This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/3130332e3136392e3232352e302f32342d3234203d3e20313432333534.roa
File: 3130332e3136392e3232352e302f32342d3234203d3e20313432333534.roa (raw, json)
Hash identifier: 0gXOJT38WPRdvZH/mvcMIDFy0eFxFO3CspBZZzjXpXE=
Subject key identifier: 82:C6:20:24:33:F2:3A:E1:28:8B:4E:5C:D6:A4:76:8A:95:EC:57:EE
Certificate issuer: /CN=AD2A0F6B3024BFF11458D72C8E5623FB74867F53
Certificate serial: 69EFF6BC561DE120BB97247CB8EA3577111534BE
Authority key identifier: AD:2A:0F:6B:30:24:BF:F1:14:58:D7:2C:8E:56:23:FB:74:86:7F:53
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/3130332e3136392e3232352e302f32342d3234203d3e20313432333534.roa
Signing time: Thu 13 Nov 2025 17:02:31 +0000
ROA not before: Thu 13 Nov 2025 16:57:31 +0000
ROA not after: Thu 12 Nov 2026 17:02:31 +0000
asID: 142354
IP address blocks: 103.169.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.crl
rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 14:52:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:ef:f6:bc:56:1d:e1:20:bb:97:24:7c:b8:ea:35:77:11:15:34:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD2A0F6B3024BFF11458D72C8E5623FB74867F53
Validity
Not Before: Nov 13 16:57:31 2025 GMT
Not After : Nov 12 17:02:31 2026 GMT
Subject: CN=82C6202433F23AE1288B4E5CD6A4768A95EC57EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:48:e9:af:d7:bd:e2:fe:6b:6a:33:52:f6:12:
8a:71:57:3e:34:8b:4f:5c:5a:f6:f7:67:17:0c:9b:
3d:ef:90:7f:87:cd:a0:1c:62:40:e1:17:b5:bd:88:
16:a8:d3:af:76:5e:0a:2b:c0:1f:2a:a4:e2:6d:d7:
46:db:99:5d:b1:91:1a:e7:10:9d:9d:21:e7:67:08:
87:cc:08:a7:22:5b:1c:8a:ee:be:1c:18:f1:ca:48:
3f:74:21:1c:c7:63:5f:3d:a1:d3:2c:ae:ab:93:02:
d4:ed:1c:01:41:17:74:32:d9:b3:81:cc:7f:02:89:
ef:07:cb:d7:f8:c2:9b:43:7d:eb:42:e4:d2:f7:0e:
da:6a:04:4d:89:bb:52:83:23:35:86:40:20:9a:d7:
43:4b:f4:03:1c:0a:4c:dc:bd:20:6b:55:6d:28:c4:
a6:cf:92:c5:94:8a:e0:73:af:69:53:a9:cf:38:19:
d2:ca:db:b3:65:80:23:9f:07:d1:28:50:cb:0a:2f:
5a:56:15:56:b8:27:19:1f:52:64:c1:6f:94:74:4f:
96:68:5c:ad:12:12:d5:d8:d0:8b:fb:a1:27:8c:41:
e6:0c:49:98:99:03:e4:de:20:e0:6e:12:ee:a0:13:
51:50:32:f1:c9:57:85:8d:22:e3:fe:77:09:72:79:
45:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C6:20:24:33:F2:3A:E1:28:8B:4E:5C:D6:A4:76:8A:95:EC:57:EE
X509v3 Authority Key Identifier:
keyid:AD:2A:0F:6B:30:24:BF:F1:14:58:D7:2C:8E:56:23:FB:74:86:7F:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/3130332e3136392e3232352e302f32342d3234203d3e20313432333534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.169.225.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:83:79:2e:dd:a9:34:15:62:d9:49:da:f9:b1:2b:ac:c8:8e:
df:3c:3c:08:1f:37:4c:34:5e:31:65:23:f8:40:51:4c:6f:4b:
2a:84:59:2b:ae:46:ed:dd:fb:25:ad:0b:95:12:f6:b2:3c:8e:
a8:d9:cb:3b:d3:82:a6:4a:47:d4:30:7c:21:1f:69:11:00:cc:
5b:37:c0:c6:c8:3e:e6:86:50:99:2d:a5:87:bf:c5:cf:e8:3c:
92:3a:8f:6d:19:d2:d6:f7:44:95:da:c3:f4:04:60:e1:99:66:
83:b4:10:5c:01:b4:72:62:f3:50:f2:28:8d:6f:d2:1f:69:1f:
85:22:99:4f:da:93:6c:4e:99:8d:a9:06:26:e8:81:1f:89:cc:
67:92:44:a7:3b:5c:51:88:ea:fa:d3:56:bc:60:da:3a:9a:0b:
0c:8a:c1:38:bf:16:9c:03:1e:b6:59:73:cc:19:e0:27:f9:88:
27:8b:e9:6e:e8:99:77:4b:a6:d0:05:2e:92:ba:ef:95:4a:13:
8c:43:a9:a6:0e:7a:87:ed:a6:ae:08:8e:72:a5:61:ab:f7:0e:
c9:2d:cc:29:9e:8c:3b:36:67:3f:e8:ac:88:ae:60:5e:28:6a:
6e:a7:36:ed:03:60:20:a8:9d:50:c0:df:e7:17:05:54:88:dd:
70:9c:28:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:21:54 2025 by rpki-client