This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/3130332e3133312e32382e302f32342d3234203d3e20313530353030.roa
File: 3130332e3133312e32382e302f32342d3234203d3e20313530353030.roa (raw, json)
Hash identifier: hdvyAhrcryql4wjEziksSVWRL82EleGS11GMyW3jyaU=
Subject key identifier: 08:F5:CA:20:38:00:BB:71:55:E6:1E:62:E2:FC:2F:C8:C0:4C:58:5B
Certificate issuer: /CN=70CC719DF5876DBD92D41F5AF0359E3A698BDDD4
Certificate serial: 1436E1D81199697E7133AA52FB3D368A156C872C
Authority key identifier: 70:CC:71:9D:F5:87:6D:BD:92:D4:1F:5A:F0:35:9E:3A:69:8B:DD:D4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/3130332e3133312e32382e302f32342d3234203d3e20313530353030.roa
Signing time: Thu 04 Dec 2025 13:00:51 +0000
ROA not before: Thu 04 Dec 2025 12:55:51 +0000
ROA not after: Thu 03 Dec 2026 13:00:51 +0000
asID: 150500
IP address blocks: 103.131.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.crl
rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:34:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:36:e1:d8:11:99:69:7e:71:33:aa:52:fb:3d:36:8a:15:6c:87:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70CC719DF5876DBD92D41F5AF0359E3A698BDDD4
Validity
Not Before: Dec 4 12:55:51 2025 GMT
Not After : Dec 3 13:00:51 2026 GMT
Subject: CN=08F5CA203800BB7155E61E62E2FC2FC8C04C585B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b9:ba:f4:ec:25:b6:a1:cf:f0:26:44:e1:74:
af:79:4e:ef:c3:64:76:4a:5f:6d:5c:d2:3a:68:73:
5c:33:f3:b8:c1:40:2b:a5:ad:24:0f:60:3e:ac:a6:
7f:e9:ce:4a:0a:f5:39:38:1e:05:9e:49:bc:a5:aa:
a6:61:ad:cb:26:e0:96:36:1b:ec:07:dc:62:00:1d:
a3:61:a5:57:b8:bb:2d:0e:fc:a6:8b:04:d7:14:9f:
8c:5b:a0:b0:e8:c2:81:68:90:26:84:f6:17:81:94:
8d:06:d0:2d:a7:a5:6f:9c:8b:64:8b:dc:b5:93:8d:
4e:9d:31:1f:2f:c1:52:77:cb:c5:26:3b:0f:9d:bc:
4b:04:03:7b:08:b5:77:c4:6e:b5:e8:e8:34:e5:75:
fc:d6:af:1a:77:5f:0d:5a:5e:3a:d1:dc:41:d9:24:
52:09:37:51:78:5b:09:3f:bd:5d:57:c5:d0:9c:a1:
cf:ef:dd:6f:ea:c8:c9:09:e5:7b:be:98:2e:41:39:
b0:02:42:7e:70:f5:47:d5:81:7b:e7:5c:7b:fb:92:
92:8e:98:f7:43:b9:04:d1:95:54:6c:7a:8d:64:f3:
85:47:eb:53:96:a1:39:ad:83:2d:fa:06:82:8e:fc:
97:b1:be:c5:35:09:38:99:4b:2c:05:13:20:81:9a:
ed:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F5:CA:20:38:00:BB:71:55:E6:1E:62:E2:FC:2F:C8:C0:4C:58:5B
X509v3 Authority Key Identifier:
keyid:70:CC:71:9D:F5:87:6D:BD:92:D4:1F:5A:F0:35:9E:3A:69:8B:DD:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/3130332e3133312e32382e302f32342d3234203d3e20313530353030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.131.28.0/24
Signature Algorithm: sha256WithRSAEncryption
06:48:11:df:7b:1a:0b:c2:87:8c:90:67:2c:2f:e7:b4:e5:9f:
cc:aa:22:40:0d:79:b1:1a:bc:0f:84:34:ea:bd:fb:fd:fc:0c:
35:52:23:6c:3a:a6:48:0e:b9:58:5b:49:65:08:71:a5:96:42:
b7:76:e7:58:0f:f2:53:f1:9b:c8:d6:1b:cd:60:ed:67:8d:ca:
6a:20:d1:c8:23:64:9e:97:0e:20:40:41:90:9c:78:dd:5a:36:
04:64:82:0c:65:33:e6:64:8a:4e:a3:1a:74:c9:30:ad:6e:e9:
15:91:99:40:0b:59:1c:c8:0d:ae:81:56:af:60:86:28:6e:72:
90:0d:ca:86:ff:27:88:1e:9c:63:95:7a:e2:52:3c:a4:7d:df:
6f:47:3e:68:1b:54:ef:82:cc:4a:e4:b4:4c:46:d6:78:93:78:
2f:5c:0d:db:4b:0e:68:5d:5b:da:75:ef:50:2c:1c:6f:ab:29:
00:ef:2d:a6:15:81:e8:ac:e9:4c:0e:89:3a:92:25:24:2c:8b:
e2:3f:85:c6:50:d2:8e:69:10:5d:b2:67:67:9e:c5:74:69:7e:
d2:c5:86:40:a2:2d:1e:82:4f:86:e8:0c:81:62:5b:a2:92:27:
fd:82:5a:8b:e8:b8:cc:6a:b0:e7:0f:7e:87:c3:88:db:cd:0a:
de:02:19:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:14:19 2025 by rpki-client