This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139984.roa File: AS139984.roa (raw, json) Hash identifier: 1Wr4g3Wi5NlAps0BR3Zo1jrw2DU+ggD0XcrI+4SKPqc= Subject key identifier: 9E:19:6C:6C:21:42:CB:BE:9B:6A:FF:3F:AB:94:06:CD:99:3F:BE:0C Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 49570312A6A80A2FBB3D6F07B1B37DD3C118D1D6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139984.roa Signing time: Wed 24 Dec 2025 09:09:55 +0000 ROA not before: Wed 24 Dec 2025 09:04:55 +0000 ROA not after: Wed 23 Dec 2026 09:09:55 +0000 asID: 139984 IP address blocks: 103.146.26.0/23 maxlen: 24 2405:9040::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:57:03:12:a6:a8:0a:2f:bb:3d:6f:07:b1:b3:7d:d3:c1:18:d1:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 24 09:04:55 2025 GMT Not After : Dec 23 09:09:55 2026 GMT Subject: CN=9E196C6C2142CBBE9B6AFF3FAB9406CD993FBE0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:66:93:67:f4:eb:14:1e:04:6c:ae:de:a8:cd: 20:9f:75:00:14:f5:dc:9c:d3:7c:e4:38:79:d3:0c: a0:ee:32:8e:c1:9e:a0:30:11:1e:8a:50:b0:f5:0a: 2f:b7:38:d6:68:3f:1e:14:44:a5:4b:f3:bb:69:d6: 44:49:e4:50:c0:b6:9b:31:de:43:e6:89:c1:53:7a: 76:2e:84:2c:42:54:e1:37:24:fd:43:19:a0:4f:f3: a6:1e:e1:ed:9d:3d:ea:7a:ac:60:cf:d5:c4:78:90: 06:f3:bd:ac:3e:84:77:26:14:00:3d:ba:0f:05:f5: d3:cc:0e:52:9d:d5:05:0a:10:7f:ae:99:fd:60:ce: d9:5a:19:57:18:d5:3d:7a:0f:c8:77:3f:dc:a8:de: 17:0f:4b:e8:5c:f1:bf:c5:fc:b5:c6:85:f3:1d:0f: 8e:7d:64:6d:f7:a8:a7:69:e0:ca:31:8b:34:cb:24: 22:7e:d6:5e:e2:b3:db:dd:e4:7c:21:2f:01:4e:f8: 40:97:b7:ea:f5:a5:10:02:90:8f:28:ce:82:cf:5b: 7d:5e:72:45:3f:c3:17:6b:0e:50:06:2e:06:cf:0f: 99:e8:fb:f1:a0:a8:7d:f1:f2:08:bc:30:b4:7c:65: a2:8f:d6:72:29:18:86:6a:aa:23:01:a4:d8:e6:e3: de:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:19:6C:6C:21:42:CB:BE:9B:6A:FF:3F:AB:94:06:CD:99:3F:BE:0C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139984.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.146.26.0/23 IPv6: 2405:9040::/32 Signature Algorithm: sha256WithRSAEncryption 01:f0:08:4b:c7:aa:9d:85:76:75:ee:40:3c:47:25:93:70:a6: 37:8f:65:2e:d6:7b:13:eb:82:27:b4:99:d3:52:fc:40:f5:8e: 4a:0e:93:0f:71:c9:68:25:0d:b7:da:31:cf:07:77:b5:fb:29: 95:55:86:1c:f4:ba:b1:24:fa:a7:23:34:f9:5b:c1:1f:ff:13: b5:58:83:14:38:50:2e:00:ae:2e:44:1a:56:3b:bb:41:1b:7d: 94:d7:a0:a0:fd:d7:cd:ca:54:fc:e4:be:8b:13:e5:64:b0:2b: 6e:44:67:33:2e:ed:45:6d:bb:7a:7a:cc:bb:6a:fd:42:f2:0e: 45:3f:8f:37:4d:7c:68:7d:49:59:6b:9f:42:42:07:61:8a:bd: 4b:dc:a9:29:dd:38:2b:37:6a:24:fa:a4:e9:c9:c6:a4:e0:58: 43:96:12:98:a9:f4:11:5f:8e:62:95:79:35:45:58:47:59:8b: cf:a5:1c:59:d0:9c:c4:2d:73:48:1a:26:55:28:0c:01:61:88: 6a:e7:1d:26:15:69:01:11:2d:e1:8a:61:f7:b7:02:76:1d:f7: c9:02:ca:8e:42:cc:ed:82:b1:6d:d5:be:4d:8c:fa:61:d8:d1: 99:f4:84:63:a6:c3:ef:1c:0f:3c:30:b4:ed:34:e4:c2:f8:ae: a7:e8:c5:ad -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUSVcDEqaoCi+7PW8HsbN908EY0dYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIyNDA5MDQ1NVoX DTI2MTIyMzA5MDk1NVowMzExMC8GA1UEAxMoOUUxOTZDNkMyMTQyQ0JCRTlCNkFG RjNGQUI5NDA2Q0Q5OTNGQkUwQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALhmk2f06xQeBGyu3qjNIJ91ABT13JzTfOQ4edMMoO4yjsGeoDARHopQsPUK L7c41mg/HhREpUvzu2nWREnkUMC2mzHeQ+aJwVN6di6ELEJU4Tck/UMZoE/zph7h 7Z096nqsYM/VxHiQBvO9rD6EdyYUAD26DwX108wOUp3VBQoQf66Z/WDO2VoZVxjV PXoPyHc/3KjeFw9L6Fzxv8X8tcaF8x0Pjn1kbfeop2ngyjGLNMskIn7WXuKz293k fCEvAU74QJe36vWlEAKQjyjOgs9bfV5yRT/DF2sOUAYuBs8Pmej78aCoffHyCLww tHxloo/WcikYhmqqIwGk2Obj3tUCAwEAAaOCAd8wggHbMB0GA1UdDgQWBBSeGWxs IULLvptq/z+rlAbNmT++DDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzOTk4NC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0w DAQCAAEwBgMEAWeSGjANBAIAAjAHAwUAJAWQQDANBgkqhkiG9w0BAQsFAAOCAQEA AfAIS8eqnYV2de5APEclk3CmN49lLtZ7E+uCJ7SZ01L8QPWOSg6TD3HJaCUNt9ox zwd3tfsplVWGHPS6sST6pyM0+VvBH/8TtViDFDhQLgCuLkQaVju7QRt9lNegoP3X zcpU/OS+ixPlZLArbkRnMy7tRW27enrMu2r9QvIORT+PN018aH1JWWufQkIHYYq9 S9ypKd04KzdqJPqk6cnGpOBYQ5YSmKn0EV+OYpV5NUVYR1mLz6UcWdCcxC1zSBom VSgMAWGIaucdJhVpAREt4Yph97cCdh33yQLKjkLM7YKxbdW+TYz6YdjRmfSEY6bD 7xwPPDC07TTkwviup+jFrQ== -----END CERTIFICATE-----Generated at Wed Dec 24 18:32:36 2025 by rpki-client