This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/3130332e34362e342e302f32332d3233203d3e20313530343630.roa
File: 3130332e34362e342e302f32332d3233203d3e20313530343630.roa (raw, json)
Hash identifier: NeZfhHFd7F8kh7DbLUw4HnOkopSvleBfZOjwOjuAcxQ=
Subject key identifier: 1D:4D:04:FA:DD:70:CF:36:54:5E:BD:A0:E2:D4:8D:F9:45:EA:76:F9
Certificate issuer: /CN=7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953
Certificate serial: 5FED0D0391FC58646CF978D724BA93F039464797
Authority key identifier: 7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/3130332e34362e342e302f32332d3233203d3e20313530343630.roa
Signing time: Sat 25 Oct 2025 08:00:01 +0000
ROA not before: Sat 25 Oct 2025 07:55:01 +0000
ROA not after: Sat 24 Oct 2026 08:00:01 +0000
asID: 150460
IP address blocks: 103.46.4.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl
rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 02:16:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:ed:0d:03:91:fc:58:64:6c:f9:78:d7:24:ba:93:f0:39:46:47:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953
Validity
Not Before: Oct 25 07:55:01 2025 GMT
Not After : Oct 24 08:00:01 2026 GMT
Subject: CN=1D4D04FADD70CF36545EBDA0E2D48DF945EA76F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:31:c8:c3:e6:15:30:52:cd:29:65:61:08:d2:
86:ff:70:cd:b0:3c:7e:cc:2d:76:b0:24:45:c7:c0:
97:49:04:dc:79:1f:88:6a:3a:b4:7b:19:e1:ba:4f:
e1:b5:2a:d9:c6:d3:6a:b4:54:0b:bd:e4:24:7a:36:
af:26:fb:8b:18:dd:8b:a4:6a:71:8a:04:59:6f:fd:
e1:55:91:f3:89:33:6b:9a:32:f2:a0:ba:ff:a1:fc:
39:5a:8b:aa:fa:8f:1d:e3:3a:0f:79:1b:65:65:55:
07:76:2c:a1:28:82:f7:e5:a1:0e:a4:12:f7:42:a1:
84:9d:c6:bd:ee:ce:89:01:c8:f6:4e:6f:44:23:6b:
12:20:b2:ff:eb:a3:38:45:3c:dc:ac:31:f9:5b:f3:
95:66:e2:fc:63:1b:d4:e0:47:ff:53:d7:45:96:54:
d0:cc:f6:18:8b:ed:b7:7a:b0:61:58:c6:69:99:b2:
c4:f3:59:f8:91:19:67:78:9a:18:ad:95:65:6b:3b:
f4:94:b5:ff:88:00:0c:38:cf:c9:72:28:98:92:55:
06:b0:5a:fc:ba:e8:f3:88:87:39:2b:22:ae:36:8a:
fb:a6:bd:36:da:e9:77:49:ce:d6:a0:ff:ec:f4:8c:
ac:89:9f:88:e8:58:35:55:0c:84:29:91:4c:3b:00:
d5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:4D:04:FA:DD:70:CF:36:54:5E:BD:A0:E2:D4:8D:F9:45:EA:76:F9
X509v3 Authority Key Identifier:
keyid:7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/3130332e34362e342e302f32332d3233203d3e20313530343630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.46.4.0/23
Signature Algorithm: sha256WithRSAEncryption
40:38:c1:ab:90:0a:5b:07:a9:05:2e:ef:d1:8d:47:85:bf:ba:
