This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/3130332e3130322e3134312e302f32342d3234203d3e20313336383534.roa
File: 3130332e3130322e3134312e302f32342d3234203d3e20313336383534.roa (raw, json)
Hash identifier: Mn2kP+cKGGOLyQSD70wITKilYtAFBvqgDyOS5Ob9KJw=
Subject key identifier: 00:50:6E:DF:42:10:A5:3D:83:F0:82:63:91:99:D6:92:59:98:8E:3E
Certificate issuer: /CN=1D6001A4F46548B37ED871CA5CF088F7AF50D754
Certificate serial: 73FDF1545C234424FBACEA6781A2E144B0D62099
Authority key identifier: 1D:60:01:A4:F4:65:48:B3:7E:D8:71:CA:5C:F0:88:F7:AF:50:D7:54
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/3130332e3130322e3134312e302f32342d3234203d3e20313336383534.roa
Signing time: Tue 30 Dec 2025 10:00:01 +0000
ROA not before: Tue 30 Dec 2025 09:55:01 +0000
ROA not after: Tue 29 Dec 2026 10:00:01 +0000
asID: 136854
IP address blocks: 103.102.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl
rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 16:20:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:fd:f1:54:5c:23:44:24:fb:ac:ea:67:81:a2:e1:44:b0:d6:20:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D6001A4F46548B37ED871CA5CF088F7AF50D754
Validity
Not Before: Dec 30 09:55:01 2025 GMT
Not After : Dec 29 10:00:01 2026 GMT
Subject: CN=00506EDF4210A53D83F082639199D69259988E3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bc:e9:1c:51:74:40:1e:6b:21:72:b8:34:18:
1c:da:20:15:59:f9:6b:db:ca:1c:d2:15:b8:7f:3b:
e8:9c:d8:44:e1:84:66:35:0f:cf:86:08:0f:1c:64:
ee:49:ed:fd:71:56:5a:1d:3a:27:ba:63:a4:d4:8e:
57:07:9b:a9:d1:15:53:06:d6:ea:da:63:0f:98:f9:
83:5e:4a:54:98:fe:91:d4:0d:79:03:88:28:79:e5:
af:c8:01:c7:bf:91:db:7a:2f:ea:0d:79:28:ee:7a:
3c:e7:22:eb:10:80:22:84:92:d8:71:f3:d5:33:78:
67:5b:63:41:1d:52:1f:dd:6f:72:17:1a:3a:2d:27:
47:8a:8c:b1:5f:7c:22:56:17:71:b1:fc:0c:44:fe:
37:e0:e0:e3:a8:26:94:39:7f:22:f2:e4:f0:b5:23:
0d:89:eb:2b:e6:de:a9:1a:72:04:ae:ee:2f:61:d5:
ad:b2:06:64:a3:35:74:20:c6:c6:ec:45:46:ef:54:
05:e1:8a:d7:23:09:90:fc:72:11:f6:3b:a1:89:09:
f5:13:4d:32:e3:0e:29:37:aa:13:1f:0c:c4:14:2f:
eb:4a:0c:88:82:54:65:72:fb:30:37:93:89:8d:4c:
e9:ca:75:3b:a7:d6:51:97:f7:19:95:90:fb:bc:2e:
8a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:50:6E:DF:42:10:A5:3D:83:F0:82:63:91:99:D6:92:59:98:8E:3E
X509v3 Authority Key Identifier:
keyid:1D:60:01:A4:F4:65:48:B3:7E:D8:71:CA:5C:F0:88:F7:AF:50:D7:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/3130332e3130322e3134312e302f32342d3234203d3e20313336383534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.102.141.0/24
Signature Algorithm: sha256WithRSAEncryption
68:3f:fb:b9:6f:e0:90:44:c8:fc:e9:62:90:5e:96:5f:f3:13:
f5:d9:b4:96:ce:56:90:c5:16:0e:5b:f2:f8:3d:4a:2a:71:ac:
ca:78:f8:c2:b4:b8:91:bc:5c:08:3d:41:65:f6:9c:1e:fe:73:
56:0c:0e:98:c2:ed:6d:75:07:32:eb:a0:c7:6c:a9:19:83:0e:
67:81:d4:3b:d7:d3:f1:63:fe:c0:18:47:46:e0:42:83:e6:a9:
0e:1c:55:04:ab:65:16:c6:89:03:5e:be:a6:1a:24:30:93:83:
7d:d5:09:89:8c:07:7b:24:1d:74:89:94:e9:8b:bf:59:8c:4b:
84:c5:02:74:0d:6e:4b:b5:16:c1:66:ad:fe:3f:ac:1a:82:e4:
0c:cf:47:b0:6a:36:8a:fc:83:30:fa:2b:dd:35:dc:ba:2d:4a:
5a:39:de:74:53:08:7d:35:99:d0:ab:8a:86:30:33:62:f0:30:
c9:15:c0:57:c9:ee:0b:a4:8a:11:b9:fd:2b:8e:7d:bc:b6:18:
26:f9:db:3d:33:9a:3a:47:cc:1f:b0:17:13:0b:3e:79:a1:c5:
aa:f3:44:1f:15:f0:9b:1e:5b:c9:89:9e:8a:e7:1d:c2:1a:75:
02:9a:d7:bb:d2:c6:7e:30:67:0e:38:9e:25:8e:cd:2b:23:c5:
25:1a:7f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:42:38 2026 by rpki-client