This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/3130332e3234352e35372e302f32342d3234203d3e20313531353335.roa
File: 3130332e3234352e35372e302f32342d3234203d3e20313531353335.roa (raw, json)
Hash identifier: 26Hr94IvTPNWLtyGYpXVN8+IvP+74Uco2RJ0Tu/T2Wg=
Subject key identifier: 6F:44:BB:C5:F5:BC:C9:CB:B0:09:33:F2:75:BC:2C:52:CB:49:7B:4E
Certificate issuer: /CN=85B934D25B97AC3F22C3D45778109B50456E4722
Certificate serial: 1EC6F204EDDE49F40986703ABF8A69155E91CCD4
Authority key identifier: 85:B9:34:D2:5B:97:AC:3F:22:C3:D4:57:78:10:9B:50:45:6E:47:22
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/3130332e3234352e35372e302f32342d3234203d3e20313531353335.roa
Signing time: Thu 11 Dec 2025 15:00:00 +0000
ROA not before: Thu 11 Dec 2025 14:55:00 +0000
ROA not after: Thu 10 Dec 2026 15:00:00 +0000
asID: 151535
IP address blocks: 103.245.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.crl
rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Jan 2026 06:35:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:c6:f2:04:ed:de:49:f4:09:86:70:3a:bf:8a:69:15:5e:91:cc:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85B934D25B97AC3F22C3D45778109B50456E4722
Validity
Not Before: Dec 11 14:55:00 2025 GMT
Not After : Dec 10 15:00:00 2026 GMT
Subject: CN=6F44BBC5F5BCC9CBB00933F275BC2C52CB497B4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a3:09:de:7c:c1:e6:f4:0e:43:5e:27:b7:8f:
90:c1:41:ba:de:e6:27:66:4a:f1:db:b8:77:f0:29:
86:12:cf:d8:0e:7f:53:3d:37:d2:f5:86:f0:e0:be:
5d:5a:9a:ae:4a:87:96:cb:59:93:f9:8e:2d:cf:cc:
32:5c:06:f3:3a:e3:3b:ea:3a:66:f4:ae:a5:60:9e:
a0:ce:55:2d:2c:71:2b:bc:33:60:9b:97:86:9b:a2:
ef:9e:d1:be:c2:30:3f:4e:c6:c3:bc:18:11:e4:cc:
da:92:e2:20:21:cf:73:e3:4a:a5:2e:94:a3:7c:68:
b8:4f:f8:d5:88:a0:63:62:a2:02:1c:23:56:c1:05:
f5:21:10:62:c5:f2:f8:88:cc:41:84:12:3f:59:bb:
fd:c2:69:89:36:e4:7b:e1:69:80:55:5f:ba:a5:a7:
8d:8d:4b:4c:2c:0e:8a:f9:3a:f2:9f:2f:74:8b:50:
6a:7d:b4:b3:f3:dc:c5:24:89:46:0f:7f:6a:91:1e:
dc:19:46:72:3e:4a:02:54:b0:3d:a0:6e:f5:c4:35:
e9:a2:af:63:fd:25:be:b8:9d:bf:e9:cf:26:9d:f8:
aa:33:91:04:f4:4d:2b:18:0e:68:92:aa:55:69:dd:
95:5c:4e:6b:a5:53:be:18:78:f8:aa:34:d2:96:64:
7c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:44:BB:C5:F5:BC:C9:CB:B0:09:33:F2:75:BC:2C:52:CB:49:7B:4E
X509v3 Authority Key Identifier:
keyid:85:B9:34:D2:5B:97:AC:3F:22:C3:D4:57:78:10:9B:50:45:6E:47:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/3130332e3234352e35372e302f32342d3234203d3e20313531353335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.245.57.0/24
Signature Algorithm: sha256WithRSAEncryption
54:a8:01:8f:d9:30:20:49:58:af:a8:8c:1a:3c:04:2f:81:3c:
47:14:e1:63:a8:f1:f5:37:7b:d4:23:b0:2d:f2:6e:14:5a:b7:
3d:61:ae:bb:b7:d2:08:2f:20:e7:8a:4f:09:9a:10:f1:b2:da:
e7:79:eb:01:88:80:97:1e:21:19:7f:95:82:29:31:46:ba:84:
ec:e2:06:69:b9:e8:d6:17:17:04:e9:0c:ce:55:ce:92:af:3e:
66:a6:03:b1:18:74:04:b7:fe:43:f9:8f:6b:d2:5b:b2:18:e0:
cd:b6:c8:1c:dd:85:02:0f:ba:e7:88:5b:88:39:f4:55:91:f2:
cc:ed:e3:d7:85:0b:be:74:51:d4:fa:af:f0:5d:97:be:9a:23:
39:3a:21:c8:79:70:46:7f:87:80:fd:9b:b7:d8:97:22:07:26:
b1:9c:43:6e:1c:f4:44:5e:2a:99:03:63:8b:3d:26:f1:2a:c3:
e9:7c:5a:0e:40:22:90:b4:4f:ee:07:fd:8a:b0:04:52:a5:c4:
e8:ae:3b:16:36:10:fd:c9:c4:b2:73:a1:92:b8:54:13:84:b7:
96:20:4b:e8:09:63:7e:e6:8c:8f:09:38:9d:44:e5:b5:ff:61:
d8:fc:c2:82:9e:e6:80:be:1f:14:38:25:48:88:20:58:5d:99:
34:b9:d4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 11:48:23 2026 by rpki-client