This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS46059.roa
File: AS46059.roa (raw, json)
Hash identifier: z2Qzfd7C27mYA+M97ffH/Pn4YW4VudsGcBVPOcgHNYA=
Subject key identifier: CD:23:D0:A8:6C:13:45:2A:5B:44:30:5A:E4:36:B0:3E:07:70:AB:34
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 75C5507B8FCF84B31D16192CA936B84CCBDC82EB
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS46059.roa
Signing time: Tue 18 Nov 2025 04:00:00 +0000
ROA not before: Tue 18 Nov 2025 03:55:00 +0000
ROA not after: Tue 17 Nov 2026 04:00:00 +0000
asID: 46059
IP address blocks: 103.208.94.0/23 maxlen: 24
202.52.137.0/24 maxlen: 24
2405:c240::/32 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 12:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:c5:50:7b:8f:cf:84:b3:1d:16:19:2c:a9:36:b8:4c:cb:dc:82:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Nov 18 03:55:00 2025 GMT
Not After : Nov 17 04:00:00 2026 GMT
Subject: CN=CD23D0A86C13452A5B44305AE436B03E0770AB34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:63:81:23:84:cf:c5:91:b1:fa:a8:24:c1:12:
49:d3:fc:16:d3:2b:19:a3:14:b1:c1:0f:69:a4:5e:
00:de:da:f2:91:f4:b2:e0:1d:17:cb:26:02:22:06:
8a:9e:19:0d:c1:27:d8:a0:8d:3a:f7:e4:d3:ae:57:
12:18:2c:e4:e9:72:47:73:20:41:a4:3c:42:10:58:
ad:f3:a4:6a:ad:10:75:7f:52:e9:62:8c:8a:d1:29:
dc:5b:ce:f7:12:1c:17:f1:f5:48:08:68:eb:e8:93:
a0:77:11:a3:ad:f7:e7:82:7a:cc:06:46:82:5b:e5:
5b:0b:b9:6e:9a:dc:c7:4d:fc:46:38:99:b5:a2:fd:
70:58:c8:a6:5d:9c:ca:c8:f1:ff:fe:31:bb:11:50:
a6:04:f0:c0:10:fc:d5:ba:0f:08:f0:91:73:92:6e:
0c:bd:c0:52:44:9b:b9:fd:ea:c4:90:f4:a0:ad:fd:
9c:b7:b0:1d:c1:eb:fe:ea:79:24:31:38:4d:f6:b2:
d9:ae:50:84:fa:49:a6:3b:97:44:78:41:fa:5e:31:
94:98:d4:54:cb:be:4e:0b:32:18:cd:4b:e3:d9:fc:
a2:38:31:a7:d2:d9:24:02:7f:0e:b5:88:07:da:7f:
ec:a1:da:cd:ab:9d:9c:07:5e:71:b3:ba:c9:5b:f2:
d7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:23:D0:A8:6C:13:45:2A:5B:44:30:5A:E4:36:B0:3E:07:70:AB:34
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS46059.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.208.94.0/23
202.52.137.0/24
IPv6:
2405:c240::/32
Signature Algorithm: sha256WithRSAEncryption
66:fc:b6:13:15:17:f0:2e:26:df:d1:21:ba:5a:6c:55:42:3b:
0b:3f:2c:2d:b9:3a:8c:24:56:e8:66:56:7f:0b:be:cb:39:a0:
8c:23:35:d4:ec:9b:32:5c:52:6b:2a:9a:7d:78:06:f7:62:a8:
06:e3:8e:58:ed:89:91:8e:07:0d:d4:20:c6:a7:22:3f:3a:3f:
8e:d9:02:9c:91:78:93:64:63:f0:da:18:f6:c0:2e:f3:a4:0a:
51:34:72:c2:55:28:40:96:bf:06:28:5c:bc:08:15:f4:cf:3d:
cf:d5:ca:11:44:38:45:69:ef:39:6d:51:e5:d4:0b:36:47:12:
ef:44:0d:10:f8:64:7c:8f:47:0a:ac:3e:6e:56:4e:25:ec:a9:
e3:f1:44:49:a7:00:69:5a:ea:e5:07:26:6b:5b:37:24:62:09:
f0:55:d4:1c:a5:6c:1e:71:0a:22:87:f2:1e:60:36:62:88:ac:
d5:2a:d5:95:5b:5a:6c:a5:67:bc:7c:f3:ec:9f:62:e9:8a:e3:
66:52:95:61:12:1d:c6:a9:5c:7b:09:36:93:31:bf:69:c9:ef:
d4:cb:f8:c6:ea:b4:df:33:13:da:7c:89:a8:c2:9f:c8:a7:68:
c5:3b:fa:1b:e8:77:fa:b5:91:9a:85:18:9e:84:3b:f1:84:30:
21:47:31:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:14:49 2025 by rpki-client