This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS46044.roa
File: AS46044.roa (raw, json)
Hash identifier: TcnM75iyB9kv8ncBUjcp0qLalOq+RrmG9PbPB5/ZlLQ=
Subject key identifier: 5B:BD:8F:A5:03:2B:3F:38:58:C2:5B:72:D8:0F:0F:B1:6B:F1:C6:9A
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 339677AEC4AEE3F49DA1715EE01864CB19A06124
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS46044.roa
Signing time: Tue 11 Nov 2025 06:00:06 +0000
ROA not before: Tue 11 Nov 2025 05:55:06 +0000
ROA not after: Tue 10 Nov 2026 06:00:06 +0000
asID: 46044
IP address blocks: 111.223.252.0/22 maxlen: 24
2405:9940::/32 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 12:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:96:77:ae:c4:ae:e3:f4:9d:a1:71:5e:e0:18:64:cb:19:a0:61:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Nov 11 05:55:06 2025 GMT
Not After : Nov 10 06:00:06 2026 GMT
Subject: CN=5BBD8FA5032B3F3858C25B72D80F0FB16BF1C69A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5e:ef:27:87:9a:cb:b4:d2:8d:25:32:9b:36:
1c:be:9d:43:66:70:98:63:df:ab:25:12:95:a8:17:
80:89:31:17:03:30:91:2d:1c:6c:73:82:a9:5f:0a:
60:9e:e3:27:cf:ab:d4:df:5e:f8:ed:cb:a4:33:1b:
97:6d:d4:c8:3d:36:1c:b8:45:25:6c:74:09:3f:f5:
7e:19:c6:d8:a5:48:2b:d0:6b:eb:af:11:00:7c:46:
6d:ae:1f:89:7a:3e:46:13:57:d9:6d:9f:ad:d6:b3:
8d:9d:96:82:e0:5a:ab:4a:66:27:de:10:4d:6f:21:
f9:bc:6f:88:f9:03:c8:0c:52:43:a9:d4:63:81:87:
f3:cc:b1:13:5d:33:fa:a1:bc:99:2b:57:4f:ab:2c:
02:96:b7:12:15:17:31:22:e9:c7:17:da:9f:d8:d0:
5e:2d:00:42:e7:aa:79:30:ef:5e:ce:7c:71:e1:2d:
1a:fc:1c:f5:6b:16:1a:32:78:22:0a:b3:88:e4:47:
a2:34:21:51:4d:3f:f9:27:eb:65:bf:d5:12:e3:72:
1b:d4:a1:9e:67:fc:16:79:ab:27:75:33:72:55:ac:
26:88:e0:1c:ae:04:7c:e1:88:0d:fe:ce:3f:82:a6:
bf:71:46:e2:97:6b:51:b6:81:d1:26:b8:1c:7b:d9:
8c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BD:8F:A5:03:2B:3F:38:58:C2:5B:72:D8:0F:0F:B1:6B:F1:C6:9A
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS46044.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
111.223.252.0/22
IPv6:
2405:9940::/32
Signature Algorithm: sha256WithRSAEncryption
4e:75:b1:f0:b4:f9:70:56:50:9f:23:b1:f4:79:02:c2:07:e8:
0f:22:a7:34:ba:1d:40:dd:cd:66:89:e4:ff:27:0c:3e:39:76:
93:eb:d8:3a:f8:da:14:88:0d:fc:6e:55:fb:1a:01:b1:96:13:
5f:fa:25:1f:28:78:c8:47:49:8a:af:a3:af:8e:51:52:b3:da:
bd:2a:17:09:8d:2a:f0:c9:2c:9c:bf:e0:77:59:34:53:ac:2f:
75:cc:64:cb:28:10:4b:9d:3c:3a:41:80:1a:38:9c:fb:79:c5:
cf:27:2a:bb:cc:96:62:76:e8:38:b0:a0:1c:6f:70:81:7a:37:
6b:86:f9:70:d2:1a:81:20:8f:4d:9f:79:18:c9:a8:b2:9c:80:
4d:fe:63:f5:38:75:45:48:bf:ab:18:c5:66:e4:27:d3:b7:aa:
05:c1:f2:35:85:bd:fe:24:16:a2:d7:59:b9:e7:ea:42:aa:16:
f3:8d:2b:fb:b8:07:06:6c:0e:68:7e:d8:cb:b7:77:e0:53:84:
f8:3b:bf:3d:fb:d3:37:74:f3:01:4f:25:3b:27:54:97:29:74:
9a:84:a5:a3:12:3a:2c:10:95:67:11:4a:ab:53:1b:0d:7c:8e:
87:83:af:4f:26:6b:6b:d1:b7:ee:2b:3b:0f:dc:c4:83:6c:25:
a4:bc:30:73
-----BEGIN CERTIFICATE-----
MIIE6zCCA9OgAwIBAgIUM5Z3rsSu4/SdoXFe4BhkyxmgYSQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTA1NTUwNloX
DTI2MTExMDA2MDAwNlowMzExMC8GA1UEAxMoNUJCRDhGQTUwMzJCM0YzODU4QzI1
QjcyRDgwRjBGQjE2QkYxQzY5QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANte7yeHmsu00o0lMps2HL6dQ2ZwmGPfqyUSlagXgIkxFwMwkS0cbHOCqV8K
YJ7jJ8+r1N9e+O3LpDMbl23UyD02HLhFJWx0CT/1fhnG2KVIK9Br668RAHxGba4f
iXo+RhNX2W2frdazjZ2WguBaq0pmJ94QTW8h+bxviPkDyAxSQ6nUY4GH88yxE10z
+qG8mStXT6ssApa3EhUXMSLpxxfan9jQXi0AQueqeTDvXs58ceEtGvwc9WsWGjJ4
IgqziORHojQhUU0/+SfrZb/VEuNyG9Shnmf8FnmrJ3UzclWsJojgHK4EfOGIDf7O
P4Kmv3FG4pdrUbaB0Sa4HHvZjBUCAwEAAaOCAd4wggHaMB0GA1UdDgQWBBRbvY+l
Ays/OFjCW3LYDw+xa/HGmjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzQ2MDQ0LnJv
YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCb9/8MA0EAgACMAcDBQAkBZlAMA0GCSqGSIb3DQEBCwUAA4IBAQBO
dbHwtPlwVlCfI7H0eQLCB+gPIqc0uh1A3c1mieT/Jww+OXaT69g6+NoUiA38blX7
GgGxlhNf+iUfKHjIR0mKr6OvjlFSs9q9KhcJjSrwySycv+B3WTRTrC91zGTLKBBL
nTw6QYAaOJz7ecXPJyq7zJZidug4sKAcb3CBejdrhvlw0hqBII9Nn3kYyaiynIBN
/mP1OHVFSL+rGMVm5CfTt6oFwfI1hb3+JBai11m55+pCqhbzjSv7uAcGbA5oftjL
t3fgU4T4O789+9M3dPMBTyU7J1SXKXSahKWjEjosEJVnEUqrUxsNfI6Hg69PJmtr
0bfuKzsP3MSDbCWkvDBz
-----END CERTIFICATE-----
Generated at Wed Dec 3 13:14:51 2025 by rpki-client