This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/AS147168.roa
File: AS147168.roa (raw, json)
Hash identifier: m6TF7dm4Aqdk4zR0G6oigljVF/cLTycPFdBhQNDMJbA=
Subject key identifier: A3:D7:EC:66:65:46:F8:82:1A:84:96:61:81:01:EA:6F:75:28:15:EC
Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial: 019D5DF87808125AEA53A3A3B6664A38EA1B98E9
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/AS147168.roa
Signing time: Fri 14 Nov 2025 07:14:20 +0000
ROA not before: Fri 14 Nov 2025 07:09:20 +0000
ROA not after: Fri 13 Nov 2026 07:14:20 +0000
asID: 147168
IP address blocks: 103.178.8.0/24 maxlen: 24
202.171.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl
rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:5d:f8:78:08:12:5a:ea:53:a3:a3:b6:66:4a:38:ea:1b:98:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Validity
Not Before: Nov 14 07:09:20 2025 GMT
Not After : Nov 13 07:14:20 2026 GMT
Subject: CN=A3D7EC666546F8821A8496618101EA6F752815EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4c:9b:63:6e:57:59:75:24:eb:6e:6b:7d:4b:
49:bf:c7:c1:0e:e7:1a:31:50:a3:40:c4:b2:f0:4a:
da:8d:ec:58:19:05:a7:fa:91:01:f8:48:da:12:e9:
11:a3:18:be:3f:94:f1:98:3b:cb:fc:b2:98:52:56:
78:e6:44:ce:9f:8c:f0:4d:ed:bc:b9:f1:62:e9:07:
ac:29:11:3f:b8:4b:52:c5:74:59:0e:69:e6:d4:84:
4d:90:2a:de:9b:2f:c1:c9:ce:40:55:63:bb:60:52:
8d:ee:4b:41:d6:f6:45:21:89:b6:5b:f2:09:80:db:
e9:a7:44:4f:e3:da:96:f9:24:64:94:14:d3:0d:e6:
09:de:60:d7:37:b0:21:03:89:ae:36:d3:2d:7b:3b:
77:1a:21:9a:44:c2:05:04:a7:ff:d2:36:fb:80:da:
a6:88:7e:0c:c7:02:b9:74:10:11:0b:0b:f4:cc:18:
6d:4b:d5:d9:cb:94:81:fd:a8:9d:12:bc:e2:f1:91:
cd:4c:da:e6:42:db:70:4d:43:7c:52:3e:81:46:e4:
f9:9e:7b:80:5d:c9:9b:e7:19:90:d7:91:e4:11:89:
6b:da:0f:df:fd:40:ae:aa:78:46:79:db:26:87:df:
85:21:b3:93:66:b9:05:e8:b1:cf:05:e5:13:bf:d6:
2f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D7:EC:66:65:46:F8:82:1A:84:96:61:81:01:EA:6F:75:28:15:EC
X509v3 Authority Key Identifier:
keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/AS147168.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.178.8.0/24
202.171.8.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:e2:2a:2e:e6:34:b0:f6:83:9a:2c:c6:5c:fb:e3:f9:a6:89:
a6:d6:62:b4:1b:4b:e5:05:85:82:f7:d9:b2:49:68:ab:3a:36:
b4:2a:92:7e:6a:e2:b1:6e:84:5b:b7:48:5d:b4:3a:9b:bb:d7:
e8:a7:4a:83:0c:f2:20:a3:c7:41:22:bf:73:14:4b:de:6e:0e:
ec:7d:78:e1:c7:df:7c:26:88:a1:d1:fe:a9:cc:43:fa:20:8f:
e9:f8:cd:6d:a5:9e:ef:86:fd:fd:52:73:fb:fe:c3:9f:f3:32:
15:7a:46:a3:0c:c6:37:b0:5e:52:b0:32:56:8d:d1:ae:b1:e9:
e5:eb:83:01:c8:ee:93:32:a6:1c:fc:c9:d0:f4:9e:d7:22:16:
6e:28:82:ec:3c:ad:be:12:09:8a:a4:fb:81:4b:ca:f3:6d:77:
32:2c:7a:1f:00:01:1f:33:25:21:4a:f4:2d:3c:e4:39:16:5b:
b5:7d:7f:98:54:a4:c4:5d:7b:35:3e:f1:a1:11:f2:b2:9c:aa:
f9:53:02:94:74:85:a2:20:a2:04:4f:4b:60:cc:af:2e:2a:aa:
91:b1:85:f0:f3:eb:48:09:a1:52:53:ff:d4:e9:69:83:8b:c9:
99:b6:3d:7a:15:57:b0:aa:36:6e:69:4b:fb:3a:bc:10:d4:70:
15:1d:c1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:07:54 2025 by rpki-client