This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS56236.roa File: AS56236.roa (raw, json) Hash identifier: k32VjPCthW9EdpJopaxZxPq3rRqirYow6aq764U+ans= Subject key identifier: 3A:82:AE:B3:FE:68:C2:3D:04:BC:61:31:47:E1:F2:9A:F7:22:9F:CE Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 351F53D7CCB0A8B7E7D4067BF12890B353F420CA Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS56236.roa Signing time: Tue 11 Nov 2025 06:00:18 +0000 ROA not before: Tue 11 Nov 2025 05:55:18 +0000 ROA not after: Tue 10 Nov 2026 06:00:18 +0000 asID: 56236 IP address blocks: 103.3.70.0/24 maxlen: 24 2001:df5:3600::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:1f:53:d7:cc:b0:a8:b7:e7:d4:06:7b:f1:28:90:b3:53:f4:20:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 11 05:55:18 2025 GMT Not After : Nov 10 06:00:18 2026 GMT Subject: CN=3A82AEB3FE68C23D04BC613147E1F29AF7229FCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d3:c2:01:bd:89:ae:e8:8b:5e:45:64:2d:4d: 9b:58:e6:63:04:1d:cb:03:87:92:a4:15:c6:19:1a: 7b:81:90:79:22:19:46:24:01:b7:9f:3a:97:0c:8f: f6:15:b9:6c:d1:15:ba:34:ee:f2:c0:6b:57:ea:38: 6a:4c:4a:d0:d8:fc:72:f0:65:dc:05:76:dc:9a:b5: fd:5f:32:cd:2e:9b:37:45:d3:bd:74:1b:ab:66:73: c0:33:e9:40:84:7b:86:eb:0b:55:bc:12:bb:f2:63: 14:3f:5d:fa:57:cf:b6:e3:90:c8:7b:44:5e:65:13: 01:26:c1:4e:d1:54:d4:94:d2:b4:5f:8d:a2:93:10: 01:db:65:cd:92:2c:50:92:fd:b2:a7:14:e7:f4:c6: e8:93:12:b5:58:54:38:ca:1c:e9:5d:ed:cf:15:5b: 7e:10:d0:ee:99:2e:6c:a3:57:7e:49:8a:3c:67:ac: 03:36:0e:d4:9c:1c:ce:1c:e0:c8:f1:2a:c0:7c:c9: aa:e3:15:27:d2:1d:ea:74:a4:98:91:09:a3:95:69: b0:5c:55:12:09:02:0d:7e:dd:ad:86:4a:0b:b4:3f: 7c:d4:fa:27:75:d1:da:f5:32:ab:07:81:ee:6c:70: 1f:f3:09:f9:ce:45:c7:4d:d8:df:87:87:3d:bf:ea: 9a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:82:AE:B3:FE:68:C2:3D:04:BC:61:31:47:E1:F2:9A:F7:22:9F:CE X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS56236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.3.70.0/24 IPv6: 2001:df5:3600::/48 Signature Algorithm: sha256WithRSAEncryption 1b:7f:55:c8:b3:95:70:a5:05:a5:b3:c8:a4:1d:47:60:27:3d: 67:6d:f4:1c:bf:61:f6:48:9b:8a:a8:85:99:1f:5f:f7:24:75: 00:f6:bc:99:fa:13:5c:53:95:65:e1:d8:33:0f:24:64:67:e5: 14:75:23:59:0c:8a:7a:37:31:f3:af:59:db:ea:98:26:77:b2: 93:22:b1:3a:70:82:bd:ce:50:10:07:0e:99:10:76:4c:0a:0b: 3c:ba:10:64:c7:39:20:42:59:63:4c:eb:d8:28:92:50:ef:36: d9:56:65:a8:7c:35:f5:d2:5b:f0:73:27:34:7d:23:db:2f:4e: 8d:cb:c0:d4:e1:3b:90:3a:c1:43:64:5e:98:85:47:f0:a3:2f: 09:ef:a5:d1:62:c9:7a:d8:c7:8f:51:34:80:fd:af:43:e6:a3: 52:67:4a:6a:96:53:92:c4:92:4f:07:09:a5:01:90:77:57:6e: 37:88:69:f7:1f:98:fb:95:d0:11:9d:b4:74:2e:f6:92:36:e5: 9e:99:6d:60:7e:a6:0f:54:06:90:93:2a:c0:41:03:06:13:c4: a3:02:b9:90:3d:9f:00:1c:47:73:b0:23:82:fb:38:a9:e0:6a: 63:28:e5:9f:a4:8a:e7:b5:66:75:60:26:ab:c5:0b:d0:10:21: af:59:9a:1f -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgIUNR9T18ywqLfn1AZ78SiQs1P0IMowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTA1NTUxOFoX DTI2MTExMDA2MDAxOFowMzExMC8GA1UEAxMoM0E4MkFFQjNGRTY4QzIzRDA0QkM2 MTMxNDdFMUYyOUFGNzIyOUZDRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN/TwgG9ia7oi15FZC1Nm1jmYwQdywOHkqQVxhkae4GQeSIZRiQBt586lwyP 9hW5bNEVujTu8sBrV+o4akxK0Nj8cvBl3AV23Jq1/V8yzS6bN0XTvXQbq2ZzwDPp QIR7husLVbwSu/JjFD9d+lfPtuOQyHtEXmUTASbBTtFU1JTStF+NopMQAdtlzZIs UJL9sqcU5/TG6JMStVhUOMoc6V3tzxVbfhDQ7pkubKNXfkmKPGesAzYO1Jwczhzg yPEqwHzJquMVJ9Id6nSkmJEJo5VpsFxVEgkCDX7drYZKC7Q/fNT6J3XR2vUyqweB 7mxwH/MJ+c5Fx03Y34eHPb/qmg0CAwEAAaOCAeAwggHcMB0GA1UdDgQWBBQ6gq6z /mjCPQS8YTFH4fKa9yKfzjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzU2MjM2LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZwNGMA8EAgACMAkDBwAgAQ31NgAwDQYJKoZIhvcNAQELBQADggEB ABt/VcizlXClBaWzyKQdR2AnPWdt9By/YfZIm4qohZkfX/ckdQD2vJn6E1xTlWXh 2DMPJGRn5RR1I1kMino3MfOvWdvqmCZ3spMisTpwgr3OUBAHDpkQdkwKCzy6EGTH OSBCWWNM69goklDvNtlWZah8NfXSW/BzJzR9I9svTo3LwNThO5A6wUNkXpiFR/Cj LwnvpdFiyXrYx49RNID9r0Pmo1JnSmqWU5LEkk8HCaUBkHdXbjeIafcfmPuV0BGd tHQu9pI25Z6ZbWB+pg9UBpCTKsBBAwYTxKMCuZA9nwAcR3OwI4L7OKngamMo5Z+k iue1ZnVgJqvFC9AQIa9Zmh8= -----END CERTIFICATE-----Generated at Sun Dec 7 00:49:01 2025 by rpki-client