This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/3130332e3139352e36352e302f32342d3234203d3e203234333132.roa
File: 3130332e3139352e36352e302f32342d3234203d3e203234333132.roa (raw, json)
Hash identifier: NYY0i2hycJDZMAWkhMI1MwXrSLzfIpid9oGLQQbdYaY=
Subject key identifier: A9:CB:46:BE:70:BC:4E:B3:38:FF:B9:5C:32:2C:4A:A0:F2:2C:68:C3
Certificate issuer: /CN=F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA
Certificate serial: 545E099A52CF843BD488233A899464F363F6BF0C
Authority key identifier: F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/3130332e3139352e36352e302f32342d3234203d3e203234333132.roa
Signing time: Wed 03 Dec 2025 10:00:00 +0000
ROA not before: Wed 03 Dec 2025 09:55:00 +0000
ROA not after: Wed 02 Dec 2026 10:00:00 +0000
asID: 24312
IP address blocks: 103.195.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl
rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 12:09:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:5e:09:9a:52:cf:84:3b:d4:88:23:3a:89:94:64:f3:63:f6:bf:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA
Validity
Not Before: Dec 3 09:55:00 2025 GMT
Not After : Dec 2 10:00:00 2026 GMT
Subject: CN=A9CB46BE70BC4EB338FFB95C322C4AA0F22C68C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:46:b9:22:68:28:01:f9:94:5a:5c:68:e3:ec:
98:9b:0f:ad:c4:e2:d2:58:9d:c4:8e:d8:88:f6:0a:
95:79:69:a1:d1:dd:5e:59:d4:88:16:3f:c0:e8:34:
ee:32:45:ec:6a:b8:a2:01:a6:3a:66:ae:8f:39:05:
c8:6a:e7:5c:fa:0c:85:a4:7c:e2:5c:0f:5b:0d:02:
76:b5:9f:f6:d4:16:25:8b:0b:cb:b2:75:d4:fa:5d:
6d:15:c5:86:3e:13:99:dd:2c:d0:35:cc:9f:f9:51:
d0:ea:7c:65:5a:0c:b3:2a:a4:08:d8:42:2c:6c:01:
ff:59:66:0c:08:83:db:57:86:b0:73:c6:87:23:90:
7b:b6:44:2e:e9:a7:0d:42:ac:d9:a0:01:7f:a2:14:
63:6c:9b:83:53:a7:21:8c:07:60:a0:e2:5f:85:ca:
78:11:27:f8:9e:39:93:8e:08:0c:4e:07:ae:13:b9:
7e:85:b2:7e:95:01:a0:0d:4f:f8:10:e5:05:7e:97:
c8:7c:2c:d1:ef:e8:4a:e1:d8:19:db:6d:02:67:9a:
53:39:5b:75:3b:5b:c7:5e:f6:00:64:b0:a4:12:af:
33:26:ea:f7:98:3a:0d:7d:2e:44:df:e3:43:98:14:
72:cf:75:9e:20:0c:31:b2:a9:e4:0e:b0:0c:7f:7c:
14:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CB:46:BE:70:BC:4E:B3:38:FF:B9:5C:32:2C:4A:A0:F2:2C:68:C3
X509v3 Authority Key Identifier:
keyid:F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/3130332e3139352e36352e302f32342d3234203d3e203234333132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.195.65.0/24
Signature Algorithm: sha256WithRSAEncryption
89:af:a5:94:0b:1f:ab:5f:f3:d3:df:69:31:35:8f:a7:d6:9f:
