This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/3130332e3137352e33382e302f32332d3233203d3e20323135373237.roa
File: 3130332e3137352e33382e302f32332d3233203d3e20323135373237.roa (raw, json)
Hash identifier: joRtsTzluk9HUnqI3+6HvaybpCq3OAhZ2eSjEhqFFeA=
Subject key identifier: F1:30:F7:C0:FF:D2:56:0B:C4:98:14:DB:B6:CF:A3:86:4D:E1:34:5D
Certificate issuer: /CN=E014E6ED03537E453565D06E7B8A31AA8A0525A1
Certificate serial: 5037B685D95758D88984F231356AE7B512DC6DAE
Authority key identifier: E0:14:E6:ED:03:53:7E:45:35:65:D0:6E:7B:8A:31:AA:8A:05:25:A1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/3130332e3137352e33382e302f32332d3233203d3e20323135373237.roa
Signing time: Tue 11 Nov 2025 16:59:41 +0000
ROA not before: Tue 11 Nov 2025 16:54:41 +0000
ROA not after: Tue 10 Nov 2026 16:59:41 +0000
asID: 215727
IP address blocks: 103.175.38.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl
rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 03:23:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:37:b6:85:d9:57:58:d8:89:84:f2:31:35:6a:e7:b5:12:dc:6d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E014E6ED03537E453565D06E7B8A31AA8A0525A1
Validity
Not Before: Nov 11 16:54:41 2025 GMT
Not After : Nov 10 16:59:41 2026 GMT
Subject: CN=F130F7C0FFD2560BC49814DBB6CFA3864DE1345D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ca:9d:52:68:3d:80:e5:85:de:a1:76:f8:7c:
5b:b6:bd:32:1e:fb:10:b7:dd:1d:9e:99:e2:87:be:
ca:d6:d2:e5:d9:94:10:17:fa:f2:50:33:af:c9:cf:
44:b6:cf:6c:ff:5c:9b:6a:26:3d:ab:86:dc:4d:d3:
4f:ba:0d:2b:ab:36:df:24:9e:51:30:ff:0b:6e:93:
e9:bc:5c:64:6a:8d:af:e1:89:88:f0:b3:98:af:f7:
88:55:f1:44:bb:8d:a0:1d:cc:0c:5b:f5:35:9b:74:
df:8f:92:c9:e6:bc:9a:11:a4:a8:db:0a:f7:1c:32:
ad:9d:40:88:9b:6b:0e:77:9d:07:3a:ab:27:58:c9:
a7:ba:1c:73:6e:4d:cb:2f:22:75:85:d1:4d:32:3f:
84:06:f9:0b:56:34:d3:89:07:d0:a7:77:9f:65:0a:
d6:cc:2d:99:40:7d:9e:20:35:d3:ab:e5:99:74:b7:
26:03:db:98:ab:0c:c6:c6:54:24:86:03:ab:aa:33:
93:35:49:32:ca:d0:30:d5:9d:90:ca:ca:72:1f:c1:
21:c9:40:01:f6:34:09:52:83:41:40:75:67:c5:ea:
44:fc:c3:f1:13:f2:d0:b5:2f:7b:5f:04:22:25:3d:
45:8e:ce:d4:88:31:c6:e2:da:44:68:72:1d:28:78:
3e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:30:F7:C0:FF:D2:56:0B:C4:98:14:DB:B6:CF:A3:86:4D:E1:34:5D
X509v3 Authority Key Identifier:
keyid:E0:14:E6:ED:03:53:7E:45:35:65:D0:6E:7B:8A:31:AA:8A:05:25:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/3130332e3137352e33382e302f32332d3233203d3e20323135373237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.175.38.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:d5:1f:e6:d7:aa:de:aa:d2:7c:96:85:c8:64:b2:c0:68:84:
7f:38:fb:33:83:65:5d:d1:27:20:67:35:8e:62:6b:87:67:6a:
ed:63:9a:66:cd:8f:af:f9:21:79:47:af:ef:12:58:34:fe:69:
f6:29:39:02:91:78:4e:af:df:a7:9c:74:29:49:d4:84:31:5a:
f9:b7:36:62:1c:d1:5a:01:b6:c9:8f:06:86:c1:66:b3:41:46:
77:55:41:75:bf:27:31:37:3c:bc:80:b9:78:6f:8d:09:ca:ca:
16:4e:41:f5:b4:32:9d:50:76:0b:12:1a:70:90:bf:68:1f:37:
eb:e5:d9:1f:e6:ef:22:d3:49:f8:22:f6:e6:af:d1:cc:92:ad:
ac:b1:d4:f4:66:18:7e:da:88:65:cb:d2:59:07:c2:c2:6e:37:
57:65:ec:1b:29:b7:b2:0b:a1:7e:ca:68:2e:b7:12:a8:5d:83:
70:68:f7:b5:9e:74:73:7c:5a:92:39:a3:d0:35:82:6d:f3:68:
14:94:62:18:d3:ae:54:dc:6b:4d:de:22:86:0d:d2:5c:92:4b:
97:d1:e3:fe:97:9c:81:22:d3:1b:3c:db:2c:7d:18:09:c5:08:
f2:fc:89:46:64:b1:3a:3f:6d:25:23:ca:ce:61:f9:2b:a8:54:
82:4d:b8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:39:35 2025 by rpki-client