This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/3130332e3132322e392e302f32342d3234203d3e20313530393635.roa
File: 3130332e3132322e392e302f32342d3234203d3e20313530393635.roa (raw, json)
Hash identifier: QeU0/vEBTo6jIDTAqgbH9ossdE4o8/cj7giBqcJ2VYs=
Subject key identifier: D4:07:F5:DC:5F:45:D2:21:A0:FD:AF:5E:28:EF:B3:A3:D6:38:1F:DD
Certificate issuer: /CN=8B19ACE0A7391492B18BE27AC01D2A602872BFC0
Certificate serial: 243D9A1942C01BDC8F07445F5E6ACC51DB14E44C
Authority key identifier: 8B:19:AC:E0:A7:39:14:92:B1:8B:E2:7A:C0:1D:2A:60:28:72:BF:C0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/3130332e3132322e392e302f32342d3234203d3e20313530393635.roa
Signing time: Sat 14 Jun 2025 02:00:01 +0000
ROA not before: Sat 14 Jun 2025 01:55:01 +0000
ROA not after: Sat 13 Jun 2026 02:00:01 +0000
asID: 150965
IP address blocks: 103.122.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.crl
rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 15:32:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:3d:9a:19:42:c0:1b:dc:8f:07:44:5f:5e:6a:cc:51:db:14:e4:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B19ACE0A7391492B18BE27AC01D2A602872BFC0
Validity
Not Before: Jun 14 01:55:01 2025 GMT
Not After : Jun 13 02:00:01 2026 GMT
Subject: CN=D407F5DC5F45D221A0FDAF5E28EFB3A3D6381FDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9f:fb:24:b7:c5:3e:27:13:c7:58:8c:b4:74:
4d:90:b3:27:e4:6e:74:34:b2:c4:f7:9c:09:37:65:
3a:3d:ce:80:fa:7e:f6:cb:72:58:15:4e:77:d6:5c:
8b:f6:fb:40:2a:a4:61:60:45:7d:08:7a:44:d2:08:
1b:2c:a7:ad:9f:00:41:72:a0:a0:20:f3:ee:31:01:
48:c9:1d:75:9a:91:32:b2:f6:b0:8a:d6:bd:c0:70:
a9:f3:bf:7e:f8:db:cc:43:aa:e1:b3:79:ac:11:16:
83:3e:7a:68:ae:dc:86:b0:2f:f0:23:28:21:37:56:
f4:48:6b:16:13:87:f1:6b:a0:c5:21:27:ec:83:28:
9d:86:27:51:a4:c5:d4:ec:55:55:cf:da:83:7d:7b:
c5:a7:b0:59:6f:66:ab:f7:d8:7e:3e:28:e1:3f:ab:
79:57:15:c6:6f:1e:bd:62:eb:85:5c:a5:7f:f0:08:
3b:de:26:3d:20:01:6b:4e:80:e6:b0:39:e1:2f:ab:
68:56:34:4c:eb:bc:a9:f2:e9:0f:7c:6b:73:7f:22:
25:00:41:b1:fb:42:9a:8e:22:ad:c1:e8:17:b8:d8:
b9:33:dd:63:e2:51:af:2c:c6:c3:be:bd:f0:58:ec:
63:8d:33:07:af:56:71:3a:61:9b:da:0f:b0:79:2d:
f5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:07:F5:DC:5F:45:D2:21:A0:FD:AF:5E:28:EF:B3:A3:D6:38:1F:DD
X509v3 Authority Key Identifier:
keyid:8B:19:AC:E0:A7:39:14:92:B1:8B:E2:7A:C0:1D:2A:60:28:72:BF:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/3130332e3132322e392e302f32342d3234203d3e20313530393635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.122.9.0/24
Signature Algorithm: sha256WithRSAEncryption
91:1f:f6:53:c5:ea:32:5c:6d:6f:0a:c3:95:c2:7c:da:09:8a:
41:11:c8:20:a4:2a:f4:94:ee:6b:7e:dc:26:39:6a:5d:f6:c1:
c1:ad:3a:a3:78:3b:64:3e:ba:c8:03:92:15:37:fe:a4:2e:d0:
f0:99:df:14:db:46:c1:f7:b2:b5:44:c1:ff:be:72:b9:3c:68:
51:4c:64:a3:8f:84:aa:5f:0b:36:b4:0f:8d:c6:60:82:f9:95:
53:ac:01:fa:24:af:75:17:99:78:96:14:66:1b:f6:f8:c8:35:
69:9b:06:b5:23:f4:27:32:96:2a:ba:c8:30:c7:ce:b2:94:ce:
09:b1:b9:c0:58:d6:cd:28:2c:35:59:37:f6:d4:fb:08:a4:10:
3d:41:7c:21:85:fe:8f:06:87:6f:0b:d1:3c:e6:04:c3:74:d1:
6f:e6:e2:29:ae:8f:91:cb:d7:6b:1f:d1:40:e4:35:2e:8f:b3:
4c:cd:67:3f:e0:59:ca:06:72:3b:53:25:72:bb:c8:f2:43:f4:
03:20:21:26:e5:a2:3a:9b:9c:32:7d:79:b2:c7:b6:95:a2:83:
6b:3e:e5:a5:64:a3:a6:a0:13:7d:34:3e:9c:df:a3:69:b1:25:
5f:2f:63:9c:a0:c1:65:7c:5e:55:75:58:2e:66:10:72:b6:64:
8d:f6:63:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:37:18 2025 by rpki-client