a2:0c:07:df:c3:92:c4:b1:e5:e2:8b:55:26:12:e3:06:f1:50:
53:c6:d7:7f:e0:fa:e8:ba:f5:d8:8b:78:82:00:5d:18:9c:6a:
9c:2a:b9:b0:fd:2e:56:bf:97:86:f4:cb:66:53:8c:44:68:a4:
5c:e9:63:25:c4:a6:26:55:97:92:9b:27:63:d4:21:3c:37:23:
56:66:f7:06:70:80:e2:de:93:30:03:7f:18:90:7f:74:42:82:
dd:dc:87:7b:f6:a0:3f:69:fb:ad:bb:2a:5c:ba:8a:88:0e:6b:
4d:f6:06:5b:17:a8:55:f2:79:62:56:ec:65:bc:8f:ed:70:e9:
16:6d:09:b1:6b:4f:bb:f0:c9:4d:8a:2e:47:e1:f1:36:93:f8:
b6:7f:66:be:90:a4:ff:43:63:60:18:8a:27:05:88:ad:90:00:
f6:37:9e:47:29:65:1c:99:bf:d0:2d:d3:85:4d:12:27:b2:f4:
ce:3c:e0:fd:3a:dc:23:1b:27:ff:fc:59:ca:ec:b2:00:d2:74:
46:ac:a1:81:3f:2f:57:40:dd:75:97:5d:32:e2:f4:bf:ab:be:
d0:9c:f1:f1:05:f0:12:96:c4:4c:28:d9:f0:ee:c9:7c:04:4b:
a9:80:70:eb
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUVF4JmlLPhDvUiCM6iZRk82P2vwwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFFRjIw
MkZDMjFFQTAeFw0yNTEyMDMwOTU1MDBaFw0yNjEyMDIxMDAwMDBaMDMxMTAvBgNV
BAMTKEE5Q0I0NkJFNzBCQzRFQjMzOEZGQjk1QzMyMkM0QUEwRjIyQzY4QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrRrkiaCgB+ZRaXGjj7JibD63E
4tJYncSO2Ij2CpV5aaHR3V5Z1IgWP8DoNO4yRexquKIBpjpmro85Bchq51z6DIWk
fOJcD1sNAna1n/bUFiWLC8uyddT6XW0VxYY+E5ndLNA1zJ/5UdDqfGVaDLMqpAjY
QixsAf9ZZgwIg9tXhrBzxocjkHu2RC7ppw1CrNmgAX+iFGNsm4NTpyGMB2Cg4l+F
yngRJ/ieOZOOCAxOB64TuX6Fsn6VAaANT/gQ5QV+l8h8LNHv6Erh2BnbbQJnmlM5
W3U7W8de9gBksKQSrzMm6veYOg19LkTf40OYFHLPdZ4gDDGyqeQOsAx/fBT7AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUqctGvnC8TrM4/7lcMixKoPIsaMMwHwYDVR0j
BBgwFoAU+OEvCkM8i3M74x214M0e8gL8IeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
MGNlNDc5Ni00OWRlLTQzYjEtYTE1Mi1iMThkMTFhZGE1MjkvMC9GOEUxMkYwQTQz
M0M4QjczM0JFMzFEQjVFMENEMUVGMjAyRkMyMUVBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFFRjIwMkZD
MjFFQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgwY2U0Nzk2LTQ5ZGUtNDNiMS1h
MTUyLWIxOGQxMWFkYTUyOS8wLzMxMzAzMzJlMzEzOTM1MmUzNjM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzNDMzMzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGfDQTANBgkqhkiG
9w0BAQsFAAOCAQEAia+llAsfq1/z099pMTWPp9afogwH38OSxLHl4otVJhLjBvFQ
U8bXf+D66Lr12It4ggBdGJxqnCq5sP0uVr+XhvTLZlOMRGikXOljJcSmJlWXkpsn
Y9QhPDcjVmb3BnCA4t6TMAN/GJB/dEKC3dyHe/agP2n7rbsqXLqKiA5rTfYGWxeo
VfJ5YlbsZbyP7XDpFm0JsWtPu/DJTYouR+HxNpP4tn9mvpCk/0NjYBiKJwWIrZAA
9jeeRyllHJm/0C3ThU0SJ7L0zjzg/TrcIxsn//xZyuyyANJ0RqyhgT8vV0DddZdd
MuL0v6u+0Jzx8QXwEpbETCjZ8O7JfARLqYBw6w==
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:01:10 2025 by rpki-client