This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136342e302f32322d3234203d3e203538333639.roa
File: 3130332e342e3136342e302f32322d3234203d3e203538333639.roa (raw, json)
Hash identifier: 6zs6f+5VgNTsCTR8BjF7FLgOf1PcZ0nOoxdxnfIaLkQ=
Subject key identifier: D5:64:15:9D:34:8F:32:58:B6:DD:13:19:41:AE:1E:41:E0:8B:F6:86
Certificate issuer: /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial: 540A7C22FA05C5543C65F25566157B1D1CBB8EE5
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136342e302f32322d3234203d3e203538333639.roa
Signing time: Mon 22 Dec 2025 01:34:54 +0000
ROA not before: Mon 22 Dec 2025 01:29:54 +0000
ROA not after: Mon 21 Dec 2026 01:34:54 +0000
asID: 58369
IP address blocks: 103.4.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Jan 2026 00:14:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:0a:7c:22:fa:05:c5:54:3c:65:f2:55:66:15:7b:1d:1c:bb:8e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Validity
Not Before: Dec 22 01:29:54 2025 GMT
Not After : Dec 21 01:34:54 2026 GMT
Subject: CN=D564159D348F3258B6DD131941AE1E41E08BF686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:06:9f:5b:4f:89:b2:30:e0:c8:f8:15:a8:d3:
26:0c:3a:84:e8:c4:37:2e:65:c0:08:84:b6:44:52:
44:f6:eb:97:59:e1:f0:65:01:b8:ac:66:91:1a:64:
84:b6:31:54:36:3e:21:7e:61:c3:10:03:0b:17:3a:
d7:3e:55:d1:6d:a7:68:40:bb:03:4d:f0:f8:f0:f3:
72:5c:2a:c4:cc:0d:07:2b:4e:31:b1:6e:2d:ca:d2:
80:66:64:56:e6:71:73:4e:8c:78:de:46:f1:2a:68:
05:6a:26:55:a8:71:be:ea:dd:e1:57:19:67:ca:e2:
01:27:46:62:91:f5:f4:65:27:58:94:23:fd:03:9c:
13:05:b2:4b:17:0d:38:60:fe:ba:23:9a:0b:d2:07:
53:c5:e8:de:b8:ee:29:38:88:ad:f7:95:d7:10:0c:
6b:4c:a5:70:d0:dd:45:96:bc:4f:28:0c:92:cb:7c:
37:c4:d7:23:f3:16:fa:7d:9c:22:b3:33:4e:56:e8:
5d:c1:57:29:d4:14:24:54:ba:ba:5b:e1:5a:b5:c8:
0c:e3:e1:4e:58:03:00:fb:d6:ae:6e:b3:f6:2b:a5:
0e:ed:f1:25:9e:7e:40:31:71:f7:29:c8:2c:6a:a1:
be:05:79:f9:ea:a4:11:78:ac:47:49:26:a8:40:01:
5b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:64:15:9D:34:8F:32:58:B6:DD:13:19:41:AE:1E:41:E0:8B:F6:86
X509v3 Authority Key Identifier:
keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136342e302f32322d3234203d3e203538333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.4.164.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:8c:9d:45:ac:d8:ce:05:79:ac:7c:8f:53:f5:62:07:33:b0:
62:cd:3a:ba:e1:f8:d9:c9:9b:6e:b3:67:18:e6:13:85:3f:bc:
48:c7:87:ce:12:1d:b3:7a:1b:b9:95:fc:24:81:27:bb:79:af:
21:d0:0f:f8:02:8f:69:ff:c5:87:ab:ec:b9:15:76:63:df:f6:
93:b3:bd:f1:43:df:1e:d2:b6:1b:d5:05:f6:92:49:59:1d:91:
f7:c2:60:24:82:05:9d:12:55:46:df:a7:2f:90:2b:ba:0d:70:
52:1c:ce:02:f2:22:48:c1:40:2f:57:82:c0:57:b1:e5:97:1d:
68:ac:df:05:6e:64:25:39:b0:c6:6b:2c:f3:dd:5d:99:ef:81:
f6:2d:5c:47:aa:3a:d5:65:1d:38:ed:9a:aa:88:d1:21:10:26:
7d:5c:d1:6b:67:d5:4f:21:e9:fa:29:e2:f6:50:d8:56:28:be:
f8:ac:b7:89:e9:e8:75:a4:91:ea:c9:2f:0d:dc:de:00:df:01:
18:ad:59:ab:ae:8b:1e:5d:28:ef:cb:84:fe:dd:44:eb:d8:09:
82:46:9f:4f:88:6f:7c:41:24:65:94:a5:e1:8a:df:65:33:8f:
6c:6d:e9:cc:7c:cc:eb:1b:0f:fb:ba:25:c0:38:4f:eb:2d:b6:
e3:08:2c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 18:37:42 2025 by rpki-client