This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/3130332e3136392e3232342e302f32332d3233203d3e20313432333534.roa
File: 3130332e3136392e3232342e302f32332d3233203d3e20313432333534.roa (raw, json)
Hash identifier: etYodgnJYh3trd5HBJwHsn5n2vL2wMwaYJQCzGIxOug=
Subject key identifier: 74:8A:82:16:96:11:98:CA:F6:0C:A6:38:F4:17:FF:9A:63:CB:42:33
Certificate issuer: /CN=AD2A0F6B3024BFF11458D72C8E5623FB74867F53
Certificate serial: 3D581FFDD7AEF00AE2C87DD595CD6BDA8EA9DAE0
Authority key identifier: AD:2A:0F:6B:30:24:BF:F1:14:58:D7:2C:8E:56:23:FB:74:86:7F:53
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/3130332e3136392e3232342e302f32332d3233203d3e20313432333534.roa
Signing time: Mon 24 Nov 2025 16:00:01 +0000
ROA not before: Mon 24 Nov 2025 15:55:01 +0000
ROA not after: Mon 23 Nov 2026 16:00:01 +0000
asID: 142354
IP address blocks: 103.169.224.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.crl
rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 14:52:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:58:1f:fd:d7:ae:f0:0a:e2:c8:7d:d5:95:cd:6b:da:8e:a9:da:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD2A0F6B3024BFF11458D72C8E5623FB74867F53
Validity
Not Before: Nov 24 15:55:01 2025 GMT
Not After : Nov 23 16:00:01 2026 GMT
Subject: CN=748A8216961198CAF60CA638F417FF9A63CB4233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:42:6f:76:d5:18:e7:c6:47:17:7d:96:52:a1:
81:3b:90:51:94:85:45:f0:c3:2b:4c:ce:41:1c:d4:
e1:c9:7d:a8:22:fc:d6:8a:af:5e:6c:e3:3b:77:50:
1e:b7:88:4f:4f:bc:96:88:29:a1:da:d1:64:11:c6:
92:6f:98:75:4a:2a:ef:34:f8:9d:17:40:e3:90:6f:
be:96:e9:c4:80:2e:2b:da:b3:ce:47:5b:98:df:45:
37:8d:61:28:0c:63:8a:e4:a2:cd:ae:5b:c6:d3:fa:
64:26:7e:a1:88:29:da:15:af:9b:3e:a2:e0:9e:ab:
eb:34:7a:d4:70:28:8e:13:e3:89:97:0d:dd:9c:dc:
00:4d:b7:17:ad:4e:23:07:23:7d:10:4b:a3:44:bb:
de:c7:4f:3a:0f:f8:cb:e8:f1:4f:0a:e0:36:42:b8:
36:b4:71:d4:27:f3:e9:77:38:7d:c2:35:2d:18:52:
b0:f5:f9:12:fa:28:d2:e3:40:c2:99:08:14:f8:c7:
32:df:4c:b3:88:60:49:3f:5c:42:a1:22:d7:07:b3:
00:9c:73:73:5c:90:d6:1f:90:e3:6b:40:1e:09:ff:
a3:22:a9:9d:de:0c:a0:bb:37:7c:20:86:dd:a8:5d:
8d:61:12:3c:d3:11:3d:b4:72:6d:a9:41:0f:e1:52:
46:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:8A:82:16:96:11:98:CA:F6:0C:A6:38:F4:17:FF:9A:63:CB:42:33
X509v3 Authority Key Identifier:
keyid:AD:2A:0F:6B:30:24:BF:F1:14:58:D7:2C:8E:56:23:FB:74:86:7F:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/3130332e3136392e3232342e302f32332d3233203d3e20313432333534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.169.224.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:b1:9a:b9:61:01:8e:65:aa:74:8d:ce:18:5b:9a:58:c6:88:
a2:92:93:bd:d0:80:90:a3:ac:04:76:87:bb:19:50:8c:4a:a1:
63:de:ff:05:99:30:39:5a:7e:29:f1:eb:53:c0:31:ac:0b:ca:
33:08:cf:2d:0b:91:ee:9e:9e:55:73:aa:0e:21:c3:7e:25:20:
71:6d:11:29:e4:28:55:f3:3e:00:da:bb:a5:00:73:c6:2e:21:
8e:f7:d4:16:1a:7e:20:6f:87:8b:04:5d:0d:a0:ae:23:70:72:
df:e3:28:06:8e:8e:f0:8f:bf:cb:91:b2:a5:ad:0a:36:dc:6a:
75:4e:38:a3:8f:d2:11:39:ed:8f:48:e6:da:03:93:1f:74:b5:
08:e8:21:17:35:3b:3a:4f:e2:f6:43:b7:96:9c:2b:18:7f:cf:
03:a3:74:fb:bf:9d:6f:a4:0c:75:cf:1e:fd:83:00:33:b0:e9:
e6:c8:70:2a:1c:f2:c4:0e:75:4d:e0:cb:74:f0:c9:57:a3:ec:
43:aa:fe:63:d6:7a:17:16:69:6e:95:74:17:d2:f5:33:f2:2c:
45:52:6b:3a:99:37:9c:07:19:71:9c:cd:90:bf:86:1d:5b:d3:
34:6c:02:71:7c:b4:0b:2a:63:78:7d:40:53:d6:0a:94:7b:ff:
b3:41:d5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:21:16 2025 by rpki-client