This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/3130332e33392e37312e302f32342d3234203d3e20313530323734.roa
File: 3130332e33392e37312e302f32342d3234203d3e20313530323734.roa (raw, json)
Hash identifier: vX/A9y9l7mDzRfDBjuCxoiwVgHmV7OjNWsTWxTukflI=
Subject key identifier: BF:8B:B9:B5:15:DA:88:82:F9:A2:10:35:9E:D6:9C:CB:25:E3:80:AB
Certificate issuer: /CN=9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B
Certificate serial: 78A2D98A0D6FB7468D0F5AA91391F53C0C2F76B3
Authority key identifier: 9F:FC:46:BA:A3:F1:95:22:AF:5B:DD:60:DF:7D:E9:2E:94:F5:AB:7B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/3130332e33392e37312e302f32342d3234203d3e20313530323734.roa
Signing time: Thu 20 Feb 2025 04:02:49 +0000
ROA not before: Thu 20 Feb 2025 03:57:49 +0000
ROA not after: Thu 19 Feb 2026 04:02:49 +0000
asID: 150274
IP address blocks: 103.39.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.crl
rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 20:44:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:a2:d9:8a:0d:6f:b7:46:8d:0f:5a:a9:13:91:f5:3c:0c:2f:76:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B
Validity
Not Before: Feb 20 03:57:49 2025 GMT
Not After : Feb 19 04:02:49 2026 GMT
Subject: CN=BF8BB9B515DA8882F9A210359ED69CCB25E380AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:64:f5:71:97:55:56:f0:65:9e:32:aa:1d:d4:
a1:73:ed:57:0f:a9:a7:bc:10:d2:2e:e2:d1:72:ae:
57:30:5b:3c:41:57:b8:60:f9:11:9d:53:b7:76:03:
05:ac:af:5a:76:7b:7c:fa:86:36:df:c4:4c:47:74:
3b:f4:eb:73:42:26:c8:17:65:a5:5c:a0:0b:8a:1b:
04:0c:6f:e5:91:9c:18:9e:36:ad:ff:4c:c5:3c:32:
ca:28:32:f9:49:66:de:bf:be:33:13:ae:97:5e:69:
81:ae:83:cc:bf:96:4e:b5:1f:1a:96:20:27:f8:8b:
2a:10:44:f0:f3:ca:41:d9:bb:bb:0d:90:1e:c2:f6:
83:10:49:50:59:6b:c6:06:05:2b:d6:e5:8a:e6:07:
3f:2d:87:a0:a9:3d:1d:a7:5a:e0:49:12:24:b5:a0:
3a:fe:f0:10:01:ec:29:a4:c6:6e:32:56:87:ac:dd:
b4:9b:85:a5:4d:5a:36:53:1b:40:03:b3:f7:e6:7e:
8e:98:25:a8:5e:3b:69:df:78:c1:e3:2f:2b:9a:34:
9e:08:22:27:db:6b:55:27:d5:04:09:1b:0e:ea:2f:
51:d2:21:ba:8e:39:3c:d9:7d:36:2c:a6:a2:17:d3:
44:0b:ed:21:14:f9:1f:ed:3f:27:ed:50:4c:b6:24:
4e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8B:B9:B5:15:DA:88:82:F9:A2:10:35:9E:D6:9C:CB:25:E3:80:AB
X509v3 Authority Key Identifier:
keyid:9F:FC:46:BA:A3:F1:95:22:AF:5B:DD:60:DF:7D:E9:2E:94:F5:AB:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/3130332e33392e37312e302f32342d3234203d3e20313530323734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.39.71.0/24
Signature Algorithm: sha256WithRSAEncryption
16:df:1e:f6:87:15:d7:4f:a6:35:00:a7:28:5f:92:01:52:a0:
6e:48:17:6d:b4:50:e8:3d:59:16:7e:f2:61:10:ab:2c:c5:0a:
ea:a5:d7:43:4d:29:d3:b4:38:e0:3a:d3:69:8c:83:f7:9d:25:
24:9a:14:57:4f:ae:bc:0b:a3:46:d5:f9:4e:d5:38:41:0a:1d:
69:d5:c8:b2:af:38:5c:5d:72:43:e4:bd:1b:9a:cf:7c:c0:ac:
43:2d:d8:53:2f:a4:ef:32:0a:e4:bb:29:49:8f:fe:6f:a6:63:
76:39:50:97:18:89:81:97:fa:e5:a9:93:52:80:c7:65:9f:f1:
a3:c8:f8:05:33:c2:75:4c:5d:84:35:c7:7e:ef:03:29:b0:ce:
23:84:4b:3c:76:00:c9:99:39:cc:e1:17:3c:35:09:92:3d:9b:
b4:f1:b6:26:e7:55:65:5b:b5:65:de:62:af:ac:f9:bd:3a:4d:
43:d6:35:a8:42:f8:06:b8:f5:b8:fb:04:2e:e0:24:b3:f7:d5:
8d:52:f5:79:c8:58:84:a3:c9:5d:e3:ad:6b:5b:35:5b:2a:68:
25:90:b4:c0:5b:9b:65:49:9d:6f:82:a5:d3:5d:45:90:05:1a:
9b:38:f6:42:30:c4:19:49:01:d1:2d:63:ac:be:8a:74:c9:de:
17:6b:55:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:08:26 2025 by rpki-client