This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/3130332e3138382e3235332e302f32342d3234203d3e20313439373337.roa
File: 3130332e3138382e3235332e302f32342d3234203d3e20313439373337.roa (raw, json)
Hash identifier: Sj/j171l33JI7ePr4g2BFw5WUoQjNjQFEAH4ivYj0QM=
Subject key identifier: EA:6C:B2:CC:5C:81:C2:67:6E:40:95:96:5E:A1:C5:EA:1D:D6:29:10
Certificate issuer: /CN=B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2
Certificate serial: 6F4DF7A4385EA51E2B4147A1D5F6B6974E02322C
Authority key identifier: B5:E9:7B:71:FA:FA:24:FF:8F:A2:B1:A3:35:58:D8:0A:98:25:4D:B2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/3130332e3138382e3235332e302f32342d3234203d3e20313439373337.roa
Signing time: Fri 19 Dec 2025 07:00:01 +0000
ROA not before: Fri 19 Dec 2025 06:55:01 +0000
ROA not after: Fri 18 Dec 2026 07:00:01 +0000
asID: 149737
IP address blocks: 103.188.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.crl
rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 16:07:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:4d:f7:a4:38:5e:a5:1e:2b:41:47:a1:d5:f6:b6:97:4e:02:32:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2
Validity
Not Before: Dec 19 06:55:01 2025 GMT
Not After : Dec 18 07:00:01 2026 GMT
Subject: CN=EA6CB2CC5C81C2676E4095965EA1C5EA1DD62910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:89:82:08:3d:58:02:e7:53:00:53:52:e4:07:
52:2b:54:d1:84:6b:04:54:47:65:59:81:96:80:07:
7a:da:3a:83:4d:8e:2c:3f:fe:b9:63:17:df:b2:22:
c4:86:51:d4:8e:66:0d:1d:29:55:bd:a2:b0:05:f6:
0a:f6:54:74:63:12:5f:d0:c8:2d:34:e2:bf:77:b8:
26:1a:19:8d:13:26:0f:53:3b:01:7e:25:f6:93:5c:
41:5e:ed:e5:8a:6b:0b:44:74:bd:df:94:d0:59:38:
26:6a:4b:16:1d:2e:32:27:59:d6:b1:dd:c5:d1:6e:
84:de:5f:72:81:0e:75:27:a4:ab:3e:3a:8e:c1:af:
6a:51:9f:ba:8e:0e:7c:39:73:65:0a:7d:65:17:fd:
6c:66:8c:18:fe:12:ca:5b:51:2e:fe:86:7d:6f:6b:
40:4a:3d:8e:23:e8:0d:90:30:40:19:bb:8c:e5:08:
c2:71:97:ec:2c:ee:a8:3b:90:3c:90:64:12:95:06:
bf:c5:af:97:1d:dc:f1:0a:f3:70:60:98:76:e6:2b:
16:68:84:f7:7e:5d:8c:56:64:81:12:22:b0:e1:10:
e4:c2:2e:aa:bc:79:3f:a1:44:fb:51:76:bc:fe:d1:
57:b5:26:49:c1:e0:0c:99:29:5a:49:7f:64:20:fe:
ef:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6C:B2:CC:5C:81:C2:67:6E:40:95:96:5E:A1:C5:EA:1D:D6:29:10
X509v3 Authority Key Identifier:
keyid:B5:E9:7B:71:FA:FA:24:FF:8F:A2:B1:A3:35:58:D8:0A:98:25:4D:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/3130332e3138382e3235332e302f32342d3234203d3e20313439373337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.188.253.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:1c:c2:98:ad:cb:6f:74:13:a6:f8:59:4d:70:72:c4:a0:4c:
3d:bc:80:1a:8a:72:16:77:6e:a8:bc:a9:21:de:ee:76:14:c6:
4b:c0:74:86:ce:2c:8a:ce:a4:0d:48:a8:69:82:ef:03:00:08:
bc:df:6f:97:fd:d4:8c:bd:54:ac:9e:fc:48:60:d2:84:98:af:
42:4a:f9:ac:e9:9d:1f:19:a6:12:ba:2b:63:b9:71:0c:6a:4b:
0f:12:6c:5a:0f:72:45:ee:a9:29:da:2d:dd:fe:27:62:14:81:
79:82:f8:ec:eb:d8:13:9d:bb:c5:0f:f9:9c:82:cc:5b:ab:44:
21:38:8c:b6:ad:4a:29:77:3b:f8:81:70:49:f3:9c:1d:6a:77:
f3:df:cf:c1:ac:70:3d:76:8a:90:ac:ab:dc:f8:c6:a7:6c:60:
b5:82:90:0b:fe:bf:07:f5:41:dc:5e:10:17:2a:83:05:16:da:
cb:77:52:ab:97:60:c9:4e:0c:24:05:db:06:5f:11:7c:13:a4:
33:94:34:23:c5:b2:cd:fa:19:e6:4a:75:a8:f0:05:89:9a:c9:
2b:d4:f2:0f:69:6e:33:b0:0f:dc:c7:27:6e:22:65:2a:f2:02:
f7:8c:16:42:0d:62:69:71:7f:5c:31:13:84:b9:80:13:ec:fb:
df:7a:5f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:57:29 2026 by rpki-client