This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140443.roa
File: AS140443.roa (raw, json)
Hash identifier: Zbr5ZfVRgCe88QFnWf6rxImMNozxrHd4ClbMWrDfmV8=
Subject key identifier: DB:5C:74:B1:34:E0:9E:25:1C:24:B9:0C:0E:63:5E:42:74:C4:77:FB
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 25ABA101096118D20B4E3CF9CA5AACA37731576B
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140443.roa
Signing time: Tue 23 Dec 2025 04:00:00 +0000
ROA not before: Tue 23 Dec 2025 03:55:00 +0000
ROA not after: Tue 22 Dec 2026 04:00:00 +0000
asID: 140443
IP address blocks: 103.160.62.0/23 maxlen: 24
103.173.74.0/23 maxlen: 24
103.178.152.0/24 maxlen: 24
103.178.153.0/24 maxlen: 24
2001:df1:ff40::/48 maxlen: 48
2001:df4:f80::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 17:20:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:ab:a1:01:09:61:18:d2:0b:4e:3c:f9:ca:5a:ac:a3:77:31:57:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Dec 23 03:55:00 2025 GMT
Not After : Dec 22 04:00:00 2026 GMT
Subject: CN=DB5C74B134E09E251C24B90C0E635E4274C477FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fa:e3:46:b5:58:60:df:3a:05:05:18:b7:e8:
55:0b:3a:1d:4f:27:4c:e4:97:6d:ff:4c:a6:7d:b8:
53:e3:a2:20:4c:e4:fc:e6:97:e1:5a:5a:42:2e:33:
20:c1:dd:13:37:0e:3c:a8:e9:2e:a8:38:ff:72:eb:
4a:e2:72:33:b2:47:a9:10:2e:1a:35:ec:25:18:71:
3f:40:a5:38:6d:1b:97:85:ec:ec:52:5b:25:d6:33:
9f:27:56:0c:af:68:aa:d4:6b:4a:8a:6a:8d:21:08:
dd:dc:1f:17:37:ad:18:df:ab:bf:72:04:a9:8a:47:
35:d1:75:21:f2:a8:46:70:de:94:53:6c:c3:38:9c:
13:49:84:44:e7:70:68:23:7f:5b:3c:5b:f7:a8:d4:
31:16:1c:43:6b:9f:45:d9:32:f5:8f:c5:2f:c5:61:
d3:8f:44:fc:29:0e:9a:ef:21:a0:a8:d6:1c:59:94:
6f:5a:29:bf:81:69:a4:4b:2c:51:9d:46:9c:d2:8a:
75:6f:ab:fb:64:b4:6a:2e:0f:d5:23:3c:51:5b:08:
69:75:ab:7f:54:41:b6:15:a1:36:16:39:2c:35:ac:
5e:35:05:07:52:a1:ca:8a:8e:0f:63:f5:95:e0:a4:
1d:ea:fb:b5:ae:d1:c6:39:4e:06:6b:27:11:2b:a9:
7d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:5C:74:B1:34:E0:9E:25:1C:24:B9:0C:0E:63:5E:42:74:C4:77:FB
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140443.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.160.62.0/23
103.173.74.0/23
103.178.152.0/23
IPv6:
2001:df1:ff40::/48
2001:df4:f80::/48
Signature Algorithm: sha256WithRSAEncryption
54:22:cd:6f:0d:4a:4b:7a:ec:09:85:ff:92:ac:cc:d4:c8:b7:
49:2e:0a:a9:80:35:94:9a:d6:c0:b0:c3:2c:65:86:b6:ef:77:
5e:0a:ae:f3:77:81:a3:ba:22:17:41:16:8c:79:ae:b2:72:43:
79:f5:0c:74:ac:ce:6d:64:0a:61:17:67:30:64:90:bb:5d:27:
93:81:45:5b:66:9f:b5:f7:29:b5:66:ee:77:9e:75:75:07:66:
42:1d:ff:d5:35:fe:ce:75:7a:a8:12:a7:2b:77:a5:7c:d7:bf:
7c:1b:3b:26:44:c7:5a:9d:e1:7a:ec:db:54:9f:76:d8:bb:e8:
bb:f4:79:83:c0:b4:5d:18:c5:96:3a:a0:47:44:05:46:fd:64:
73:95:9f:5e:0a:24:8a:0b:ea:90:4f:cc:e3:11:fb:b4:17:54:
15:d6:71:e4:8d:e7:42:9c:df:98:3e:e0:03:a8:01:e6:52:f0:
cb:0f:ab:54:ad:c6:12:86:24:6c:5c:b6:ea:c9:f3:4f:24:b6:
79:62:45:30:f9:8b:02:5f:8d:dd:d8:99:76:2a:52:0f:30:f2:
8c:18:db:df:c9:b5:c4:93:2a:9d:b0:07:f1:b1:a3:92:65:96:
ae:30:54:64:59:55:9b:9f:38:0b:74:18:fc:c4:c2:37:97:19:
07:c5:86:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 20:21:05 2025 by rpki-client