This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/3130332e3132392e32322e302f32332d3234203d3e20313335343738.roa
File: 3130332e3132392e32322e302f32332d3234203d3e20313335343738.roa (raw, json)
Hash identifier: NI+iV212mIRfD7qYmt5q7rBxlWutxZm2u6jypzvhX2A=
Subject key identifier: F6:1A:E7:2F:F8:05:29:89:A1:DE:90:E8:12:60:DE:7F:4F:74:8C:8D
Certificate issuer: /CN=5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297
Certificate serial: 2EB2ACC6388B7106361083FFFC65E5B9232DD5A7
Authority key identifier: 51:97:E2:A7:8B:BA:1E:8C:9E:B8:08:E4:5A:99:DD:2B:E7:B4:12:97
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/3130332e3132392e32322e302f32332d3234203d3e20313335343738.roa
Signing time: Wed 05 Nov 2025 09:00:00 +0000
ROA not before: Wed 05 Nov 2025 08:55:00 +0000
ROA not after: Wed 04 Nov 2026 09:00:00 +0000
asID: 135478
IP address blocks: 103.129.22.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.crl
rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 08:20:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:b2:ac:c6:38:8b:71:06:36:10:83:ff:fc:65:e5:b9:23:2d:d5:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297
Validity
Not Before: Nov 5 08:55:00 2025 GMT
Not After : Nov 4 09:00:00 2026 GMT
Subject: CN=F61AE72FF8052989A1DE90E81260DE7F4F748C8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:80:9b:a5:0c:77:3d:b8:79:c5:6f:5c:5c:15:
ad:7e:b5:b3:b7:63:aa:f4:bf:a1:5d:da:c8:8c:6b:
f1:99:c6:68:64:a3:6d:5d:3e:79:6c:0d:7b:56:99:
34:c3:f3:a2:83:c6:c4:e4:c8:10:51:67:c7:cd:8a:
c9:5e:67:5b:d0:1a:ba:aa:40:79:43:31:33:28:63:
f2:ca:c2:e8:5e:b3:9b:e9:8e:38:65:56:5f:24:40:
b5:d8:af:ed:a6:4b:06:aa:fa:64:c6:5a:42:72:79:
cf:fa:97:51:27:18:e0:99:ab:e0:3b:bc:e7:8c:87:
5b:7c:11:3f:4c:e1:13:fb:09:55:39:9b:c5:3e:8b:
90:77:6a:6a:0e:a3:6a:87:3a:5f:a2:76:3f:1b:0a:
e4:08:6b:37:51:a1:83:88:c5:1e:bb:a3:c2:5b:44:
5d:91:f1:66:6c:80:ed:d4:a7:9b:19:94:f6:fa:21:
a7:f0:c9:cb:b5:4c:b2:7c:eb:f8:97:35:e8:3d:a0:
42:57:d8:fa:dc:19:f5:21:9d:eb:53:4f:68:a1:77:
2c:4a:d0:80:27:d1:8b:3b:9a:43:32:3f:2a:c4:94:
1c:e1:39:6e:95:09:ce:e5:ac:10:ac:8a:50:c7:cd:
fe:f9:c7:05:61:a4:f7:1c:ce:96:84:ba:5a:ec:c1:
7a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1A:E7:2F:F8:05:29:89:A1:DE:90:E8:12:60:DE:7F:4F:74:8C:8D
X509v3 Authority Key Identifier:
keyid:51:97:E2:A7:8B:BA:1E:8C:9E:B8:08:E4:5A:99:DD:2B:E7:B4:12:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/3130332e3132392e32322e302f32332d3234203d3e20313335343738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.129.22.0/23
Signature Algorithm: sha256WithRSAEncryption
08:bc:ff:a5:b3:8c:b3:a2:e6:e3:ad:4a:42:f3:b2:07:92:8d:
01:87:26:97:1b:ea:3f:ca:4b:ea:f1:ed:3c:ed:42:0a:51:ad:
96:2b:46:57:6d:58:2b:88:08:2c:65:86:d7:75:cd:cf:28:ab:
8d:f0:94:d3:7a:d4:84:ee:86:e0:d8:3d:fa:fb:66:ff:62:d3:
bf:0d:93:9a:b8:7c:ae:f0:43:42:e8:78:9d:aa:1e:03:ca:c8:
74:64:ad:e9:9a:84:18:4b:f5:43:09:84:ca:9e:61:40:76:9a:
fc:9d:c9:f1:bf:27:77:c8:b0:85:35:1f:05:c8:a5:5b:04:19:
72:8a:b9:a8:18:4f:6d:70:4c:76:bb:0b:ab:f6:5f:03:aa:ea:
3c:a9:1d:cb:06:56:3d:a0:1e:03:9b:3b:2c:4d:07:49:63:17:
a1:0b:26:19:eb:52:e9:d4:5c:d2:88:df:fe:7d:c9:90:58:ab:
1f:71:e8:38:7e:bf:c1:4d:30:6c:e6:48:15:2c:8c:d8:a3:58:
83:ee:f9:5a:a3:0d:bc:cd:65:f6:f0:98:dd:61:d2:38:6a:a8:
cf:d3:3f:9a:52:8f:56:ca:ef:f3:88:ba:c5:ac:a0:65:e1:fe:
47:23:7d:00:01:8e:23:50:16:c5:86:fe:e4:d1:7e:64:79:e7:
51:dc:e2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 11:48:53 2025 by rpki-client