This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e32302e39302e302f32332d3234203d3e203538333831.roa
File: 3130332e32302e39302e302f32332d3234203d3e203538333831.roa (raw, json)
Hash identifier: 5K/CSCkpnd8IXIfswWl0TeD0OpMXzsyDAU0E28APGJ4=
Subject key identifier: 11:9C:97:4E:9C:6D:CC:F9:9F:D6:A2:6D:83:AE:3B:1D:69:BF:D5:B0
Certificate issuer: /CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
Certificate serial: 54467CD36926A0946FB31E6D6C6772DD882F7BBB
Authority key identifier: E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e32302e39302e302f32332d3234203d3e203538333831.roa
Signing time: Mon 01 Dec 2025 03:01:09 +0000
ROA not before: Mon 01 Dec 2025 02:56:09 +0000
ROA not after: Mon 30 Nov 2026 03:01:09 +0000
asID: 58381
IP address blocks: 103.20.90.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl
rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 08:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:46:7c:d3:69:26:a0:94:6f:b3:1e:6d:6c:67:72:dd:88:2f:7b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
Validity
Not Before: Dec 1 02:56:09 2025 GMT
Not After : Nov 30 03:01:09 2026 GMT
Subject: CN=119C974E9C6DCCF99FD6A26D83AE3B1D69BFD5B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e5:dc:da:8d:fc:ee:07:0b:ee:23:ce:90:06:
42:05:a5:05:f8:eb:17:95:39:11:52:52:8f:1f:f7:
49:95:ad:08:67:27:0e:ed:0d:34:6b:2a:d4:a9:71:
8f:95:be:87:44:f6:36:54:53:be:83:e0:95:82:ef:
49:3d:59:2c:0c:3e:c9:a7:20:ea:89:aa:42:45:77:
33:76:cb:81:e2:2d:f9:51:4c:97:57:87:34:51:b2:
1c:76:8a:7a:4d:a8:c3:52:6a:a0:f2:84:44:a3:67:
31:ca:31:6c:b1:2f:cc:a5:69:1b:0c:48:59:c5:4d:
19:e3:de:53:22:66:d1:a7:05:4e:dd:e5:d5:02:71:
58:3e:40:47:b5:64:71:74:2b:5a:8e:c7:f1:4e:38:
5f:e6:bb:ad:b5:c6:e5:94:0f:45:b5:6c:41:28:64:
e5:d0:24:e1:9e:10:b0:b7:9e:87:9f:e9:50:5e:7e:
99:f9:fd:2b:a4:8e:44:f0:c1:3e:a9:fa:28:de:8e:
54:53:2e:5e:24:5a:cd:cd:3e:16:d8:66:a3:85:00:
c3:cc:1e:45:e9:3f:82:a6:ce:7b:5a:dd:13:38:81:
03:b4:93:6e:12:6b:05:18:fc:7c:20:b2:74:5d:fd:
86:3b:4c:33:85:d7:5c:7d:da:a8:50:e5:50:bf:32:
91:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9C:97:4E:9C:6D:CC:F9:9F:D6:A2:6D:83:AE:3B:1D:69:BF:D5:B0
X509v3 Authority Key Identifier:
keyid:E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e32302e39302e302f32332d3234203d3e203538333831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.20.90.0/23
Signature Algorithm: sha256WithRSAEncryption
01:ed:b0:00:c8:24:0e:9f:50:8c:63:0f:0f:ac:f6:99:0f:3b:
ff:2a:19:0a:a0:0c:92:82:25:c3:c8:38:3f:a2:b2:3a:68:b8:
dc:fd:5b:21:09:cf:6c:88:60:26:e2:a3:a2:08:27:2e:37:56:
82:11:c3:0e:71:c5:97:b9:39:28:05:9e:d8:19:f8:83:cb:c2:
3d:a3:40:47:00:ff:47:55:f8:0d:e6:ec:35:75:db:68:88:d8:
d2:2c:f5:db:c6:43:c3:b5:76:d0:e2:c6:ca:e6:88:dc:30:08:
8b:a0:60:31:6c:14:99:71:98:60:14:4c:e8:fd:9c:69:0c:40:
ce:47:69:fa:e3:9f:73:9d:9f:a6:15:fb:de:b2:68:df:72:2e:
36:46:1b:a6:56:66:3e:d2:b4:53:4d:5f:69:22:f2:79:f8:f7:
50:4d:02:7d:2f:26:07:dc:29:7a:65:5b:3a:e5:c3:1c:8c:ca:
e9:5a:3d:c5:71:ab:2d:42:af:82:cd:78:ec:17:f7:b3:5d:48:
33:84:e7:15:83:b6:9e:47:67:5b:07:44:b5:c7:01:9c:a7:ab:
62:ae:2f:1b:59:5e:51:66:b9:67:42:fb:68:cd:3f:8f:00:cc:
6e:5c:01:ad:67:59:46:8e:f4:07:c8:72:5f:98:c8:0c:41:27:
45:23:8f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:54:42 2025 by rpki-client