This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/3130332e3134342e33382e302f32342d3234203d3e20313339343234.roa
File: 3130332e3134342e33382e302f32342d3234203d3e20313339343234.roa (raw, json)
Hash identifier: Z+yI+qBEJQ4HpP+yvfIUbQbmmee7rBGeSeum3wqAtpo=
Subject key identifier: B1:26:56:F5:F4:04:F2:55:4E:83:57:96:66:5A:F3:DE:E0:5A:C2:F4
Certificate issuer: /CN=507DBCE0DE73C38C3EE975AE23FB7C0C0377011A
Certificate serial: 0AEE0D4A71E30D47047D98D9A19F9F56C67FFC38
Authority key identifier: 50:7D:BC:E0:DE:73:C3:8C:3E:E9:75:AE:23:FB:7C:0C:03:77:01:1A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/3130332e3134342e33382e302f32342d3234203d3e20313339343234.roa
Signing time: Sun 16 Nov 2025 08:00:03 +0000
ROA not before: Sun 16 Nov 2025 07:55:03 +0000
ROA not after: Sun 15 Nov 2026 08:00:03 +0000
asID: 139424
IP address blocks: 103.144.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.crl
rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 11:36:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:ee:0d:4a:71:e3:0d:47:04:7d:98:d9:a1:9f:9f:56:c6:7f:fc:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=507DBCE0DE73C38C3EE975AE23FB7C0C0377011A
Validity
Not Before: Nov 16 07:55:03 2025 GMT
Not After : Nov 15 08:00:03 2026 GMT
Subject: CN=B12656F5F404F2554E835796665AF3DEE05AC2F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d2:7b:fb:08:9c:9a:c2:b7:54:58:7b:4f:56:
8b:a6:fa:d0:a9:c7:4e:2b:65:5b:8d:7f:68:5d:b7:
91:1d:10:37:44:38:a6:19:b9:c4:e9:ee:5a:bf:28:
b1:98:69:6d:2c:e5:bc:31:54:20:b3:fb:87:ea:0e:
d4:0d:65:e4:99:4d:2c:da:c1:30:d6:b6:d7:62:b0:
3b:7d:c8:ae:a5:b1:30:15:82:a3:ab:ad:23:4a:79:
a1:eb:7e:6a:49:90:20:ab:1f:06:6c:18:5a:70:08:
40:b5:e4:45:59:6e:36:f8:86:b9:9b:68:34:22:61:
98:cf:66:96:43:c5:03:d4:be:86:23:3b:b1:83:3e:
6f:b8:63:be:a0:f1:7b:ff:5d:a7:fd:00:c4:e4:e0:
1e:51:50:15:bb:6b:92:3e:ef:b8:a3:ca:5c:36:98:
cd:78:e5:32:1e:df:fd:36:0b:08:43:bc:0c:9c:93:
1c:86:57:7e:77:d1:85:19:15:f3:e4:f1:38:9d:89:
56:d7:aa:16:e7:fa:26:e0:04:a5:87:d1:2b:57:b3:
dd:31:c8:59:af:d8:8c:47:d9:46:91:71:c5:3a:b1:
52:d3:11:99:8a:38:0a:87:c5:76:b2:48:19:45:84:
87:71:54:34:e7:bb:ca:f1:1a:e7:92:7e:a9:e7:85:
b6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:26:56:F5:F4:04:F2:55:4E:83:57:96:66:5A:F3:DE:E0:5A:C2:F4
X509v3 Authority Key Identifier:
keyid:50:7D:BC:E0:DE:73:C3:8C:3E:E9:75:AE:23:FB:7C:0C:03:77:01:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/3130332e3134342e33382e302f32342d3234203d3e20313339343234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.144.38.0/24
Signature Algorithm: sha256WithRSAEncryption
63:02:da:96:44:49:c4:17:8c:3c:35:06:fd:b2:0c:d4:3c:4d:
61:21:d8:79:c0:7b:90:1b:0a:fc:bc:df:b1:da:90:d3:a7:90:
49:d5:2f:e9:c6:2e:cc:2d:5e:08:c0:ad:13:61:bd:f3:98:5a:
19:99:e1:d1:13:6e:0c:9e:d7:10:47:64:e3:03:47:17:7f:eb:
39:df:25:5e:4b:89:1d:55:57:49:4a:96:a0:bc:d2:25:7d:a9:
6a:ce:70:63:27:dc:cd:e3:e3:f4:11:fc:8c:d1:6f:ab:ce:c6:
ea:34:e3:a0:d9:57:95:00:1e:fe:54:ec:36:89:93:98:b9:f8:
5c:41:2a:7a:d0:ed:4f:b1:4a:49:ce:9f:a5:3c:06:fa:08:49:
cb:19:4d:a5:9f:bf:fe:fc:75:78:a6:bb:80:ab:c9:c3:09:ab:
03:f6:aa:e4:c1:b4:41:0e:f3:75:a0:43:fc:57:fd:f1:8b:bb:
ac:ba:84:21:ce:cc:f0:6a:77:27:57:69:24:1f:db:a4:16:c6:
77:2b:3d:9f:d5:a3:10:7a:73:0c:7a:00:9e:f1:a0:8b:13:e9:
35:a4:79:f6:39:b3:49:af:be:02:87:26:49:ac:98:87:23:51:
c0:cf:df:9a:bb:e7:dd:83:70:66:8c:d9:31:76:49:eb:f8:ec:
b7:e3:34:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:50:52 2025 by rpki-client