This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/3130332e3136322e3135322e302f32342d3234203d3e20313431363630.roa
File: 3130332e3136322e3135322e302f32342d3234203d3e20313431363630.roa (raw, json)
Hash identifier: y57hfH1lBOVunH6wiRrVTULW7uqhPZnP/h9yu/EhF5I=
Subject key identifier: 0E:DD:AA:01:59:93:9B:32:A2:20:F0:09:5C:B9:23:59:47:C5:00:9D
Certificate issuer: /CN=83906AB18A49EC17ADD841F2072FDC55E0EC22F6
Certificate serial: 3EA0F9DDA580FD63E37F5C49A1DE4442ED9A9650
Authority key identifier: 83:90:6A:B1:8A:49:EC:17:AD:D8:41:F2:07:2F:DC:55:E0:EC:22:F6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/3130332e3136322e3135322e302f32342d3234203d3e20313431363630.roa
Signing time: Tue 08 Apr 2025 06:00:46 +0000
ROA not before: Tue 08 Apr 2025 05:55:46 +0000
ROA not after: Tue 07 Apr 2026 06:00:46 +0000
asID: 141660
IP address blocks: 103.162.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.crl
rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 15:40:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:a0:f9:dd:a5:80:fd:63:e3:7f:5c:49:a1:de:44:42:ed:9a:96:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83906AB18A49EC17ADD841F2072FDC55E0EC22F6
Validity
Not Before: Apr 8 05:55:46 2025 GMT
Not After : Apr 7 06:00:46 2026 GMT
Subject: CN=0EDDAA0159939B32A220F0095CB9235947C5009D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1f:74:45:34:09:f0:09:e1:bf:06:f4:bb:cf:
f0:1b:57:41:4c:67:5c:7d:2e:89:e7:9f:b9:86:bc:
62:18:29:2d:21:e1:e2:a0:a7:80:7f:eb:f9:de:0d:
18:b9:98:84:94:a7:a0:0b:3d:f3:02:c8:d6:d2:83:
49:72:bb:b8:87:d2:09:36:8b:6d:9b:a1:ea:79:2d:
0c:5d:e5:0e:f8:ce:07:00:bb:bc:3b:7c:92:93:97:
dd:26:f2:81:9f:b0:eb:13:62:af:3a:d7:05:b5:8f:
8b:de:14:48:63:8b:d5:fe:26:66:39:05:80:58:df:
4d:b4:e1:86:6f:32:4a:f1:6e:a1:71:a5:3b:02:22:
b1:ee:54:89:06:62:d6:06:aa:ab:1b:f0:98:cb:57:
e9:aa:7b:fb:8d:ec:1c:36:df:73:36:0d:37:13:b5:
35:d9:24:f3:72:6c:d4:2b:2e:c3:af:80:3b:9c:2e:
d8:16:31:e2:da:c4:9f:50:8f:c4:6c:91:1f:36:a1:
7c:3f:a2:b6:7e:d2:41:cf:ec:62:d6:01:26:a0:83:
d9:2b:f5:5e:75:38:fa:98:88:b2:97:f1:86:17:f5:
c4:ff:30:aa:38:51:9b:37:39:2a:b8:af:01:16:a5:
4b:d7:bc:9d:ad:78:88:07:d2:d1:d4:fd:04:9f:0a:
b0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DD:AA:01:59:93:9B:32:A2:20:F0:09:5C:B9:23:59:47:C5:00:9D
X509v3 Authority Key Identifier:
keyid:83:90:6A:B1:8A:49:EC:17:AD:D8:41:F2:07:2F:DC:55:E0:EC:22:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/3130332e3136322e3135322e302f32342d3234203d3e20313431363630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.162.152.0/24
Signature Algorithm: sha256WithRSAEncryption
59:e1:b6:1c:dd:75:cd:d0:9d:5c:a2:15:85:ee:c6:76:49:97:
06:cd:5b:6f:6d:e9:37:a9:ca:5b:1a:2a:8d:c9:d9:09:f4:3f:
63:00:41:08:1b:47:b9:c7:eb:6d:3f:31:9a:10:6f:33:6e:5c:
43:33:9e:37:ee:3b:5c:b4:e2:a0:e3:a1:f4:f4:1a:1b:7e:b9:
0c:81:7e:a5:9b:4e:9e:61:89:00:90:c4:44:fa:72:1b:59:2e:
1c:96:0c:ab:1b:d6:24:70:02:40:1c:c2:f5:4b:83:35:f2:05:
bb:23:58:41:be:69:0a:67:71:73:1d:da:26:65:eb:d1:93:e3:
27:08:b9:36:3b:ad:00:3c:bd:e3:3a:6c:09:18:57:33:c7:98:
76:5b:b0:0f:43:17:ad:39:20:8c:63:99:3d:99:33:6e:5c:1a:
2c:7e:5a:b7:00:0b:f4:1d:4d:ea:8f:d9:db:d5:22:3a:25:29:
0f:b2:a4:65:19:14:ae:2a:d8:e9:e9:73:a7:9c:cf:19:3b:6a:
c8:89:bd:82:09:b9:64:8a:3d:2c:1a:4f:81:a7:86:89:8e:32:
da:84:66:9d:c5:0d:11:23:cf:c6:c5:e9:03:44:1f:aa:d0:7a:
5c:87:04:7a:b4:60:b5:27:92:3e:c1:f0:03:3c:a9:b3:d3:4d:
7e:9d:7f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 15:51:09 2025 by rpki-client