This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/3130332e3138312e3133362e302f32332d3234203d3e2039333431.roa
File: 3130332e3138312e3133362e302f32332d3234203d3e2039333431.roa (raw, json)
Hash identifier: QrPOj62YnpVvnKWbhXmsWfTlE+QpgwY06Wo/lh3zliI=
Subject key identifier: 54:A9:CB:3B:E7:D0:F7:B5:CD:9A:2F:4A:22:18:3A:30:4F:CD:BC:5F
Certificate issuer: /CN=6437999FD06F2C7F0F16F8160CD6145F775884A4
Certificate serial: 2DC8D15C89C5EA19C368ACD468B7D16E7332355F
Authority key identifier: 64:37:99:9F:D0:6F:2C:7F:0F:16:F8:16:0C:D6:14:5F:77:58:84:A4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/3130332e3138312e3133362e302f32332d3234203d3e2039333431.roa
Signing time: Wed 12 Nov 2025 20:00:01 +0000
ROA not before: Wed 12 Nov 2025 19:55:01 +0000
ROA not after: Wed 11 Nov 2026 20:00:01 +0000
asID: 9341
IP address blocks: 103.181.136.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.crl
rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 17:41:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:c8:d1:5c:89:c5:ea:19:c3:68:ac:d4:68:b7:d1:6e:73:32:35:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6437999FD06F2C7F0F16F8160CD6145F775884A4
Validity
Not Before: Nov 12 19:55:01 2025 GMT
Not After : Nov 11 20:00:01 2026 GMT
Subject: CN=54A9CB3BE7D0F7B5CD9A2F4A22183A304FCDBC5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:99:e6:09:fb:80:60:4c:64:60:0e:7f:6b:d8:
9a:1f:6f:8e:ba:3b:63:dd:31:4c:fa:d5:bb:65:ec:
e4:d3:0f:9b:e2:cf:b0:9d:30:a1:e6:ce:de:9e:23:
4b:4c:71:21:66:33:75:25:66:f2:75:69:74:5c:67:
cb:ef:2f:59:29:3b:a3:0c:7d:af:4c:c5:4a:d6:9f:
b3:84:28:12:61:9e:03:7b:5b:16:bc:6e:54:91:40:
c1:88:63:17:a1:f2:97:63:05:37:85:9e:41:bd:51:
19:46:07:9e:8c:fb:f4:59:69:0b:3f:67:8b:8a:da:
c5:76:4f:b9:bf:6e:15:17:2e:71:65:50:72:26:88:
04:fa:46:66:02:4b:7c:8b:a4:3f:27:1c:24:2a:73:
3b:09:04:25:0a:c1:d4:d9:ba:62:59:f6:84:a4:58:
74:fb:5a:9d:2c:6e:54:8b:45:8f:36:a5:8f:ef:37:
eb:08:d6:22:cf:28:f6:66:48:21:96:59:2a:7f:a6:
1b:09:e0:a6:c5:0e:e3:d4:e1:17:28:04:0a:f2:b0:
aa:e5:6f:ae:02:93:83:d3:d4:cd:26:27:ca:e3:cd:
82:7e:7a:18:e2:ff:51:81:4b:2e:17:c6:ff:70:75:
78:7f:e1:00:f3:8e:c8:51:d5:99:5f:f7:2e:d5:ef:
0e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A9:CB:3B:E7:D0:F7:B5:CD:9A:2F:4A:22:18:3A:30:4F:CD:BC:5F
X509v3 Authority Key Identifier:
keyid:64:37:99:9F:D0:6F:2C:7F:0F:16:F8:16:0C:D6:14:5F:77:58:84:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/3130332e3138312e3133362e302f32332d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.181.136.0/23
Signature Algorithm: sha256WithRSAEncryption
82:97:66:51:7e:a0:1d:67:4e:84:48:b2:b1:58:1b:cd:3f:42:
aa:66:e7:35:23:34:0b:0d:9a:88:c5:e8:64:09:a0:db:b9:32:
59:a1:79:f1:69:08:77:af:44:f3:4a:35:c1:b5:c2:07:88:c5:
19:0e:51:05:fc:a8:7d:d3:b3:cc:af:91:d3:cc:52:78:7c:a6:
9d:43:ae:31:c9:31:f7:d0:d9:3b:ce:c7:45:07:53:37:93:8f:
51:06:3c:19:b0:33:0c:65:61:09:a0:1e:38:62:22:22:3d:f2:
2d:98:b2:67:7b:91:03:7b:71:0a:2c:36:b3:52:29:6c:96:6e:
de:d0:3a:9f:5a:6e:b1:1d:3b:b5:49:b3:91:7d:b7:15:b5:d6:
29:d4:22:60:f5:68:ef:58:c0:b1:6d:13:4c:a9:72:6d:49:0a:
38:00:a8:05:fa:ab:67:2d:35:6e:68:cd:b5:10:96:10:78:3c:
1d:f2:34:12:a6:49:51:ad:e5:24:5c:c0:00:14:ed:9c:a0:ae:
65:d9:18:d0:0e:0e:dc:9d:3e:f6:6a:2a:a2:57:9c:85:7a:c7:
9a:65:e3:9d:ad:41:e8:f8:06:44:49:56:cb:05:dd:8b:ec:13:
b6:62:b1:58:87:10:11:41:85:ca:40:2c:f8:13:c6:ad:57:d7:
f4:c4:16:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:51:04 2025 by rpki-client