This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/3130332e3133342e31382e302f32342d3234203d3e20313332363334.roa
File: 3130332e3133342e31382e302f32342d3234203d3e20313332363334.roa (raw, json)
Hash identifier: AttvGV4O/1B/aUmLf5/YCnus3/1ekcJKD7ekYUKTwvA=
Subject key identifier: BE:DC:0B:96:C8:A3:2F:FA:15:2E:B9:9E:DE:95:7F:AE:75:0E:A5:9C
Certificate issuer: /CN=9FC1BED6B099F4E57BAD9FA6F092421927472311
Certificate serial: 71787FC18516AD24351655E21903318F059D256E
Authority key identifier: 9F:C1:BE:D6:B0:99:F4:E5:7B:AD:9F:A6:F0:92:42:19:27:47:23:11
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FC1BED6B099F4E57BAD9FA6F092421927472311.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/3130332e3133342e31382e302f32342d3234203d3e20313332363334.roa
Signing time: Thu 11 Dec 2025 10:00:00 +0000
ROA not before: Thu 11 Dec 2025 09:55:00 +0000
ROA not after: Thu 10 Dec 2026 10:00:00 +0000
asID: 132634
IP address blocks: 103.134.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.crl
rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FC1BED6B099F4E57BAD9FA6F092421927472311.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Dec 2025 00:27:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:78:7f:c1:85:16:ad:24:35:16:55:e2:19:03:31:8f:05:9d:25:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9FC1BED6B099F4E57BAD9FA6F092421927472311
Validity
Not Before: Dec 11 09:55:00 2025 GMT
Not After : Dec 10 10:00:00 2026 GMT
Subject: CN=BEDC0B96C8A32FFA152EB99EDE957FAE750EA59C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0f:36:70:90:be:0a:69:6a:c2:5e:02:8c:66:
40:00:c2:c1:8e:92:f1:8c:7b:48:0a:fd:e2:8b:e7:
9d:b3:f1:c8:c9:11:ff:ea:d5:18:f8:1c:8f:ea:67:
f4:90:24:4b:5d:53:21:a0:1c:61:97:66:ec:ec:73:
5a:0c:1a:0a:db:95:5d:fc:80:00:ed:86:c2:15:b3:
b0:0f:6c:15:d9:fd:49:f6:4d:e3:66:95:8f:ce:77:
4b:0d:91:7f:4c:27:7e:06:17:36:25:00:ef:fb:49:
0d:3a:88:d1:ec:39:e6:0b:be:91:bc:52:a8:f2:17:
3c:7a:22:1e:af:15:4f:49:3f:90:37:fe:c3:f2:c1:
aa:68:b5:9c:78:98:bd:63:b6:9e:43:4c:4a:44:bd:
09:4a:24:e3:f8:f8:eb:03:db:a5:86:5c:3c:7b:53:
4e:43:c6:db:54:08:83:25:18:70:f0:0d:f1:ad:5e:
45:c5:71:90:f1:ed:19:90:4d:59:dc:9b:05:d9:d7:
64:9f:8e:50:40:d6:43:ee:73:63:38:d4:82:7f:16:
0b:e8:a6:bb:ee:68:2c:c8:b5:38:1b:03:bc:6d:34:
b9:57:76:a3:10:fa:83:24:59:7f:8b:a5:71:68:95:
fc:51:32:41:50:82:73:de:f0:96:4d:4e:9c:70:57:
1f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DC:0B:96:C8:A3:2F:FA:15:2E:B9:9E:DE:95:7F:AE:75:0E:A5:9C
X509v3 Authority Key Identifier:
keyid:9F:C1:BE:D6:B0:99:F4:E5:7B:AD:9F:A6:F0:92:42:19:27:47:23:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FC1BED6B099F4E57BAD9FA6F092421927472311.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/3130332e3133342e31382e302f32342d3234203d3e20313332363334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.134.18.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:8f:ce:14:c9:a6:06:dd:6b:f1:31:bf:14:c2:ab:49:a4:e1:
