This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55002.roa File: AS55002.roa (raw, json) Hash identifier: AKtSBLOD6Ty7hH5yWYjsESHtdmQ2R01nUWTOWWhUfZI= Subject key identifier: BD:87:DD:06:85:69:F4:57:D0:8F:FE:CB:AA:65:DE:27:0D:37:63:AD Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2351E503272219E0B131AAECAC74CACE2EC8C3E1 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55002.roa Signing time: Wed 12 Nov 2025 14:25:03 +0000 ROA not before: Wed 12 Nov 2025 14:20:03 +0000 ROA not after: Wed 11 Nov 2026 14:25:03 +0000 asID: 55002 IP address blocks: 103.209.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:51:e5:03:27:22:19:e0:b1:31:aa:ec:ac:74:ca:ce:2e:c8:c3:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 12 14:20:03 2025 GMT Not After : Nov 11 14:25:03 2026 GMT Subject: CN=BD87DD068569F457D08FFECBAA65DE270D3763AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a4:94:9c:e9:02:31:39:39:c5:ff:68:3c:ec: dd:4f:2f:04:c9:5a:18:6e:99:fb:7f:64:3b:b4:31: f6:5d:53:98:3e:f3:cc:b3:6f:e7:81:eb:84:ec:79: 64:18:ef:3a:08:d0:39:4c:39:30:7e:45:36:b2:48: c4:a2:2b:56:1e:f0:41:e7:88:ee:24:5f:12:69:ed: f7:c5:50:1b:69:c3:a7:5c:52:99:1a:56:95:33:7b: 92:79:1d:72:45:e2:4e:92:fa:49:a6:44:70:e9:df: 54:13:79:83:28:dc:84:8c:68:fb:5c:65:69:4b:c6: 2e:4f:52:89:65:2e:ff:a7:aa:cd:68:e6:b4:27:d4: 8d:64:ae:bb:d5:cf:d8:25:33:51:56:28:6d:2e:43: ee:5c:33:e7:45:37:f2:70:f2:c7:6f:3b:67:38:d2: 51:b0:16:7a:65:ba:e1:af:37:88:53:ba:40:f6:e8: 16:c3:aa:64:c8:6f:c8:9c:06:31:98:47:5d:f6:f9: a1:11:f5:cf:7c:b0:ba:3a:59:3d:1a:31:62:dc:d8: 8c:ed:7c:20:d9:45:ec:f0:53:d2:81:fd:c2:77:76: b6:24:59:26:57:99:81:10:4a:06:95:d6:ef:00:75: d2:75:cd:14:ee:f5:81:18:e4:ec:b1:f8:d9:55:0f: 41:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:87:DD:06:85:69:F4:57:D0:8F:FE:CB:AA:65:DE:27:0D:37:63:AD X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55002.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.209.7.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:a8:76:ce:ac:22:5f:8f:b7:c9:db:34:86:01:7a:f3:56:d0: 2f:94:e3:a6:fa:d2:52:0e:9c:2e:43:93:ee:aa:a4:43:80:0e: 37:c4:b0:30:de:e2:a4:b0:88:3c:b3:da:4f:20:4d:a5:bc:7b: 5b:4d:bc:52:31:37:c6:f2:76:77:f5:fc:40:0c:ff:aa:df:3a: 4e:b5:2e:9e:cc:f9:c4:bb:4b:66:59:e3:97:bd:4e:e1:6e:a5: b2:9f:32:db:3b:b6:f7:d2:9b:88:90:ee:4c:5c:f6:08:05:e4: 26:38:cb:5c:88:40:bd:ac:6f:43:74:b5:7d:e6:7b:72:76:3d: e5:6a:7b:bd:a1:3e:f5:d9:4f:51:d6:89:3c:c3:34:53:1a:13: ae:ee:4e:c7:2d:21:7e:3f:1d:ee:29:ab:f8:49:63:84:72:fa: 90:cb:d3:a0:7b:2d:20:c1:5c:74:29:67:f4:53:51:23:f7:df: a8:f3:9a:6c:8d:4b:75:0c:1a:84:42:db:77:94:91:de:1a:65: ca:14:23:08:0c:6a:fc:d5:47:43:23:84:21:02:08:be:59:40: 27:04:a9:37:f4:69:7b:ba:67:0a:be:8e:5f:86:e6:a7:53:56: fb:61:ee:5b:93:52:ba:b2:c5:91:12:e4:47:c8:2f:d5:40:70: 29:b8:36:12 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUI1HlAyciGeCxMarsrHTKzi7Iw+EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMjE0MjAwM1oX DTI2MTExMTE0MjUwM1owMzExMC8GA1UEAxMoQkQ4N0REMDY4NTY5RjQ1N0QwOEZG RUNCQUE2NURFMjcwRDM3NjNBRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALuklJzpAjE5OcX/aDzs3U8vBMlaGG6Z+39kO7Qx9l1TmD7zzLNv54HrhOx5 ZBjvOgjQOUw5MH5FNrJIxKIrVh7wQeeI7iRfEmnt98VQG2nDp1xSmRpWlTN7knkd ckXiTpL6SaZEcOnfVBN5gyjchIxo+1xlaUvGLk9SiWUu/6eqzWjmtCfUjWSuu9XP 2CUzUVYobS5D7lwz50U38nDyx287ZzjSUbAWemW64a83iFO6QPboFsOqZMhvyJwG MZhHXfb5oRH1z3ywujpZPRoxYtzYjO18INlF7PBT0oH9wnd2tiRZJleZgRBKBpXW 7wB10nXNFO71gRjk7LH42VUPQa8CAwEAAaOCAc8wggHLMB0GA1UdDgQWBBS9h90G hWn0V9CP/suqZd4nDTdjrTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzU1MDAyLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ9EHMA0GCSqGSIb3DQEBCwUAA4IBAQBeqHbOrCJfj7fJ2zSGAXrz VtAvlOOm+tJSDpwuQ5PuqqRDgA43xLAw3uKksIg8s9pPIE2lvHtbTbxSMTfG8nZ3 9fxADP+q3zpOtS6ezPnEu0tmWeOXvU7hbqWynzLbO7b30puIkO5MXPYIBeQmOMtc iEC9rG9DdLV95ntydj3lanu9oT712U9R1ok8wzRTGhOu7k7HLSF+Px3uKav4SWOE cvqQy9Ogey0gwVx0KWf0U1Ej99+o85psjUt1DBqEQtt3lJHeGmXKFCMIDGr81UdD I4QhAgi+WUAnBKk39Gl7umcKvo5fhuanU1b7Ye5bk1K6ssWREuRHyC/VQHApuDYS -----END CERTIFICATE-----Generated at Wed Dec 3 14:50:04 2025 by rpki-client