This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/3130332e3130392e3230342e302f32332d3233203d3e20313530393334.roa
File: 3130332e3130392e3230342e302f32332d3233203d3e20313530393334.roa (raw, json)
Hash identifier: JEvIOsVwGUTyy+ELa7pteKDjLoptkdSCpebP+nyLjgQ=
Subject key identifier: 53:3D:C7:4B:39:EA:CE:D5:11:BB:07:E6:62:11:87:B4:40:A1:DD:E5
Certificate issuer: /CN=F2A96B013D78D9DD2AD046F90529AB07E832FD44
Certificate serial: 3B4BDCBC20612D69BC6CEF2BD4030A396BE609F1
Authority key identifier: F2:A9:6B:01:3D:78:D9:DD:2A:D0:46:F9:05:29:AB:07:E8:32:FD:44
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/3130332e3130392e3230342e302f32332d3233203d3e20313530393334.roa
Signing time: Sat 20 Dec 2025 02:52:26 +0000
ROA not before: Sat 20 Dec 2025 02:47:26 +0000
ROA not after: Sat 19 Dec 2026 02:52:26 +0000
asID: 150934
IP address blocks: 103.109.204.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl
rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 10:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:4b:dc:bc:20:61:2d:69:bc:6c:ef:2b:d4:03:0a:39:6b:e6:09:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2A96B013D78D9DD2AD046F90529AB07E832FD44
Validity
Not Before: Dec 20 02:47:26 2025 GMT
Not After : Dec 19 02:52:26 2026 GMT
Subject: CN=533DC74B39EACED511BB07E6621187B440A1DDE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5e:b9:3c:b0:40:c9:18:ce:9d:59:23:f1:d1:
fe:5b:85:05:6e:e6:1a:aa:a2:0b:1f:2d:85:4b:8f:
67:62:92:55:80:31:fc:2b:ed:e8:87:1f:5b:61:e3:
a3:5c:6d:c9:25:20:08:11:a2:50:f6:45:20:05:90:
57:14:8f:da:ed:fe:ae:ec:ff:97:04:e0:9a:44:6b:
76:b2:b8:9f:25:1b:f1:49:4c:47:3d:26:95:39:e3:
15:75:9b:09:b1:a7:1b:cc:ef:15:bd:23:ef:29:81:
1a:6a:67:99:d5:16:e3:f6:91:ee:99:7a:e3:2d:e6:
82:95:68:a8:a6:49:7d:d6:07:6a:20:5c:1a:1d:64:
ba:a0:3d:20:aa:c2:31:04:a4:4a:e3:be:d4:80:55:
4d:de:0d:bb:1a:1d:87:30:1d:96:e7:50:57:0c:3f:
4d:f2:85:35:10:0b:a3:7b:5b:e5:6f:f8:a0:59:8d:
be:51:25:7b:bb:36:51:38:38:8f:5b:0f:96:7a:69:
c4:e8:86:d9:a0:60:57:7a:b3:bb:6b:a6:37:df:db:
98:41:d2:9f:c1:d7:62:a7:d7:f6:a0:db:3f:56:de:
1b:0d:16:fd:58:7d:4a:4f:ed:90:2f:a1:84:43:ef:
79:e7:6c:e4:aa:26:ea:53:51:5b:1d:8d:ff:04:a3:
08:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:3D:C7:4B:39:EA:CE:D5:11:BB:07:E6:62:11:87:B4:40:A1:DD:E5
X509v3 Authority Key Identifier:
keyid:F2:A9:6B:01:3D:78:D9:DD:2A:D0:46:F9:05:29:AB:07:E8:32:FD:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/3130332e3130392e3230342e302f32332d3233203d3e20313530393334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.109.204.0/23
Signature Algorithm: sha256WithRSAEncryption
27:25:36:1d:3d:40:0b:70:17:6b:87:07:65:0b:cd:b0:7f:bc:
bb:1b:5b:aa:da:c1:30:fd:6b:cf:4e:2a:b1:87:cd:36:16:c5:
23:04:ca:90:36:d9:97:cc:c9:7f:a7:82:5d:9d:80:75:b2:1d:
90:df:8b:21:f6:fc:92:13:8a:7d:86:34:99:3e:b2:d6:f2:b1:
ea:94:10:65:1e:6e:3d:1f:5f:9d:11:00:26:d4:1c:20:06:04:
90:3c:ca:10:f9:dc:6a:08:00:aa:67:89:63:cb:a7:bd:e3:41:
f9:64:25:47:33:94:7e:99:8d:79:5c:ff:c9:57:33:2b:be:90:
cd:9f:3a:c9:ba:ef:e3:39:f5:46:d4:ca:d4:8b:ad:27:66:0b:
36:e4:f7:f0:7e:28:15:a9:28:33:a2:08:08:a3:5f:5c:5d:07:
33:f3:43:b2:3b:e1:56:3b:d7:e9:bb:45:89:d7:2c:dc:c2:8e:
fa:49:7e:bc:96:bd:2f:f1:24:b3:d4:b0:4e:17:81:4e:6a:55:
8c:30:72:e1:e5:0c:62:fe:a7:1b:e3:89:97:2a:8e:83:8b:2c:
f5:6f:33:46:71:c9:c9:e9:26:eb:b1:09:7d:da:ad:40:ab:32:
3c:8a:5f:a6:1a:05:e7:68:cf:9f:9e:76:01:0b:af:2b:f2:55:
a6:d7:7f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:24:06 2026 by rpki-client