This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/3130332e3130392e3230342e302f32342d3234203d3e20313530393334.roa
File: 3130332e3130392e3230342e302f32342d3234203d3e20313530393334.roa (raw, json)
Hash identifier: wJLVv3dGJ3iMYrWAOPrHgUOs/cbBFI5PK39xmjvRLuY=
Subject key identifier: 9E:51:F1:28:A1:4D:57:F5:2F:48:E5:9D:D4:19:33:0D:C1:6A:1F:35
Certificate issuer: /CN=F2A96B013D78D9DD2AD046F90529AB07E832FD44
Certificate serial: 534E02FFF7FE27FED8955439CF9D092F5295AE85
Authority key identifier: F2:A9:6B:01:3D:78:D9:DD:2A:D0:46:F9:05:29:AB:07:E8:32:FD:44
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/3130332e3130392e3230342e302f32342d3234203d3e20313530393334.roa
Signing time: Sat 20 Dec 2025 02:54:42 +0000
ROA not before: Sat 20 Dec 2025 02:49:42 +0000
ROA not after: Sat 19 Dec 2026 02:54:42 +0000
asID: 150934
IP address blocks: 103.109.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl
rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 10:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:4e:02:ff:f7:fe:27:fe:d8:95:54:39:cf:9d:09:2f:52:95:ae:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2A96B013D78D9DD2AD046F90529AB07E832FD44
Validity
Not Before: Dec 20 02:49:42 2025 GMT
Not After : Dec 19 02:54:42 2026 GMT
Subject: CN=9E51F128A14D57F52F48E59DD419330DC16A1F35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:93:53:f4:7c:eb:33:04:2e:d0:37:d4:d8:9d:
a6:27:ee:12:19:dd:78:af:da:96:11:ec:91:92:88:
2b:6e:14:9e:54:f8:05:7f:f5:b8:e4:4b:38:41:0b:
76:33:96:e4:49:56:62:49:72:fa:49:ed:06:c2:28:
22:19:3c:d0:0e:bd:43:6f:4a:f7:bc:d2:80:57:a6:
e5:95:f4:63:05:0d:a6:9a:4f:15:8b:1f:b9:ff:e6:
90:d0:61:d6:f6:94:c2:c8:5a:99:a7:79:16:9c:f4:
13:50:79:6d:a0:52:f0:b3:9f:42:76:91:0d:ad:5b:
95:fe:a4:22:e4:27:d2:bb:a4:2d:b4:9b:c0:77:1c:
96:a6:ab:15:48:9f:fd:4c:09:e3:60:6a:3d:1d:5c:
5f:55:a2:0d:be:c4:68:bb:30:8b:c2:b3:96:b3:8d:
b4:55:89:1a:12:50:c7:ef:b3:a4:76:a3:16:11:2a:
cb:25:27:34:0b:79:96:7a:d6:dc:ee:ba:59:19:4f:
30:d4:b2:c8:9d:81:4a:36:90:0b:c4:c8:2a:6c:88:
7c:62:95:b8:8a:e1:70:7e:28:61:fd:94:23:16:8b:
85:b4:b2:48:e0:b9:c1:ec:ab:d7:0d:a6:67:8f:7b:
77:bd:ba:36:e9:f5:56:3e:a5:29:f4:88:a3:3d:a6:
70:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:51:F1:28:A1:4D:57:F5:2F:48:E5:9D:D4:19:33:0D:C1:6A:1F:35
X509v3 Authority Key Identifier:
keyid:F2:A9:6B:01:3D:78:D9:DD:2A:D0:46:F9:05:29:AB:07:E8:32:FD:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/3130332e3130392e3230342e302f32342d3234203d3e20313530393334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.109.204.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:2a:cd:f6:4c:43:9a:3a:2e:90:e6:42:2f:6c:33:c0:b6:11:
eb:8d:79:d8:b5:48:2b:40:6b:4f:fd:06:75:c7:41:6d:6f:f2:
da:02:61:63:a9:3e:d0:b3:e4:29:28:7d:4a:17:99:8d:77:ef:
5e:eb:f5:78:f7:16:53:9a:09:30:0a:7a:63:34:ea:da:92:3f:
07:a7:87:f3:95:00:71:bc:e0:18:f1:1e:36:99:75:22:eb:9c:
8f:9c:da:d7:af:fe:d0:08:2a:23:3b:dd:18:4a:ca:45:5c:1f:
05:2e:35:fc:ac:7a:15:dd:7c:e9:a6:43:d2:7c:ff:dd:91:d8:
38:12:67:2c:40:8b:39:9e:e2:a7:77:6d:f2:c1:dd:f2:07:ab:
32:f6:63:57:52:76:01:73:49:1c:61:41:14:9e:f4:56:8d:4b:
17:cc:30:7c:40:5f:68:2c:2e:a1:70:31:54:79:05:e0:ed:b2:
a7:85:61:24:e5:0b:bf:1b:46:10:da:57:f8:38:fa:49:ad:47:
de:4f:7e:c5:d8:fb:eb:40:b4:4c:b4:4a:e6:dd:b5:2e:e2:8a:
a3:31:7f:a4:6b:8b:08:81:49:92:28:60:c1:c6:54:93:1b:0b:
06:25:98:a9:fc:f5:dd:24:bd:12:f2:2b:cc:7f:ec:50:06:79:
09:ca:c2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:59:09 2026 by rpki-client