This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/3130332e3130392e3230352e302f32342d3234203d3e20313530393334.roa
File: 3130332e3130392e3230352e302f32342d3234203d3e20313530393334.roa (raw, json)
Hash identifier: NQHGEUDRiXIKhlqun6HUzgzAgG6hDFCPy0ofeC6C2yE=
Subject key identifier: 24:11:4F:89:AC:24:B7:30:7A:C2:B5:65:2D:66:E3:8C:F7:A1:CB:8B
Certificate issuer: /CN=F2A96B013D78D9DD2AD046F90529AB07E832FD44
Certificate serial: 2AB11B74B08B635ED7B912B45B72B1B041286D11
Authority key identifier: F2:A9:6B:01:3D:78:D9:DD:2A:D0:46:F9:05:29:AB:07:E8:32:FD:44
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/3130332e3130392e3230352e302f32342d3234203d3e20313530393334.roa
Signing time: Sat 20 Dec 2025 22:39:26 +0000
ROA not before: Sat 20 Dec 2025 22:34:26 +0000
ROA not after: Sat 19 Dec 2026 22:39:26 +0000
asID: 150934
IP address blocks: 103.109.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl
rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 10:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:b1:1b:74:b0:8b:63:5e:d7:b9:12:b4:5b:72:b1:b0:41:28:6d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2A96B013D78D9DD2AD046F90529AB07E832FD44
Validity
Not Before: Dec 20 22:34:26 2025 GMT
Not After : Dec 19 22:39:26 2026 GMT
Subject: CN=24114F89AC24B7307AC2B5652D66E38CF7A1CB8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2f:ad:e3:6b:7c:7e:70:65:f1:b2:f0:3b:95:
69:16:7c:f0:d8:1a:4a:c3:a6:2b:1f:8f:8a:7f:af:
2d:05:8c:6c:97:21:ed:7e:c4:05:68:5f:f8:df:61:
95:9b:8d:96:9d:17:cf:fb:41:35:b6:62:19:1b:61:
ef:28:fc:63:e1:b6:ab:af:2c:7b:72:5f:c9:f0:4c:
6e:e1:8c:8e:2a:f8:e6:fd:1e:98:5e:e6:8b:12:bf:
96:01:86:b6:34:89:51:94:00:fb:5d:8a:6d:70:34:
23:b4:7c:1d:8e:81:47:d3:e6:dd:3c:56:27:9a:cc:
f2:4b:e1:d9:86:ec:3e:21:72:21:21:7a:1a:95:cb:
67:59:01:bc:61:ec:d6:70:14:17:7a:c2:a3:76:bf:
27:85:9b:dd:1d:bc:d7:3f:63:a4:6d:28:23:00:3b:
b5:80:02:5c:1f:26:0c:65:56:31:82:68:8a:56:e4:
d7:7b:c9:31:e2:e7:28:61:82:42:9d:cc:6a:59:eb:
ae:28:f0:69:85:55:f0:2c:ce:b2:99:3a:32:9d:3b:
cf:e7:8c:0b:e3:6d:3f:06:d6:dd:c3:c7:b8:da:58:
00:87:f4:60:90:35:db:9b:ff:12:9b:82:59:e9:65:
8f:56:b7:c3:39:5d:9c:4b:4d:3d:b4:07:30:a2:8f:
15:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:11:4F:89:AC:24:B7:30:7A:C2:B5:65:2D:66:E3:8C:F7:A1:CB:8B
X509v3 Authority Key Identifier:
keyid:F2:A9:6B:01:3D:78:D9:DD:2A:D0:46:F9:05:29:AB:07:E8:32:FD:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/3130332e3130392e3230352e302f32342d3234203d3e20313530393334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.109.205.0/24
Signature Algorithm: sha256WithRSAEncryption
33:bb:1d:52:61:02:4d:70:2b:64:8f:9f:3a:4c:e6:f8:6b:b0:
ee:a5:17:02:2a:57:7d:7b:c7:79:88:92:fb:f5:6d:a4:f4:9e:
67:5f:b0:ff:cc:f3:07:1b:15:cf:3a:16:44:06:d6:d2:a3:02:
18:f7:f7:d4:46:d0:ab:18:de:f5:ea:94:3d:38:31:10:81:a2:
c4:56:1a:96:b9:d5:68:06:f9:f3:7e:85:3c:e2:37:3d:96:66:
0f:65:5a:0a:eb:51:08:56:68:6f:d3:af:dc:7c:c2:c7:41:12:
6e:43:8e:6b:b9:d6:e8:4b:bf:98:3f:50:ae:09:d4:01:2a:56:
92:e5:06:15:65:f3:14:c2:71:47:44:4a:49:7e:8e:0a:dd:ba:
2d:73:8e:63:dd:42:ec:4d:be:b9:5a:23:75:a9:34:3d:62:f6:
61:e5:48:95:67:10:ce:cb:2a:91:cf:41:28:29:6c:6b:2c:e0:
8f:ef:f4:82:d7:86:59:16:65:28:ba:2c:d3:42:21:c1:b6:cf:
a5:47:75:93:af:7c:f1:7d:b7:03:ab:31:54:3d:c3:1f:55:ba:
92:0e:9c:63:92:14:46:83:53:49:cd:2c:44:7c:86:e0:b3:31:
b0:a7:29:e3:45:13:35:49:8e:c5:b2:3a:31:0a:f8:b8:ae:47:
7c:67:dd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:34:30 2026 by rpki-client