This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/34332e3234372e33342e302f32342d3234203d3e203435333132.roa
File: 34332e3234372e33342e302f32342d3234203d3e203435333132.roa (raw, json)
Hash identifier: JWKx88Bg+YkLntvPFjlUPbmjIYWTx4YxQG5Hs8vTau0=
Subject key identifier: E7:D8:C4:95:61:3A:0D:56:17:B3:41:79:FA:55:5A:CB:A8:98:93:AD
Certificate issuer: /CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
Certificate serial: 31AD934BA31942381DACCD96DA21664B1130ED5F
Authority key identifier: 15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/34332e3234372e33342e302f32342d3234203d3e203435333132.roa
Signing time: Fri 07 Nov 2025 05:02:25 +0000
ROA not before: Fri 07 Nov 2025 04:57:25 +0000
ROA not after: Fri 06 Nov 2026 05:02:25 +0000
asID: 45312
IP address blocks: 43.247.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl
rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:ad:93:4b:a3:19:42:38:1d:ac:cd:96:da:21:66:4b:11:30:ed:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
Validity
Not Before: Nov 7 04:57:25 2025 GMT
Not After : Nov 6 05:02:25 2026 GMT
Subject: CN=E7D8C495613A0D5617B34179FA555ACBA89893AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5d:3a:36:f6:f5:17:2d:64:5d:02:de:16:41:
f4:43:70:89:db:9b:6f:ce:2d:8b:9a:c8:65:e6:d6:
f6:c7:55:fb:48:4c:46:17:08:cf:af:6b:7c:63:fb:
cd:c3:6b:8b:59:c1:af:fc:9c:8c:76:3a:35:af:d9:
87:86:b4:35:90:60:1f:d7:da:10:97:14:0f:2e:d8:
7b:5b:ba:b7:f5:16:d0:5a:cf:4c:28:1c:d1:47:5d:
a2:e5:ee:15:ba:44:ba:75:aa:5c:00:52:ca:0a:0a:
00:4f:87:97:fb:09:c6:2a:52:5e:63:a5:76:ae:4b:
b2:5c:00:28:89:dd:1a:17:2c:d0:29:44:d3:36:fe:
ba:9d:02:cb:c0:41:2d:1d:a1:3a:cd:ed:bb:8e:df:
b1:80:74:b6:e1:ea:b8:9d:92:f6:79:3f:41:3b:6b:
0d:63:ce:22:4a:bb:0b:8f:20:73:84:00:b7:bd:6d:
c0:73:65:b7:b6:2e:b0:eb:c5:a7:2d:96:37:34:5e:
84:f2:6b:33:d2:70:55:10:29:19:06:38:88:06:9c:
97:58:95:96:e8:51:07:d0:8b:76:2d:87:41:2c:06:
59:40:6b:db:c7:eb:90:93:91:ba:09:b5:c2:57:7d:
b1:ed:39:35:30:4f:d5:bc:c7:2e:36:9e:77:f6:a4:
6e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D8:C4:95:61:3A:0D:56:17:B3:41:79:FA:55:5A:CB:A8:98:93:AD
X509v3 Authority Key Identifier:
keyid:15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/34332e3234372e33342e302f32342d3234203d3e203435333132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.247.34.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:76:97:90:03:b3:f8:6b:4b:d1:aa:33:56:16:50:02:73:2b:
0f:5f:33:e6:09:ff:c3:7b:ea:9d:59:e9:0d:d1:39:1e:0e:11:
6b:f7:41:19:06:c2:1c:a1:31:66:cc:e6:41:1f:25:b0:96:c2:
f8:d1:11:0d:07:76:0f:fa:1d:ed:e4:22:cb:ad:09:ef:87:73:
e7:3c:82:3f:df:31:d3:e0:96:95:8d:2c:18:1d:a1:78:6c:fa:
ba:be:41:d5:18:94:61:c1:36:6d:7e:a3:34:19:4d:6a:c1:58:
3b:07:67:d6:b0:a1:b6:e4:17:81:37:9b:55:e1:46:c1:17:f5:
fb:45:1d:50:e3:48:d8:38:97:6c:86:2f:91:c9:14:c8:a0:48:
60:28:a3:7e:15:e0:2b:38:87:4f:f0:cf:d5:51:d1:d9:55:5a:
09:df:dd:09:a3:11:2f:4a:ff:b9:85:2a:f8:66:47:17:32:0c:
b2:5a:a2:2f:f7:81:4d:23:34:aa:9b:2e:37:0b:ee:e3:2b:60:
d8:e5:dd:7e:81:b9:ef:e9:e6:f0:3c:b0:9d:da:8a:13:53:e1:
42:08:8b:58:77:d7:a2:46:b9:7e:f8:5d:3d:26:25:c5:88:40:
bc:67:62:56:40:2f:12:29:f2:cc:43:32:62:47:c3:ce:a3:4f:
f7:ee:dc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:32:35 2025 by rpki-client