This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS59796.roa File: AS59796.roa (raw, json) Hash identifier: IWoAM9TbVl//D+58ArFxxxk6j0zEdkAgAYU4QbQrrKo= Subject key identifier: 72:03:37:CD:C3:62:62:3F:F0:91:D5:95:DB:04:0B:D1:E2:9F:0A:9D Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 46A212BC345270427DE48FD978B284C067926567 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS59796.roa Signing time: Wed 14 Jan 2026 09:03:04 +0000 ROA not before: Wed 14 Jan 2026 08:58:04 +0000 ROA not after: Wed 13 Jan 2027 09:03:04 +0000 asID: 59796 IP address blocks: 160.25.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 21:04:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:a2:12:bc:34:52:70:42:7d:e4:8f:d9:78:b2:84:c0:67:92:65:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jan 14 08:58:04 2026 GMT Not After : Jan 13 09:03:04 2027 GMT Subject: CN=720337CDC362623FF091D595DB040BD1E29F0A9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:85:b3:e5:65:87:27:71:b7:af:0f:30:7b:80: 05:ea:ac:82:9b:8a:71:26:30:aa:d8:24:4a:11:30: de:14:5e:e0:6f:59:eb:1a:4c:14:16:8f:bd:3e:38: 41:bd:a3:a8:e0:74:4a:5b:aa:bd:cf:7b:e7:a6:f8: 7d:b9:3c:6b:6a:84:ce:06:c6:0e:d1:fd:2d:88:d5: 70:ac:7d:7b:0e:af:fd:90:f7:53:df:fb:aa:db:7a: 19:a1:48:b6:66:b1:57:bf:5c:a3:ff:1e:45:85:dd: 0f:88:2d:bc:85:4d:b7:8f:62:9d:a3:dc:6d:21:77: 36:cb:1d:db:60:a6:3c:56:3f:38:91:38:36:5d:11: 51:a3:42:dd:af:f0:f8:41:9e:0b:ab:6e:9b:0c:b1: 1a:8b:62:24:72:b5:c2:2c:df:74:ca:03:21:a5:e6: 24:9a:b9:02:a8:39:65:95:31:67:d8:87:a4:a5:ea: 8b:7c:14:ff:df:02:e6:5b:0b:75:96:d8:85:68:cf: 14:c6:2e:4b:e6:09:ff:ce:4b:25:07:1e:16:5b:42: fa:75:92:4b:ef:12:19:ca:cf:da:26:b3:e3:6a:b3: 02:ed:52:c8:d2:1b:45:dc:f9:82:b3:e7:c9:51:e6: ee:5d:f1:69:d9:35:d9:fb:b6:4b:4f:f6:dc:38:ff: 57:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:03:37:CD:C3:62:62:3F:F0:91:D5:95:DB:04:0B:D1:E2:9F:0A:9D X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS59796.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.252.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:2e:f2:ef:d3:1d:5b:96:d4:eb:c3:fa:df:50:6a:28:42:6e: d5:25:17:00:b0:76:44:bf:e9:ea:63:db:a1:b5:9d:e0:a2:08: 7f:a2:63:8e:70:7d:04:48:e9:34:e9:fc:2c:1c:29:3e:3c:ac: 81:cd:7a:00:56:d4:19:a0:f7:4d:2a:e0:8c:d1:a4:a0:0c:c4: 1e:2b:a0:e8:05:c2:67:dd:d2:83:bb:f9:75:65:e8:bd:64:0d: f2:03:10:da:58:eb:e7:5e:26:1c:39:05:3e:88:94:7a:3f:db: 34:dd:47:e8:80:e4:18:82:ea:74:b9:6a:3e:a6:c9:78:a2:c2: 76:c5:04:41:20:aa:67:f4:77:7a:38:bd:c2:7e:74:29:69:b0: ee:69:be:20:82:fd:01:89:84:3a:88:af:97:8b:9e:75:90:b5: 10:ff:d5:e3:42:3e:52:4c:c5:87:d6:7d:29:2a:14:91:0c:c0: 72:33:40:3e:fa:26:87:60:7f:1a:5e:75:a4:1b:b7:bb:10:37: 2c:8b:fa:76:82:b9:c9:bc:e5:50:df:8e:98:56:0b:9a:a8:39: 7f:ad:b0:cc:09:eb:a7:37:36:dc:7f:89:af:d6:21:9c:f6:a3: 0f:d8:58:df:45:99:8a:72:19:4f:da:1b:67:c2:1e:2c:21:00: d0:4f:df:ea -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIURqISvDRScEJ95I/ZeLKEwGeSZWcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDExNDA4NTgwNFoX DTI3MDExMzA5MDMwNFowMzExMC8GA1UEAxMoNzIwMzM3Q0RDMzYyNjIzRkYwOTFE NTk1REIwNDBCRDFFMjlGMEE5RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAP2Fs+Vlhydxt68PMHuABeqsgpuKcSYwqtgkShEw3hRe4G9Z6xpMFBaPvT44 Qb2jqOB0Sluqvc9756b4fbk8a2qEzgbGDtH9LYjVcKx9ew6v/ZD3U9/7qtt6GaFI tmaxV79co/8eRYXdD4gtvIVNt49inaPcbSF3Nssd22CmPFY/OJE4Nl0RUaNC3a/w +EGeC6tumwyxGotiJHK1wizfdMoDIaXmJJq5Aqg5ZZUxZ9iHpKXqi3wU/98C5lsL dZbYhWjPFMYuS+YJ/85LJQceFltC+nWSS+8SGcrP2iaz42qzAu1SyNIbRdz5grPn yVHm7l3xadk12fu2S0/23Dj/Vz8CAwEAAaOCAc8wggHLMB0GA1UdDgQWBBRyAzfN w2JiP/CR1ZXbBAvR4p8KnTAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzU5Nzk2LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBoBn8MA0GCSqGSIb3DQEBCwUAA4IBAQAcLvLv0x1bltTrw/rfUGoo Qm7VJRcAsHZEv+nqY9uhtZ3gogh/omOOcH0ESOk06fwsHCk+PKyBzXoAVtQZoPdN KuCM0aSgDMQeK6DoBcJn3dKDu/l1Zei9ZA3yAxDaWOvnXiYcOQU+iJR6P9s03Ufo gOQYgup0uWo+psl4osJ2xQRBIKpn9Hd6OL3CfnQpabDuab4ggv0BiYQ6iK+Xi551 kLUQ/9XjQj5STMWH1n0pKhSRDMByM0A++iaHYH8aXnWkG7e7EDcsi/p2grnJvOVQ 346YVguaqDl/rbDMCeunNzbcf4mv1iGc9qMP2FjfRZmKchlP2htnwh4sIQDQT9/q -----END CERTIFICATE-----Generated at Sun Jan 25 22:32:15 2026 by rpki-client