This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/3130332e3134302e3138382e302f32342d3234203d3e20313338383831.roa
File: 3130332e3134302e3138382e302f32342d3234203d3e20313338383831.roa (raw, json)
Hash identifier: d7I2swOfny5ecV9M83MtKittywnggYfHKo91PVbmn6Q=
Subject key identifier: AF:F9:78:E7:57:6E:F1:6D:29:ED:0C:74:FF:1A:21:AD:1F:4D:38:EC
Certificate issuer: /CN=02AC8DC3B003059A7040EDCFC881D9C93B064C18
Certificate serial: 0FB21191EE3069F0EA590B5A31A3D7556098FD4A
Authority key identifier: 02:AC:8D:C3:B0:03:05:9A:70:40:ED:CF:C8:81:D9:C9:3B:06:4C:18
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/3130332e3134302e3138382e302f32342d3234203d3e20313338383831.roa
Signing time: Sun 08 Jun 2025 05:00:01 +0000
ROA not before: Sun 08 Jun 2025 04:55:01 +0000
ROA not after: Sun 07 Jun 2026 05:00:01 +0000
asID: 138881
IP address blocks: 103.140.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl
rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Dec 2025 22:47:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:b2:11:91:ee:30:69:f0:ea:59:0b:5a:31:a3:d7:55:60:98:fd:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02AC8DC3B003059A7040EDCFC881D9C93B064C18
Validity
Not Before: Jun 8 04:55:01 2025 GMT
Not After : Jun 7 05:00:01 2026 GMT
Subject: CN=AFF978E7576EF16D29ED0C74FF1A21AD1F4D38EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4b:1b:3c:58:9a:1d:7c:60:15:1b:cf:26:15:
be:0a:79:a3:fa:66:8e:2f:2b:ec:30:5c:82:ab:e9:
c7:ff:ef:b8:f3:7c:00:5f:90:1c:c8:3e:08:31:08:
a2:9a:75:d0:5d:e5:4b:50:3f:98:d9:25:43:1b:6f:
32:58:b9:92:94:25:3a:e6:33:07:87:61:9a:eb:9a:
cd:e1:99:bb:9e:5e:04:3c:fc:f8:ca:e7:8f:fa:81:
1b:06:a1:77:74:29:26:18:48:fa:9a:88:17:dd:59:
24:e7:66:87:19:6b:88:29:ec:a2:25:2f:01:77:fd:
fc:b0:9c:31:b4:95:27:eb:f6:9b:ee:90:5f:ad:eb:
c0:43:39:1f:cb:78:f5:d6:b3:db:f4:14:d6:38:51:
74:f5:f3:6d:4c:67:cd:56:32:2d:72:16:4a:e3:9d:
4f:2e:42:c7:38:96:6e:fb:3e:6b:84:44:a6:b8:6c:
d7:4e:c1:e3:e6:c9:b4:95:f8:5f:0e:0c:53:37:9a:
91:32:19:88:be:73:35:85:b4:73:15:e1:20:03:de:
1d:56:f2:35:48:01:8b:75:c5:0b:2a:61:87:54:2d:
fb:09:a7:75:7b:57:05:88:44:d5:ac:db:f4:e5:10:
3d:b8:5f:54:52:0a:de:e3:ff:19:5f:26:ca:e1:71:
32:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F9:78:E7:57:6E:F1:6D:29:ED:0C:74:FF:1A:21:AD:1F:4D:38:EC
X509v3 Authority Key Identifier:
keyid:02:AC:8D:C3:B0:03:05:9A:70:40:ED:CF:C8:81:D9:C9:3B:06:4C:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/3130332e3134302e3138382e302f32342d3234203d3e20313338383831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.140.188.0/24
Signature Algorithm: sha256WithRSAEncryption
75:54:ea:25:72:71:77:2f:ef:57:43:a1:11:ac:4b:7d:fc:c7:
e7:1e:44:79:2d:68:00:43:06:ca:71:b9:9e:bf:ac:c5:b0:7d:
96:c9:e8:a4:c7:c0:a8:98:58:07:e6:fc:ed:64:ef:ea:42:0a:
ba:d1:be:1b:cc:d8:70:db:8e:68:d9:9d:39:c8:d8:23:56:57:
61:8e:e6:cb:ef:1a:f9:b6:29:19:cc:85:99:5d:06:7c:8a:b5:
09:4c:5b:19:f3:b4:21:34:22:5d:e5:41:eb:93:a1:13:79:37:
27:55:1c:7f:7c:56:dc:37:f2:02:8b:87:25:2f:f4:e2:7d:31:
6f:e1:e1:00:a1:3e:b6:f1:67:78:c1:cc:c7:02:66:b4:1b:30:
98:18:a8:0b:25:6f:27:04:c4:6b:a3:ce:af:d6:c5:ea:0f:a1:
32:d0:89:68:02:be:ab:79:a3:90:13:98:a6:ab:0d:2c:c8:31:
b9:e3:7e:8b:9d:ff:a1:65:82:15:7d:95:ed:2a:85:b8:91:28:
42:2a:97:c0:aa:70:43:f6:35:87:6b:4a:88:5e:22:6f:bc:60:
b5:ad:be:e7:7d:ef:72:45:e2:9b:e5:c4:c3:86:10:d3:80:03:
aa:5d:18:ce:e4:85:42:62:41:a7:c5:08:ba:bb:9f:b0:2f:fa:
44:00:1e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:11:54 2025 by rpki-client