This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS56235.roa
File: AS56235.roa (raw, json)
Hash identifier: iiv9zo4rtmEnLdm7uLtkucBRRH+Jy8/1Lsj3M065784=
Subject key identifier: 72:6C:33:47:38:17:0F:07:9C:64:48:1E:59:E8:E5:8E:EA:C8:30:60
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 027FB8835D9E565373F6920AA50FA33E4DB4160D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS56235.roa
Signing time: Tue 11 Nov 2025 06:00:05 +0000
ROA not before: Tue 11 Nov 2025 05:55:05 +0000
ROA not after: Tue 10 Nov 2026 06:00:05 +0000
asID: 56235
IP address blocks: 103.3.44.0/24 maxlen: 24
103.3.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 12:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:7f:b8:83:5d:9e:56:53:73:f6:92:0a:a5:0f:a3:3e:4d:b4:16:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Nov 11 05:55:05 2025 GMT
Not After : Nov 10 06:00:05 2026 GMT
Subject: CN=726C334738170F079C64481E59E8E58EEAC83060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e2:8a:70:d7:c4:a7:5c:eb:14:49:65:29:a8:
6b:9f:c0:83:27:50:85:a7:6c:cf:65:3d:a7:ce:c8:
6f:1e:32:af:af:0c:1d:7c:ff:33:be:4c:26:8d:0b:
28:5d:50:e6:af:8a:0e:f1:5e:1b:b4:30:df:c6:46:
b9:cf:66:d7:c9:d0:3d:d9:25:84:1b:d4:e0:08:d6:
c3:29:02:c3:dd:c4:64:ef:93:8e:98:2f:c9:ea:23:
d3:5d:60:a7:bf:82:bc:24:b3:27:3e:11:f9:94:92:
66:76:42:28:1b:34:8d:bd:2b:c5:77:d9:d5:d7:a8:
ab:0c:21:01:0d:c2:fe:04:cd:68:06:63:3f:0f:ed:
05:0f:6c:83:aa:5f:d5:06:85:cd:91:1f:1a:35:24:
3e:c5:c9:e8:5f:f3:c1:80:8e:6d:32:76:25:0b:ad:
6a:19:85:9f:36:e2:ae:cd:2e:c3:2d:48:a0:96:c1:
f3:08:97:a1:b4:e7:1b:03:d1:b9:55:4d:f8:6e:7f:
5a:c1:16:7c:29:08:73:b7:36:be:b3:03:db:18:66:
a5:a1:00:1e:07:62:06:2a:0d:63:a9:05:1b:56:67:
eb:19:8c:21:e9:49:57:27:64:26:62:50:42:c5:b0:
74:6e:fa:12:7c:c1:2c:8c:2f:b4:7e:dc:e0:10:69:
af:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:6C:33:47:38:17:0F:07:9C:64:48:1E:59:E8:E5:8E:EA:C8:30:60
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS56235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.3.44.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:b7:81:17:07:ce:4a:df:63:0b:d1:b2:4e:49:3e:51:e2:cc:
01:99:b9:de:12:c7:99:d8:10:42:74:78:36:de:b9:9e:00:b9:
13:3c:3f:d8:71:19:32:1d:95:19:62:31:0e:c8:86:71:37:0e:
9f:25:f8:29:87:b4:cb:4b:c8:bd:49:dd:1a:3b:ff:5b:a2:91:
49:82:ab:ff:34:56:0d:a1:f3:73:a4:d5:8c:19:40:a8:fd:1f:
16:1d:17:b1:36:63:a7:1d:13:c8:a5:50:ad:cc:08:1f:0a:aa:
7b:ed:02:85:3f:7c:07:fc:29:26:26:4f:02:1c:8e:be:fb:e5:
7d:73:c3:28:75:f3:93:b4:65:0d:a8:ba:b9:73:c4:94:69:0c:
6e:20:b6:d5:56:4a:c4:7b:fd:fd:05:1a:c3:24:3e:cc:00:41:
de:9d:be:dd:32:0f:70:88:b0:c5:b8:ac:4f:76:68:65:97:fe:
97:ba:62:c5:25:09:11:cb:65:34:e8:0a:3d:48:0d:7b:ab:83:
bf:f2:45:fc:3e:b5:65:df:ac:3c:94:f5:81:be:66:a0:40:a6:
5a:85:b3:d4:de:e6:9e:3e:65:d5:e0:0d:1e:09:5a:58:f3:c4:
1a:30:fc:51:1c:ca:66:35:de:15:f6:6d:39:99:7b:0f:f0:8d:
97:03:23:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:14:55 2025 by rpki-client