This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/3130332e3134342e33392e302f32342d3234203d3e20313339343234.roa
File: 3130332e3134342e33392e302f32342d3234203d3e20313339343234.roa (raw, json)
Hash identifier: MxlZMpoNv5CdONEOPyJ0XCI3HYckgI0HEgji/tMrUdg=
Subject key identifier: 0F:24:B7:8C:A3:A7:52:62:5E:16:2D:87:52:E1:7D:59:92:B0:BF:8B
Certificate issuer: /CN=507DBCE0DE73C38C3EE975AE23FB7C0C0377011A
Certificate serial: 6AE584AFA07C37B2A110F5B0CECEF1E1B0F2F00F
Authority key identifier: 50:7D:BC:E0:DE:73:C3:8C:3E:E9:75:AE:23:FB:7C:0C:03:77:01:1A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/3130332e3134342e33392e302f32342d3234203d3e20313339343234.roa
Signing time: Sun 16 Nov 2025 08:00:02 +0000
ROA not before: Sun 16 Nov 2025 07:55:02 +0000
ROA not after: Sun 15 Nov 2026 08:00:02 +0000
asID: 139424
IP address blocks: 103.144.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.crl
rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 11:36:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:e5:84:af:a0:7c:37:b2:a1:10:f5:b0:ce:ce:f1:e1:b0:f2:f0:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=507DBCE0DE73C38C3EE975AE23FB7C0C0377011A
Validity
Not Before: Nov 16 07:55:02 2025 GMT
Not After : Nov 15 08:00:02 2026 GMT
Subject: CN=0F24B78CA3A752625E162D8752E17D5992B0BF8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:94:d4:24:b6:43:f3:8c:19:dd:c9:3d:99:eb:
fb:38:81:38:62:61:28:a0:a6:66:8c:e9:46:64:d8:
b9:92:0c:57:62:63:db:bd:b9:e0:38:c5:95:dd:ec:
41:67:cf:3d:55:b4:bd:e2:48:52:34:05:71:fd:59:
41:bb:38:31:e5:c6:9e:4e:ac:0e:87:08:69:e2:80:
91:a9:1f:0e:57:68:bb:35:e6:2b:ea:ef:e6:37:fc:
84:03:0e:c5:43:62:83:6f:1e:0f:bc:e8:fd:18:82:
7b:38:0b:2c:62:23:6a:95:9c:f0:73:68:68:da:a1:
b9:fa:c7:13:51:91:f8:14:c0:3e:79:a9:82:b6:9d:
8f:c8:28:13:0b:5a:76:51:97:59:e2:25:de:c1:04:
b7:21:16:88:38:85:57:02:f1:d0:bb:2a:69:05:22:
0b:d8:7a:67:e4:ab:21:f5:c9:3b:51:77:7b:ce:a4:
23:a3:f3:80:f8:35:e9:68:60:ed:fc:a4:56:84:85:
30:09:1b:84:fc:3b:7b:89:dd:fd:42:cd:1d:a5:a9:
0e:ec:62:b1:b5:d3:94:2f:b2:c0:a9:8b:b1:99:12:
8e:45:19:ec:eb:3c:6b:43:48:fd:49:07:dd:90:ac:
2e:5b:1c:c0:e9:92:1b:d1:c2:33:69:f1:45:16:66:
63:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:24:B7:8C:A3:A7:52:62:5E:16:2D:87:52:E1:7D:59:92:B0:BF:8B
X509v3 Authority Key Identifier:
keyid:50:7D:BC:E0:DE:73:C3:8C:3E:E9:75:AE:23:FB:7C:0C:03:77:01:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/3130332e3134342e33392e302f32342d3234203d3e20313339343234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.144.39.0/24
Signature Algorithm: sha256WithRSAEncryption
37:19:67:c5:9b:18:98:92:25:ed:58:16:ee:e7:25:de:8e:f9:
a8:b6:f9:54:e9:c5:54:8d:3c:9d:51:04:ea:c4:54:15:27:98:
f7:a7:d6:b2:28:db:0f:5c:c5:8d:79:27:11:a6:11:be:a1:95:
22:c4:ea:31:6e:ac:65:0a:92:4a:15:a4:cb:ad:34:f3:af:29:
38:55:2d:cd:6c:60:26:cd:a8:80:db:06:8b:dd:04:b7:70:af:
e1:2f:82:68:d6:62:6b:23:8c:c8:9e:b3:77:8a:5a:9e:b1:ed:
2e:38:3a:73:71:39:13:6e:1b:80:e2:28:b5:23:ac:c6:4b:cd:
56:4d:57:35:38:90:9a:6a:3c:e6:d6:46:50:f2:21:65:e6:69:
4c:a5:bc:c8:01:69:5b:73:a2:5b:a0:e0:f5:48:d3:fe:30:c3:
2e:20:81:0e:1b:f7:94:5b:2c:2f:0b:4f:f1:aa:ae:91:9e:34:
36:c3:e1:c2:1f:21:68:ec:60:29:47:14:1b:08:73:ab:f9:d9:
aa:ce:16:9d:a6:42:66:65:f9:8f:2c:84:50:4c:73:33:53:e9:
0e:f5:fe:96:35:40:d0:82:b6:00:58:df:b3:f5:f1:5a:38:d3:
3e:98:18:e9:61:53:ee:38:ee:72:ba:6c:7c:fe:d7:81:a6:48:
fb:e3:ca:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:50:53 2025 by rpki-client