This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55697.roa
File:                     AS55697.roa (raw, json)
Hash identifier:          YNaJPh+cfXpZtLGZuSuYB4X8Ds/xVqxxVbifiZ/kgMY=
Subject key identifier:   1E:83:BC:4C:23:E9:3F:5E:77:D6:C4:6C:8B:51:D7:8B:1B:0E:D1:58
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2876697A09DB73772139D40DF07927E93CB5D3D4
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55697.roa
Signing time:             Tue 11 Nov 2025 04:00:00 +0000
ROA not before:           Tue 11 Nov 2025 03:55:00 +0000
ROA not after:            Tue 10 Nov 2026 04:00:00 +0000
asID:                     55697
IP address blocks:        103.174.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 12:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:76:69:7a:09:db:73:77:21:39:d4:0d:f0:79:27:e9:3c:b5:d3:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 11 03:55:00 2025 GMT
            Not After : Nov 10 04:00:00 2026 GMT
        Subject: CN=1E83BC4C23E93F5E77D6C46C8B51D78B1B0ED158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a8:ff:05:07:54:4b:2b:d2:20:db:c4:48:94:
                    85:d9:b2:43:fd:5f:67:23:42:37:fe:86:17:98:e9:
                    b4:08:11:85:49:52:bd:fd:c8:31:8f:d9:c7:1e:57:
                    99:0d:46:88:de:a0:4c:1d:b7:b6:e9:5a:23:b3:d2:
                    39:da:d5:88:cb:22:59:33:00:12:e1:86:8e:88:ba:
                    f4:1d:b0:84:13:81:a9:ae:29:80:fa:71:3e:57:3a:
                    ff:d3:5a:90:76:9b:c5:42:59:e1:65:4a:f6:8a:32:
                    69:2d:0c:d5:a4:a5:58:3d:28:f8:be:73:c9:b9:e3:
                    67:84:06:b8:97:2d:95:21:02:35:99:43:73:29:93:
                    0a:9c:c0:3c:98:c6:cb:e5:db:40:e6:bf:24:6f:07:
                    b3:7b:ce:b9:d9:a6:84:ec:dc:cf:70:e9:60:aa:5b:
                    bc:eb:f2:e5:cc:c9:87:89:4a:46:2e:6c:07:03:23:
                    5f:31:3d:c1:a5:9b:6a:69:10:b8:6c:42:bb:8e:26:
                    39:06:1a:6f:6c:aa:6d:d8:fe:c3:ef:c0:f5:94:ce:
                    9c:cb:14:8e:41:a1:0a:99:73:54:3a:9e:a5:85:bd:
                    e7:b3:c4:ee:4b:1e:04:15:dd:2f:18:d5:5f:43:99:
                    15:36:c1:bd:3b:3a:67:ee:2d:32:44:bd:df:f0:c6:
                    47:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:83:BC:4C:23:E9:3F:5E:77:D6:C4:6C:8B:51:D7:8B:1B:0E:D1:58
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55697.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:c2:1b:2d:07:59:3e:d7:78:72:f6:c0:e3:45:80:92:39:55:
         a2:80:e3:5a:68:c1:ea:e1:39:52:1a:4d:e3:c4:36:cf:94:8f:
         86:60:8c:b0:58:8b:c8:6c:04:70:23:f9:de:b4:ec:cc:8a:b8:
         40:a2:3f:91:c5:9e:9e:27:77:e3:2a:59:0a:2c:11:22:a8:e7:
         32:3c:e9:29:c4:d9:86:d7:c6:f4:b8:01:12:41:2f:c0:10:97:
         27:a4:ea:44:4d:67:5a:63:98:44:75:ae:69:43:30:42:2b:a0:
         df:da:90:eb:78:f3:fe:4c:de:e8:c5:26:7a:e8:3f:5e:25:0c:
         53:8f:32:b5:07:72:94:83:82:a8:88:40:1d:f1:e1:b2:87:fa:
         49:d6:c0:a5:e9:9b:71:f5:00:1b:64:c5:1b:1c:8e:70:d8:a6:
         ca:80:58:97:37:5f:00:62:fc:46:b5:53:5f:bd:a7:21:53:93:
         cc:06:d9:fc:4e:09:96:f8:41:c0:9f:4f:7f:85:97:36:1e:32:
         2b:90:7a:51:64:3c:05:32:39:e9:2e:b6:7f:87:02:7b:9a:aa:
         ac:37:f4:16:56:2e:26:20:08:da:fb:37:4b:6b:68:45:80:d6:
         f3:1d:a7:eb:41:3c:e4:f1:9c:14:6d:68:4d:7a:6c:d9:31:0d:
         80:c7:85:3c
-----BEGIN CERTIFICATE-----
MIIE3DCCA8SgAwIBAgIUKHZpegnbc3chOdQN8Hkn6Ty109QwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTAzNTUwMFoX
DTI2MTExMDA0MDAwMFowMzExMC8GA1UEAxMoMUU4M0JDNEMyM0U5M0Y1RTc3RDZD
NDZDOEI1MUQ3OEIxQjBFRDE1ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOCo/wUHVEsr0iDbxEiUhdmyQ/1fZyNCN/6GF5jptAgRhUlSvf3IMY/Zxx5X
mQ1GiN6gTB23tulaI7PSOdrViMsiWTMAEuGGjoi69B2whBOBqa4pgPpxPlc6/9Na
kHabxUJZ4WVK9ooyaS0M1aSlWD0o+L5zybnjZ4QGuJctlSECNZlDcymTCpzAPJjG
y+XbQOa/JG8Hs3vOudmmhOzcz3DpYKpbvOvy5czJh4lKRi5sBwMjXzE9waWbamkQ
uGxCu44mOQYab2yqbdj+w+/A9ZTOnMsUjkGhCplzVDqepYW957PE7kseBBXdLxjV
X0OZFTbBvTs6Z+4tMkS93/DGRzUCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBQeg7xM
I+k/XnfWxGyLUdeLGw7RWDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzU1Njk3LnJv
YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ67eMA0GCSqGSIb3DQEBCwUAA4IBAQBMwhstB1k+13hy9sDjRYCS
OVWigONaaMHq4TlSGk3jxDbPlI+GYIywWIvIbARwI/netOzMirhAoj+RxZ6eJ3fj
KlkKLBEiqOcyPOkpxNmG18b0uAESQS/AEJcnpOpETWdaY5hEda5pQzBCK6Df2pDr
ePP+TN7oxSZ66D9eJQxTjzK1B3KUg4KoiEAd8eGyh/pJ1sCl6Ztx9QAbZMUbHI5w
2KbKgFiXN18AYvxGtVNfvachU5PMBtn8TgmW+EHAn09/hZc2HjIrkHpRZDwFMjnp
LrZ/hwJ7mqqsN/QWVi4mIAja+zdLa2hFgNbzHafrQTzk8ZwUbWhNemzZMQ2Ax4U8
-----END CERTIFICATE-----
Generated at Wed Dec 3 13:55:12 2025 by rpki-client