This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/3130332e38372e36302e302f32322d3234203d3e20313336303932.roa
File: 3130332e38372e36302e302f32322d3234203d3e20313336303932.roa (raw, json)
Hash identifier: +xob4YEanp8C5GvuLdsQx6ikXowtOPpr/uG69DFpAKw=
Subject key identifier: 92:A1:0B:09:0F:93:8C:7F:C8:2F:17:2F:E8:EB:8B:21:D4:56:03:F6
Certificate issuer: /CN=339257A0C7951203C012BA5AF19EDB52E6790B03
Certificate serial: 771B4218C643A161B5775C4254B866CC8C5847AF
Authority key identifier: 33:92:57:A0:C7:95:12:03:C0:12:BA:5A:F1:9E:DB:52:E6:79:0B:03
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/3130332e38372e36302e302f32322d3234203d3e20313336303932.roa
Signing time: Thu 10 Apr 2025 22:00:00 +0000
ROA not before: Thu 10 Apr 2025 21:55:00 +0000
ROA not after: Thu 09 Apr 2026 22:00:00 +0000
asID: 136092
IP address blocks: 103.87.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.crl
rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 04:53:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:1b:42:18:c6:43:a1:61:b5:77:5c:42:54:b8:66:cc:8c:58:47:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=339257A0C7951203C012BA5AF19EDB52E6790B03
Validity
Not Before: Apr 10 21:55:00 2025 GMT
Not After : Apr 9 22:00:00 2026 GMT
Subject: CN=92A10B090F938C7FC82F172FE8EB8B21D45603F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bb:31:f2:c9:7a:5d:89:38:36:a7:ec:7f:b2:
de:c5:cf:ce:a7:c6:66:26:e9:50:78:cd:9a:48:a5:
e5:86:30:18:60:ac:0a:dd:f7:25:e8:32:7c:75:30:
49:7f:41:ae:ef:76:cf:de:f0:0b:7a:98:97:97:1e:
eb:db:4b:aa:f5:33:9c:fb:04:00:2c:2d:f8:57:ee:
a6:3d:82:96:34:c2:cd:e1:1c:a2:55:4d:37:bd:ca:
ec:5b:52:88:00:4c:3a:28:db:44:87:84:0d:ce:cb:
77:95:60:a5:ae:2e:ae:fd:ab:e2:37:4d:79:e5:16:
5a:ae:fd:e1:98:41:bc:62:20:ce:f8:e4:42:ea:20:
dc:4d:92:5a:f5:0c:44:f1:ce:99:d7:d3:06:a4:3b:
fd:70:53:7d:02:94:1a:1d:05:b2:ef:a6:a8:da:c3:
9d:a6:0b:5d:ae:b5:54:49:35:cb:47:1f:a0:32:e1:
34:b9:4e:bb:1b:6b:c7:4b:a7:f0:f6:a2:89:1d:ea:
a1:e4:e0:82:ea:c8:ec:23:18:74:73:f6:a8:65:51:
2a:25:80:d0:2f:f3:cd:75:3a:06:70:38:6e:dd:8a:
b3:6e:96:9d:62:09:d3:0d:fa:bd:bc:3c:10:5f:a2:
b8:d7:9a:79:c8:4a:30:b5:ae:a2:95:0f:a5:ba:f4:
51:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A1:0B:09:0F:93:8C:7F:C8:2F:17:2F:E8:EB:8B:21:D4:56:03:F6
X509v3 Authority Key Identifier:
keyid:33:92:57:A0:C7:95:12:03:C0:12:BA:5A:F1:9E:DB:52:E6:79:0B:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/3130332e38372e36302e302f32322d3234203d3e20313336303932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.87.60.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:95:40:e7:76:3c:da:c3:b9:7d:ad:d9:e4:d2:c9:45:de:65:
b3:48:7b:9e:32:c6:78:fc:63:42:f8:80:cd:f9:8d:21:53:98:
02:d9:69:68:e8:a8:6a:41:7b:36:b5:0c:d1:13:b9:69:c5:f9:
05:36:21:ac:94:2c:96:1b:54:36:30:d2:96:c9:48:54:da:9d:
a2:07:97:4b:5f:31:40:1a:33:53:ce:70:34:75:4d:73:a7:a4:
5d:9b:49:f8:9f:46:2e:1d:83:eb:b2:89:c0:2f:55:92:bd:40:
7c:fe:ef:74:81:65:d7:de:2a:18:50:c8:8f:0d:e7:1e:5e:30:
db:a7:47:dc:8e:ae:8e:24:15:8d:bd:22:f2:05:e6:95:61:ae:
a8:26:4f:99:09:63:fe:8c:3b:81:23:54:0d:ba:c6:60:3d:29:
26:33:9d:cc:eb:25:d3:7f:3c:f3:d5:80:54:15:fb:f2:17:87:
0d:ce:cd:fe:03:08:d2:54:58:1a:5a:78:35:ae:9b:32:30:4e:
da:f7:6d:7e:b1:9e:bb:f5:d8:ff:c3:5a:2a:72:a9:a7:36:16:
20:e8:bb:d8:ba:8f:68:d8:81:00:f3:93:83:5c:d0:d5:4d:e5:
17:26:9e:30:36:33:f7:40:08:d2:93:ff:2e:91:08:74:e7:01:
d4:cc:68:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:44:11 2025 by rpki-client