This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/3130332e3137342e3132302e302f32332d3234203d3e20313437303937.roa
File: 3130332e3137342e3132302e302f32332d3234203d3e20313437303937.roa (raw, json)
Hash identifier: bOWlKzk6RopDMtmA3RBA1BFwLCsnVG+rkva/NTG1vjQ=
Subject key identifier: 74:01:AF:C4:53:89:34:F8:90:D5:59:26:6B:D0:28:73:7F:45:87:62
Certificate issuer: /CN=A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B
Certificate serial: 10E3AE6B3A3D1FB346CE1E3C5E17575612D4F711
Authority key identifier: A0:B5:1B:C5:AC:7C:95:73:7A:24:BD:6A:28:D8:24:9E:7A:80:CF:4B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/3130332e3137342e3132302e302f32332d3234203d3e20313437303937.roa
Signing time: Wed 17 Dec 2025 08:03:04 +0000
ROA not before: Wed 17 Dec 2025 07:58:04 +0000
ROA not after: Wed 16 Dec 2026 08:03:04 +0000
asID: 147097
IP address blocks: 103.174.120.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl
rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Dec 2025 13:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:e3:ae:6b:3a:3d:1f:b3:46:ce:1e:3c:5e:17:57:56:12:d4:f7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B
Validity
Not Before: Dec 17 07:58:04 2025 GMT
Not After : Dec 16 08:03:04 2026 GMT
Subject: CN=7401AFC4538934F890D559266BD028737F458762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ab:9b:33:2d:c1:26:44:34:0a:b2:94:4f:20:
d8:ed:d1:03:0c:64:10:55:89:14:c3:ef:45:33:20:
dd:70:1a:1b:48:10:57:65:a0:f8:b3:87:af:56:bc:
8a:0d:c6:51:2c:94:1f:f9:98:b1:8f:ba:e7:8b:b4:
7e:19:e5:ff:bb:ac:73:d7:1e:38:91:56:53:e5:fb:
60:2f:7d:7a:f8:a1:7d:16:ea:11:84:5b:d6:51:e8:
fb:4b:63:95:77:e3:8a:c2:7e:df:75:36:01:58:32:
b1:3c:12:84:11:af:e1:1c:88:3e:5c:01:41:38:de:
f5:23:de:35:b9:87:86:d9:45:e8:ab:18:82:be:19:
0e:f6:1a:47:ba:26:54:61:e3:4b:1a:15:d8:70:97:
c1:a5:23:2d:c0:3f:fc:a2:8f:c0:fe:18:96:03:9e:
bc:01:12:0f:74:2a:43:3b:c0:e2:7e:c3:ca:73:ec:
b5:64:07:0a:fe:1f:03:63:02:14:1b:3d:11:5c:f5:
cb:27:f1:87:c2:d7:5d:f0:e5:6c:23:e4:65:9e:e4:
5f:99:8c:d9:c3:85:ad:55:1c:ae:0b:5d:51:d4:cf:
1d:cd:c4:42:fc:82:c1:ea:6b:9b:d2:e1:d6:dc:09:
69:08:35:2e:45:09:74:da:0c:4b:b5:cf:eb:23:ba:
8c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:01:AF:C4:53:89:34:F8:90:D5:59:26:6B:D0:28:73:7F:45:87:62
X509v3 Authority Key Identifier:
keyid:A0:B5:1B:C5:AC:7C:95:73:7A:24:BD:6A:28:D8:24:9E:7A:80:CF:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/3130332e3137342e3132302e302f32332d3234203d3e20313437303937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.174.120.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:c9:89:40:d8:9c:9b:e5:c1:4c:d4:6e:e8:ec:6c:73:7f:8a:
5b:51:a0:51:de:8b:d2:24:51:0f:60:ba:60:56:e9:61:2a:30:
ad:b8:42:4a:72:8a:31:55:61:19:94:0b:5a:4e:17:05:3e:b0:
3b:19:19:2d:d1:18:7a:2c:22:c5:32:0b:c4:3c:58:95:28:63:
38:90:73:1b:04:ba:a9:fb:d1:87:23:8f:f5:e7:d0:a4:9e:38:
d5:dc:63:8e:ac:26:a3:8f:4b:4f:db:52:ba:6e:9b:89:1f:a4:
9d:6b:70:a6:e0:14:53:55:7c:5c:bb:e1:fe:45:8c:a5:63:91:
d8:e2:92:b1:02:0e:ae:da:2f:61:35:b9:1c:60:9f:67:59:32:
47:06:bf:df:8f:2b:2f:5b:a3:79:40:00:65:c4:c5:62:e9:64:
70:96:ad:6c:37:48:87:f9:66:50:51:e5:ea:9f:3f:54:c6:b9:
b2:7c:b0:a2:46:86:fb:b7:88:6a:35:17:e5:c7:5f:9b:24:62:
b9:a4:3d:ac:db:d8:fa:e1:0b:d3:b6:d0:48:13:96:5d:80:74:
8c:77:b2:56:89:97:01:58:0f:81:85:99:35:79:dd:19:1a:88:
76:9a:ae:f6:50:db:94:0d:56:9d:9f:e7:1c:c3:39:e3:22:d0:
d4:b3:b9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 21:07:15 2025 by rpki-client