This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234352e302f32342d3234203d3e203338373738.roa
File: 3230322e39332e3234352e302f32342d3234203d3e203338373738.roa (raw, json)
Hash identifier: pTD6ntCSNPwtG4NHQ69qWa7mmsEOdj99qhIPIzZeDUQ=
Subject key identifier: 77:3A:C3:55:04:EA:D1:62:4B:F1:97:D2:E2:60:A5:86:3C:2A:AB:57
Certificate issuer: /CN=F38DFF094E16843854EAC1403C69FD7F77809D02
Certificate serial: 0A272CD566C6034B80673BA98B9AC109AD163FA0
Authority key identifier: F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234352e302f32342d3234203d3e203338373738.roa
Signing time: Tue 25 Nov 2025 10:01:38 +0000
ROA not before: Tue 25 Nov 2025 09:56:38 +0000
ROA not after: Tue 24 Nov 2026 10:01:38 +0000
asID: 38778
IP address blocks: 202.93.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl
rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:27:2c:d5:66:c6:03:4b:80:67:3b:a9:8b:9a:c1:09:ad:16:3f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F38DFF094E16843854EAC1403C69FD7F77809D02
Validity
Not Before: Nov 25 09:56:38 2025 GMT
Not After : Nov 24 10:01:38 2026 GMT
Subject: CN=773AC35504EAD1624BF197D2E260A5863C2AAB57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:62:97:fb:fd:81:f8:80:23:3c:6b:53:82:91:
62:50:fc:c1:2c:4f:65:fb:f2:45:38:92:7e:7b:50:
cd:f9:ef:15:0e:a5:9b:e4:9a:22:2b:15:ec:f4:b1:
50:ce:a5:7d:b9:78:68:4d:ff:66:6f:b1:54:52:ee:
10:14:58:40:5c:69:19:da:f4:4d:58:6d:6f:fa:6f:
6e:f7:80:ad:c4:e4:92:9a:a6:1f:f1:3a:8e:16:e7:
ff:d8:9a:ad:23:4d:4c:c9:e7:17:03:ae:e4:1b:94:
92:46:b0:de:02:7e:43:69:68:8a:05:31:21:c2:dc:
6c:eb:bc:4d:33:e8:69:ca:0b:7b:fe:45:33:57:48:
2b:27:96:0a:33:d1:49:e1:f6:6f:1a:c6:a7:7f:dd:
e6:14:8a:90:89:48:19:2c:0b:2d:a6:24:a5:82:17:
24:48:9b:d1:54:97:19:1b:56:76:d6:87:36:17:d7:
71:11:1a:42:45:dd:81:cc:1e:26:18:71:b5:28:0e:
d2:60:bf:c6:5d:93:4b:f5:69:71:4d:29:13:21:57:
c7:86:c8:1d:6d:f1:e4:6a:24:81:66:34:21:76:67:
55:cb:b8:f1:e3:32:dd:3f:8d:7c:5b:ed:4d:b7:10:
13:cf:e0:04:8b:d4:33:f4:9b:4b:98:54:ab:a5:bf:
59:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3A:C3:55:04:EA:D1:62:4B:F1:97:D2:E2:60:A5:86:3C:2A:AB:57
X509v3 Authority Key Identifier:
keyid:F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234352e302f32342d3234203d3e203338373738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.93.245.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:52:41:7f:5a:9b:f0:0d:24:cd:d4:1a:84:41:b4:15:b1:bc:
68:18:2f:47:f4:6f:5f:5c:b3:e1:39:00:ab:36:a5:7b:f8:9e:
3c:69:58:fd:6a:94:f4:86:9e:0f:e2:c7:4c:67:23:bf:36:b2:
dc:9d:85:dd:f0:6f:d6:8b:30:8c:e7:8b:c0:8c:c3:57:24:ea:
b8:22:07:35:ee:d3:f9:de:e2:e3:44:7d:3e:3f:c6:34:77:83:
d2:31:12:5f:f3:af:ae:9e:8f:74:65:35:2b:bc:00:3b:55:32:
92:c8:28:c4:b4:0f:b3:af:22:2d:1c:84:4f:40:20:be:47:f4:
b8:0d:13:ea:69:51:6f:fb:63:1f:9d:cf:06:b2:79:fd:86:90:
9b:53:e4:29:1f:66:55:e3:bc:12:a7:ce:f7:e7:8e:32:c3:b6:
9a:19:b5:55:77:90:6e:8d:41:b7:35:87:6b:c8:f9:f7:4b:e3:
85:64:f5:f2:60:9e:42:8f:cb:3a:2b:a1:26:89:ce:17:e9:5f:
10:b9:45:65:9b:49:13:7b:58:8f:bc:2c:ad:13:8b:91:69:a6:
d5:94:0f:e6:a3:fd:61:d8:5f:ad:56:1e:4a:ed:2d:ed:6e:39:
75:4b:00:f3:c1:08:83:3c:36:98:76:bf:ee:1f:38:91:75:35:
d1:40:4b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:45:16 2025 by rpki-client