0:d8: 6d:5e:64:ce:f5:bc:c0:4c:cb:a1:ba:c4:1d:15:df:00:da:bc: 31:9f:e6:7d:d3:e4:4e:8e:af:7b:dc:0d:e7:00:ca:bd:c9:45: 1f:c3:71:7a:ac:88:d8:1b:bb:ae:f1:e1:d6:e3:82:d9:df:36: 24:a9:91:ae:ab:59:cb:49:c9:e5:5e:79:e1:25:6e:39:78:4c: 60:81:50:34:c7:8b:8c:32:5e:12:ca:e0:07:73:08:06:f3:da: cd:df:5f:64 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgIUQnGQG5c0SoJAEZwNtW8Xk3bLORcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIxMTA0MzUxOFoX DTI2MTIxMDA0NDAxOFowMzExMC8GA1UEAxMoQjdEMEZGRUJENzM2QjczRjVFOTA2 NDFCRTA2RjQ5RjQ0NjA3OTAzNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJtHwEyPW+/7Gradr8DuinH7Y/+TVWMJMxDMkig5bKCMkDjiBfUKh3UrdbOO qA7rUH+BUw+oKWq5MsxZR5bEcTmUgJpuS39Bq2Kep2ZXEMH6XhAq4Ultxe7GLSgW OAMrnwsm6BMswvHGBMPhLkmvEpq9zptxHJrzskhy9KuH5Of+WkEp5S0Hr42nm2ed 6at9cyyHFxL21bA0xjPuqMp5m1/xckSqlp+mUu+1k4SlOmTTJDCsKNAe63cOhvOK vi3Z1vzKtUA3kdsdl1RYlCRZ9yiwHo8019V45Zbz1jI36/0JN9nZD/+pjnPyiKTs 3/a9IC8C9ipv/aHDz8Nz+RbfPbkCAwEAAaOCAdwwggHYMB0GA1UdDgQWBBS30P/r 1za3P16QZBvgb0n0RgeQNjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzODg1NC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBow GAQCAAEwEgMEAWeK2gMEAWeyWAMEAaM9vjANBgkqhkiG9w0BAQsFAAOCAQEALUJo abA9uPHek3xXBS0jZZGQR4ui1efIWywkp472nZY1UnVK5pp/+b6HG1MoWUi/lV+u WZhfEEHkhAmEwwczoRMh717AJRM6AOuArktbsiauONjOEM54iFKEMRHUkS2s6wnE fwWqZW+s3GNu3QmBtwph4AxNVJ7GWdcKS5xZoe0GWq34Pjo2bnskh9cMX0LYYI+x t7UKfVg0TpOrjWcLjdDYbV5kzvW8wEzLobrEHRXfANq8MZ/mfdPkTo6ve9wN5wDK vclFH8NxeqyI2Bu7rvHh1uOC2d82JKmRrqtZy0nJ5V554SVuOXhMYIFQNMeLjDJe EsrgB3MIBvPazd9fZA== -----END CERTIFICATE-----Generated at Tue Dec 16 23:21:51 2025 by rpki-client