This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS58552.roa File: AS58552.roa (raw, json) Hash identifier: yWz3CX5+j6H9Qac8qpZsm2rBTD2Hbz3Wvp36dpLma8k= Subject key identifier: CA:6F:93:A4:23:31:8C:8C:74:1E:CF:33:21:BA:22:60:5B:BA:B0:3B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 586716DBA68A493600EEAA0546F07F2E8AC8B879 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS58552.roa Signing time: Mon 22 Dec 2025 02:37:10 +0000 ROA not before: Mon 22 Dec 2025 02:32:10 +0000 ROA not after: Mon 21 Dec 2026 02:37:10 +0000 asID: 58552 IP address blocks: 103.143.223.0/24 maxlen: 24 114.198.241.0/24 maxlen: 24 114.198.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:67:16:db:a6:8a:49:36:00:ee:aa:05:46:f0:7f:2e:8a:c8:b8:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 22 02:32:10 2025 GMT Not After : Dec 21 02:37:10 2026 GMT Subject: CN=CA6F93A423318C8C741ECF3321BA22605BBAB03B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:28:5a:76:f5:b5:8a:ae:97:ea:5c:98:2b:cb: 03:be:71:68:7c:60:4b:ee:d7:72:4f:26:48:2e:05: 5f:ac:bb:9d:04:8d:96:63:fd:c0:95:40:da:66:ac: d4:82:f6:e5:cc:55:b3:f6:f2:6c:95:38:95:10:ab: 73:83:b9:fc:7d:b0:8e:ad:bc:84:9b:24:72:a8:db: 39:63:a7:a8:b6:22:70:2e:28:a0:16:c6:81:1a:f3: bc:db:ee:90:01:26:9d:2a:81:87:59:bb:4c:7d:86: d6:04:26:8b:c2:1b:8e:91:70:a4:b6:b6:99:39:d3: cf:90:85:d4:88:04:ac:4a:d1:ed:23:9a:02:09:2b: 01:05:16:4a:86:d6:cb:2d:8a:d4:00:b4:09:dd:2b: 25:8e:68:e9:36:4b:65:30:73:3b:ba:61:5f:f7:39: db:b4:5c:a1:15:0b:76:16:5c:19:38:d6:71:a7:66: ce:29:f6:6d:87:ed:d8:c9:a6:1b:9c:eb:dd:e9:e6: 10:54:bf:3c:14:6b:0f:eb:76:47:41:68:2e:37:e6: 76:c5:89:06:f3:25:68:c7:65:44:5c:ca:66:82:fb: ae:2c:37:70:e2:38:10:d5:d4:d4:bf:be:cd:cf:e0: b7:bc:9a:dd:0b:fb:da:b2:63:a6:2d:26:fa:f2:5f: b0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:6F:93:A4:23:31:8C:8C:74:1E:CF:33:21:BA:22:60:5B:BA:B0:3B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS58552.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.223.0/24 114.198.241.0/24 114.198.247.0/24 Signature Algorithm: sha256WithRSAEncryption 51:dd:ef:ed:c2:4f:41:cf:83:77:54:da:66:c1:c5:fc:af:60: 2d:d9:53:b1:83:b7:32:d1:f9:0c:79:83:0e:a0:66:e8:b7:99: ed:d1:23:56:47:c8:52:cf:69:cd:5c:59:55:c0:97:1b:c8:21: 36:62:24:5d:f6:78:30:0f:73:04:42:7c:ea:0c:68:c5:83:97: be:2a:53:a4:08:00:ab:f2:a6:1f:55:5b:14:e8:70:71:d9:f8: 5c:9f:6f:fc:34:a6:ea:bf:cc:89:17:55:a2:f7:23:30:1a:31: 2f:c6:82:48:07:8f:8a:9d:66:6b:99:47:60:6a:4d:28:14:c1: 20:98:35:d7:67:05:b5:76:3f:a6:45:7e:92:58:35:74:87:2c: 5b:c1:01:99:6b:e3:1b:93:b4:e7:c2:b1:d2:80:a7:13:db:95: 68:e2:42:51:01:de:69:22:72:90:66:7e:c7:7c:f8:63:54:01: 2e:a8:a1:4e:57:da:98:4b:9a:b5:54:13:a7:91:9a:22:a3:01: 20:73:ef:90:f2:06:6c:84:fa:20:5d:f0:b2:37:f3:2c:e5:d8: 52:75:1c:50:16:e0:0c:a6:ef:c1:d7:bb:76:31:2b:c4:c5:67: fc:97:ac:25:20:b7:6a:6f:17:00:d8:b5:ac:b8:e9:f2:8e:80: 29:e7:f3:f5 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUWGcW26aKSTYA7qoFRvB/LorIuHkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIyMjAyMzIxMFoX DTI2MTIyMTAyMzcxMFowMzExMC8GA1UEAxMoQ0E2RjkzQTQyMzMxOEM4Qzc0MUVD RjMzMjFCQTIyNjA1QkJBQjAzQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPcoWnb1tYqul+pcmCvLA75xaHxgS+7Xck8mSC4FX6y7nQSNlmP9wJVA2mas 1IL25cxVs/bybJU4lRCrc4O5/H2wjq28hJskcqjbOWOnqLYicC4ooBbGgRrzvNvu kAEmnSqBh1m7TH2G1gQmi8IbjpFwpLa2mTnTz5CF1IgErErR7SOaAgkrAQUWSobW yy2K1AC0Cd0rJY5o6TZLZTBzO7phX/c527RcoRULdhZcGTjWcadmzin2bYft2Mmm G5zr3enmEFS/PBRrD+t2R0FoLjfmdsWJBvMlaMdlRFzKZoL7riw3cOI4ENXU1L++ zc/gt7ya3Qv72rJjpi0m+vJfsOcCAwEAAaOCAdswggHXMB0GA1UdDgQWBBTKb5Ok IzGMjHQezzMhuiJgW7qwOzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzU4NTUyLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAZ4/fAwQAcsbxAwQAcsb3MA0GCSqGSIb3DQEBCwUAA4IBAQBR3e/t wk9Bz4N3VNpmwcX8r2At2VOxg7cy0fkMeYMOoGbot5nt0SNWR8hSz2nNXFlVwJcb yCE2YiRd9ngwD3MEQnzqDGjFg5e+KlOkCACr8qYfVVsU6HBx2fhcn2/8NKbqv8yJ F1Wi9yMwGjEvxoJIB4+KnWZrmUdgak0oFMEgmDXXZwW1dj+mRX6SWDV0hyxbwQGZ a+Mbk7TnwrHSgKcT25Vo4kJRAd5pInKQZn7HfPhjVAEuqKFOV9qYS5q1VBOnkZoi owEgc++Q8gZshPogXfCyN/Ms5dhSdRxQFuAMpu/B17t2MSvExWf8l6wlILdqbxcA 2LWsuOnyjoAp5/P1 -----END CERTIFICATE-----Generated at Mon Feb 2 08:12:24 2026 by rpki-client