This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3130332e3139302e36312e302f32342d3234203d3e20313439393031.roa
File: 3130332e3139302e36312e302f32342d3234203d3e20313439393031.roa (raw, json)
Hash identifier: Ykg6X7TmWGcN3xNxQzs8nCjH8QlPm6F3Uq9zQ4bEBTI=
Subject key identifier: 1C:80:12:C3:F7:DA:2E:E5:B6:53:70:A5:ED:AB:65:4E:D2:50:5C:E6
Certificate issuer: /CN=3BA5C10190ADC96EE34EB4A6D054457022CBDEE9
Certificate serial: 5EA37ED636FA240D7A92D4FC7E1CC61D621A7E85
Authority key identifier: 3B:A5:C1:01:90:AD:C9:6E:E3:4E:B4:A6:D0:54:45:70:22:CB:DE:E9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3130332e3139302e36312e302f32342d3234203d3e20313439393031.roa
Signing time: Wed 14 May 2025 04:00:00 +0000
ROA not before: Wed 14 May 2025 03:55:00 +0000
ROA not after: Wed 13 May 2026 04:00:00 +0000
asID: 149901
IP address blocks: 103.190.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.crl
rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 11:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:a3:7e:d6:36:fa:24:0d:7a:92:d4:fc:7e:1c:c6:1d:62:1a:7e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BA5C10190ADC96EE34EB4A6D054457022CBDEE9
Validity
Not Before: May 14 03:55:00 2025 GMT
Not After : May 13 04:00:00 2026 GMT
Subject: CN=1C8012C3F7DA2EE5B65370A5EDAB654ED2505CE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:47:f2:82:2c:06:f3:69:42:3c:d2:24:f5:5e:
8a:e5:9c:13:7f:1d:b9:47:d7:e6:8d:ed:4c:70:9a:
b0:58:ef:4f:59:be:d7:85:da:31:05:46:b0:de:35:
c3:85:c5:bc:1c:52:4c:bd:f5:49:e7:4f:36:01:3a:
83:8b:c1:4e:be:bb:2f:29:a8:1d:c9:c4:fd:b7:43:
9c:07:59:7c:5e:f2:55:50:ad:4e:0f:14:39:c8:d3:
00:c1:92:25:42:d2:84:c3:0a:bd:ea:56:83:70:6a:
3d:03:05:11:62:f0:20:d0:d2:51:6c:1e:10:21:a0:
2c:eb:6a:27:38:21:5e:cc:fd:7e:2c:4c:85:9e:a3:
88:e8:85:3b:34:ce:f8:7d:cb:23:29:ce:83:41:26:
56:5e:09:d0:59:6a:c7:4c:28:09:93:9a:0c:21:3c:
d2:dd:a2:59:df:b9:b7:3e:f2:6d:c8:69:c5:03:88:
26:1f:01:ce:57:9a:9f:bd:a9:26:3d:9d:1f:cd:80:
8e:c0:2b:b8:1a:32:c3:a0:00:f8:ea:c7:b9:02:50:
fd:a3:90:e3:57:a0:b9:e3:d5:93:d1:18:7f:15:ac:
3d:84:50:48:4e:84:b0:27:a1:70:6f:98:d4:b8:71:
b9:68:e1:d3:42:99:b7:91:8e:ed:a3:47:5d:47:d6:
21:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:80:12:C3:F7:DA:2E:E5:B6:53:70:A5:ED:AB:65:4E:D2:50:5C:E6
X509v3 Authority Key Identifier:
keyid:3B:A5:C1:01:90:AD:C9:6E:E3:4E:B4:A6:D0:54:45:70:22:CB:DE:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3130332e3139302e36312e302f32342d3234203d3e20313439393031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.190.61.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:f2:c3:62:d0:7c:eb:ad:87:63:5f:e3:5a:9f:88:f1:6b:a7:
de:1f:5a:22:67:61:5b:db:b9:c0:91:b9:b9:8c:79:4f:43:2e:
f8:60:f3:ab:59:4e:d8:1f:e8:b2:34:19:9b:ad:2b:3d:72:20:
42:c7:9b:db:ed:68:19:1c:5a:31:90:f9:55:b8:a5:ef:56:8d:
09:b4:67:41:01:75:c9:3f:6f:48:75:00:ea:d7:c0:a4:77:d9:
3a:09:c6:b0:b8:8e:09:4f:5b:55:cb:fa:2a:6e:59:a4:c2:c6:
e1:f9:19:d6:49:f4:21:eb:9b:3f:5b:47:26:25:c4:6f:e3:d1:
94:9c:fa:bf:e0:f8:15:e6:b3:7e:93:57:5c:d0:31:1b:f9:36:
3b:b7:e5:f3:91:46:2f:87:85:f0:bd:96:6a:79:0a:74:26:d1:
c2:45:6b:c4:be:cf:c2:aa:f4:e5:7f:2f:98:e1:21:f8:1b:9e:
1a:83:4e:dc:54:ef:24:ce:a0:96:4c:bf:16:2f:fd:0b:98:dd:
4e:c4:98:40:74:2b:2d:b9:d8:9b:c1:d9:18:b8:49:7a:8e:a8:
46:01:fe:e7:2b:72:38:13:2d:c3:39:e8:ee:74:61:09:92:10:
1b:2f:d6:0a:41:0b:3a:21:2b:5a:8f:0b:f9:f3:b4:8e:23:f4:
cc:d9:d4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:51:29 2025 by rpki-client