This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55672.roa File: AS55672.roa (raw, json) Hash identifier: 2rAyzOm0/igqDqOcRgbtArerzw/wFRI6G91qQqWFmVc= Subject key identifier: BB:DE:2B:82:F6:11:34:DF:0D:5A:54:41:8A:F6:6D:99:09:5F:21:4F Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 44A2099BA590567809711D854A41F967016B3085 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55672.roa Signing time: Tue 11 Nov 2025 06:00:01 +0000 ROA not before: Tue 11 Nov 2025 05:55:01 +0000 ROA not after: Tue 10 Nov 2026 06:00:01 +0000 asID: 55672 IP address blocks: 103.162.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:a2:09:9b:a5:90:56:78:09:71:1d:85:4a:41:f9:67:01:6b:30:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 11 05:55:01 2025 GMT Not After : Nov 10 06:00:01 2026 GMT Subject: CN=BBDE2B82F61134DF0D5A54418AF66D99095F214F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:dc:51:76:ee:8d:84:3e:e2:df:a3:86:c3:2c: 65:c5:b2:50:02:3d:ea:ae:93:92:ea:4d:31:3d:87: ea:7d:2b:45:b7:fe:2e:2e:bd:43:a5:0a:31:00:86: a5:c1:64:88:fb:f6:d0:fc:4f:5c:70:93:5e:d6:e8: 1a:7b:1f:0c:48:6f:d9:ff:c9:69:59:33:12:21:be: 54:e0:93:5c:fb:87:a6:83:54:f7:54:49:94:1f:ad: be:77:88:6a:68:85:8f:1a:0a:73:e0:55:98:d4:bd: 59:93:8e:87:68:02:6d:6a:a7:ee:c0:71:65:54:2b: a8:2f:c1:1e:71:d8:4e:35:9f:ab:f0:fc:72:05:3a: ca:5b:2c:5e:83:46:5f:1b:75:48:3a:06:ce:92:e1: 89:c5:46:7f:d5:f8:0e:5e:32:37:1c:a5:ae:9f:ed: f8:a5:90:8c:ae:74:07:82:73:02:6a:40:d6:5b:02: 87:db:f0:db:01:c7:42:48:d1:90:8b:79:70:9c:6f: e8:70:16:01:43:ec:e4:06:f7:99:02:79:c9:bf:5f: ae:ee:28:ee:ad:56:3e:4c:20:00:8d:e3:12:26:0f: 46:bf:6e:b2:1c:f0:f6:37:8e:68:ad:b3:54:d9:b2: 98:ba:0d:b7:f9:a5:e9:66:b8:d0:1d:0d:01:09:1e: 3a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:DE:2B:82:F6:11:34:DF:0D:5A:54:41:8A:F6:6D:99:09:5F:21:4F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55672.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.251.0/24 Signature Algorithm: sha256WithRSAEncryption 72:76:48:ff:cd:63:7e:6a:8e:3e:33:7c:f6:dd:30:0d:03:ad: 2f:bf:51:a1:37:d0:e7:83:39:1b:3f:3f:ec:35:c6:72:da:7f: ec:46:0a:0d:3c:1e:73:c5:d6:5b:07:6d:63:9c:24:1a:f5:c5: 72:f4:5b:f1:bf:7b:19:75:08:ef:f5:04:32:b5:4e:fd:f3:5d: 96:8b:fe:74:22:81:fc:3f:1c:88:ab:39:b5:91:45:18:59:fb: 9a:95:a1:52:11:3d:37:89:93:ee:5f:b7:44:a6:f8:3d:0f:c2: b1:70:06:c8:63:21:41:14:6e:b5:f2:b3:a5:08:3f:45:b6:b1: ed:5f:30:92:27:ac:ea:d1:44:21:be:74:e5:23:6a:2e:09:0e: 99:49:f5:bc:b6:c1:87:f8:d1:bf:a4:e8:e7:da:e6:23:ff:01: 0d:5d:2c:42:81:4d:fc:bd:b0:86:67:f7:4b:5e:c9:51:8b:7e: d5:7d:31:79:a1:dc:2e:94:c5:a6:f5:83:a5:6f:e3:a8:94:7e: 3b:35:3e:68:d1:ff:0e:17:71:37:0c:0a:5d:54:eb:b1:d8:51: b9:3d:6f:5d:b9:57:a5:aa:9f:90:7d:00:ca:b3:15:a1:15:39: 70:3b:f7:00:18:f2:a5:73:41:6d:79:8d:d5:2c:fb:2d:9a:0e: ef:d3:bb:eb -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIURKIJm6WQVngJcR2FSkH5ZwFrMIUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTA1NTUwMVoX DTI2MTExMDA2MDAwMVowMzExMC8GA1UEAxMoQkJERTJCODJGNjExMzRERjBENUE1 NDQxOEFGNjZEOTkwOTVGMjE0RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKrcUXbujYQ+4t+jhsMsZcWyUAI96q6TkupNMT2H6n0rRbf+Li69Q6UKMQCG pcFkiPv20PxPXHCTXtboGnsfDEhv2f/JaVkzEiG+VOCTXPuHpoNU91RJlB+tvneI amiFjxoKc+BVmNS9WZOOh2gCbWqn7sBxZVQrqC/BHnHYTjWfq/D8cgU6ylssXoNG Xxt1SDoGzpLhicVGf9X4Dl4yNxylrp/t+KWQjK50B4JzAmpA1lsCh9vw2wHHQkjR kIt5cJxv6HAWAUPs5Ab3mQJ5yb9fru4o7q1WPkwgAI3jEiYPRr9ushzw9jeOaK2z VNmymLoNt/ml6Wa40B0NAQkeOqcCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBS73iuC 9hE03w1aVEGK9m2ZCV8hTzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzU1NjcyLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ6L7MA0GCSqGSIb3DQEBCwUAA4IBAQBydkj/zWN+ao4+M3z23TAN A60vv1GhN9DngzkbPz/sNcZy2n/sRgoNPB5zxdZbB21jnCQa9cVy9Fvxv3sZdQjv 9QQytU79812Wi/50IoH8PxyIqzm1kUUYWfualaFSET03iZPuX7dEpvg9D8KxcAbI YyFBFG618rOlCD9FtrHtXzCSJ6zq0UQhvnTlI2ouCQ6ZSfW8tsGH+NG/pOjn2uYj /wENXSxCgU38vbCGZ/dLXslRi37VfTF5odwulMWm9YOlb+OolH47NT5o0f8OF3E3 DApdVOux2FG5PW9duVelqp+QfQDKsxWhFTlwO/cAGPKlc0FteY3VLPstmg7v07vr -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:58 2025 by rpki-client