This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/3130332e3235352e3136342e302f32332d3233203d3e20313531393934.roa
File: 3130332e3235352e3136342e302f32332d3233203d3e20313531393934.roa (raw, json)
Hash identifier: sEObMlhse4CyL4oCmxoxoPLEseBLcDvbzgfCGrhTjW0=
Subject key identifier: E0:3F:42:20:3B:EC:FF:A3:F6:4F:DB:06:F2:59:B3:01:9E:B3:7E:1B
Certificate issuer: /CN=A4D9099C365D8BB9FA96A2A51FA4C61F105EF848
Certificate serial: 301F304F2400214111D616A62A49617BB8EF67DC
Authority key identifier: A4:D9:09:9C:36:5D:8B:B9:FA:96:A2:A5:1F:A4:C6:1F:10:5E:F8:48
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/3130332e3235352e3136342e302f32332d3233203d3e20313531393934.roa
Signing time: Mon 10 Mar 2025 16:00:42 +0000
ROA not before: Mon 10 Mar 2025 15:55:42 +0000
ROA not after: Mon 09 Mar 2026 16:00:42 +0000
asID: 151994
IP address blocks: 103.255.164.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.crl
rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Dec 2025 22:47:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:1f:30:4f:24:00:21:41:11:d6:16:a6:2a:49:61:7b:b8:ef:67:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A4D9099C365D8BB9FA96A2A51FA4C61F105EF848
Validity
Not Before: Mar 10 15:55:42 2025 GMT
Not After : Mar 9 16:00:42 2026 GMT
Subject: CN=E03F42203BECFFA3F64FDB06F259B3019EB37E1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8e:4c:f9:dc:ee:74:19:73:1b:0f:7c:af:5c:
bb:08:bf:49:24:ff:4a:1f:c0:c4:38:4d:3c:89:85:
15:c8:35:86:96:48:d7:78:03:70:cb:06:d7:12:42:
8f:fb:ff:7f:45:ec:c5:b9:a8:0b:4f:e6:f5:48:bc:
d6:99:2d:f8:de:fd:49:fd:40:cc:7f:95:d6:94:2b:
7a:e7:42:91:08:2e:12:34:f9:73:d9:cb:9f:31:84:
ed:6e:76:f4:f6:4a:dd:47:26:1b:be:47:f6:56:c6:
36:d9:e4:17:15:59:93:73:66:4e:54:0a:2d:7c:87:
a6:54:00:97:29:9c:5f:23:b8:54:6b:a6:64:0b:7a:
5e:8c:4f:7d:96:20:db:b9:c9:45:6c:2c:69:27:82:
c8:de:d3:b8:71:29:fe:1b:20:18:81:ba:1d:8e:1b:
1f:de:f1:6e:67:88:8e:4e:f5:0e:2c:4a:ef:2b:d9:
79:dc:86:1f:eb:3a:2d:d2:e6:e8:c2:ed:5f:1a:55:
04:27:ff:ab:49:3b:e3:37:e6:cc:ce:cc:dc:64:fc:
6c:d6:96:a8:a5:52:27:bc:1d:1a:11:db:ff:c2:e2:
9a:8f:4f:1d:f1:88:43:f1:d3:9f:b9:21:62:48:02:
9b:4e:bb:27:71:b2:6b:e9:45:18:ce:41:83:07:45:
7b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:3F:42:20:3B:EC:FF:A3:F6:4F:DB:06:F2:59:B3:01:9E:B3:7E:1B
X509v3 Authority Key Identifier:
keyid:A4:D9:09:9C:36:5D:8B:B9:FA:96:A2:A5:1F:A4:C6:1F:10:5E:F8:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/3130332e3235352e3136342e302f32332d3233203d3e20313531393934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.255.164.0/23
Signature Algorithm: sha256WithRSAEncryption
d4:f2:cf:8b:76:7d:08:dd:99:7e:5b:6b:a1:41:a7:4c:a5:e4:
fd:2f:46:2d:5e:e8:2b:4b:18:95:ee:85:89:60:a5:a3:eb:19:
6d:de:ae:61:b4:42:c6:2e:a9:72:04:e3:6d:46:ee:be:d9:0b:
5b:34:31:a7:1f:46:2f:a2:e0:20:97:06:cc:ea:dc:cb:8e:01:
f6:10:31:84:71:f7:ac:f8:86:85:91:56:42:91:7c:8f:12:3a:
54:7b:a2:5b:47:1e:60:c0:21:a0:28:c0:af:56:61:c3:98:88:
2d:70:07:9e:63:06:86:a0:b7:2b:2a:ef:07:b6:7e:6a:49:37:
4f:c1:3b:f7:5a:86:2f:66:74:10:5e:ef:5e:7a:d1:89:64:89:
10:27:18:59:23:2d:11:ab:89:27:b0:66:14:73:60:75:0f:47:
ac:77:44:29:39:ee:b7:dd:e1:8d:ae:4d:31:b6:02:28:22:c0:
49:c1:4b:5a:ca:d9:5e:f2:a0:c9:83:1c:92:8e:b6:b9:02:f3:
78:9b:30:61:31:7c:e2:03:14:c7:70:62:5a:63:45:14:d2:25:
61:c3:c5:77:55:5a:b2:9a:4d:1a:8d:a3:c7:c4:f5:21:34:ea:
17:83:b0:34:1b:e0:aa:17:39:a2:c4:b3:0b:54:db:be:5e:88:
c7:68:97:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:39:40 2025 by rpki-client