This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55701.roa File: AS55701.roa (raw, json) Hash identifier: Ogf63q3lstlVKPYxPIDYBkqMvwDAPKkaxtTE2Cpt1Sw= Subject key identifier: 65:43:16:0E:63:5F:C6:96:AC:A0:C4:6D:68:D2:C9:4D:61:E5:2A:72 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4178E853939E57130EB38A326C510B282F3674B3 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55701.roa Signing time: Tue 11 Nov 2025 06:00:26 +0000 ROA not before: Tue 11 Nov 2025 05:55:26 +0000 ROA not after: Tue 10 Nov 2026 06:00:26 +0000 asID: 55701 IP address blocks: 103.163.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:78:e8:53:93:9e:57:13:0e:b3:8a:32:6c:51:0b:28:2f:36:74:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 11 05:55:26 2025 GMT Not After : Nov 10 06:00:26 2026 GMT Subject: CN=6543160E635FC696ACA0C46D68D2C94D61E52A72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ac:ce:74:01:b5:cf:65:09:bb:37:65:f2:4c: 5b:ae:03:fc:90:df:4a:b4:bb:98:43:0b:17:18:a8: 41:52:39:8d:a4:ae:8d:70:ea:b4:96:d2:2b:16:80: b8:d1:6c:45:c9:65:1c:6a:ad:70:2b:42:29:ca:ee: df:ca:de:b7:75:71:16:b6:d1:08:23:55:2c:97:74: 48:7c:37:da:29:7e:16:d7:e0:0a:14:ee:d8:0d:c3: fc:1c:3a:b8:58:9d:d2:e6:1c:68:53:08:5f:2d:08: 45:93:db:6d:f4:60:a8:6d:f9:55:64:77:9d:61:26: c7:b9:66:91:dd:d1:3a:1f:f3:03:c7:71:e5:b4:cc: 81:75:97:aa:79:fc:b8:ac:5c:cb:4c:54:c6:05:4d: b1:ea:01:15:3a:cb:24:7c:d8:cb:ec:c4:71:cc:0e: 80:35:2c:06:2f:8f:fb:fb:9f:ff:72:ba:70:6f:b2: a0:7f:ae:f7:bb:e0:46:40:4f:9d:a4:7c:11:71:0b: 36:78:15:5c:9d:ed:36:e9:6c:25:1c:18:f6:40:a1: 90:e7:81:30:f6:51:2a:43:12:bc:68:a8:0a:bd:ac: b5:59:8a:43:df:9f:10:2c:06:78:33:ab:11:dd:90: 82:3b:01:cf:99:fc:a1:02:c7:ff:c8:84:a7:14:50: 95:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:43:16:0E:63:5F:C6:96:AC:A0:C4:6D:68:D2:C9:4D:61:E5:2A:72 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55701.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.163.160.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:92:7c:37:7b:b6:4c:d1:37:89:b7:d6:e6:5f:39:00:a3:2d: 06:7c:67:af:64:54:f1:2c:a4:e6:9f:35:a6:20:f2:e3:9c:bc: 8a:a0:f4:6a:51:73:76:36:10:0b:10:09:0f:ae:44:7b:aa:b8: 57:40:fe:a7:7e:43:a5:d6:d1:e8:1e:5a:87:c2:48:ae:8d:3e: 94:7d:77:18:ae:8b:77:de:86:1a:d2:7f:cd:8b:43:af:38:35: 80:26:95:f1:ad:56:7f:96:45:84:78:4c:48:23:fa:35:e3:3d: 28:4b:fc:8a:73:ab:86:df:a5:80:3b:9a:9c:38:4c:d8:28:e5: 44:49:7a:2c:3a:a6:77:ab:dd:83:9e:19:d4:8d:56:bf:5a:3f: 78:0a:28:a8:51:7a:6b:27:a6:90:56:57:36:ba:c4:07:f3:1b: 30:2b:5b:a5:d8:e7:3f:9f:23:2a:c3:b9:85:1b:52:5f:94:87: 4c:f3:eb:d7:d3:03:6a:0e:b4:01:26:93:1b:ff:57:00:73:1f: 07:76:5f:cb:dc:f8:a2:e2:68:ce:4d:1d:8d:0d:9c:b3:66:69: d7:ad:64:22:c1:75:03:0c:35:b4:ec:6c:f0:54:4f:d3:0f:0d: f7:a6:52:4b:ac:30:6a:e4:01:9d:5f:8e:70:56:c2:f7:df:1c: fe:b1:f1:ec -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUQXjoU5OeVxMOs4oybFELKC82dLMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTA1NTUyNloX DTI2MTExMDA2MDAyNlowMzExMC8GA1UEAxMoNjU0MzE2MEU2MzVGQzY5NkFDQTBD NDZENjhEMkM5NEQ2MUU1MkE3MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMysznQBtc9lCbs3ZfJMW64D/JDfSrS7mEMLFxioQVI5jaSujXDqtJbSKxaA uNFsRcllHGqtcCtCKcru38ret3VxFrbRCCNVLJd0SHw32il+FtfgChTu2A3D/Bw6 uFid0uYcaFMIXy0IRZPbbfRgqG35VWR3nWEmx7lmkd3ROh/zA8dx5bTMgXWXqnn8 uKxcy0xUxgVNseoBFTrLJHzYy+zEccwOgDUsBi+P+/uf/3K6cG+yoH+u97vgRkBP naR8EXELNngVXJ3tNulsJRwY9kChkOeBMPZRKkMSvGioCr2stVmKQ9+fECwGeDOr Ed2QgjsBz5n8oQLH/8iEpxRQlc0CAwEAAaOCAc8wggHLMB0GA1UdDgQWBBRlQxYO Y1/GlqygxG1o0slNYeUqcjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzU1NzAxLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ6OgMA0GCSqGSIb3DQEBCwUAA4IBAQB9knw3e7ZM0TeJt9bmXzkA oy0GfGevZFTxLKTmnzWmIPLjnLyKoPRqUXN2NhALEAkPrkR7qrhXQP6nfkOl1tHo HlqHwkiujT6UfXcYrot33oYa0n/Ni0OvODWAJpXxrVZ/lkWEeExII/o14z0oS/yK c6uG36WAO5qcOEzYKOVESXosOqZ3q92DnhnUjVa/Wj94CiioUXprJ6aQVlc2usQH 8xswK1ul2Oc/nyMqw7mFG1JflIdM8+vX0wNqDrQBJpMb/1cAcx8Hdl/L3Pii4mjO TR2NDZyzZmnXrWQiwXUDDDW07GzwVE/TDw33plJLrDBq5AGdX45wVsL33xz+sfHs -----END CERTIFICATE-----Generated at Sat Dec 6 22:52:04 2025 by rpki-client