This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/3130332e3233362e3133302e302f32342d3234203d3e20313531353435.roa
File: 3130332e3233362e3133302e302f32342d3234203d3e20313531353435.roa (raw, json)
Hash identifier: GVdqWRcuOnkA2VgxGew3ZoC+Kiaj3ZJ2ZKo75rljh74=
Subject key identifier: DE:6C:8A:D8:D0:BC:14:91:EC:62:60:08:67:1F:0E:6F:D6:93:63:FB
Certificate issuer: /CN=56D494F5201C70B3C8FD0630664898D57A51A86F
Certificate serial: 1F9C0077FC8E4CC0863916B0FD4907B6E7323CFC
Authority key identifier: 56:D4:94:F5:20:1C:70:B3:C8:FD:06:30:66:48:98:D5:7A:51:A8:6F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56D494F5201C70B3C8FD0630664898D57A51A86F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/3130332e3233362e3133302e302f32342d3234203d3e20313531353435.roa
Signing time: Wed 26 Nov 2025 07:38:22 +0000
ROA not before: Wed 26 Nov 2025 07:33:22 +0000
ROA not after: Wed 25 Nov 2026 07:38:22 +0000
asID: 151545
IP address blocks: 103.236.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.crl
rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56D494F5201C70B3C8FD0630664898D57A51A86F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 05:28:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:9c:00:77:fc:8e:4c:c0:86:39:16:b0:fd:49:07:b6:e7:32:3c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56D494F5201C70B3C8FD0630664898D57A51A86F
Validity
Not Before: Nov 26 07:33:22 2025 GMT
Not After : Nov 25 07:38:22 2026 GMT
Subject: CN=DE6C8AD8D0BC1491EC626008671F0E6FD69363FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c2:3e:eb:87:2c:c5:d2:b1:f7:bc:c4:c6:de:
7c:7d:a6:f9:ee:f8:a7:d1:18:ed:44:92:4d:95:57:
cd:ad:c6:19:a0:ee:e3:e5:39:75:15:44:d4:bb:13:
db:da:67:79:08:51:02:de:99:b6:56:f2:ed:a5:8d:
66:b4:62:42:14:04:45:f5:35:c6:36:f8:dc:a6:67:
df:72:83:4f:92:2f:d6:7c:33:7a:48:2c:13:5f:4a:
fc:ef:e4:d2:e6:6a:25:fe:0a:2c:bf:88:f5:2d:af:
31:f3:2b:52:68:a4:b1:e4:08:e9:43:55:da:dd:3d:
b2:b8:25:42:c1:42:20:c0:6e:fc:4b:24:45:a0:bf:
7d:0a:9c:8c:88:b2:88:45:b9:d4:3b:b2:dd:ba:3a:
96:85:06:a7:fd:0e:c9:59:73:a8:fd:00:c9:43:0c:
49:af:af:5e:46:4d:55:07:fb:8f:14:c1:e1:cb:ad:
42:35:8f:2f:9e:6d:22:06:e1:df:a1:97:d0:b6:05:
c8:2c:de:d8:ba:95:62:6f:6b:c5:88:d5:c8:5b:81:
2b:d8:2b:a3:4f:c0:d7:ff:40:91:91:15:9a:19:c0:
3e:34:b7:79:d8:b9:ba:bb:9d:d3:99:3a:e0:f5:c8:
25:77:55:f5:6a:b6:17:17:13:ee:f3:99:ba:c7:48:
15:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6C:8A:D8:D0:BC:14:91:EC:62:60:08:67:1F:0E:6F:D6:93:63:FB
X509v3 Authority Key Identifier:
keyid:56:D4:94:F5:20:1C:70:B3:C8:FD:06:30:66:48:98:D5:7A:51:A8:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56D494F5201C70B3C8FD0630664898D57A51A86F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/3130332e3233362e3133302e302f32342d3234203d3e20313531353435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.236.130.0/24
Signature Algorithm: sha256WithRSAEncryption
81:9f:64:7c:7b:b0:df:f8:50:4c:bd:77:65:c8:c1:88:bf:9f:
83:b3:49:46:41:4e:cd:35:b6:62:cd:f7:3b:43:92:06:b9:0e:
3c:c1:57:fb:a0:c8:84:5a:a4:67:3c:7b:e2:02:8a:d5:3b:cd:
f2:99:1d:09:71:23:0d:dd:c4:e8:d2:91:32:a5:34:8c:6f:f2:
70:c6:5f:0c:4b:aa:5e:f7:da:83:36:e1:aa:ac:ef:38:d3:ef:
02:cb:9d:cd:0b:a3:07:07:30:08:73:53:8d:ea:28:ef:57:11:
e2:1d:e0:7c:6e:cb:77:fe:8e:7c:7a:ff:cb:6a:a5:f4:71:ce:
7b:f8:a6:ac:f3:70:f8:93:a3:fb:29:5d:12:d4:7f:23:a7:ae:
d1:ca:9b:19:cc:82:f6:3e:36:e7:5d:cc:83:56:8b:43:da:9f:
3f:3c:08:14:aa:e8:a8:9e:e4:fe:7d:16:fd:a9:c3:e6:fc:64:
26:48:f1:76:01:ff:bd:cf:8a:02:42:75:02:06:55:df:ee:f2:
b7:08:c4:0d:fb:77:53:24:81:74:95:ce:40:cb:e9:f3:91:e1:
16:97:b0:b4:be:05:9f:d0:eb:99:a9:be:89:4e:c9:da:c9:25:
ad:d5:6e:59:e1:68:a7:c6:f5:53:9f:1d:b7:d2:8b:19:79:c9:
89:74:ff:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:47:05 2025 by rpki-client