This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/3130332e3133342e31392e302f32342d3234203d3e20313332363334.roa
File: 3130332e3133342e31392e302f32342d3234203d3e20313332363334.roa (raw, json)
Hash identifier: YCkWOxawN0RGuY2hzkUip8qxnY1jDAzpOn1kRfTzsBQ=
Subject key identifier: D1:3E:E3:40:AF:89:BD:14:56:97:AE:24:0C:1B:4E:C7:AF:5A:8E:93
Certificate issuer: /CN=9FC1BED6B099F4E57BAD9FA6F092421927472311
Certificate serial: 7CB4C2A0F5C16AC7D279388229CD9C6945FE34A2
Authority key identifier: 9F:C1:BE:D6:B0:99:F4:E5:7B:AD:9F:A6:F0:92:42:19:27:47:23:11
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FC1BED6B099F4E57BAD9FA6F092421927472311.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/3130332e3133342e31392e302f32342d3234203d3e20313332363334.roa
Signing time: Thu 11 Dec 2025 10:00:00 +0000
ROA not before: Thu 11 Dec 2025 09:55:00 +0000
ROA not after: Thu 10 Dec 2026 10:00:00 +0000
asID: 132634
IP address blocks: 103.134.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.crl
rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FC1BED6B099F4E57BAD9FA6F092421927472311.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Dec 2025 00:27:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:b4:c2:a0:f5:c1:6a:c7:d2:79:38:82:29:cd:9c:69:45:fe:34:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9FC1BED6B099F4E57BAD9FA6F092421927472311
Validity
Not Before: Dec 11 09:55:00 2025 GMT
Not After : Dec 10 10:00:00 2026 GMT
Subject: CN=D13EE340AF89BD145697AE240C1B4EC7AF5A8E93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e1:21:2d:93:b1:ed:66:b4:58:92:00:a5:50:
21:cc:60:e8:0d:e8:99:fe:c8:86:66:aa:2d:a9:5f:
d3:71:01:c2:55:dc:2b:22:06:29:9c:da:02:7c:55:
ff:d1:54:21:f6:96:42:57:cb:f1:7a:d0:41:78:01:
02:fe:11:0e:b6:2f:10:47:ad:a6:ec:22:32:be:41:
44:85:ba:58:10:cc:54:79:98:2b:7c:b4:7d:cf:41:
29:3e:dd:7f:f7:85:df:72:45:06:69:4c:8f:b9:7a:
e4:53:03:5e:c7:1a:91:49:85:f6:9f:80:61:bc:32:
24:7d:fb:57:87:06:74:ef:d9:92:be:5d:71:55:2f:
45:7b:36:3e:c7:a4:3e:b4:9b:96:ce:b9:d7:1e:5c:
6c:9e:d1:82:cb:67:2f:62:a1:ad:05:fd:50:5a:f5:
3d:50:62:09:b2:49:ff:0e:31:ed:8d:e6:13:70:61:
cf:fd:8c:de:1f:37:65:01:3d:cd:96:44:fa:ed:e1:
5c:3f:b1:99:4f:60:fb:81:73:1a:c2:48:44:d3:b4:
33:b4:3e:23:05:0e:1d:47:ce:38:6e:b9:ba:71:7a:
db:1e:86:bd:4e:07:34:b3:76:5c:48:c4:52:9e:43:
4a:48:fd:b0:bf:2a:4c:16:ff:79:14:fc:e2:af:91:
43:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:3E:E3:40:AF:89:BD:14:56:97:AE:24:0C:1B:4E:C7:AF:5A:8E:93
X509v3 Authority Key Identifier:
keyid:9F:C1:BE:D6:B0:99:F4:E5:7B:AD:9F:A6:F0:92:42:19:27:47:23:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FC1BED6B099F4E57BAD9FA6F092421927472311.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/3130332e3133342e31392e302f32342d3234203d3e20313332363334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.134.19.0/24
Signature Algorithm: sha256WithRSAEncryption
db:95:cd:99:02:dc:88:f4:c3:a9:ee:61:12:19:31:2a:41:11:
8a:47:88:2f:26:4c:31:28:ef:e6:e2:ad:97:1c:4e:12:f2:ed:
bc:f5:8f:02:b5:a5:32:c0:0b:2a:5b:2b:0a:6c:7b:13:9b:8f:
fd:57:49:69:c9:59:85:dc:2d:3d:17:e6:eb:13:66:15:92:11:
8e:60:6d:7f:23:ca:e0:19:76:36:01:59:7f:3d:ec:ec:2b:12:
c0:16:79:f4:03:36:a6:a0:7c:38:b5:91:b7:4a:cf:52:3d:97:
d0:ec:2e:8b:7a:e0:4c:bb:1e:0d:ff:82:1c:55:ea:2a:28:6f:
b9:e5:90:55:64:40:e7:78:e3:ab:10:f4:16:7f:47:45:5b:ea:
a6:80:24:24:e6:70:30:5a:bb:16:b8:86:ca:4f:f0:36:03:bf:
bd:cd:f9:fd:97:00:02:52:60:f3:dd:7e:3e:15:13:d0:7a:cb:
ee:ab:a9:02:db:31:76:bf:a7:0b:0b:9a:0c:39:1a:89:50:70:
66:e1:d2:20:6b:6a:d4:54:6a:33:80:12:44:7a:9d:ed:89:dc:
74:4a:db:a6:fa:f3:87:88:9e:34:da:14:2d:4e:71:54:67:01:
9d:6e:f1:ec:cb:18:c7:31:1d:af:1b:7f:41:ce:dd:cd:31:d5:
26:06:3b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 12:23:37 2025 by rpki-client