This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS56233.roa File: AS56233.roa (raw, json) Hash identifier: +hWxeW4c9cok3qxfOvy6UbjFk5eu/8vMp2j1Mzxd1Is= Subject key identifier: 29:BD:22:2A:7F:25:CF:E4:AC:8A:F2:E3:1F:37:F2:AE:CF:E1:AF:F3 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2E042AEFAFF5D21B600C7993FBB103B64785E31A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS56233.roa Signing time: Tue 22 Apr 2025 04:00:00 +0000 ROA not before: Tue 22 Apr 2025 03:55:00 +0000 ROA not after: Tue 21 Apr 2026 04:00:00 +0000 asID: 56233 IP address blocks: 59.153.80.0/22 maxlen: 24 103.184.28.0/23 maxlen: 24 202.160.136.0/23 maxlen: 24 202.160.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:04:2a:ef:af:f5:d2:1b:60:0c:79:93:fb:b1:03:b6:47:85:e3:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 22 03:55:00 2025 GMT Not After : Apr 21 04:00:00 2026 GMT Subject: CN=29BD222A7F25CFE4AC8AF2E31F37F2AECFE1AFF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:77:ab:c1:e8:ef:37:7e:30:f2:22:70:9c:5e: 5e:0e:8c:89:4c:74:b1:09:64:f7:a0:32:1e:e0:f0: bd:b2:55:57:ce:9e:7f:58:33:78:53:c7:79:f3:2e: 7f:05:38:8a:84:a2:04:bb:41:e2:e0:37:11:88:39: e7:cd:a1:19:20:51:19:87:52:ce:cc:25:a7:1b:39: 81:30:41:b0:d4:82:44:a4:b4:3a:e3:b3:5a:44:c8: 35:52:de:e0:7a:7e:74:d2:36:fe:e4:b4:b5:df:8d: fa:3e:fa:3b:fd:00:cb:11:e6:c2:d4:ad:92:26:59: 80:fb:77:0c:c7:ec:8b:c6:77:5c:ef:ec:96:98:d1: 97:69:31:5d:99:01:41:13:65:86:66:ea:b4:ec:e6: 70:78:39:f6:58:7d:c4:95:70:d6:ef:5a:59:b9:7e: 24:f9:bd:be:2c:3b:12:e7:6c:47:fb:60:d3:5b:03: ca:6c:06:43:e5:b8:4a:16:1f:3b:8e:b9:81:a4:57: fc:2a:fd:30:b2:2c:be:48:14:19:06:f5:c5:a4:4c: 98:f8:d3:12:d6:11:ac:43:c2:80:b5:95:36:e7:89: 8f:cb:62:a7:05:19:20:19:49:fe:57:b2:87:9a:0d: d9:f2:52:cd:f3:29:be:d5:1d:5f:10:48:b6:55:06: 12:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:BD:22:2A:7F:25:CF:E4:AC:8A:F2:E3:1F:37:F2:AE:CF:E1:AF:F3 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS56233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 59.153.80.0/22 103.184.28.0/23 202.160.136.0-202.160.138.255 Signature Algorithm: sha256WithRSAEncryption 63:d8:96:42:81:31:24:cf:2f:e4:29:3c:37:1d:be:6f:fb:27: 97:7d:57:07:5d:eb:5f:9f:76:44:aa:7d:e9:de:d8:38:fa:61: 67:20:c2:ee:58:ad:54:b4:0d:33:a7:fe:2b:58:bc:79:8a:bb: c9:a9:d1:63:2e:fd:da:2a:1f:f9:61:b1:34:9c:3d:35:52:1c: 4e:1c:b9:a8:49:d3:dd:af:73:ed:dd:73:a8:b4:33:ac:b5:0b: aa:6b:45:77:95:8f:00:63:23:e0:44:30:ea:61:7a:7a:e1:49: d7:33:af:2e:24:71:ed:84:7e:1b:0d:c6:fd:6d:4b:65:50:56: 6c:b2:45:aa:a7:58:12:13:79:d5:3b:b2:d7:c5:62:dd:c5:19: 96:4a:2a:8e:0d:fe:89:f9:a8:f1:af:e9:9b:bc:37:f2:6d:33: 84:24:ac:cb:94:a0:18:f7:0b:ce:39:c7:41:55:2e:b0:e4:64: 98:f7:8b:ea:f2:9f:28:fa:2f:c7:f9:b0:9a:f1:9d:5c:4b:a5: c1:15:23:4d:3c:64:c3:4f:ad:45:78:d7:ce:32:da:d1:8c:60: bd:c7:ab:b2:b1:8e:00:d1:5c:aa:77:46:43:c0:5c:e0:4f:fa: b0:f3:36:54:77:53:26:e4:54:6e:31:59:33:6e:6c:19:78:7a: 42:f5:86:a0 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgIULgQq76/10htgDHmT+7EDtkeF4xowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQyMjAzNTUwMFoX DTI2MDQyMTA0MDAwMFowMzExMC8GA1UEAxMoMjlCRDIyMkE3RjI1Q0ZFNEFDOEFG MkUzMUYzN0YyQUVDRkUxQUZGMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJt3q8Ho7zd+MPIicJxeXg6MiUx0sQlk96AyHuDwvbJVV86ef1gzeFPHefMu fwU4ioSiBLtB4uA3EYg5582hGSBRGYdSzswlpxs5gTBBsNSCRKS0OuOzWkTINVLe 4Hp+dNI2/uS0td+N+j76O/0AyxHmwtStkiZZgPt3DMfsi8Z3XO/slpjRl2kxXZkB QRNlhmbqtOzmcHg59lh9xJVw1u9aWbl+JPm9viw7EudsR/tg01sDymwGQ+W4ShYf O465gaRX/Cr9MLIsvkgUGQb1xaRMmPjTEtYRrEPCgLWVNueJj8tipwUZIBlJ/ley h5oN2fJSzfMpvtUdXxBItlUGEtECAwEAAaOCAeMwggHfMB0GA1UdDgQWBBQpvSIq fyXP5KyK8uMfN/Kuz+Gv8zAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzU2MjMzLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAg BAIAATAaAwQCO5lQAwQBZ7gcMAwDBAPKoIgDBADKoIowDQYJKoZIhvcNAQELBQAD ggEBAGPYlkKBMSTPL+QpPDcdvm/7J5d9Vwdd61+fdkSqfene2Dj6YWcgwu5YrVS0 DTOn/itYvHmKu8mp0WMu/doqH/lhsTScPTVSHE4cuahJ092vc+3dc6i0M6y1C6pr RXeVjwBjI+BEMOphenrhSdczry4kce2EfhsNxv1tS2VQVmyyRaqnWBITedU7stfF Yt3FGZZKKo4N/on5qPGv6Zu8N/JtM4QkrMuUoBj3C845x0FVLrDkZJj3i+rynyj6 L8f5sJrxnVxLpcEVI008ZMNPrUV4184y2tGMYL3Hq7KxjgDRXKp3RkPAXOBP+rDz NlR3UybkVG4xWTNubBl4ekL1hqA= -----END CERTIFICATE-----Generated at Wed Dec 3 14:41:45 2025 by rpki-client