This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3130332e3133322e3233302e302f32342d3234203d3e20313338313237.roa
File: 3130332e3133322e3233302e302f32342d3234203d3e20313338313237.roa (raw, json)
Hash identifier: FC4YL6B+zkeYZOTJZ5N7Yi4YIq94WZ3uKMPO/1YmBIg=
Subject key identifier: DF:0C:C7:A8:B1:47:31:D3:FA:A2:15:DC:D6:6C:27:AC:F6:8F:77:BC
Certificate issuer: /CN=3E0B957B582D8AEF99A49C6448F9993C72378BF3
Certificate serial: 0BCCDF247181021ECA0CF9D1BDD41905B264E738
Authority key identifier: 3E:0B:95:7B:58:2D:8A:EF:99:A4:9C:64:48:F9:99:3C:72:37:8B:F3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0B957B582D8AEF99A49C6448F9993C72378BF3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3130332e3133322e3233302e302f32342d3234203d3e20313338313237.roa
Signing time: Fri 21 Nov 2025 07:03:04 +0000
ROA not before: Fri 21 Nov 2025 06:58:04 +0000
ROA not after: Fri 20 Nov 2026 07:03:04 +0000
asID: 138127
IP address blocks: 103.132.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.crl
rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0B957B582D8AEF99A49C6448F9993C72378BF3.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 14:54:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:cc:df:24:71:81:02:1e:ca:0c:f9:d1:bd:d4:19:05:b2:64:e7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E0B957B582D8AEF99A49C6448F9993C72378BF3
Validity
Not Before: Nov 21 06:58:04 2025 GMT
Not After : Nov 20 07:03:04 2026 GMT
Subject: CN=DF0CC7A8B14731D3FAA215DCD66C27ACF68F77BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:eb:48:c0:78:9a:fe:56:dc:73:38:44:43:23:
0c:3c:8d:6a:27:d4:d0:76:54:29:f0:b8:2e:f2:d3:
44:d1:09:c4:59:36:a9:e4:43:52:63:0c:88:77:fe:
de:d8:e2:c5:21:df:22:ed:d3:ce:28:9f:30:08:ac:
54:85:c3:0b:4f:20:22:69:8b:e7:cc:c5:ad:f6:20:
8a:71:84:c0:59:44:35:43:67:0d:fa:28:d3:31:85:
7d:f5:d1:25:4d:82:84:2e:61:cc:b4:d3:72:39:6b:
54:75:53:af:fa:9b:d6:46:fb:80:9d:d1:7f:92:f9:
7f:4e:d6:b2:41:fe:5c:72:75:8e:6f:f4:88:dd:d7:
db:e4:ab:5f:be:3c:75:af:d3:f6:1f:23:ca:59:97:
f3:40:74:6b:f7:fa:48:81:1a:77:ef:f8:af:7d:8a:
d4:97:27:e8:7c:18:33:30:2e:8e:7b:ca:c6:1e:67:
82:bf:8c:28:23:87:b1:05:ba:ec:df:2a:c8:df:0f:
3b:c2:b0:15:ed:91:b9:95:02:6c:29:e5:38:0d:7d:
94:39:20:94:c7:2e:55:c5:25:9c:92:e3:82:7b:d6:
1f:80:36:79:b0:03:a1:aa:79:2b:2a:c4:69:7e:1f:
16:65:08:f3:11:e5:bd:d3:bf:a5:1b:45:a4:55:e9:
7f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0C:C7:A8:B1:47:31:D3:FA:A2:15:DC:D6:6C:27:AC:F6:8F:77:BC
X509v3 Authority Key Identifier:
keyid:3E:0B:95:7B:58:2D:8A:EF:99:A4:9C:64:48:F9:99:3C:72:37:8B:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0B957B582D8AEF99A49C6448F9993C72378BF3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3130332e3133322e3233302e302f32342d3234203d3e20313338313237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.132.230.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:1e:cd:2a:2a:33:ae:52:02:5a:c4:47:5a:5a:1e:da:ad:60:
77:0f:1a:6e:a0:f8:56:94:1a:c9:3d:ac:04:1f:f6:e4:20:35:
5d:42:ac:3d:b0:2b:0a:b8:86:61:85:5c:e0:d6:c3:a7:39:a6:
61:95:26:63:13:0b:9a:a3:bb:5c:22:91:35:f0:3b:92:df:8e:
97:f7:00:79:b7:4e:90:a8:d1:f8:c2:38:06:8a:c6:9c:2e:af:
69:20:5b:74:e1:5e:8f:6f:36:7d:81:c5:9e:06:ad:0d:9d:ec:
2d:0a:15:75:d4:41:a6:0d:96:72:d3:4d:20:15:31:c2:a0:21:
a7:e1:c4:7a:91:c1:9b:61:e2:8d:ef:86:69:57:54:a1:77:61:
ce:60:36:bf:d0:fb:cc:77:89:4a:51:31:46:cc:54:e2:23:f1:
13:e7:97:dd:a6:d4:be:f9:e0:e5:77:0c:8f:0c:75:9c:9a:70:
7a:a4:ca:08:33:79:6d:f7:b2:c7:6c:83:bb:92:ea:6f:60:19:
13:9f:ce:33:78:bf:f7:64:f2:b5:73:ed:ba:18:ae:3d:4b:a1:
8b:d6:c3:de:88:09:2b:ec:0d:99:49:d8:68:71:e5:8d:e6:0c:
32:02:9a:99:02:16:16:ea:aa:d4:4e:44:2f:a8:cf:66:a7:62:
46:f0:70:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:10:51 2025 by rpki-client