This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/3130332e3131372e35362e302f32332d3234203d3e20313336303532.roa
File: 3130332e3131372e35362e302f32332d3234203d3e20313336303532.roa (raw, json)
Hash identifier: hTMhFpyCQFUqahvHac3PbyQvEBFh/2YhQZ3DB9bPPjE=
Subject key identifier: 59:98:47:DD:1E:0F:B0:67:02:9D:D1:16:8A:C4:B4:7E:2B:BF:15:36
Certificate issuer: /CN=B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5
Certificate serial: 196DEC771812FFA261A5812D85D4A0CB1FE8F07E
Authority key identifier: B8:B4:7D:E5:74:D4:4D:4C:C9:A3:E4:E2:E1:F7:AC:9C:B0:AE:A0:B5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/3130332e3131372e35362e302f32332d3234203d3e20313336303532.roa
Signing time: Tue 30 Dec 2025 06:00:00 +0000
ROA not before: Tue 30 Dec 2025 05:55:00 +0000
ROA not after: Tue 29 Dec 2026 06:00:00 +0000
asID: 136052
IP address blocks: 103.117.56.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl
rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 22:50:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:6d:ec:77:18:12:ff:a2:61:a5:81:2d:85:d4:a0:cb:1f:e8:f0:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5
Validity
Not Before: Dec 30 05:55:00 2025 GMT
Not After : Dec 29 06:00:00 2026 GMT
Subject: CN=599847DD1E0FB067029DD1168AC4B47E2BBF1536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:96:d8:70:f6:cd:85:3d:30:9d:8a:54:ee:91:
39:fc:fa:b8:40:cf:4e:ff:11:cc:96:2c:94:a1:a4:
e5:11:17:0a:5a:c4:2b:36:c2:99:17:f7:89:05:7e:
b6:fd:3f:aa:79:ca:ad:93:2b:fc:8e:81:53:bb:a8:
5a:ee:ba:d8:a8:22:29:ac:2d:a0:52:1f:53:73:3a:
09:35:7a:ca:17:42:9d:5f:30:59:bf:3e:02:66:d3:
28:f1:4c:cf:6f:d0:70:b1:4b:76:9a:55:5c:1b:29:
52:e1:18:87:b0:9a:11:e4:2a:f0:ea:38:f6:4d:4e:
ed:6e:27:74:79:07:09:51:d8:32:7a:3e:83:fd:62:
67:7a:56:32:c0:00:d2:bf:ef:5e:59:ce:b5:2a:a5:
cb:34:8b:d9:3f:de:b8:97:35:a3:6f:e7:cb:80:1c:
ed:14:71:5b:fd:33:e4:df:4d:8e:0a:89:ed:18:1d:
49:2b:d1:86:99:b2:22:cc:32:f5:49:18:0a:32:bf:
af:4a:3a:de:49:d4:b1:83:ee:e9:83:59:e3:92:a4:
9d:c5:9f:31:5d:cd:55:e7:0c:6c:b1:71:a3:a8:65:
c1:23:c7:e6:68:dd:e7:d6:42:47:4a:4b:e6:84:e5:
03:09:3e:d1:6a:2b:57:45:f8:e6:97:02:42:cc:6d:
c2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:98:47:DD:1E:0F:B0:67:02:9D:D1:16:8A:C4:B4:7E:2B:BF:15:36
X509v3 Authority Key Identifier:
keyid:B8:B4:7D:E5:74:D4:4D:4C:C9:A3:E4:E2:E1:F7:AC:9C:B0:AE:A0:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/3130332e3131372e35362e302f32332d3234203d3e20313336303532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.117.56.0/23
Signature Algorithm: sha256WithRSAEncryption
57:5a:30:ae:63:85:88:cd:40:11:32:41:1a:e9:d4:78:b1:d3:
35:f4:0e:17:3b:7f:0d:cc:2c:cc:f7:b6:65:cc:55:64:16:49:
01:3b:fa:e3:c8:22:a5:50:c6:fd:9b:b2:fd:f9:d2:db:86:2c:
fd:54:9b:51:5d:a5:25:7a:b4:f1:3b:e5:46:b4:80:6d:96:ac:
46:2a:c4:25:ed:a7:2e:b5:61:07:2f:f1:ae:7e:a6:bd:2d:30:
e5:9f:3b:b5:0f:0a:02:e8:98:48:cc:e6:cc:9b:e7:79:a6:82:
a8:a4:ff:86:fa:8c:db:10:ed:a5:83:b9:c1:48:e0:b4:d3:2c:
e8:7c:5a:e9:fe:d0:94:2e:5a:73:17:40:5f:1f:43:79:3f:95:
6c:da:0d:b1:bd:98:9c:e4:66:3f:ad:ac:be:c3:ac:4c:d9:b8:
56:f8:b8:56:8e:df:a1:15:41:66:23:de:59:4c:11:80:4b:1c:
cf:23:2d:87:48:f7:bc:b7:6b:56:a5:59:77:07:14:09:ca:85:
11:73:e1:3b:48:a2:43:13:15:a3:fb:7c:8c:26:d5:10:2d:9e:
01:8c:8a:e6:ed:a2:4a:d8:85:89:7c:32:0c:18:b3:af:66:be:
7a:c5:64:4b:55:43:55:0a:17:c8:3c:62:9b:41:8e:b4:90:6a:
55:3f:63:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:53:01 2026 by rpki-client