e6:8b:b2:18:bc:d0:ba:5f:40:06:d4:b9:4b:5b:ff:f3:cc:ea:
41:4b:a4:11:03:52:43:91:f8:f1:ae:5b:d8:ec:00:b7:b2:2d:
81:5f:45:d0:5b:86:0a:97:ef:8b:66:20:ab:dd:2c:2b:9e:ad:
6e:18:ee:ea:18:d9:8b:30:88:a3:6f:02:b1:e5:8e:a5:8d:58:
55:ad:b9:eb:12:47:6f:b4:b8:2a:31:59:b9:2d:f6:1f:d0:92:
22:71:bb:36:9b:3e:93:e8:22:2f:f4:e1:41:a7:72:83:c4:e8:
da:9e:f4:08:2d:b7:b5:85:1b:5e:b8:c4:ad:32:5d:81:fd:c2:
ea:9e:5f:64:e9:5c:65:a0:a4:4f:a8:b0:c8:ec:f4:24:04:fc:
f2:f7:e0:a4:12:f3:ab:03:bf:97:30:a8:56:86:e3:df:2e:4d:
4e:92:b3:4d:84:7c:30:28:30:03:f4:db:69:c8:18:19:c5:a6:
2c:05:04:93:cc:ec:dd:13:2a:00:89:d1:ee:0f:20:e4:05:a1:
d0:05:76:9d:7e:1a:ac:a1:09:82:fe:5f:9a:03:8b:31:6a:bb:
aa:ce:7d:d0:c4:fb:43:ee:23:25:f2:f1:e9:86:a7:63:26:66:
08:53:fc:7b
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUX+0NA5H8WGRs+XjXJLqT8DlGR5cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FEODVF
OEJFQjk1MzAeFw0yNTEwMjUwNzU1MDFaFw0yNjEwMjQwODAwMDFaMDMxMTAvBgNV
BAMTKDFENEQwNEZBREQ3MENGMzY1NDVFQkRBMEUyRDQ4REY5NDVFQTc2RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZMcjD5hUwUs0pZWEI0ob/cM2w
PH7MLXawJEXHwJdJBNx5H4hqOrR7GeG6T+G1KtnG02q0VAu95CR6Nq8m+4sY3Yuk
anGKBFlv/eFVkfOJM2uaMvKguv+h/Dlai6r6jx3jOg95G2VlVQd2LKEogvfloQ6k
EvdCoYSdxr3uzokByPZOb0QjaxIgsv/rozhFPNysMflb85Vm4vxjG9TgR/9T10WW
VNDM9hiL7bd6sGFYxmmZssTzWfiRGWd4mhitlWVrO/SUtf+IAAw4z8lyKJiSVQaw
Wvy66POIhzkrIq42ivumvTba6XdJztag/+z0jKyJn4joWDVVDIQpkUw7ANXRAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUHU0E+t1wzzZUXr2g4tSN+UXqdvkwHwYDVR0j
BBgwFoAUfW7f2yG4t+anWpkKe+ythei+uVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
YmM4Y2RhNS0zNDgzLTQyYjAtYjM4NS1mYzA3MDcxNmZiY2MvMC83RDZFREZEQjIx
QjhCN0U2QTc1QTk5MEE3QkVDQUQ4NUU4QkVCOTUzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FEODVFOEJF
Qjk1My5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiYzhjZGE1LTM0ODMtNDJiMC1i
Mzg1LWZjMDcwNzE2ZmJjYy8wLzMxMzAzMzJlMzQzNjJlMzQyZTMwMmYzMjMzMmQz
MjMzMjAzZDNlMjAzMTM1MzAzNDM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnLgQwDQYJKoZIhvcN
AQELBQADggEBAEA4wauQClsHqQUu79GNR4W/uuaLshi80LpfQAbUuUtb//PM6kFL
pBEDUkOR+PGuW9jsALeyLYFfRdBbhgqX74tmIKvdLCuerW4Y7uoY2YswiKNvArHl
jqWNWFWtuesSR2+0uCoxWbkt9h/QkiJxuzabPpPoIi/04UGncoPE6Nqe9Agtt7WF
G164xK0yXYH9wuqeX2TpXGWgpE+osMjs9CQE/PL34KQS86sDv5cwqFaG498uTU6S
s02EfDAoMAP022nIGBnFpiwFBJPM7N0TKgCJ0e4PIOQFodAFdp1+GqyhCYL+X5oD
izFqu6rOfdDE+0PuIyXy8emGp2MmZghT/Hs=
-----END CERTIFICATE-----
Generated at Wed Dec 3 16:09:15 2025 by rpki-client