d6:1f:cc:a9:7d:af:47:bb:10:2d:2a:3a:8c:2b:a6:28:1b:02:
50:d2:97:00:e6:f1:1d:f6:56:6c:72:04:75:0e:ec:37:15:76:
f9:7e:4c:7b:d8:32:50:f7:1c:3e:ff:d8:57:ce:5e:f5:63:95:
14:b8:0c:c5:ab:3d:ce:8d:5c:db:4a:e8:be:f9:79:c6:1f:62:
54:96:48:3d:ce:67:a5:02:84:49:61:11:f3:fb:1c:08:ac:22:
b1:73:af:40:27:83:ee:64:d2:fb:78:06:b2:54:75:fa:ff:08:
78:9f:81:be:65:48:17:91:98:06:ad:96:ff:6e:09:bc:f0:6a:
eb:95:45:b2:06:ff:f2:2e:65:72:5c:88:aa:c3:b5:93:1c:34:
0c:01:78:b0:03:bd:9f:a5:b0:3b:a8:90:6f:d5:21:50:9f:55:
fd:cb:41:18:58:4e:f8:34:0a:52:a3:71:9e:74:f5:1d:61:f3:
56:d6:cc:c0:b4:b1:37:db:83:35:1c:93:65:ec:3e:88:59:45:
b7:ed:cc:e6:e4:09:c8:63:ea:f1:83:17:7d:8f:ce:61:37:a5:
93:fe:45:2b:87:d0:35:26:db:64:b4:19:4b:5f:e3:b3:59:0d:
13:75:56:bf
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUcXh/wYUWrSQ1FlXiGQMxjwWdJW4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUZDMUJFRDZCMDk5RjRFNTdCQUQ5RkE2RjA5MjQyMTky
NzQ3MjMxMTAeFw0yNTEyMTEwOTU1MDBaFw0yNjEyMTAxMDAwMDBaMDMxMTAvBgNV
BAMTKEJFREMwQjk2QzhBMzJGRkExNTJFQjk5RURFOTU3RkFFNzUwRUE1OUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnDzZwkL4KaWrCXgKMZkAAwsGO
kvGMe0gK/eKL552z8cjJEf/q1Rj4HI/qZ/SQJEtdUyGgHGGXZuzsc1oMGgrblV38
gADthsIVs7APbBXZ/Un2TeNmlY/Od0sNkX9MJ34GFzYlAO/7SQ06iNHsOeYLvpG8
UqjyFzx6Ih6vFU9JP5A3/sPywapotZx4mL1jtp5DTEpEvQlKJOP4+OsD26WGXDx7
U05DxttUCIMlGHDwDfGtXkXFcZDx7RmQTVncmwXZ12SfjlBA1kPuc2M41IJ/Fgvo
prvuaCzItTgbA7xtNLlXdqMQ+oMkWX+LpXFolfxRMkFQgnPe8JZNTpxwVx8pAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUvtwLlsijL/oVLrme3pV/rnUOpZwwHwYDVR0j
BBgwFoAUn8G+1rCZ9OV7rZ+m8JJCGSdHIxEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
ZjAwMjI4Zi02ZTI1LTRjOTYtOWNlNS0yZDUwMjI5YTFkMTgvMC85RkMxQkVENkIw
OTlGNEU1N0JBRDlGQTZGMDkyNDIxOTI3NDcyMzExLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUZDMUJFRDZCMDk5RjRFNTdCQUQ5RkE2RjA5MjQyMTkyNzQ3
MjMxMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBmMDAyMjhmLTZlMjUtNGM5Ni05
Y2U1LTJkNTAyMjlhMWQxOC8wLzMxMzAzMzJlMzEzMzM0MmUzMTM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzMyMzYzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4YSMA0GCSqG
SIb3DQEBCwUAA4IBAQDQj84UyaYG3WvxMb8UwqtJpOHWH8ypfa9HuxAtKjqMK6Yo
GwJQ0pcA5vEd9lZscgR1Duw3FXb5fkx72DJQ9xw+/9hXzl71Y5UUuAzFqz3OjVzb
Sui++XnGH2JUlkg9zmelAoRJYRHz+xwIrCKxc69AJ4PuZNL7eAayVHX6/wh4n4G+
ZUgXkZgGrZb/bgm88GrrlUWyBv/yLmVyXIiqw7WTHDQMAXiwA72fpbA7qJBv1SFQ
n1X9y0EYWE74NApSo3GedPUdYfNW1szAtLE324M1HJNl7D6IWUW37czm5AnIY+rx
gxd9j85hN6WT/kUrh9A1JttktBlLX+OzWQ0TdVa/
-----END CERTIFICATE-----
Generated at Tue Dec 16 12:23:38 2025 by rpki-client