This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/3130332e3135332e38332e302f32342d3234203d3e20313439373034.roa
File: 3130332e3135332e38332e302f32342d3234203d3e20313439373034.roa (raw, json)
Hash identifier: CyqCQFsLxJfTBDBdmJ04cZzDUHG5T26HrmU816zhY/E=
Subject key identifier: BB:B4:D7:54:51:14:FB:74:D7:A2:B7:6E:68:21:86:34:D7:DF:97:D1
Certificate issuer: /CN=AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2
Certificate serial: 48EA576F01A62F44BCE6C239CD07FFB8D24C4990
Authority key identifier: AD:9B:CA:DB:23:5B:6D:EE:6C:AD:4E:B4:C5:3A:A8:B3:BA:73:FE:F2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/3130332e3135332e38332e302f32342d3234203d3e20313439373034.roa
Signing time: Mon 22 Dec 2025 01:15:56 +0000
ROA not before: Mon 22 Dec 2025 01:10:56 +0000
ROA not after: Mon 21 Dec 2026 01:15:56 +0000
asID: 149704
IP address blocks: 103.153.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl
rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 02:41:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:ea:57:6f:01:a6:2f:44:bc:e6:c2:39:cd:07:ff:b8:d2:4c:49:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2
Validity
Not Before: Dec 22 01:10:56 2025 GMT
Not After : Dec 21 01:15:56 2026 GMT
Subject: CN=BBB4D7545114FB74D7A2B76E68218634D7DF97D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:59:69:57:f8:5a:0d:bd:c8:82:72:f7:b5:36:
ef:9a:37:21:c9:15:7a:88:f9:18:43:9a:15:0f:04:
93:27:d3:2e:5e:b7:de:83:bb:65:d0:5f:7a:87:dc:
c8:5b:89:75:e8:85:f8:cc:a1:d2:f9:45:b5:56:86:
d6:ef:2d:bf:cb:17:e3:1f:c5:f2:0f:fd:61:99:76:
17:4c:d4:2e:7a:84:70:34:9d:cb:d5:32:32:74:46:
4f:21:b6:96:f9:1e:d2:87:25:11:59:91:c4:e3:d0:
77:b7:36:f4:b2:c9:3c:55:26:b6:b5:08:04:51:ce:
4c:d7:80:63:75:4e:8d:04:d7:a2:5e:07:8c:dd:3d:
ce:e0:de:a7:08:21:0d:a2:1d:fc:19:57:34:d7:2a:
d8:19:0d:e6:5c:3d:b1:61:71:25:67:61:a1:28:f1:
b4:db:d8:6b:ec:e3:2b:ea:44:07:15:34:dc:c3:86:
8b:70:58:ad:13:dc:98:4a:c8:1a:96:9d:6f:9b:da:
47:a4:59:bf:6e:94:65:21:d3:79:63:c6:0b:f8:fc:
0f:18:12:96:d8:0f:e7:16:81:c1:7f:50:ce:ed:3a:
0d:0b:9c:79:85:7c:fd:b0:49:95:70:d5:01:e4:e0:
f3:12:44:3f:1e:88:0c:35:dd:95:e0:fb:5e:bc:61:
1a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B4:D7:54:51:14:FB:74:D7:A2:B7:6E:68:21:86:34:D7:DF:97:D1
X509v3 Authority Key Identifier:
keyid:AD:9B:CA:DB:23:5B:6D:EE:6C:AD:4E:B4:C5:3A:A8:B3:BA:73:FE:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/3130332e3135332e38332e302f32342d3234203d3e20313439373034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.153.83.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:f0:1f:d7:ca:a1:1d:10:ed:4a:70:73:7c:e5:d1:fe:8b:6b:
cd:00:c2:f0:cc:87:9c:87:8a:c5:61:b7:69:3e:b7:f5:a3:c1:
f7:69:4e:43:6e:5f:32:64:9d:99:05:f3:06:4c:49:a4:cf:6f:
c8:6e:02:ac:c6:bc:4d:88:d9:ab:5b:76:3c:e8:a7:b2:3d:d8:
a6:ae:89:af:cb:21:c8:00:17:e2:69:99:61:3d:4c:e0:ab:c1:
cf:06:14:19:d7:4b:bf:15:18:8d:f0:7f:bf:58:b9:35:1c:e7:
b7:fc:b6:0c:ce:fd:a0:fc:9c:ed:da:e2:67:0e:a0:ee:3e:78:
a8:6d:72:6a:e7:9c:c6:5f:4e:41:ae:6d:5d:87:20:31:c5:1f:
e7:1d:be:f2:5b:a2:c0:ba:3b:31:7f:2a:89:62:79:6f:ca:21:
50:2f:9d:e8:5d:06:8f:24:d8:18:52:d1:14:95:b7:46:d9:fc:
23:51:c9:d0:97:21:72:23:e2:22:e1:a4:f2:79:80:25:d2:77:
a4:8b:7c:08:67:74:d8:65:d8:59:e4:33:58:ed:4b:33:0a:49:
7d:cf:03:f9:27:b6:4c:ab:c1:8a:df:c3:37:d6:1b:79:21:83:
cf:2f:23:a2:35:00:86:5a:fe:31:ca:18:d4:ad:78:80:a9:db:
e1:8f:ec:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:42:43 2026 by rpki-client