This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/3130332e3135352e3136392e302f32342d3234203d3e20313431303635.roa
File: 3130332e3135352e3136392e302f32342d3234203d3e20313431303635.roa (raw, json)
Hash identifier: qxzoMqzV7R6VwY7lQGbublsoy4JkXAcRbir5LyE2mk4=
Subject key identifier: B9:49:EC:72:89:DC:16:85:62:8C:37:E4:E4:FF:B5:2C:AD:AD:83:D7
Certificate issuer: /CN=DD77382BD9E8634AEF9E93D763B0149D915502F5
Certificate serial: 31E607F64C043128F6A9C1382CE8FCD2FE5A52EC
Authority key identifier: DD:77:38:2B:D9:E8:63:4A:EF:9E:93:D7:63:B0:14:9D:91:55:02:F5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/3130332e3135352e3136392e302f32342d3234203d3e20313431303635.roa
Signing time: Wed 24 Dec 2025 13:01:41 +0000
ROA not before: Wed 24 Dec 2025 12:56:41 +0000
ROA not after: Wed 23 Dec 2026 13:01:41 +0000
asID: 141065
IP address blocks: 103.155.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.crl
rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 10:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:e6:07:f6:4c:04:31:28:f6:a9:c1:38:2c:e8:fc:d2:fe:5a:52:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD77382BD9E8634AEF9E93D763B0149D915502F5
Validity
Not Before: Dec 24 12:56:41 2025 GMT
Not After : Dec 23 13:01:41 2026 GMT
Subject: CN=B949EC7289DC1685628C37E4E4FFB52CADAD83D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fb:c2:50:9c:2c:43:58:6d:42:64:30:95:86:
f2:67:e3:8c:8a:ca:41:41:28:50:73:bc:22:76:12:
90:76:24:32:47:42:2f:9f:94:b4:9b:31:27:c9:65:
2a:d3:ca:a8:3a:7b:a2:ef:a6:e3:97:d9:c5:eb:24:
c0:90:c6:73:5a:28:70:33:61:df:a0:7a:a3:45:22:
25:ad:37:d8:56:4b:3d:3e:b6:fa:fc:8a:d8:0d:01:
47:ff:0d:b5:24:2d:5d:21:02:d2:8b:06:88:b2:f5:
a9:85:22:55:89:25:80:c0:dc:37:1d:ac:9f:dd:be:
c1:e3:f0:fd:d9:50:4c:0f:11:35:a0:95:65:fb:a5:
15:0a:ad:19:0b:31:e3:f8:9e:78:0b:81:fe:0c:0c:
49:7e:9a:7b:1f:bb:75:c5:9a:85:43:1a:c3:96:70:
49:f0:d8:d8:15:0d:7e:93:0e:60:73:a4:95:b4:c7:
51:aa:5e:98:50:80:ab:35:42:6b:1a:9a:a1:23:46:
e9:6a:9e:ae:d2:21:94:c3:8a:53:19:e4:1b:86:a1:
af:e7:6f:e2:e9:52:4f:9e:4e:2c:67:1a:d4:9c:57:
e1:ed:e7:5e:2c:b7:96:b3:c0:b2:1e:01:4d:b4:8a:
e9:f4:b8:47:c6:5b:cc:a0:6b:e7:cc:80:66:6a:16:
ff:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:49:EC:72:89:DC:16:85:62:8C:37:E4:E4:FF:B5:2C:AD:AD:83:D7
X509v3 Authority Key Identifier:
keyid:DD:77:38:2B:D9:E8:63:4A:EF:9E:93:D7:63:B0:14:9D:91:55:02:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/3130332e3135352e3136392e302f32342d3234203d3e20313431303635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.155.169.0/24
Signature Algorithm: sha256WithRSAEncryption
39:26:be:77:54:7c:9e:0b:64:75:33:ac:95:5b:9f:67:03:81:
26:2e:ea:bb:10:40:89:1f:4e:65:77:0d:13:b4:28:2b:b7:2e:
27:32:cd:54:eb:b5:8f:3a:2d:ed:06:ff:87:ef:c1:57:95:c1:
7e:aa:2d:b5:7e:78:05:c5:d5:1b:fd:43:36:6f:ee:b7:0a:f8:
c4:1a:6f:40:8b:2f:c2:7b:73:9c:0b:ed:58:45:d2:1e:cd:3c:
6e:d8:c3:9f:02:f3:fa:53:41:b5:78:29:8a:99:77:bd:c6:0b:
ad:3c:b2:5f:4d:68:91:93:f5:be:05:06:95:61:13:d8:c0:97:
52:37:21:e8:fb:03:ce:cb:75:97:bf:61:0d:92:fe:7c:38:15:
0c:19:5a:e6:4e:17:09:d4:f0:7b:01:99:aa:45:81:55:6a:f0:
e2:1d:8b:76:9c:d4:e1:73:4c:c6:d8:76:b0:ff:d5:f3:3a:9d:
4c:b1:e0:09:1e:e7:56:3c:96:e9:63:4d:c3:de:69:56:ed:2b:
c3:af:7d:5d:2d:6a:c1:ed:4b:b3:7a:f2:06:5e:31:80:b4:da:
1a:79:81:5e:79:a0:e1:a9:d1:57:10:a6:6f:1c:38:93:fd:b7:
a3:80:16:35:b6:0e:22:fc:70:44:85:06:b2:9f:a9:c8:b8:3b:
98:02:4d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:02:41 2026 by rpki-client