This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/3130332e3134352e3232362e302f32342d3234203d3e20313339343536.roa
File: 3130332e3134352e3232362e302f32342d3234203d3e20313339343536.roa (raw, json)
Hash identifier: pdj6kWhUHiHBGDkiWMJSGwDu1DiR3cH1bD9Qa0wAwf0=
Subject key identifier: 10:9A:E4:D2:95:4C:52:11:CA:1A:1F:B8:13:6B:9B:5D:31:82:8F:2F
Certificate issuer: /CN=10B7822CA22013D1B3095AB974949FD98A76025C
Certificate serial: 26B4186812D8ED2B6933896D65B544121B959719
Authority key identifier: 10:B7:82:2C:A2:20:13:D1:B3:09:5A:B9:74:94:9F:D9:8A:76:02:5C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10B7822CA22013D1B3095AB974949FD98A76025C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/3130332e3134352e3232362e302f32342d3234203d3e20313339343536.roa
Signing time: Wed 03 Dec 2025 08:00:01 +0000
ROA not before: Wed 03 Dec 2025 07:55:01 +0000
ROA not after: Wed 02 Dec 2026 08:00:01 +0000
asID: 139456
IP address blocks: 103.145.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.crl
rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10B7822CA22013D1B3095AB974949FD98A76025C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 22:17:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:b4:18:68:12:d8:ed:2b:69:33:89:6d:65:b5:44:12:1b:95:97:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10B7822CA22013D1B3095AB974949FD98A76025C
Validity
Not Before: Dec 3 07:55:01 2025 GMT
Not After : Dec 2 08:00:01 2026 GMT
Subject: CN=109AE4D2954C5211CA1A1FB8136B9B5D31828F2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:40:56:12:6d:f3:e6:1c:04:5c:c9:e4:0b:1f:
71:2c:e4:4b:9f:b0:4f:dd:ed:12:52:ab:79:b5:e3:
b0:55:f4:ef:15:0f:64:71:79:36:1b:84:f5:49:b3:
a8:ea:af:bd:d6:af:9c:f5:24:b3:a9:70:f5:6b:13:
d0:54:91:0b:f8:2e:56:1b:4f:a8:ce:83:8c:c8:70:
de:34:54:4d:d7:30:fd:eb:a0:4d:05:60:68:67:8a:
7f:c9:5e:b2:78:61:42:f9:de:d2:f3:be:d4:57:95:
60:98:f5:25:0f:53:98:69:2e:dd:43:eb:42:c2:04:
c7:98:6e:af:cc:7e:f1:46:ef:57:f7:c7:a1:42:4d:
a4:a7:95:6b:16:78:6a:93:69:f7:12:7c:55:14:68:
3b:ea:24:e2:d5:65:6c:cc:0b:ee:27:50:8c:a8:9b:
cf:20:67:88:9d:7c:c2:5f:6d:4e:53:ae:5e:6e:c3:
6b:d0:72:39:f7:64:1b:49:a8:44:9d:c7:a4:bb:8a:
92:50:e4:24:fc:c5:41:d1:6e:43:cb:f0:24:d4:b7:
f7:fc:c0:4e:64:ba:85:b6:b9:25:bb:d1:5c:52:87:
cf:9e:a0:f7:a1:28:15:ba:d6:5d:58:d9:7e:7c:73:
fb:cd:df:72:85:fd:50:e7:47:e0:94:62:8c:32:2f:
e8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:9A:E4:D2:95:4C:52:11:CA:1A:1F:B8:13:6B:9B:5D:31:82:8F:2F
X509v3 Authority Key Identifier:
keyid:10:B7:82:2C:A2:20:13:D1:B3:09:5A:B9:74:94:9F:D9:8A:76:02:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10B7822CA22013D1B3095AB974949FD98A76025C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/3130332e3134352e3232362e302f32342d3234203d3e20313339343536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.145.226.0/24
Signature Algorithm: sha256WithRSAEncryption
28:e8:36:4c:f5:1b:9e:78:13:fc:81:9b:84:c8:d9:35:0b:8c:
bc:c7:a5:84:42:d8:c8:e0:ef:73:fe:2a:08:cb:9e:6f:a0:c7:
b7:52:12:3d:54:81:10:e7:e6:93:33:af:d6:15:16:6b:d5:a5:
ee:e4:51:cb:66:14:89:a3:49:1f:61:2e:8a:1a:57:dc:7c:9c:
31:cc:60:9c:d7:72:bb:02:f0:69:da:b0:e0:95:a8:29:94:23:
36:27:76:09:27:34:df:ca:df:00:d4:ff:f5:16:f9:80:c3:eb:
44:db:63:99:47:c5:4a:8b:94:34:cf:50:82:03:e2:84:1f:ed:
78:67:d5:0c:32:60:1b:38:f1:84:9a:30:d6:18:75:0b:fb:52:
76:5c:95:f6:b5:64:b6:8c:3d:40:49:45:63:b7:45:9e:90:ad:
38:ba:5b:df:97:44:84:e9:ff:89:d1:a1:cf:ec:82:eb:b9:75:
48:33:b8:cb:2a:6d:e2:99:ee:5c:57:17:a3:f8:6c:0a:42:d2:
40:34:87:b9:81:40:56:f9:cd:64:36:b4:2b:75:7d:4d:cc:e1:
13:5f:db:49:df:24:e4:5c:12:4e:d1:35:1d:dd:25:3d:af:0f:
f9:9f:d3:ef:52:7a:d2:e3:15:61:33:ee:75:e1:f7:63:a2:d9:
7d:9e:8d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:59:33 2025 by rpki-client