This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55688.roa File: AS55688.roa (raw, json) Hash identifier: RIDzUY6q3baQEZ2nLp9Cg6F/Cs8CxZpDZfOa6CcLLKo= Subject key identifier: 07:62:6B:EE:4B:71:15:74:68:AC:CA:C5:82:4E:01:30:58:82:4A:3A Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 32D873C67606D8A02B625A74C3E4186D9A347F8C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55688.roa Signing time: Tue 11 Nov 2025 06:00:18 +0000 ROA not before: Tue 11 Nov 2025 05:55:18 +0000 ROA not after: Tue 10 Nov 2026 06:00:18 +0000 asID: 55688 IP address blocks: 103.157.96.0/23 maxlen: 24 103.166.156.0/23 maxlen: 24 2406:a040:ff01::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:d8:73:c6:76:06:d8:a0:2b:62:5a:74:c3:e4:18:6d:9a:34:7f:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 11 05:55:18 2025 GMT Not After : Nov 10 06:00:18 2026 GMT Subject: CN=07626BEE4B71157468ACCAC5824E013058824A3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:68:36:b7:72:97:3c:57:33:92:b1:fc:61:5a: f6:db:e7:34:82:23:33:6f:4c:ef:3a:d1:5d:24:ba: fd:af:c3:7a:c5:93:43:8a:9c:5b:e0:2a:86:ee:03: 08:30:10:9f:fe:e6:e3:4d:f7:a3:b1:78:7a:a5:f3: c4:be:bf:57:bb:5b:6a:62:d2:9f:f4:0c:5d:c8:ef: 1f:26:b5:33:25:64:c8:02:75:f3:99:0a:0d:93:b8: 66:8e:f6:1c:eb:ea:26:24:0f:1e:d5:49:0c:51:cb: 46:8f:53:29:be:9e:f2:a3:0e:93:5c:6a:c9:56:50: 09:b5:76:70:2d:57:b1:17:34:f8:ba:86:40:ea:83: 0e:1f:99:71:ad:95:0d:d2:0a:d4:47:58:dc:e8:48: 9a:2b:17:09:bf:fd:2a:31:fa:cd:f2:48:48:10:22: e2:38:63:17:91:58:90:ce:13:7d:ef:40:2f:1b:03: c6:00:49:48:e7:01:3e:22:60:42:69:41:21:48:3a: 16:be:63:8e:67:f0:2d:ec:0c:15:3b:af:22:4b:ba: d8:9f:1a:48:56:ec:15:d8:12:f9:a0:0c:2e:f2:1e: 4e:d1:5b:fe:f9:d1:31:c0:da:03:7e:2a:ce:ec:56: c8:37:dd:b8:86:9d:10:38:4a:c9:ba:97:6f:13:fb: e3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:62:6B:EE:4B:71:15:74:68:AC:CA:C5:82:4E:01:30:58:82:4A:3A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55688.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.157.96.0/23 103.166.156.0/23 IPv6: 2406:a040:ff01::/48 Signature Algorithm: sha256WithRSAEncryption 77:40:a6:b5:18:2c:e1:65:e4:e7:8d:43:3f:35:02:26:2d:31: 62:06:81:a5:01:4f:40:f8:ba:2d:20:de:39:62:16:6a:47:a8: 19:d6:9e:a8:fa:6e:41:68:64:51:92:fe:24:be:29:ad:bf:b0: e9:8a:c5:c3:0c:fe:63:0f:db:16:bf:7d:21:85:20:02:30:8f: 06:b9:49:54:f0:08:a5:d6:93:5a:67:4c:15:dd:5a:12:1c:4a: 5b:e5:a2:c0:6b:bd:91:ad:04:fd:b7:a8:ad:3e:af:e7:30:75: 72:41:87:aa:46:4d:95:6d:1f:c7:7a:af:e0:4d:f3:84:07:7b: ff:8c:50:4f:96:8b:c0:f3:1d:cf:46:9c:e8:a0:0d:fa:fe:19: f2:27:86:8a:08:d4:1b:20:e3:26:62:90:b9:fb:e9:de:7e:de: 68:30:d4:53:f5:33:89:2f:1b:61:02:95:03:27:18:c9:06:a2: fb:0f:ec:3d:4d:9d:e5:0f:29:c4:a9:a7:2c:f7:12:52:1c:58: 1a:54:61:a8:b2:f5:08:c8:89:b0:a4:d8:35:81:b8:ae:b4:71: d8:85:27:91:16:41:5e:e4:6e:b8:3d:9b:29:a6:85:92:9c:ea: d8:50:ea:a6:85:f5:88:30:21:e2:a4:e0:a3:f6:47:24:77:81: 3d:00:cd:22 -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgIUMthzxnYG2KArYlp0w+QYbZo0f4wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTA1NTUxOFoX DTI2MTExMDA2MDAxOFowMzExMC8GA1UEAxMoMDc2MjZCRUU0QjcxMTU3NDY4QUND QUM1ODI0RTAxMzA1ODgyNEEzQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANpoNrdylzxXM5Kx/GFa9tvnNIIjM29M7zrRXSS6/a/DesWTQ4qcW+Aqhu4D CDAQn/7m4033o7F4eqXzxL6/V7tbamLSn/QMXcjvHya1MyVkyAJ185kKDZO4Zo72 HOvqJiQPHtVJDFHLRo9TKb6e8qMOk1xqyVZQCbV2cC1XsRc0+LqGQOqDDh+Zca2V DdIK1EdY3OhImisXCb/9KjH6zfJISBAi4jhjF5FYkM4Tfe9ALxsDxgBJSOcBPiJg QmlBIUg6Fr5jjmfwLewMFTuvIku62J8aSFbsFdgS+aAMLvIeTtFb/vnRMcDaA34q zuxWyDfduIadEDhKybqXbxP749UCAwEAAaOCAeYwggHiMB0GA1UdDgQWBBQHYmvu S3EVdGisysWCTgEwWIJKOjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzU1Njg4LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQBZ51gAwQBZ6acMA8EAgACMAkDBwAkBqBA/wEwDQYJKoZIhvcNAQEL BQADggEBAHdAprUYLOFl5OeNQz81AiYtMWIGgaUBT0D4ui0g3jliFmpHqBnWnqj6 bkFoZFGS/iS+Ka2/sOmKxcMM/mMP2xa/fSGFIAIwjwa5SVTwCKXWk1pnTBXdWhIc SlvlosBrvZGtBP23qK0+r+cwdXJBh6pGTZVtH8d6r+BN84QHe/+MUE+Wi8DzHc9G nOigDfr+GfInhooI1Bsg4yZikLn76d5+3mgw1FP1M4kvG2EClQMnGMkGovsP7D1N neUPKcSppyz3ElIcWBpUYaiy9QjIibCk2DWBuK60cdiFJ5EWQV7kbrg9mymmhZKc 6thQ6qaF9YgwIeKk4KP2RyR3gT0AzSI= -----END CERTIFICATE-----Generated at Wed Dec 3 13:55:20 2025 by rpki-client