This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55699.roa
File:                     AS55699.roa (raw, json)
Hash identifier:          KTfR+RK7jA4qH78IbspLvAlCJeko+E9JW2w5Ykk4cC4=
Subject key identifier:   2A:DC:1A:8A:40:DF:A1:AF:D3:CC:88:96:51:29:BE:2D:24:D7:4D:C0
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7CA2DC3216907A271024A54FBA136D66685B9C0B
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55699.roa
Signing time:             Fri 09 Jan 2026 07:00:00 +0000
ROA not before:           Fri 09 Jan 2026 06:55:00 +0000
ROA not after:            Fri 08 Jan 2027 07:00:00 +0000
asID:                     55699
IP address blocks:        45.127.204.0/22 maxlen: 24
                          103.14.16.0/22 maxlen: 24
                          103.57.36.0/22 maxlen: 24
                          103.73.60.0/22 maxlen: 24
                          103.77.48.0/22 maxlen: 24
                          103.78.216.0/22 maxlen: 24
                          103.81.220.0/22 maxlen: 24
                          103.84.140.0/22 maxlen: 24
                          103.84.144.0/22 maxlen: 24
                          103.84.228.0/22 maxlen: 24
                          103.85.120.0/22 maxlen: 24
                          103.100.128.0/22 maxlen: 24
                          103.100.132.0/22 maxlen: 24
                          103.139.10.0/23 maxlen: 24
                          103.139.30.0/23 maxlen: 24
                          103.139.32.0/23 maxlen: 24
                          103.139.36.0/23 maxlen: 24
                          103.147.8.0/23 maxlen: 24
                          103.247.196.0/23 maxlen: 24
                          192.144.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:a2:dc:32:16:90:7a:27:10:24:a5:4f:ba:13:6d:66:68:5b:9c:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan  9 06:55:00 2026 GMT
            Not After : Jan  8 07:00:00 2027 GMT
        Subject: CN=2ADC1A8A40DFA1AFD3CC88965129BE2D24D74DC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:03:3e:ba:e3:9f:5f:4c:96:a0:c9:1f:c1:28:
                    ba:9c:a7:ba:00:f9:8a:cc:b3:52:35:30:fd:d9:5b:
                    34:e6:bb:e2:f5:f1:4e:61:71:b8:3c:7c:19:54:60:
                    07:1d:ad:eb:45:15:9d:3b:e8:02:59:62:e7:9e:64:
                    c7:af:f0:b9:32:c8:88:05:09:d6:a6:dc:0a:85:dc:
                    9e:06:38:1b:fa:93:18:fa:43:7d:d4:e2:51:81:d0:
                    ce:0a:16:ac:f4:60:90:cd:34:74:72:1f:3b:8b:05:
                    7e:ee:cf:49:56:c0:23:99:67:d6:99:28:da:94:09:
                    c8:25:af:59:3f:c5:e9:ab:5f:d1:af:24:fc:39:d8:
                    b9:4a:46:d2:a0:76:a7:2b:1f:9e:08:da:35:4b:f9:
                    46:cd:36:4a:72:14:b7:36:dc:59:3f:ce:56:d8:e4:
                    e3:b8:8b:3d:4c:6d:ac:93:75:8c:eb:a1:2b:b3:97:
                    90:40:74:14:86:c9:51:8b:69:0f:93:ff:21:71:29:
                    b6:d0:e1:e2:4c:41:3d:fe:35:af:e4:25:17:b2:da:
                    d3:1d:ea:5a:3c:b8:dd:78:ac:cc:3c:74:47:c4:f5:
                    cd:a2:c9:32:80:75:5c:cb:90:ec:bb:17:c6:96:d4:
                    6d:af:69:7a:d8:75:a8:ef:b7:76:38:fa:87:64:d1:
                    9f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:DC:1A:8A:40:DF:A1:AF:D3:CC:88:96:51:29:BE:2D:24:D7:4D:C0
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55699.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.127.204.0/22
                  103.14.16.0/22
                  103.57.36.0/22
                  103.73.60.0/22
                  103.77.48.0/22
                  103.78.216.0/22
                  103.81.220.0/22
                  103.84.140.0-103.84.147.255
                  103.84.228.0/22
                  103.85.120.0/22
                  103.100.128.0/21
                  103.139.10.0/23
                  103.139.30.0-103.139.33.255
                  103.139.36.0/23
                  103.147.8.0/23
                  103.247.196.0/23
                  192.144.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:66:6b:e4:16:7f:c8:74:a0:03:65:5b:5c:48:12:1b:7d:f3:
         e0:21:c1:ae:ed:8c:de:e4:d5:84:10:13:72:49:3d:01:d5:90:
         99:34:f0:d1:26:23:df:38:49:6e:8c:2b:cd:b9:a2:c7:ae:ce:
         f1:83:43:61:db:05:a2:c7:c4:5b:95:6d:e9:af:1a:06:bf:00:
         a0:a9:95:77:80:89:98:9d:7a:9f:f3:d4:9c:9e:3e:d5:53:e9:
         98:8b:4c:8a:86:2d:cd:bd:7f:58:0c:11:32:d6:95:06:47:dc:
         c3:24:f2:15:d6:22:98:82:86:23:3a:d1:df:99:68:70:07:b5:
         70:d0:d7:8a:3d:37:5f:fa:9a:ba:29:64:f3:a4:a0:02:a9:3d:
         42:cb:f5:a0:11:72:ff:3a:1a:77:6a:e4:58:bd:4e:39:0e:ab:
         92:f2:c9:11:8a:8d:e3:ee:30:1d:02:9f:21:5b:56:8c:fe:2b:
         86:71:13:ab:79:1f:60:be:bb:c8:ca:12:18:56:7b:2a:78:50:
         e4:78:6b:9f:41:bd:a4:89:66:e5:29:8e:bf:4d:b5:43:3a:d3:
         92:09:e0:1b:65:14:d4:ce:4a:b9:a4:cb:cc:e0:d3:eb:c3:28:
         29:3b:65:7b:37:dd:d2:25:a0:d3:bf:5c:48:4a:81:54:26:b6:
         16:70:09:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:37:00 2026 by rpki-client