This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/AS56242.roa
File: AS56242.roa (raw, json)
Hash identifier: JpQlm6EguumgusAuixpO/E9VZWPqiHiCL/UKJY9kd4I=
Subject key identifier: E6:A5:BE:5A:59:AA:47:9B:8C:65:67:B4:97:7E:D6:A2:4B:6F:63:D0
Certificate issuer: /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial: 1539DE59233E2B9945AB8805BCEF48F5A21E66BB
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/AS56242.roa
Signing time: Tue 09 Dec 2025 11:00:00 +0000
ROA not before: Tue 09 Dec 2025 10:55:00 +0000
ROA not after: Tue 08 Dec 2026 11:00:00 +0000
asID: 56242
IP address blocks: 101.255.170.0/23 maxlen: 23
115.124.70.0/23 maxlen: 23
115.124.70.0/24 maxlen: 24
115.124.71.0/24 maxlen: 24
202.182.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl
rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Dec 2025 08:45:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:39:de:59:23:3e:2b:99:45:ab:88:05:bc:ef:48:f5:a2:1e:66:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Validity
Not Before: Dec 9 10:55:00 2025 GMT
Not After : Dec 8 11:00:00 2026 GMT
Subject: CN=E6A5BE5A59AA479B8C6567B4977ED6A24B6F63D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:77:b3:36:4b:90:22:7f:6c:c7:7e:b0:62:35:
1b:a5:77:59:82:7d:8b:86:51:b7:7a:e5:ff:d2:a4:
59:e8:f2:2c:41:44:21:ca:ef:2d:c1:8c:97:b6:3c:
62:e5:c8:eb:b7:15:56:c2:57:ad:f5:9a:da:4b:47:
6d:a0:70:6e:6c:80:39:41:9d:d1:41:dc:23:81:e6:
44:a4:44:16:d1:ad:73:d3:82:7d:65:88:5b:79:62:
ed:f3:a3:0c:7e:d0:3c:0e:92:62:51:f6:cc:83:a9:
e5:18:a4:f2:bc:36:96:3e:87:12:98:39:63:4a:27:
94:a4:20:f1:1b:9a:76:11:f4:b0:cd:96:04:df:48:
b7:cf:0c:15:0e:a0:01:4b:98:ea:ef:79:28:c2:fb:
af:0e:c5:c8:c2:fd:e1:57:d4:d2:78:3c:fe:e6:81:
9a:7a:cc:c4:61:cb:84:0a:ec:b4:73:93:c3:1d:d5:
39:b1:52:ed:8a:18:ce:84:c8:91:cc:fd:eb:5b:d8:
bc:7e:02:51:60:42:ff:b0:a3:4a:80:ee:ac:4b:d5:
21:24:32:50:0d:f6:41:e0:1e:e5:21:52:45:28:fd:
4c:ff:72:bd:59:ff:29:1d:d6:84:c7:70:e6:23:df:
e8:76:46:92:43:37:1b:74:8b:bd:8d:44:4d:d2:67:
eb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A5:BE:5A:59:AA:47:9B:8C:65:67:B4:97:7E:D6:A2:4B:6F:63:D0
X509v3 Authority Key Identifier:
keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/AS56242.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.255.170.0/23
115.124.70.0/23
202.182.49.0/24
Signature Algorithm: sha256WithRSAEncryption
10:65:26:9a:02:5b:cf:0d:0e:a0:02:77:d8:ea:f4:5c:0c:13:
60:5c:4f:0b:bd:91:6f:c6:d6:e8:58:97:ce:8f:8c:3a:45:2a:
6b:e7:1b:83:fb:aa:2a:d5:64:2d:79:6a:9b:ac:6b:49:80:c9:
3c:64:cc:6e:50:bb:e1:da:cf:35:0e:7a:86:4a:da:c6:20:ec:
21:59:c0:95:d2:b6:90:ab:67:6f:70:61:14:15:76:ce:37:e6:
4a:4f:62:80:87:49:f2:15:40:45:37:3b:68:d8:ea:1d:16:35:
4d:bd:ca:73:30:21:20:a2:a6:99:8f:e5:71:6c:00:bf:88:1b:
1d:64:ac:69:8d:52:a9:37:87:ec:ea:b7:2a:f5:ca:cc:36:e7:
bb:57:e7:3b:a8:b7:42:4b:f0:a2:5d:63:c7:3d:36:f3:72:bd:
02:1d:09:7a:a7:93:5e:7a:b5:47:37:d5:9d:7b:1f:e3:33:a9:
3e:dc:ee:ab:e3:64:9f:d9:12:22:6a:e2:d0:96:55:6b:e2:fd:
dc:91:f9:78:1f:4d:55:3f:5a:55:3c:97:1f:88:23:88:a4:38:
42:f6:0b:50:0d:b7:a8:43:9f:51:2e:ba:a3:bf:fa:4c:9f:06:
8b:82:73:b2:98:8b:a0:37:c0:02:42:60:b5:2f:9d:cd:b4:4e:
46:b1:60:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 08:37:17 2025 by rpki-client