This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/3130332e3136312e3133302e302f32332d3233203d3e20313431363133.roa
File: 3130332e3136312e3133302e302f32332d3233203d3e20313431363133.roa (raw, json)
Hash identifier: tWY/6umjYIKYO4Yi6unWY6z8ANffH061XFtZ500p3RI=
Subject key identifier: 90:EA:57:D5:CC:EF:63:B4:32:05:F7:33:6F:B2:B4:8A:14:52:B8:6E
Certificate issuer: /CN=F256ED0C68D48E70DDBE3473644FDBA420E82FBC
Certificate serial: 585826B0E7E944898719F6C7F76F1F0E8E296171
Authority key identifier: F2:56:ED:0C:68:D4:8E:70:DD:BE:34:73:64:4F:DB:A4:20:E8:2F:BC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/3130332e3136312e3133302e302f32332d3233203d3e20313431363133.roa
Signing time: Tue 18 Nov 2025 16:00:00 +0000
ROA not before: Tue 18 Nov 2025 15:55:00 +0000
ROA not after: Tue 17 Nov 2026 16:00:00 +0000
asID: 141613
IP address blocks: 103.161.130.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.crl
rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Dec 2025 23:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:58:26:b0:e7:e9:44:89:87:19:f6:c7:f7:6f:1f:0e:8e:29:61:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F256ED0C68D48E70DDBE3473644FDBA420E82FBC
Validity
Not Before: Nov 18 15:55:00 2025 GMT
Not After : Nov 17 16:00:00 2026 GMT
Subject: CN=90EA57D5CCEF63B43205F7336FB2B48A1452B86E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ba:06:28:d8:35:cb:59:bc:61:34:08:fc:66:
2f:5a:05:e8:ae:c0:9d:30:10:6b:70:8e:84:03:86:
f9:70:e0:24:70:7a:3c:d2:8e:c6:79:41:e4:a8:50:
d8:6a:69:5d:e8:ae:4c:59:af:91:1e:40:ba:b5:28:
2a:b5:d6:69:40:1e:d7:f0:13:41:d6:0f:92:e7:05:
cc:ac:08:68:a5:d3:46:fc:0d:b6:99:d3:b2:9a:29:
3c:48:ea:b7:b4:03:ec:5f:66:9d:3d:cc:4b:69:8c:
d6:1e:33:5a:fd:17:b9:c5:a2:33:71:e1:74:c5:56:
0b:91:71:bd:27:91:37:46:aa:38:b9:76:0d:92:17:
21:24:68:89:88:7a:89:39:d8:01:4d:e0:33:69:d1:
cb:a9:ce:98:1a:e3:cb:9c:58:30:5b:e0:1f:ad:ed:
6e:5d:ff:9a:66:e3:44:0c:f0:0d:d4:2f:21:06:45:
d3:4f:da:44:a8:c6:50:26:d2:ac:43:5e:06:ce:f1:
e9:5b:cf:a6:0d:4d:55:66:2f:b1:fd:a3:6b:1b:8b:
63:6a:67:f1:c5:ae:f2:f4:8a:1e:30:73:1b:e3:7b:
84:92:6e:1e:95:ad:4a:31:d6:ac:ad:0c:d6:25:2c:
5a:72:60:f1:15:91:6f:9a:77:7a:b1:b1:33:17:0d:
90:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:EA:57:D5:CC:EF:63:B4:32:05:F7:33:6F:B2:B4:8A:14:52:B8:6E
X509v3 Authority Key Identifier:
keyid:F2:56:ED:0C:68:D4:8E:70:DD:BE:34:73:64:4F:DB:A4:20:E8:2F:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/3130332e3136312e3133302e302f32332d3233203d3e20313431363133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.161.130.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:9f:4c:ca:c0:c8:c1:9f:9d:60:67:91:c3:36:97:18:e1:7a:
76:d9:ff:5e:31:e9:b4:e1:ea:96:9a:00:cd:2b:39:06:ad:52:
53:b9:be:da:a4:af:ac:57:2b:e3:51:e9:7d:c9:e5:d5:da:93:
52:96:c4:17:2a:00:81:5e:fe:23:79:f5:e2:ba:b9:ef:97:0e:
18:94:d0:b0:0b:16:26:85:74:4e:4a:94:0b:ab:2a:4b:33:a4:
3f:c7:d2:f9:d1:3a:c4:38:5b:1c:43:f9:93:90:00:b8:9d:56:
a0:97:9b:28:e5:36:36:8c:75:e4:f7:cc:ed:e2:5a:a1:21:fe:
51:2f:6b:02:8a:da:20:bf:f5:01:a2:00:de:49:dc:f2:0f:ad:
e2:ad:57:b2:64:d0:14:90:6a:2f:1d:3d:86:5c:70:cc:85:8e:
21:a7:13:2e:e7:38:06:ae:8f:18:d9:c2:43:bb:17:21:e5:da:
e4:60:c2:90:30:ab:f6:09:84:ed:85:2b:56:a3:2d:38:73:b6:
6b:8e:5f:09:9e:f7:fc:2e:3b:10:a6:be:5f:55:60:2a:03:63:
d4:18:0f:ef:b1:8d:40:04:8a:b2:98:83:4b:3b:48:54:11:7b:
15:95:c1:60:66:3a:52:67:d4:b6:77:7c:55:1d:c7:15:29:ac:
38:e5:5c:fd
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUWFgmsOfpRImHGfbH928fDo4pYXEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjI1NkVEMEM2OEQ0OEU3MEREQkUzNDczNjQ0RkRCQTQy
MEU4MkZCQzAeFw0yNTExMTgxNTU1MDBaFw0yNjExMTcxNjAwMDBaMDMxMTAvBgNV
BAMTKDkwRUE1N0Q1Q0NFRjYzQjQzMjA1RjczMzZGQjJCNDhBMTQ1MkI4NkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKugYo2DXLWbxhNAj8Zi9aBeiu
wJ0wEGtwjoQDhvlw4CRwejzSjsZ5QeSoUNhqaV3orkxZr5EeQLq1KCq11mlAHtfw
E0HWD5LnBcysCGil00b8DbaZ07KaKTxI6re0A+xfZp09zEtpjNYeM1r9F7nFojNx
4XTFVguRcb0nkTdGqji5dg2SFyEkaImIeok52AFN4DNp0cupzpga48ucWDBb4B+t
7W5d/5pm40QM8A3ULyEGRdNP2kSoxlAm0qxDXgbO8elbz6YNTVVmL7H9o2sbi2Nq
Z/HFrvL0ih4wcxvje4SSbh6VrUox1qytDNYlLFpyYPEVkW+ad3qxsTMXDZArAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUkOpX1czvY7QyBfczb7K0ihRSuG4wHwYDVR0j
BBgwFoAU8lbtDGjUjnDdvjRzZE/bpCDoL7wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
ZTVjNzNjYy05ODVlLTRlOTItYmE2OS1jZDhiZmZlNGE1M2QvMC9GMjU2RUQwQzY4
RDQ4RTcwRERCRTM0NzM2NDRGREJBNDIwRTgyRkJDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjI1NkVEMEM2OEQ0OEU3MEREQkUzNDczNjQ0RkRCQTQyMEU4
MkZCQy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdlNWM3M2NjLTk4NWUtNGU5Mi1i
YTY5LWNkOGJmZmU0YTUzZC8wLzMxMzAzMzJlMzEzNjMxMmUzMTMzMzAyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzEzNjMxMzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnoYIwDQYJ
KoZIhvcNAQELBQADggEBABqfTMrAyMGfnWBnkcM2lxjhenbZ/14x6bTh6paaAM0r
OQatUlO5vtqkr6xXK+NR6X3J5dXak1KWxBcqAIFe/iN59eK6ue+XDhiU0LALFiaF
dE5KlAurKkszpD/H0vnROsQ4WxxD+ZOQALidVqCXmyjlNjaMdeT3zO3iWqEh/lEv
awKK2iC/9QGiAN5J3PIPreKtV7Jk0BSQai8dPYZccMyFjiGnEy7nOAaujxjZwkO7
FyHl2uRgwpAwq/YJhO2FK1ajLThztmuOXwme9/wuOxCmvl9VYCoDY9QYD++xjUAE
irKYg0s7SFQRexWVwWBmOlJn1LZ3fFUdxxUprDjlXP0=
-----END CERTIFICATE-----
Generated at Wed Dec 3 15:29:07 2025 by rpki-client