This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/3130332e3132342e3133392e302f32342d3234203d3e20313338303839.roa
File: 3130332e3132342e3133392e302f32342d3234203d3e20313338303839.roa (raw, json)
Hash identifier: PE8TrRaW4vcKNAJ983twfVSijpuNJ3TLSSc+Qt8t8hU=
Subject key identifier: 7E:36:5D:80:3E:9E:52:25:0D:59:5E:55:39:07:AB:D1:8D:6D:C6:39
Certificate issuer: /CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733
Certificate serial: 4F4371926327F0B23C7CF29C016CFF36841BB341
Authority key identifier: 7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/3130332e3132342e3133392e302f32342d3234203d3e20313338303839.roa
Signing time: Thu 04 Dec 2025 17:00:00 +0000
ROA not before: Thu 04 Dec 2025 16:55:00 +0000
ROA not after: Thu 03 Dec 2026 17:00:00 +0000
asID: 138089
IP address blocks: 103.124.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl
rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 06:51:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:43:71:92:63:27:f0:b2:3c:7c:f2:9c:01:6c:ff:36:84:1b:b3:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733
Validity
Not Before: Dec 4 16:55:00 2025 GMT
Not After : Dec 3 17:00:00 2026 GMT
Subject: CN=7E365D803E9E52250D595E553907ABD18D6DC639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b7:88:36:06:42:ce:03:0b:26:45:b0:23:01:
5a:1b:49:31:ba:ec:43:02:88:5e:bd:d5:2e:dd:aa:
e8:69:61:6b:14:22:c5:cf:64:a4:4b:76:c2:80:10:
10:ac:6d:e2:fb:58:6b:f6:48:59:3e:45:19:1d:71:
e4:07:ca:a2:b5:c3:22:7d:06:1e:1e:a5:f4:75:2a:
75:5e:db:5d:b0:c6:c9:e1:61:0a:d7:69:38:34:82:
53:c5:cb:8e:88:a5:8e:e3:23:24:49:3f:31:b1:99:
fb:1c:be:b9:b5:f6:2a:37:b2:1f:d0:b8:60:4f:d6:
b0:47:5b:f4:99:1b:4d:eb:e5:db:7e:30:ec:30:84:
6c:13:5a:cb:2a:8f:7e:48:30:d1:ce:53:41:73:fb:
a8:5c:82:e8:1e:42:fa:bd:fe:98:c7:88:8c:7b:24:
71:0b:38:69:86:6e:ab:e8:e4:36:86:0f:a7:48:0a:
e0:2a:db:2b:ba:9f:89:52:c8:fa:f6:b5:08:fb:92:
4e:c2:cf:3f:8c:b4:a8:13:ae:30:47:75:1e:c5:35:
31:0c:85:72:5f:5f:5b:0b:92:b6:ef:fa:ba:de:10:
88:f2:45:bd:7a:30:3b:bf:44:cc:5a:fd:38:2d:5a:
ce:3f:0a:cd:b6:f8:de:cc:bc:61:ee:58:5e:74:cc:
9d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:36:5D:80:3E:9E:52:25:0D:59:5E:55:39:07:AB:D1:8D:6D:C6:39
X509v3 Authority Key Identifier:
keyid:7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/3130332e3132342e3133392e302f32342d3234203d3e20313338303839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.124.139.0/24
Signature Algorithm: sha256WithRSAEncryption
30:be:dc:45:3a:6f:04:0e:e7:a0:a0:36:57:eb:bb:36:93:45:
0f:44:76:7d:a3:7c:0e:60:13:ba:de:51:49:9a:6d:e7:a0:c1:
4c:0b:8f:84:f4:89:db:bd:04:6a:a5:a7:71:de:d1:8d:30:8d:
77:e3:60:b4:35:54:ae:f6:ac:2a:5a:4a:e5:7d:df:21:04:49:
85:2c:cc:5c:b7:7f:41:ca:59:d8:81:54:4d:ee:fe:28:bc:ff:
57:87:62:64:9a:30:e2:8d:c2:3e:c3:98:0a:1c:14:2b:df:c6:
7d:83:f9:76:76:0d:18:f1:69:6e:7f:0b:cc:1c:1c:25:40:da:
37:7e:30:ab:07:13:76:42:56:2c:b9:94:0d:f0:cf:26:e4:99:
da:42:27:24:82:9b:60:69:ef:87:38:45:fc:c7:bd:90:1e:8c:
d9:39:b7:56:c2:15:1b:76:a7:c5:02:d6:68:43:25:a5:88:15:
8b:9f:b1:75:3c:89:7d:36:5f:3d:19:93:82:9d:7a:20:6e:83:
76:d8:da:26:ef:41:85:6d:fe:b4:59:ff:da:34:a9:e4:d0:b4:
16:e0:86:cf:4f:46:aa:ba:91:71:39:a6:06:61:df:56:b1:28:
a8:8a:8d:8a:dd:4d:90:39:fd:aa:3e:c3:73:e0:0e:1d:48:e9:
4f:68:99:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 09:21:20 2025 by rpki-client