This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/3130332e3233362e3133302e302f32332d3233203d3e20313531353435.roa
File: 3130332e3233362e3133302e302f32332d3233203d3e20313531353435.roa (raw, json)
Hash identifier: NT8HD6L58UENSZIrvJ7kAsnU0xI/LlrvnmHZkgvxcbo=
Subject key identifier: 07:33:3A:49:46:C0:87:8F:62:52:C5:33:23:41:B2:AA:90:ED:06:51
Certificate issuer: /CN=56D494F5201C70B3C8FD0630664898D57A51A86F
Certificate serial: 08A18BE2C5EAF07D586CD81A5B85964E202AB9BB
Authority key identifier: 56:D4:94:F5:20:1C:70:B3:C8:FD:06:30:66:48:98:D5:7A:51:A8:6F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56D494F5201C70B3C8FD0630664898D57A51A86F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/3130332e3233362e3133302e302f32332d3233203d3e20313531353435.roa
Signing time: Wed 26 Nov 2025 07:38:59 +0000
ROA not before: Wed 26 Nov 2025 07:33:59 +0000
ROA not after: Wed 25 Nov 2026 07:38:59 +0000
asID: 151545
IP address blocks: 103.236.130.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.crl
rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56D494F5201C70B3C8FD0630664898D57A51A86F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 05:28:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:a1:8b:e2:c5:ea:f0:7d:58:6c:d8:1a:5b:85:96:4e:20:2a:b9:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56D494F5201C70B3C8FD0630664898D57A51A86F
Validity
Not Before: Nov 26 07:33:59 2025 GMT
Not After : Nov 25 07:38:59 2026 GMT
Subject: CN=07333A4946C0878F6252C5332341B2AA90ED0651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d3:90:48:bd:17:4a:4b:50:e9:bf:c2:63:5a:
02:ba:22:60:e2:b6:53:03:dd:db:79:36:db:00:fd:
9d:2d:6a:2f:bd:0b:5f:8f:73:ae:5d:ac:b6:05:b2:
a8:c7:0c:43:d6:d0:95:78:08:a8:aa:8a:5e:8f:9d:
75:ae:1b:da:95:a2:a9:86:9c:2f:ce:94:60:2f:9a:
9e:36:98:18:0a:2b:3d:c1:58:32:fc:d2:72:8c:d0:
4b:2d:9e:88:ef:ff:10:cf:cd:32:b3:01:e6:f4:a2:
f9:58:14:54:a4:90:e5:4d:6e:6a:b4:e6:1a:4e:bb:
f0:d8:0f:75:da:de:c0:c3:d0:76:b9:bf:e8:40:c7:
12:b3:1f:20:6c:23:b4:c6:d8:4c:5a:35:d6:02:1c:
6a:30:95:c4:e8:5c:0f:0c:0d:9e:77:7c:63:7d:38:
32:f1:77:17:7d:39:d2:75:67:78:4f:e2:a4:7f:9d:
68:31:48:59:49:c1:78:9c:8f:cf:7a:5c:53:01:81:
a6:d3:e4:80:77:88:58:3a:cb:63:30:d7:a3:e5:3e:
1a:e5:20:15:2f:03:e4:47:b6:13:13:d8:9b:76:c8:
0e:fa:b4:95:35:aa:7c:c8:03:1f:ff:ff:25:73:ac:
53:0b:9d:95:2f:3a:41:c3:f8:46:07:e2:65:79:92:
6c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:33:3A:49:46:C0:87:8F:62:52:C5:33:23:41:B2:AA:90:ED:06:51
X509v3 Authority Key Identifier:
keyid:56:D4:94:F5:20:1C:70:B3:C8:FD:06:30:66:48:98:D5:7A:51:A8:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56D494F5201C70B3C8FD0630664898D57A51A86F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/3130332e3233362e3133302e302f32332d3233203d3e20313531353435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.236.130.0/23
