This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/3130332e36312e3131382e302f32342d3234203d3e203536323435.roa
File: 3130332e36312e3131382e302f32342d3234203d3e203536323435.roa (raw, json)
Hash identifier: Kyu9bQtpDSvLwwsNNqwUqQbMYywTTXQyJkLm6NWbIzI=
Subject key identifier: 3F:9B:83:76:66:73:B8:73:BE:3A:A7:D7:59:91:FC:AF:B5:93:B8:40
Certificate issuer: /CN=B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E
Certificate serial: 4E1AEB4E318BB30D951A3E98D88445C3703564E4
Authority key identifier: B9:E3:DC:E7:FE:85:E4:83:47:D6:CA:E3:6C:83:DE:35:99:8C:FC:5E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/3130332e36312e3131382e302f32342d3234203d3e203536323435.roa
Signing time: Tue 30 Dec 2025 16:05:59 +0000
ROA not before: Tue 30 Dec 2025 16:00:59 +0000
ROA not after: Tue 29 Dec 2026 16:05:59 +0000
asID: 56245
IP address blocks: 103.61.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.crl
rsync://repo-rpki.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 18:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:1a:eb:4e:31:8b:b3:0d:95:1a:3e:98:d8:84:45:c3:70:35:64:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E
Validity
Not Before: Dec 30 16:00:59 2025 GMT
Not After : Dec 29 16:05:59 2026 GMT
Subject: CN=3F9B83766673B873BE3AA7D75991FCAFB593B840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a0:9f:e4:80:01:ed:13:38:26:43:85:c7:e3:
c5:f1:b3:01:65:8a:b9:16:e6:c4:8e:2b:32:c2:3b:
6a:88:88:f1:7b:58:38:d0:c1:a6:39:0d:ad:46:5c:
70:0e:b8:eb:0e:90:2c:cf:e0:4f:02:11:3f:12:c8:
26:fb:81:32:d4:fd:f8:2d:e8:cf:a3:39:df:fd:7e:
54:c4:22:5b:02:d0:d0:99:13:4d:56:0d:66:91:51:
e1:a8:3f:bf:aa:4f:d8:86:fd:8a:af:09:ab:59:a0:
18:85:3c:84:74:64:2e:6b:59:5c:30:8f:32:2b:46:
c8:de:54:bb:c0:93:2c:76:c0:2d:11:2c:48:16:4f:
f3:f1:fd:33:0b:4e:2a:0d:48:8a:d9:31:40:bc:52:
47:5b:a0:6e:31:0c:fc:63:7b:82:2f:a3:4c:89:05:
8f:cc:b4:f8:5c:74:1b:c6:b5:88:b6:8c:16:05:4e:
73:9c:d3:67:aa:06:97:57:59:c0:2a:7c:98:36:2f:
59:ca:33:85:78:ba:7e:05:49:be:47:d6:11:f9:90:
d8:80:60:22:bd:94:a7:46:46:97:4d:ba:58:98:d0:
cb:2f:5e:02:e2:3c:17:b5:2d:48:ab:66:9f:8a:e6:
88:eb:11:f6:96:e1:34:8a:59:da:f4:6f:b6:ae:e9:
2c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9B:83:76:66:73:B8:73:BE:3A:A7:D7:59:91:FC:AF:B5:93:B8:40
X509v3 Authority Key Identifier:
keyid:B9:E3:DC:E7:FE:85:E4:83:47:D6:CA:E3:6C:83:DE:35:99:8C:FC:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/3130332e36312e3131382e302f32342d3234203d3e203536323435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.61.118.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:61:2e:c6:4e:4b:39:cb:3a:45:af:d8:d8:f8:4d:c8:9d:c5:
50:4e:61:be:9c:a4:0e:de:b6:d8:eb:21:6a:96:64:36:2e:7f:
30:2e:2e:7b:55:03:75:a1:dd:80:5b:e9:e8:66:78:0b:5b:7b:
64:05:dc:fb:50:1e:d6:43:1e:cf:ed:29:ae:fe:b0:dc:a2:77:
50:06:70:6e:cb:d3:99:0f:36:cc:3f:4a:48:d9:67:3d:bd:62:
51:68:3f:7d:f2:07:17:49:ee:1e:4b:e8:ae:5f:fd:83:8b:df:
e8:b2:41:0c:a7:7b:36:45:aa:b5:78:59:50:66:83:67:5b:df:
29:44:39:76:27:cd:00:c0:e0:f4:54:0c:8f:66:2a:c2:9b:36:
15:0d:7b:90:0c:4b:5d:3a:f0:82:8e:90:7f:7e:a1:e5:af:64:
ac:17:7f:3c:8c:2e:d9:5e:61:48:47:fb:5a:ea:7f:37:06:34:
f6:2a:bc:22:ee:f2:a4:da:11:1a:d4:8b:bd:c8:b3:3b:56:56:
6e:3a:23:43:9b:27:c6:eb:a1:c1:37:c2:a1:e7:94:c5:dd:c4:
bf:73:65:89:bb:1b:ca:dd:ad:13:44:ee:11:db:dd:1e:2b:0c:
50:3e:ef:5c:a8:64:9c:5c:f7:81:1f:0e:95:38:21:15:80:fb:
0e:0a:97:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:02:50 2026 by rpki-client