This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS58552.roa File: AS58552.roa (raw, json) Hash identifier: YxignFW11zclIv8MekxBwm5ZQcvsQDie5/qw9cLmxg8= Subject key identifier: 73:DA:9C:DE:5B:E1:9B:8E:28:C3:05:74:9D:6F:42:3D:65:03:A0:CC Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2017437BC55F1D35DBE363CDEEEB5A5F8D7107A3 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS58552.roa Signing time: Tue 16 Dec 2025 04:00:00 +0000 ROA not before: Tue 16 Dec 2025 03:55:00 +0000 ROA not after: Tue 15 Dec 2026 04:00:00 +0000 asID: 58552 IP address blocks: 103.143.223.0/24 maxlen: 24 114.198.241.0/24 maxlen: 24 114.198.247.0/24 maxlen: 24 116.68.164.0/24 maxlen: 24 116.68.165.0/24 maxlen: 24 116.68.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 15:22:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:17:43:7b:c5:5f:1d:35:db:e3:63:cd:ee:eb:5a:5f:8d:71:07:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 16 03:55:00 2025 GMT Not After : Dec 15 04:00:00 2026 GMT Subject: CN=73DA9CDE5BE19B8E28C305749D6F423D6503A0CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0a:fd:25:87:b9:a8:bc:22:48:19:d3:50:59: aa:6a:b1:64:18:f0:91:47:19:09:6d:92:99:24:0e: e5:2f:c0:cd:c4:d0:d7:b3:0d:62:67:25:5f:4b:f7: 5d:eb:86:d4:b8:45:04:ad:90:56:e4:5f:e4:40:1c: 2a:16:94:17:b9:79:74:51:fd:df:98:16:18:29:c5: ce:e7:a3:99:2d:9e:e3:a3:a7:8e:34:7e:f1:4a:72: 3f:9b:85:45:7f:f7:ec:07:d2:48:cb:25:c3:b0:e8: 97:eb:1c:5a:80:78:7a:da:c6:6b:f6:f2:84:82:a8: 24:4a:b2:c8:d9:69:84:0e:fd:80:61:51:f2:2c:97: 02:5f:8e:e5:df:8a:c1:a5:7b:52:85:cb:ac:fc:a5: 01:44:f4:a8:c1:a3:7f:79:87:93:aa:99:12:88:21: be:10:fe:b1:0a:83:10:2c:c7:c7:18:a3:8b:38:31: 97:6c:74:d2:8c:03:6d:e8:dd:a3:29:e6:a4:ce:ec: c2:0a:63:dd:a2:97:e2:aa:5c:c9:35:d4:1d:53:f4: 23:99:f6:6c:5f:8c:c3:2b:11:12:59:d1:cb:1c:71: 07:b7:7b:56:8e:c1:ff:43:73:4e:38:7e:be:98:f8: f5:7e:7f:3c:ff:9b:09:92:fd:89:48:e2:9b:c4:3a: 2e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:DA:9C:DE:5B:E1:9B:8E:28:C3:05:74:9D:6F:42:3D:65:03:A0:CC X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS58552.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.223.0/24 114.198.241.0/24 114.198.247.0/24 116.68.164.0/23 116.68.173.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:d5:cf:c2:da:c8:8f:e0:c9:89:fa:f8:e0:09:84:19:28:79: c5:9f:2d:75:d4:50:04:6a:31:76:67:14:bc:de:8b:9d:42:49: e1:4d:eb:19:4c:7d:78:71:37:57:13:b8:f7:80:41:19:96:54: a3:d3:84:4f:58:bc:10:e8:e9:06:e9:85:db:34:9d:6b:66:17: 25:ce:37:df:c9:0e:25:e6:5f:9a:f4:ec:2f:1f:10:f0:68:60: 3e:a9:9b:48:b8:b7:90:d6:30:98:9b:9d:89:bd:91:4a:f4:bd: 61:54:3e:4d:40:9a:1b:22:0c:96:94:12:40:a4:4c:71:ef:93: 68:54:59:0b:81:55:38:5f:d4:83:66:11:ea:2c:7f:0d:93:73: 37:d1:5b:54:5d:8f:5e:a2:54:38:7e:1b:bd:e9:be:31:0b:e6: ed:01:43:ad:88:eb:17:d0:7f:eb:37:3c:9d:4f:04:30:73:29: 98:67:9e:23:64:9a:3f:51:5c:be:9a:fa:d0:ab:25:89:b1:49: fb:07:15:32:3f:04:c0:07:5a:f7:56:5b:94:54:32:e7:d1:7d: 85:23:1b:39:41:b4:bb:5a:93:da:66:91:11:e8:de:13:5a:59: 7b:51:0b:1a:ef:03:42:6a:99:31:c9:11:9c:7e:eb:89:bd:ac: 1a:10:ff:a6 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUIBdDe8VfHTXb42PN7utaX41xB6MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIxNjAzNTUwMFoX DTI2MTIxNTA0MDAwMFowMzExMC8GA1UEAxMoNzNEQTlDREU1QkUxOUI4RTI4QzMw NTc0OUQ2RjQyM0Q2NTAzQTBDQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMoK/SWHuai8IkgZ01BZqmqxZBjwkUcZCW2SmSQO5S/AzcTQ17MNYmclX0v3 XeuG1LhFBK2QVuRf5EAcKhaUF7l5dFH935gWGCnFzuejmS2e46OnjjR+8UpyP5uF RX/37AfSSMslw7Dol+scWoB4etrGa/byhIKoJEqyyNlphA79gGFR8iyXAl+O5d+K waV7UoXLrPylAUT0qMGjf3mHk6qZEoghvhD+sQqDECzHxxijizgxl2x00owDbejd oynmpM7swgpj3aKX4qpcyTXUHVP0I5n2bF+MwysRElnRyxxxB7d7Vo7B/0NzTjh+ vpj49X5/PP+bCZL9iUjim8Q6LiECAwEAAaOCAecwggHjMB0GA1UdDgQWBBRz2pze W+GbjijDBXSdb0I9ZQOgzDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzU4NTUyLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAk BAIAATAeAwQAZ4/fAwQAcsbxAwQAcsb3AwQBdESkAwQAdEStMA0GCSqGSIb3DQEB CwUAA4IBAQBq1c/C2siP4MmJ+vjgCYQZKHnFny111FAEajF2ZxS83oudQknhTesZ TH14cTdXE7j3gEEZllSj04RPWLwQ6OkG6YXbNJ1rZhclzjffyQ4l5l+a9OwvHxDw aGA+qZtIuLeQ1jCYm52JvZFK9L1hVD5NQJobIgyWlBJApExx75NoVFkLgVU4X9SD ZhHqLH8Nk3M30VtUXY9eolQ4fhu96b4xC+btAUOtiOsX0H/rNzydTwQwcymYZ54j ZJo/UVy+mvrQqyWJsUn7BxUyPwTAB1r3VluUVDLn0X2FIxs5QbS7WpPaZpER6N4T Wll7UQsa7wNCapkxyRGcfuuJvawaEP+m -----END CERTIFICATE-----Generated at Wed Dec 17 16:46:05 2025 by rpki-client