This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/3130332e32342e3231322e302f32322d3232203d3e20313332363439.roa
File: 3130332e32342e3231322e302f32322d3232203d3e20313332363439.roa (raw, json)
Hash identifier: 45SWUlBMje1Gil0mHOq3QhxOP8W4+J1eu/35dWSuGkk=
Subject key identifier: F8:15:31:D0:3E:65:E3:F8:13:94:95:77:B9:E0:03:58:7E:3C:49:F1
Certificate issuer: /CN=4ACFA054E26D225A10C6B0FD316D21263924491E
Certificate serial: 4664A05B0BC633347102FD091FFBD8B51CE124FD
Authority key identifier: 4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/3130332e32342e3231322e302f32322d3232203d3e20313332363439.roa
Signing time: Mon 17 Nov 2025 15:00:00 +0000
ROA not before: Mon 17 Nov 2025 14:55:00 +0000
ROA not after: Mon 16 Nov 2026 15:00:00 +0000
asID: 132649
IP address blocks: 103.24.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl
rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:64:a0:5b:0b:c6:33:34:71:02:fd:09:1f:fb:d8:b5:1c:e1:24:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ACFA054E26D225A10C6B0FD316D21263924491E
Validity
Not Before: Nov 17 14:55:00 2025 GMT
Not After : Nov 16 15:00:00 2026 GMT
Subject: CN=F81531D03E65E3F813949577B9E003587E3C49F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6f:b1:f4:6d:1b:d2:0c:1e:e7:78:92:f8:80:
d1:24:da:0a:1d:bc:af:27:a7:43:37:f1:58:8f:52:
98:d7:8c:01:19:87:5f:5d:67:99:c1:cc:71:48:55:
e8:1b:38:d9:6c:c0:b1:6c:b0:9c:63:d7:d3:58:05:
58:87:72:20:cd:78:32:f4:94:1c:bd:4f:ef:14:35:
9c:13:5a:28:c7:8b:7b:5b:bb:16:2e:3d:96:36:29:
ed:68:40:0c:84:a7:92:44:ef:93:85:9a:b0:43:0b:
89:41:bf:da:02:f3:ca:2e:5c:d0:22:e7:21:4c:7b:
ae:29:d3:8e:a7:62:f7:38:ed:60:d2:88:b9:59:11:
3d:44:a6:a5:b7:77:92:15:2c:38:31:d3:2b:5d:55:
f2:fd:d7:1d:de:c5:5b:81:6d:61:0a:c0:05:f5:92:
69:8c:9e:47:9f:be:43:c3:fb:19:ea:67:89:dd:3b:
8e:fc:f4:59:3a:45:02:95:47:0c:b6:ff:c3:19:67:
72:f7:8b:c4:7d:fc:28:a7:13:dc:d6:be:21:51:29:
83:0e:7a:df:66:7b:ad:2c:24:9a:d7:3a:4c:41:45:
bb:23:35:5d:93:83:1c:4d:14:85:50:55:63:ff:dd:
12:9b:0d:6b:c7:9e:ec:d2:aa:76:ea:a4:a7:a9:8f:
67:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:15:31:D0:3E:65:E3:F8:13:94:95:77:B9:E0:03:58:7E:3C:49:F1
X509v3 Authority Key Identifier:
keyid:4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/3130332e32342e3231322e302f32322d3232203d3e20313332363439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.24.212.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:17:eb:b9:c7:e7:84:15:24:cc:4e:39:59:f9:67:86:0d:72:
40:f1:81:56:ba:28:32:75:19:de:24:e9:65:b8:b7:b2:4f:47:
b2:c6:c6:3f:c6:04:66:d3:65:74:ca:24:46:a3:b2:40:56:f8:
4a:03:60:73:b4:5b:ac:1d:2a:95:64:cd:2f:d1:6b:38:30:0c:
da:ac:03:92:0c:99:d6:3d:48:0e:8c:a4:37:66:3e:ff:5a:b7:
3c:93:4b:2f:30:7c:35:ff:be:80:ed:43:b1:81:fd:00:28:d3:
2e:44:16:52:a1:7b:80:ae:d7:f9:50:75:16:d8:f7:9b:bb:31:
6f:34:fc:94:90:b3:89:86:9b:2a:ab:91:1e:f9:9c:42:1f:58:
c7:d6:8f:73:2d:09:00:09:cf:b7:9d:d7:d8:87:0f:eb:7a:ff:
ee:7d:53:d9:af:3d:d2:79:89:a5:cd:a2:37:e4:97:40:64:a6:
3e:53:4e:b0:59:6c:d4:46:84:d5:1e:d4:f0:90:ad:c9:cb:54:
e7:9a:e7:05:79:da:23:7f:39:34:6c:b3:75:c1:8e:33:c0:e7:
6c:19:31:b9:ad:fa:7c:af:87:d1:03:a9:b8:32:bb:f1:f9:05:
e2:ad:3c:cd:6a:7b:70:da:19:58:35:45:2a:b2:a6:83:8a:8e:
12:92:d4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:12:43 2025 by rpki-client