This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/3130332e3136392e3235342e302f32332d3233203d3e20313432333730.roa
File: 3130332e3136392e3235342e302f32332d3233203d3e20313432333730.roa (raw, json)
Hash identifier: srBAQJfy8a0mnQ4T5/dKNZU30VzR+202z4VgmppP6JM=
Subject key identifier: 44:3C:62:E8:2F:64:84:01:18:87:FE:F6:58:75:CC:5C:0F:41:92:CA
Certificate issuer: /CN=DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1
Certificate serial: 76C5588076865D9C59BC232E497B405E5EAA7B60
Authority key identifier: DF:68:55:96:DA:F9:D3:65:4A:2E:2F:21:CE:11:AA:0B:B8:0E:45:D1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/3130332e3136392e3235342e302f32332d3233203d3e20313432333730.roa
Signing time: Tue 30 Sep 2025 12:00:00 +0000
ROA not before: Tue 30 Sep 2025 11:55:00 +0000
ROA not after: Tue 29 Sep 2026 12:00:00 +0000
asID: 142370
IP address blocks: 103.169.254.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl
rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 13:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:c5:58:80:76:86:5d:9c:59:bc:23:2e:49:7b:40:5e:5e:aa:7b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1
Validity
Not Before: Sep 30 11:55:00 2025 GMT
Not After : Sep 29 12:00:00 2026 GMT
Subject: CN=443C62E82F6484011887FEF65875CC5C0F4192CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:74:72:14:87:09:47:91:4c:aa:2c:4c:f5:e6:
75:7a:7b:da:23:14:78:e4:e4:54:a1:80:16:b5:a2:
56:a6:1f:bd:db:db:bd:2c:83:f8:f3:84:73:1d:57:
ba:9e:16:05:19:76:a5:78:76:a3:88:a6:b4:83:98:
54:15:52:35:13:b3:f1:bc:0e:e6:ce:28:7f:1b:de:
b8:6b:f6:65:2d:4c:1b:90:01:56:44:51:8e:81:b6:
1a:81:35:a1:7b:d3:ec:9e:a7:46:76:96:c5:46:dc:
5b:10:36:0a:a5:8a:a2:78:58:71:49:8b:6c:9e:f3:
81:58:7f:64:76:2d:f1:75:1e:18:f5:f9:b5:f0:db:
81:e5:a0:b8:fa:b2:49:64:28:34:ef:52:26:37:5d:
a5:37:b1:32:80:64:cc:8f:11:bf:6e:c9:fc:a0:b2:
01:4b:b5:ef:91:49:9a:03:58:ef:e2:0c:15:d2:20:
30:98:8c:78:19:78:f5:7c:ed:44:2e:be:d4:6c:41:
b1:50:75:fa:63:98:26:1a:2f:e8:61:2b:0f:03:a8:
95:30:bc:a6:69:19:88:61:4d:1d:05:29:d4:42:8a:
76:1b:91:9e:c8:7f:b5:a1:be:c0:d9:5d:91:a8:62:
de:d2:85:7b:b4:8d:1d:92:be:b2:ec:c5:a9:e6:8c:
92:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3C:62:E8:2F:64:84:01:18:87:FE:F6:58:75:CC:5C:0F:41:92:CA
X509v3 Authority Key Identifier:
keyid:DF:68:55:96:DA:F9:D3:65:4A:2E:2F:21:CE:11:AA:0B:B8:0E:45:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/3130332e3136392e3235342e302f32332d3233203d3e20313432333730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.169.254.0/23
Signature Algorithm: sha256WithRSAEncryption
80:fa:34:ed:19:ac:86:39:7c:95:e0:e2:0e:41:ed:29:1a:3a:
54:bd:e7:da:41:e2:77:9d:d4:1f:40:4f:7c:4a:90:31:fa:9d:
0b:fb:eb:a5:ab:cb:8e:a0:c8:ed:83:2d:38:21:ae:18:a3:ed:
7b:bc:f9:ed:3b:5c:e4:c0:c3:a8:69:e5:ce:f7:6d:4c:be:cd:
4b:f4:6b:31:ce:c8:d8:5f:4d:e7:d4:68:da:58:03:64:7a:6d:
61:9f:23:f9:2a:44:4b:37:c9:ae:e1:a6:f5:95:d3:f1:d8:ea:
37:8c:26:a0:8f:c6:d9:ed:57:df:53:94:90:82:2e:cb:a1:d6:
08:da:45:a1:aa:ae:3c:fc:f3:12:3a:61:bd:34:cb:5c:ac:12:
96:a2:69:e1:ec:3d:d1:f5:75:c5:45:6e:d5:5c:66:a2:61:69:
b1:56:18:a3:2f:54:20:aa:62:c6:e3:84:c3:4b:09:ee:c4:f7:
ff:1d:02:bb:ef:d0:35:e7:5d:c1:f0:54:25:30:a7:0d:71:48:
5f:46:32:a1:2c:b6:99:52:da:1d:09:0c:47:a0:75:55:6e:56:
8e:97:f6:2e:48:df:57:0b:d0:c7:fc:b9:2f:d4:31:af:9d:c4:
c5:27:a2:09:64:94:74:a5:65:8b:eb:6b:d8:28:27:8d:8e:c8:
f6:a9:4d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:11:58 2025 by rpki-client