Signature Algorithm: sha256WithRSAEncryption
33:d4:0c:2e:9a:4b:1b:13:6d:29:c9:a8:bd:95:33:b6:d9:1d:
39:b6:8e:d5:9d:e6:f6:e5:e5:53:3a:e8:da:03:e4:be:ca:62:
dd:d5:87:90:a6:9e:fe:3f:e7:58:7d:6c:f7:40:69:26:7a:0c:
51:e4:41:2a:20:b4:04:26:06:89:88:77:bd:42:b6:ca:3b:6f:
f6:18:6f:38:ff:d5:63:0d:6a:34:6f:0f:e6:56:8d:ab:27:43:
e9:24:b3:81:b6:61:b7:f5:0c:26:97:5f:50:b2:a8:13:d7:4e:
20:ce:19:17:64:1d:ef:6c:59:0c:c5:43:53:50:8f:e6:a8:99:
f1:b2:62:c5:fd:03:7d:bb:83:f2:16:82:1e:c9:bf:b7:a0:a0:
52:74:3f:82:7a:df:99:ea:c2:a1:71:6d:65:0f:c9:d0:b5:ec:
f3:48:f2:f2:42:ce:84:22:8a:45:45:b7:35:ee:b7:db:bc:7d:
df:d5:6d:86:4c:7a:09:8c:33:08:ed:15:e7:3d:6f:7d:c4:cb:
9e:8b:48:c7:67:34:c1:d8:ef:28:04:e2:76:ab:7a:86:13:61:
d1:65:21:07:9d:dd:41:ab:3d:95:42:40:37:b9:a2:2d:59:b6:
e9:55:39:8a:f8:70:ed:02:2d:b3:54:11:82:54:43:e8:63:a2:
2b:e2:9d:f1
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUCKGL4sXq8H1YbNgaW4WWTiAqubswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTZENDk0RjUyMDFDNzBCM0M4RkQwNjMwNjY0ODk4RDU3
QTUxQTg2RjAeFw0yNTExMjYwNzMzNTlaFw0yNjExMjUwNzM4NTlaMDMxMTAvBgNV
BAMTKDA3MzMzQTQ5NDZDMDg3OEY2MjUyQzUzMzIzNDFCMkFBOTBFRDA2NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf05BIvRdKS1Dpv8JjWgK6ImDi
tlMD3dt5NtsA/Z0tai+9C1+Pc65drLYFsqjHDEPW0JV4CKiqil6PnXWuG9qVoqmG
nC/OlGAvmp42mBgKKz3BWDL80nKM0Estnojv/xDPzTKzAeb0ovlYFFSkkOVNbmq0
5hpOu/DYD3Xa3sDD0Ha5v+hAxxKzHyBsI7TG2ExaNdYCHGowlcToXA8MDZ53fGN9
ODLxdxd9OdJ1Z3hP4qR/nWgxSFlJwXicj896XFMBgabT5IB3iFg6y2Mw16PlPhrl
IBUvA+RHthMT2Jt2yA76tJU1qnzIAx///yVzrFMLnZUvOkHD+EYH4mV5kmzxAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUBzM6SUbAh49iUsUzI0GyqpDtBlEwHwYDVR0j
BBgwFoAUVtSU9SAccLPI/QYwZkiY1XpRqG8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
ZDVhZjIyYy03ZTNlLTQwYjUtYWM1MC02Mzc3NzJhOTVjMjEvMC81NkQ0OTRGNTIw
MUM3MEIzQzhGRDA2MzA2NjQ4OThENTdBNTFBODZGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTZENDk0RjUyMDFDNzBCM0M4RkQwNjMwNjY0ODk4RDU3QTUx
QTg2Ri5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkNWFmMjJjLTdlM2UtNDBiNS1h
YzUwLTYzNzc3MmE5NWMyMS8wLzMxMzAzMzJlMzIzMzM2MmUzMTMzMzAyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMTM1MzEzNTM0MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn7IIwDQYJ
KoZIhvcNAQELBQADggEBADPUDC6aSxsTbSnJqL2VM7bZHTm2jtWd5vbl5VM66NoD
5L7KYt3Vh5Cmnv4/51h9bPdAaSZ6DFHkQSogtAQmBomId71Ctso7b/YYbzj/1WMN
ajRvD+ZWjasnQ+kks4G2Ybf1DCaXX1CyqBPXTiDOGRdkHe9sWQzFQ1NQj+aomfGy
YsX9A327g/IWgh7Jv7egoFJ0P4J635nqwqFxbWUPydC17PNI8vJCzoQiikVFtzXu
t9u8fd/VbYZMegmMMwjtFec9b33Ey56LSMdnNMHY7ygE4nareoYTYdFlIQed3UGr
PZVCQDe5oi1ZtulVOYr4cO0CLbNUEYJUQ+hjoivinfE=
-----END CERTIFICATE-----
Generated at Wed Dec 3 14:47:05 2025 by rpki-client