This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37342e302f32332d3234203d3e203436303236.roa
File: 3130332e3133352e37342e302f32332d3234203d3e203436303236.roa (raw, json)
Hash identifier: YHfOb3XSEMDVEIcVfiAIW6kLWlhlW9/hxOsVCiJWMDg=
Subject key identifier: BB:5A:11:96:33:C1:5C:80:33:E8:84:CF:21:F0:79:A2:FA:E3:1F:97
Certificate issuer: /CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17
Certificate serial: 18DBC251DA2EA38595BCD592FFC286421E08547F
Authority key identifier: F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37342e302f32332d3234203d3e203436303236.roa
Signing time: Mon 17 Nov 2025 03:00:00 +0000
ROA not before: Mon 17 Nov 2025 02:55:00 +0000
ROA not after: Mon 16 Nov 2026 03:00:00 +0000
asID: 46026
IP address blocks: 103.135.74.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl
rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 17:43:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:db:c2:51:da:2e:a3:85:95:bc:d5:92:ff:c2:86:42:1e:08:54:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17
Validity
Not Before: Nov 17 02:55:00 2025 GMT
Not After : Nov 16 03:00:00 2026 GMT
Subject: CN=BB5A119633C15C8033E884CF21F079A2FAE31F97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d1:d4:a2:33:75:12:66:67:f9:df:45:dd:c1:
58:2d:a5:66:ab:c9:eb:6e:59:47:85:78:e9:a7:dd:
c7:81:fc:b4:69:d8:4d:b9:d8:a1:91:84:3b:5e:49:
43:bf:50:bc:f5:f9:51:a9:a9:a9:e5:ca:fe:d3:75:
59:73:21:73:dc:97:7f:5c:91:8b:0f:db:19:8c:c7:
95:c4:65:10:c0:9c:59:2e:55:29:d3:aa:6c:56:f3:
47:4d:f1:f8:88:c3:82:69:f3:1b:71:84:9b:93:50:
3d:9a:42:48:69:06:2c:b0:b4:f4:3e:70:d3:31:09:
34:46:11:03:a4:a4:27:36:c1:6a:7e:9b:d8:6d:69:
eb:45:56:db:6d:f8:a5:bb:8a:4e:bf:93:2f:10:1a:
6f:5d:f0:15:f3:86:a7:df:b1:a5:51:92:af:01:0a:
37:79:74:6e:55:8a:31:d7:fa:2e:a7:92:b8:3b:b9:
17:76:ed:ae:1c:6d:40:50:77:af:48:ba:0a:de:e4:
44:c5:55:5d:28:08:e6:2a:c9:b9:ff:fa:51:35:aa:
3d:69:0f:e6:99:f7:bc:d1:6d:68:ac:51:a9:a2:27:
52:c3:28:15:8d:18:68:d4:87:10:8a:b5:4d:c2:c9:
67:8a:07:5f:58:e9:59:be:4d:61:fa:ef:8c:a6:7e:
14:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5A:11:96:33:C1:5C:80:33:E8:84:CF:21:F0:79:A2:FA:E3:1F:97
X509v3 Authority Key Identifier:
keyid:F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37342e302f32332d3234203d3e203436303236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.135.74.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:86:55:19:be:c5:b6:9b:c5:6b:5f:46:1e:3e:64:f9:62:f4:
bb:3b:35:a5:ba:e4:28:fd:70:df:02:c9:26:64:68:37:9b:95:
22:94:7d:63:30:d4:eb:24:23:8a:cc:b3:55:d5:f9:9c:61:ec:
20:01:ae:a0:da:d8:2b:0f:17:e6:c9:96:8d:8b:fe:4f:72:fc:
38:27:64:6b:58:44:c9:87:78:db:6f:35:cb:39:a3:14:1c:ee:
bd:03:f8:c6:e6:32:2f:e7:d1:a7:e3:75:ea:5f:5e:80:9e:70:
91:22:44:ba:09:b9:7f:86:de:9c:91:5c:17:e5:d9:a9:67:87:
e0:38:b9:ad:5c:11:23:60:b1:91:ec:b6:76:d8:22:17:df:6d:
0f:99:12:1f:c4:4d:e0:76:70:d7:37:17:8d:32:63:bc:96:c0:
7a:d1:f3:6e:d7:69:a4:6c:59:39:da:67:e1:20:dd:57:5d:53:
d7:c0:29:ec:5c:ff:b2:65:30:b9:29:07:43:22:e4:a4:ec:23:
72:bb:a0:86:01:99:f2:a7:c7:16:18:a2:cb:07:44:15:57:83:
08:33:f4:04:c4:76:05:72:97:b9:24:5b:a6:b3:68:a5:15:8f:
e9:26:9b:35:f6:27:87:3b:f9:f7:b1:fa:c8:2c:d5:c3:9f:af:
0c:12:06:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:00:31 2025 by rpki-client