This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/3130332e3136382e3138352e302f32342d3234203d3e20313432333231.roa
File: 3130332e3136382e3138352e302f32342d3234203d3e20313432333231.roa (raw, json)
Hash identifier: UnglZoBVP+l2hAxzoGbqmzfsJvv/Xe0z5CKmhsW/FLo=
Subject key identifier: 94:00:34:16:3F:E4:53:1E:42:FE:14:0D:FF:A9:98:12:0B:EB:90:98
Certificate issuer: /CN=B1D4F5495BE4F9D995EA9C1545469CA2B98334F1
Certificate serial: 30AFA662FABC88A389A6E92AEAB0E804849FE848
Authority key identifier: B1:D4:F5:49:5B:E4:F9:D9:95:EA:9C:15:45:46:9C:A2:B9:83:34:F1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/3130332e3136382e3138352e302f32342d3234203d3e20313432333231.roa
Signing time: Fri 14 Nov 2025 03:03:34 +0000
ROA not before: Fri 14 Nov 2025 02:58:34 +0000
ROA not after: Fri 13 Nov 2026 03:03:34 +0000
asID: 142321
IP address blocks: 103.168.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl
rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Dec 2025 23:47:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:af:a6:62:fa:bc:88:a3:89:a6:e9:2a:ea:b0:e8:04:84:9f:e8:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1D4F5495BE4F9D995EA9C1545469CA2B98334F1
Validity
Not Before: Nov 14 02:58:34 2025 GMT
Not After : Nov 13 03:03:34 2026 GMT
Subject: CN=940034163FE4531E42FE140DFFA998120BEB9098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d2:a4:8e:2d:84:6c:50:cb:fa:65:78:e1:1e:
54:24:61:d9:d4:94:7f:8e:1a:37:e9:5a:82:6c:cc:
d6:30:7a:dd:60:7b:4c:b6:44:b8:81:42:de:68:71:
13:d8:d5:9f:53:d0:cb:c4:8d:2f:c7:00:1e:2b:05:
9f:9a:4b:27:47:53:a0:19:48:4d:b3:97:78:11:42:
bb:01:d1:c8:c0:84:f1:61:92:57:df:b5:3b:0a:cf:
2a:71:b1:8c:29:12:22:79:2d:7c:2e:0f:86:ec:10:
3d:49:a5:b9:70:eb:92:eb:99:f0:29:b9:c2:e2:ee:
1b:85:ed:7e:18:5a:b7:13:da:4c:4e:52:82:86:8f:
1a:17:80:85:1d:ae:31:dd:5f:0e:08:7b:d4:09:da:
39:e0:8b:35:52:04:d4:11:b3:c0:20:be:ae:81:81:
c9:b0:09:b6:4f:55:58:8a:0a:65:76:07:7d:14:95:
15:ba:a5:a3:cf:97:d3:e4:b5:70:eb:ab:d3:f9:09:
1c:6f:48:4f:28:45:0e:e9:98:b6:6d:2a:6a:07:15:
9f:64:ca:64:64:3b:f3:8c:ed:13:52:cb:0a:c3:65:
11:fb:24:a1:22:ea:09:73:2e:dc:bf:07:36:2b:84:
20:37:e1:a8:00:ec:50:52:63:d6:fa:0d:63:0a:8a:
3d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:00:34:16:3F:E4:53:1E:42:FE:14:0D:FF:A9:98:12:0B:EB:90:98
X509v3 Authority Key Identifier:
keyid:B1:D4:F5:49:5B:E4:F9:D9:95:EA:9C:15:45:46:9C:A2:B9:83:34:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/3130332e3136382e3138352e302f32342d3234203d3e20313432333231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.168.185.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:72:0d:20:69:5c:f3:8c:d8:27:fa:e8:f6:42:34:f8:0b:6b:
20:14:6c:1d:03:f2:8f:3f:c7:2f:68:15:a1:df:ac:12:56:66:
38:17:17:26:4c:6c:18:4c:9b:f2:a5:06:5c:c2:9d:07:2d:93:
e8:83:50:f3:63:75:de:67:a4:f3:a5:35:88:87:7c:32:76:d4:
d4:92:69:c8:58:b5:62:e2:dd:62:e4:88:6e:4b:7b:cd:87:d5:
63:1b:67:dc:38:84:7f:80:89:5b:61:63:64:10:da:f3:84:3b:
de:a9:50:4a:22:80:12:72:db:05:e2:fe:29:93:d8:f5:4f:ed:
cd:10:34:c3:91:52:dd:01:4a:5d:70:36:76:76:c8:53:4b:71:
b7:2b:a6:0c:cc:e0:3b:f0:c0:af:48:c0:64:29:38:81:f9:32:
5d:7b:d5:dc:cb:60:64:9b:9e:2f:a2:18:60:3b:99:87:62:4e:
15:6e:3b:bc:30:fb:d5:9a:60:18:7d:30:f1:59:e2:a9:43:3f:
36:65:6a:ef:e5:f1:b1:07:77:57:06:60:a0:34:26:c7:80:2d:
d3:0a:87:14:0c:37:61:1f:40:c8:4d:27:07:05:18:a0:01:df:
65:be:52:dd:32:c3:56:0d:fd:a1:70:2e:be:d1:44:29:ec:26:
0c:f6:00:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 13:25:48 2025 by rpki-client