This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/3130332e3132312e3234362e302f32332d3234203d3e20313335343738.roa
File: 3130332e3132312e3234362e302f32332d3234203d3e20313335343738.roa (raw, json)
Hash identifier: 3Q3TcBWsaHvYgXVIh3Shkct0iPnHLeLaz/yA3bkjR18=
Subject key identifier: 36:15:A2:C0:5A:08:C0:CE:7B:94:AE:C7:9A:C0:89:DF:D2:58:D2:2B
Certificate issuer: /CN=FCA55FE68BF147AE20F00C45DADCDF960C120CF8
Certificate serial: 53D11C83C10AF645099EB5874204525C0722A025
Authority key identifier: FC:A5:5F:E6:8B:F1:47:AE:20:F0:0C:45:DA:DC:DF:96:0C:12:0C:F8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/3130332e3132312e3234362e302f32332d3234203d3e20313335343738.roa
Signing time: Wed 05 Nov 2025 10:03:03 +0000
ROA not before: Wed 05 Nov 2025 09:58:03 +0000
ROA not after: Wed 04 Nov 2026 10:03:03 +0000
asID: 135478
IP address blocks: 103.121.246.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.crl
rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 16:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:d1:1c:83:c1:0a:f6:45:09:9e:b5:87:42:04:52:5c:07:22:a0:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FCA55FE68BF147AE20F00C45DADCDF960C120CF8
Validity
Not Before: Nov 5 09:58:03 2025 GMT
Not After : Nov 4 10:03:03 2026 GMT
Subject: CN=3615A2C05A08C0CE7B94AEC79AC089DFD258D22B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0d:e4:a8:52:9e:ed:47:0a:e0:ec:71:0b:c9:
66:03:08:da:85:2c:5e:6c:7c:d2:e7:4e:b3:54:83:
eb:24:1f:c0:0c:01:31:9a:49:d8:34:23:6b:b6:6a:
5b:e8:d2:64:3d:6b:07:83:38:07:24:c1:86:26:40:
b9:aa:02:cf:e0:9a:04:69:18:2a:95:fe:c8:8a:1e:
b1:25:95:7a:52:6d:a6:14:3e:20:db:3c:3e:3a:be:
28:a1:33:74:36:0d:7c:f1:12:57:05:8c:f2:f0:21:
2d:05:ee:b5:c4:fa:87:94:83:f5:2b:f8:e4:45:40:
43:9b:41:ed:90:f7:81:74:02:2a:25:f1:ce:0e:0b:
d1:7c:34:b7:47:4f:ff:21:e8:57:fe:91:a0:be:47:
6b:90:ac:3c:67:51:0a:94:44:58:b0:00:22:96:e0:
ce:52:f1:59:0d:c3:2a:c0:08:ef:41:12:cf:e6:3e:
48:58:49:92:5a:f9:15:2b:77:07:ba:7c:5a:bf:f4:
35:66:28:51:1a:02:7c:c1:c8:90:ae:3c:5e:9f:f2:
9f:64:ff:f2:b7:5a:12:a0:af:45:7e:d7:e2:d6:ff:
bb:25:98:6f:26:0b:3e:12:93:44:30:0b:90:56:13:
5f:f0:43:4f:70:0b:77:e7:2c:4b:64:00:01:96:b0:
e0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:15:A2:C0:5A:08:C0:CE:7B:94:AE:C7:9A:C0:89:DF:D2:58:D2:2B
X509v3 Authority Key Identifier:
keyid:FC:A5:5F:E6:8B:F1:47:AE:20:F0:0C:45:DA:DC:DF:96:0C:12:0C:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/3130332e3132312e3234362e302f32332d3234203d3e20313335343738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.121.246.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:97:46:ce:9b:70:3e:e1:b7:6f:29:65:97:4e:ab:3e:47:18:
ab:fc:76:48:37:0d:2f:5a:79:9a:1e:ce:e2:7e:10:55:ff:6e:
a0:cc:00:4d:84:d2:4a:fb:9e:cf:0c:ee:b3:84:60:e7:5b:51:
93:5f:8d:f0:3f:05:2c:81:a7:6b:07:86:0f:9f:ad:1b:8b:27:
68:d9:7d:8f:98:3a:77:8d:06:c7:d4:bf:55:7c:07:c7:01:c6:
30:eb:dc:b1:45:8a:43:ad:47:0b:70:08:b8:ee:4d:e6:e4:5a:
98:e3:65:0f:2f:b7:31:a4:d7:76:b5:6a:a4:3f:d1:9b:0c:37:
50:5e:24:59:56:78:dd:5e:21:97:3c:2c:9f:f6:08:46:f0:6a:
ef:21:29:b8:e8:30:75:8e:a1:20:88:dc:42:0b:8f:d2:d3:08:
23:de:17:b4:0c:06:b9:2f:34:06:75:09:f7:26:8e:3a:0d:ab:
cc:6d:92:0f:a4:8a:aa:67:f5:7c:c1:8a:d2:6f:d3:aa:a5:c4:
50:b3:5b:c0:d4:8f:50:21:d8:b4:e9:0d:ad:e3:11:6b:ab:60:
cd:e2:d2:70:4f:a6:83:f4:11:bf:64:d7:74:7d:85:8b:a9:49:
91:a7:66:e4:8d:94:86:d1:b9:ca:9d:eb:ed:40:b8:5e:b3:46:
33:cd:04:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 11:48:53 2025 by rpki-client