This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/3130332e3130322e3134302e302f32342d3234203d3e20313336383534.roa
File: 3130332e3130322e3134302e302f32342d3234203d3e20313336383534.roa (raw, json)
Hash identifier: Jg0eBzFNwVRly/0j1c4wnh+Pn1/PmT37QsudfpP4Olc=
Subject key identifier: FB:3B:08:72:1C:1D:35:FE:98:B9:33:F4:B2:5A:29:9E:C3:A6:44:C4
Certificate issuer: /CN=1D6001A4F46548B37ED871CA5CF088F7AF50D754
Certificate serial: 142D854F839C79443856DFF33F0B2ED47BEB723E
Authority key identifier: 1D:60:01:A4:F4:65:48:B3:7E:D8:71:CA:5C:F0:88:F7:AF:50:D7:54
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/3130332e3130322e3134302e302f32342d3234203d3e20313336383534.roa
Signing time: Tue 30 Dec 2025 10:00:01 +0000
ROA not before: Tue 30 Dec 2025 09:55:01 +0000
ROA not after: Tue 29 Dec 2026 10:00:01 +0000
asID: 136854
IP address blocks: 103.102.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl
rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 16:20:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:2d:85:4f:83:9c:79:44:38:56:df:f3:3f:0b:2e:d4:7b:eb:72:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D6001A4F46548B37ED871CA5CF088F7AF50D754
Validity
Not Before: Dec 30 09:55:01 2025 GMT
Not After : Dec 29 10:00:01 2026 GMT
Subject: CN=FB3B08721C1D35FE98B933F4B25A299EC3A644C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f9:00:6c:37:c5:45:77:8f:b8:b8:35:37:5f:
6d:2b:34:16:14:e4:9e:1b:be:0d:bb:db:be:6f:0b:
4f:d0:60:f7:36:88:13:b5:21:a8:26:71:46:d9:55:
93:fc:bf:cc:2d:60:50:6e:ef:02:e0:60:55:ab:b1:
16:72:fe:9f:52:eb:77:97:4e:1d:d6:d7:e3:14:66:
9a:e3:21:47:f5:f2:d5:f4:36:d5:73:3b:ff:16:b5:
5a:e0:04:4a:85:9a:62:1c:67:9a:77:70:f9:47:01:
c6:80:76:b8:6f:78:df:9c:a6:04:18:82:5c:fe:4b:
8f:4e:98:e3:bc:1a:3f:58:6a:66:a7:f1:9b:64:72:
fa:68:33:96:99:ff:22:da:6c:e4:df:c3:59:4b:61:
1f:24:79:8b:ba:66:d4:de:09:d8:f2:ce:98:69:c8:
27:48:49:da:f4:2a:9a:de:ad:e5:54:a4:9d:d1:40:
be:5d:96:5b:2d:44:00:63:c8:4a:9f:8b:9f:84:72:
25:52:64:ae:88:c3:2a:b9:c1:98:a8:32:59:ea:8d:
38:da:8c:31:20:84:8e:9a:d4:12:a2:60:ec:8a:bc:
01:4e:17:f8:8c:95:63:77:1a:c0:77:26:65:a6:05:
7e:ba:e5:1a:97:00:d8:2c:54:ad:a5:1a:7a:97:48:
d1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3B:08:72:1C:1D:35:FE:98:B9:33:F4:B2:5A:29:9E:C3:A6:44:C4
X509v3 Authority Key Identifier:
keyid:1D:60:01:A4:F4:65:48:B3:7E:D8:71:CA:5C:F0:88:F7:AF:50:D7:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/3130332e3130322e3134302e302f32342d3234203d3e20313336383534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.102.140.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:5d:e8:05:39:75:b4:91:06:24:d3:4f:f1:2c:48:70:e1:1a:
2b:ee:e7:4e:3d:48:61:c0:9d:82:34:b4:65:c6:05:40:25:08:
14:20:72:c0:99:47:64:11:68:14:ca:5d:65:c1:19:d8:39:59:
a1:24:cc:70:af:87:df:0b:8b:b7:91:8b:62:cd:89:3d:86:58:
8e:7a:70:08:aa:9f:27:dc:68:93:3c:7a:42:db:77:36:0b:e1:
18:67:70:1b:14:b5:b9:a4:2a:26:33:82:1e:b0:c1:36:c3:58:
9d:38:f5:ca:ee:31:07:e6:7e:48:b6:eb:19:b8:d6:62:7f:dc:
af:34:1a:e6:0b:e9:e2:b3:3b:81:29:70:43:30:e5:91:f1:8b:
1f:df:e9:9a:ff:3f:01:ec:cb:7f:76:20:f2:ef:27:f2:c4:8d:
fc:e0:c7:03:84:77:07:82:2b:f2:43:28:8a:48:97:9e:08:c2:
89:ac:a3:5b:7b:e4:41:94:68:63:ff:05:b0:c7:2c:89:3e:c5:
be:d1:d1:e9:bf:9d:d1:f3:7f:bf:93:75:2a:45:76:f1:81:99:
ba:1b:c0:18:7f:c6:ad:f8:d0:7e:39:b9:e1:62:6c:eb:bf:4e:
ba:2a:5b:3e:a4:3d:38:54:4a:99:15:84:a3:ea:e4:2f:0e:2f:
e4:e8:f9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:08:10 2026 by rpki-client