This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/3130332e3138312e3133362e302f32342d3234203d3e2039333431.roa
File: 3130332e3138312e3133362e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier: DEctQrPR1f7clMzlCgnnGDnZx+kgndKVvSG1Ex3+0zM=
Subject key identifier: AC:80:BC:48:E4:65:20:C5:3D:11:F5:1F:74:10:41:5B:1B:34:94:F2
Certificate issuer: /CN=6437999FD06F2C7F0F16F8160CD6145F775884A4
Certificate serial: 468FA4189E175BEC09C98106AE251C39C902E15D
Authority key identifier: 64:37:99:9F:D0:6F:2C:7F:0F:16:F8:16:0C:D6:14:5F:77:58:84:A4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/3130332e3138312e3133362e302f32342d3234203d3e2039333431.roa
Signing time: Wed 12 Nov 2025 20:00:01 +0000
ROA not before: Wed 12 Nov 2025 19:55:01 +0000
ROA not after: Wed 11 Nov 2026 20:00:01 +0000
asID: 9341
IP address blocks: 103.181.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.crl
rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 17:41:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:8f:a4:18:9e:17:5b:ec:09:c9:81:06:ae:25:1c:39:c9:02:e1:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6437999FD06F2C7F0F16F8160CD6145F775884A4
Validity
Not Before: Nov 12 19:55:01 2025 GMT
Not After : Nov 11 20:00:01 2026 GMT
Subject: CN=AC80BC48E46520C53D11F51F7410415B1B3494F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d0:3a:4d:e1:4d:cf:76:db:49:5a:5b:57:94:
dd:52:85:04:b0:ee:83:23:2c:38:63:c6:a7:93:9b:
c5:a3:ff:5e:c9:b5:1e:b2:26:19:69:2b:b5:ea:9d:
06:fe:35:52:23:a0:62:82:08:6d:f9:15:17:85:bf:
3f:ec:ba:89:6c:15:a0:67:74:95:0f:d8:ad:f8:c3:
71:2b:5a:0c:22:fe:1f:3d:93:cd:1f:9b:6e:cd:df:
07:74:44:f3:21:1a:1a:b1:ca:ea:e5:77:49:96:83:
d2:cf:30:3f:be:ec:92:e9:fb:f4:12:54:f4:05:1e:
f2:66:ba:03:0d:12:c5:3f:da:5c:f9:f5:17:29:f8:
05:8f:94:b9:69:f0:4d:b3:32:e7:ab:31:e0:d4:70:
7c:d7:e2:f9:59:80:09:52:0e:22:7f:8a:fd:84:ed:
ed:02:85:d4:6b:86:3a:97:7c:05:37:0d:d0:7c:53:
b8:a4:de:03:bd:92:02:fd:64:9e:1d:a1:2e:ed:be:
80:14:59:09:08:a6:14:2c:47:09:5a:9f:ba:ef:94:
71:1c:54:da:b2:30:0d:9e:ec:0e:75:79:b0:15:f4:
0a:8b:09:74:df:ff:d1:8c:1e:14:92:a5:26:57:1b:
8d:cc:9a:23:ad:16:66:37:5d:66:34:3a:d1:34:cb:
16:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:80:BC:48:E4:65:20:C5:3D:11:F5:1F:74:10:41:5B:1B:34:94:F2
X509v3 Authority Key Identifier:
keyid:64:37:99:9F:D0:6F:2C:7F:0F:16:F8:16:0C:D6:14:5F:77:58:84:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/3130332e3138312e3133362e302f32342d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.181.136.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:a4:02:4a:9d:c2:e1:d8:f2:64:ab:45:49:ec:d6:37:41:55:
20:91:e9:d7:5f:94:f5:18:80:6b:fd:65:10:42:a2:70:8c:b7:
a1:d1:c9:c0:87:70:d8:c3:ae:68:cc:1b:e7:d3:9c:42:29:aa:
a4:60:14:34:44:c9:ad:d6:5d:f5:a2:f9:e6:36:6d:6e:bd:c6:
72:70:22:0a:20:e3:ec:31:07:9e:c8:54:6f:78:1c:f8:20:05:
97:62:06:c2:d8:b5:67:00:17:09:52:fa:4c:82:59:87:ef:07:
88:34:c3:b5:9c:ce:d0:b7:43:3f:7e:b8:84:f6:2e:1b:9a:71:
49:44:59:63:1e:08:91:34:67:b1:a7:f9:59:12:05:a2:3c:19:
0d:e5:57:a3:f4:f3:55:dc:28:dc:b1:c4:0f:2a:17:21:6c:0f:
e0:b5:ec:05:ac:64:d1:fe:8e:d0:f7:50:d0:45:b4:72:e7:e6:
d9:f1:1f:70:95:cf:5e:f0:98:4f:9b:1d:be:df:d3:6a:58:99:
80:e7:34:66:47:d2:47:b5:2d:36:cc:b8:dd:30:13:bf:c0:f5:
70:ad:e3:18:af:0e:ea:f3:16:c6:e3:cf:c6:87:f5:f4:c7:b7:
b7:9f:ed:df:c8:9d:53:a9:66:46:80:49:17:79:42:c7:2c:07:
2f:3e:6c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:51:47 2025 by rpki-client