This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/3130332e3138352e33382e302f32332d3234203d3e20313339343536.roa
File: 3130332e3138352e33382e302f32332d3234203d3e20313339343536.roa (raw, json)
Hash identifier: KB1G1+0qfCddZUFEHNbpBoUfnLJXbrwxBEUZeryfQ/8=
Subject key identifier: D2:0F:4F:1B:CA:CB:7F:1A:67:FF:D9:E3:FB:29:24:61:2C:10:EE:EE
Certificate issuer: /CN=EA581458C8710B7F2862361DF5BE327D72423B7F
Certificate serial: 79E988322237DF543929BB7A0B688C1327F725EA
Authority key identifier: EA:58:14:58:C8:71:0B:7F:28:62:36:1D:F5:BE:32:7D:72:42:3B:7F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA581458C8710B7F2862361DF5BE327D72423B7F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/3130332e3138352e33382e302f32332d3234203d3e20313339343536.roa
Signing time: Tue 09 Dec 2025 05:03:22 +0000
ROA not before: Tue 09 Dec 2025 04:58:22 +0000
ROA not after: Tue 08 Dec 2026 05:03:22 +0000
asID: 139456
IP address blocks: 103.185.38.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/EA581458C8710B7F2862361DF5BE327D72423B7F.crl
rsync://repo-rpki.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/EA581458C8710B7F2862361DF5BE327D72423B7F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA581458C8710B7F2862361DF5BE327D72423B7F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 18:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:e9:88:32:22:37:df:54:39:29:bb:7a:0b:68:8c:13:27:f7:25:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA581458C8710B7F2862361DF5BE327D72423B7F
Validity
Not Before: Dec 9 04:58:22 2025 GMT
Not After : Dec 8 05:03:22 2026 GMT
Subject: CN=D20F4F1BCACB7F1A67FFD9E3FB2924612C10EEEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:82:1c:cc:d5:88:ed:aa:e7:06:13:2e:be:f4:
f8:14:b2:bc:01:d5:07:0b:0b:ae:4c:d9:08:4a:00:
ad:43:e3:35:03:db:72:22:4e:1e:41:d4:5c:d3:e8:
fa:ba:8d:9e:42:cb:31:43:6d:b5:af:e8:b2:7e:d1:
3e:2b:6a:c9:22:00:23:df:04:81:ed:d6:af:6b:62:
3d:28:6c:69:1e:e6:f1:f3:21:84:7f:a3:e9:f8:97:
9b:55:49:26:a2:99:b0:be:1a:f4:84:82:af:59:79:
f2:6b:b0:10:c5:85:4e:96:01:0e:76:3d:95:7c:79:
83:60:84:f9:46:8a:78:aa:05:00:35:c1:51:de:76:
42:c0:0d:a6:cf:82:c8:c5:a1:06:b6:b8:74:cc:77:
50:cb:94:87:eb:c8:71:fa:eb:c2:c9:41:dc:2c:41:
67:46:f9:5d:0c:57:09:54:7c:91:91:fd:a6:09:72:
24:f7:da:53:28:ed:f6:79:d7:b8:bd:03:f2:1a:98:
38:41:75:69:bd:bc:fc:75:af:64:aa:5f:90:01:19:
4a:2d:7e:9e:1e:24:84:10:b9:54:8d:82:8f:2d:a0:
2e:06:0b:1b:60:aa:b5:a9:5d:fa:88:25:a2:8f:e2:
d0:fc:f8:3b:90:0f:db:da:c8:4a:80:28:18:82:40:
ef:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0F:4F:1B:CA:CB:7F:1A:67:FF:D9:E3:FB:29:24:61:2C:10:EE:EE
X509v3 Authority Key Identifier:
keyid:EA:58:14:58:C8:71:0B:7F:28:62:36:1D:F5:BE:32:7D:72:42:3B:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/EA581458C8710B7F2862361DF5BE327D72423B7F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA581458C8710B7F2862361DF5BE327D72423B7F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/3130332e3138352e33382e302f32332d3234203d3e20313339343536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.185.38.0/23
Signature Algorithm: sha256WithRSAEncryption
ce:56:79:af:e6:9f:f6:ef:7b:dc:ab:7b:c3:6a:ca:ba:8b:38:
bd:69:d6:c4:e9:9b:1d:4b:bc:ca:3b:10:15:8a:27:73:fe:be:
1a:97:d7:b2:57:b0:2a:8a:7d:cf:cd:75:bd:6f:d1:17:47:64:
1d:79:3d:0d:20:ee:22:9b:18:f7:d8:7c:8b:8a:10:eb:9a:aa:
52:fe:a1:a3:db:2b:0b:d3:9d:fd:f4:84:7a:a2:36:ae:44:39:
34:41:2e:f6:f7:ef:29:41:2a:c4:a5:ee:6e:00:13:bf:d4:24:
9d:c4:ef:3a:7f:6b:fe:38:09:03:2d:8c:e9:1d:dc:f9:a5:0a:
20:49:04:b6:f0:5f:ad:68:cd:d0:41:df:a6:35:cf:c9:f6:bf:
a3:65:0f:db:b6:61:8e:16:c2:ce:8c:3a:57:f8:91:0f:8b:04:
bd:4e:3f:be:5d:17:32:94:09:56:48:ce:15:a7:7e:c2:30:65:
b0:02:7e:a4:7a:9d:5d:ef:f6:67:68:76:b0:84:c4:b7:1b:f7:
07:fc:61:2f:8f:f1:ea:62:0e:33:91:ce:e2:80:b7:8d:7f:5d:
7f:7c:fa:e8:ee:f3:29:85:53:01:64:9a:e5:ed:3b:c4:ea:28:
0a:82:75:76:35:a7:93:ec:48:a2:ea:98:19:90:22:27:b3:bb:
35:77:83:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 14:36:22 2025 by rpki-client