This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS56253.roa File: AS56253.roa (raw, json) Hash identifier: 6Koz3Z4WXsT9LjZIildSWwv2XQvVK2VX8/mmoVYSi1k= Subject key identifier: B1:60:96:63:6D:02:BE:3D:AC:02:33:90:02:A4:87:97:01:26:AA:60 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 315E92D32A432B3853B95B772C0541095CD26352 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS56253.roa Signing time: Tue 11 Nov 2025 06:00:21 +0000 ROA not before: Tue 11 Nov 2025 05:55:21 +0000 ROA not after: Tue 10 Nov 2026 06:00:21 +0000 asID: 56253 IP address blocks: 103.10.146.0/23 maxlen: 24 103.75.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:5e:92:d3:2a:43:2b:38:53:b9:5b:77:2c:05:41:09:5c:d2:63:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 11 05:55:21 2025 GMT Not After : Nov 10 06:00:21 2026 GMT Subject: CN=B16096636D02BE3DAC02339002A487970126AA60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fb:32:6a:4d:80:98:fd:66:96:c1:eb:80:f9: 71:72:ad:3e:ad:a5:5b:c0:2d:89:9b:29:c5:e6:73: a6:15:85:65:15:b9:76:96:1d:a6:95:36:09:db:de: b5:8a:e6:0e:10:b3:1c:90:c7:30:d6:3c:7c:aa:1b: 65:67:ae:e1:9b:bb:f1:c2:18:bc:e3:24:8c:18:62: 18:82:7c:d0:24:be:bd:de:bb:c1:66:d3:b6:5a:84: d2:b8:0b:a9:b0:22:9b:0b:c6:ce:7b:b3:2f:20:a9: c5:cc:d6:68:50:f3:db:0b:95:fd:bc:33:46:30:8b: e9:c2:e3:f4:1e:45:1a:34:55:ad:7d:6d:0c:46:5e: d2:59:ad:c3:4d:12:91:ae:30:83:d1:79:39:d6:a3: 63:c1:b9:d1:65:fd:99:56:2b:dc:41:be:60:7d:47: 17:70:e3:f0:61:d8:2f:ae:2b:4f:8e:cc:eb:47:d3: 9c:8a:7f:d7:af:c7:0b:9f:0a:67:5d:ce:e2:ff:64: 4e:b7:2d:6c:e9:d6:f8:d1:6b:5c:0c:9f:e4:21:aa: 77:97:44:a2:5e:13:70:6e:c8:07:44:08:3f:e7:ed: e0:db:f9:5f:c7:a5:1e:5a:ac:42:7c:69:38:04:99: d4:82:9b:67:b5:48:c0:0c:c9:c2:46:b8:e5:d6:5a: 81:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:60:96:63:6D:02:BE:3D:AC:02:33:90:02:A4:87:97:01:26:AA:60 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS56253.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.10.146.0/23 103.75.51.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:46:3f:95:80:69:3a:98:3c:67:54:44:d5:0e:29:e6:36:de: d1:77:a2:be:7c:2b:35:e9:d1:84:41:89:6e:29:97:1f:ba:b5: 17:86:69:00:3c:1f:c8:2a:0d:13:01:20:f8:d4:ee:79:d3:9e: ba:23:9d:ed:1e:48:69:74:bd:1d:e5:31:5b:49:f0:01:71:f4: f0:4c:4c:fc:b7:41:5e:37:c1:3f:5c:51:b1:3b:45:f9:ce:63: 59:31:90:80:ac:6d:ed:22:49:52:ef:70:25:04:8f:66:2d:ee: 7a:4d:94:67:e6:d5:5f:f1:ec:ce:6f:fd:8c:0e:4e:a0:31:ed: 01:e7:6d:a2:34:ff:1a:18:82:e5:1d:74:d4:53:39:64:57:f2: 5e:7b:49:40:4e:11:95:0e:d9:49:34:20:13:b2:9f:da:4c:56: d7:fd:5b:60:06:a5:73:ae:3e:d0:b2:ee:a1:8c:2a:ef:53:87: b1:c9:e0:fe:87:1b:82:20:03:19:20:aa:39:01:dd:53:e2:40: df:2b:60:8c:bb:aa:0a:5c:98:7e:dd:ba:79:40:db:67:56:1d: 8d:57:2a:13:4c:fa:b7:f2:ca:ae:df:6b:97:60:f3:aa:08:fe: fe:4d:d1:9d:00:94:d4:0f:ff:14:9b:6c:1f:68:11:9f:e1:9b: 75:b9:5e:87 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUMV6S0ypDKzhTuVt3LAVBCVzSY1IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTA1NTUyMVoX DTI2MTExMDA2MDAyMVowMzExMC8GA1UEAxMoQjE2MDk2NjM2RDAyQkUzREFDMDIz MzkwMDJBNDg3OTcwMTI2QUE2MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL77MmpNgJj9ZpbB64D5cXKtPq2lW8AtiZspxeZzphWFZRW5dpYdppU2Cdve tYrmDhCzHJDHMNY8fKobZWeu4Zu78cIYvOMkjBhiGIJ80CS+vd67wWbTtlqE0rgL qbAimwvGznuzLyCpxczWaFDz2wuV/bwzRjCL6cLj9B5FGjRVrX1tDEZe0lmtw00S ka4wg9F5OdajY8G50WX9mVYr3EG+YH1HF3Dj8GHYL64rT47M60fTnIp/16/HC58K Z13O4v9kTrctbOnW+NFrXAyf5CGqd5dEol4TcG7IB0QIP+ft4Nv5X8elHlqsQnxp OASZ1IKbZ7VIwAzJwka45dZagZUCAwEAAaOCAdUwggHRMB0GA1UdDgQWBBSxYJZj bQK+PawCM5ACpIeXASaqYDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzU2MjUzLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBZwqSAwQAZ0szMA0GCSqGSIb3DQEBCwUAA4IBAQAKRj+VgGk6mDxn VETVDinmNt7Rd6K+fCs16dGEQYluKZcfurUXhmkAPB/IKg0TASD41O550566I53t HkhpdL0d5TFbSfABcfTwTEz8t0FeN8E/XFGxO0X5zmNZMZCArG3tIklS73AlBI9m Le56TZRn5tVf8ezOb/2MDk6gMe0B522iNP8aGILlHXTUUzlkV/Jee0lAThGVDtlJ NCATsp/aTFbX/VtgBqVzrj7Qsu6hjCrvU4exyeD+hxuCIAMZIKo5Ad1T4kDfK2CM u6oKXJh+3bp5QNtnVh2NVyoTTPq38squ32uXYPOqCP7+TdGdAJTUD/8Um2wfaBGf 4Zt1uV6H -----END CERTIFICATE-----Generated at Wed Dec 3 13:15:20 2025 by rpki-client