This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/3130332e3138322e302e302f32332d3233203d3e2039333431.roa
File: 3130332e3138322e302e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier: nPXN7jiM3pyEkrdy+/m6LPxlqXOvK01rGWZj8klP7xs=
Subject key identifier: 9C:47:D1:C4:93:12:35:4F:69:15:C2:1B:92:42:73:9F:32:34:7F:33
Certificate issuer: /CN=1C427FBF1A649B90BD89B0EA83871003D9045925
Certificate serial: 3678A683E58464C5095454996268B6F23EADCB25
Authority key identifier: 1C:42:7F:BF:1A:64:9B:90:BD:89:B0:EA:83:87:10:03:D9:04:59:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/3130332e3138322e302e302f32332d3233203d3e2039333431.roa
Signing time: Wed 12 Nov 2025 20:00:52 +0000
ROA not before: Wed 12 Nov 2025 19:55:52 +0000
ROA not after: Wed 11 Nov 2026 20:00:52 +0000
asID: 9341
IP address blocks: 103.182.0.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.crl
rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 08:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:78:a6:83:e5:84:64:c5:09:54:54:99:62:68:b6:f2:3e:ad:cb:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C427FBF1A649B90BD89B0EA83871003D9045925
Validity
Not Before: Nov 12 19:55:52 2025 GMT
Not After : Nov 11 20:00:52 2026 GMT
Subject: CN=9C47D1C49312354F6915C21B9242739F32347F33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:64:5e:4a:6d:61:f5:3e:12:1a:26:8e:bb:b5:
78:27:f3:81:e5:e3:8c:58:7f:e4:20:48:3f:63:08:
88:78:b8:8b:b6:cf:26:ee:41:eb:10:6b:52:b7:be:
cd:41:ea:04:85:8e:56:06:bc:1e:bb:78:de:00:2f:
d1:66:6e:93:b5:5e:ce:61:a6:e0:04:81:8d:01:06:
7b:f0:a8:81:14:26:e3:12:f9:e9:45:cc:d2:c6:ed:
9f:4d:21:b7:98:ca:bd:94:b9:a9:e1:25:f5:24:88:
5b:ac:f5:7e:c9:3c:01:e4:43:a5:fe:5d:83:74:0e:
eb:b2:d5:f1:61:0a:a7:82:2f:4c:e2:01:36:5c:2d:
b9:47:59:4c:4c:45:21:7f:e0:53:38:33:71:a5:e3:
b6:2d:e4:3e:02:64:bc:1e:2a:92:a8:2e:88:ca:09:
1f:a3:09:38:90:76:02:34:48:f0:e6:b9:d6:e1:91:
36:f4:9a:ed:8d:c3:38:bc:eb:61:d7:e7:9a:f8:02:
44:03:1e:b2:32:83:ca:7a:7a:a1:a8:a5:e4:b0:a4:
73:a0:f8:d0:71:f8:38:52:10:1e:49:de:b6:0d:27:
ec:c6:0e:43:17:7a:f8:9a:c6:4c:32:dd:ef:49:e7:
f1:67:b7:a2:78:82:f5:6b:63:03:60:46:aa:c5:34:
03:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:47:D1:C4:93:12:35:4F:69:15:C2:1B:92:42:73:9F:32:34:7F:33
X509v3 Authority Key Identifier:
keyid:1C:42:7F:BF:1A:64:9B:90:BD:89:B0:EA:83:87:10:03:D9:04:59:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/3130332e3138322e302e302f32332d3233203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.182.0.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:88:b4:72:e5:ff:03:e0:5a:e9:65:98:79:53:1f:48:83:88:
1f:c5:8e:c8:a3:44:d1:85:22:39:3c:f8:99:65:e3:56:94:41:
5a:f9:cd:97:e6:f2:8f:32:b1:dd:11:6a:6b:4f:1f:ef:56:3a:
2e:df:c5:67:8d:b6:4d:51:57:97:c6:66:d4:de:5c:36:b0:97:
ac:9c:8f:bb:64:8a:55:41:d4:d0:72:57:13:70:c7:9a:50:d7:
db:b0:fc:16:52:ac:68:37:ba:19:9f:c0:03:9d:2a:16:71:a3:
ea:6d:5e:81:56:f3:17:e7:4c:93:ae:7e:8d:88:33:56:69:77:
cb:69:5e:12:38:89:c9:8b:cc:b7:77:08:f4:69:5b:6a:21:b1:
42:bc:61:d3:5d:cd:24:84:40:a9:2f:b2:72:e2:9e:5c:36:2d:
be:bb:b2:0c:3c:8a:98:08:9e:e4:dd:87:6a:d3:02:18:c8:46:
66:0a:7d:5a:8b:f3:a6:48:30:73:96:31:26:d5:00:a0:f6:c6:
7d:30:00:b9:95:14:5f:e6:5a:eb:00:a7:62:ff:cf:61:cb:52:
70:b0:ca:66:34:42:93:22:e9:6b:db:a9:53:9e:c6:95:04:7f:
e0:7d:43:f0:ea:9c:5c:0f:cf:1f:d7:c1:9c:73:20:a9:a9:83:
6c:c5:cd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:58:26 2025 by rpki-client