This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34352e302f32342d3234203d3e203233363934.roa
File: 3130332e36362e34352e302f32342d3234203d3e203233363934.roa (raw, json)
Hash identifier: 3D9vuP9WnybAIy/tjpIyzYKT6Y/ASbbbLJ7Kn+x1z7Q=
Subject key identifier: FF:A9:40:73:2F:B4:72:95:CC:D7:13:46:A9:45:C0:03:74:DA:1A:BA
Certificate issuer: /CN=3E0D060F214DF8E6493243033EBD30ABD627ED36
Certificate serial: 4884DF3FB4BB2B181BD8970644E88ECA83ACE17E
Authority key identifier: 3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34352e302f32342d3234203d3e203233363934.roa
Signing time: Thu 08 May 2025 11:00:01 +0000
ROA not before: Thu 08 May 2025 10:55:01 +0000
ROA not after: Thu 07 May 2026 11:00:01 +0000
asID: 23694
IP address blocks: 103.66.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl
rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 16:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:84:df:3f:b4:bb:2b:18:1b:d8:97:06:44:e8:8e:ca:83:ac:e1:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E0D060F214DF8E6493243033EBD30ABD627ED36
Validity
Not Before: May 8 10:55:01 2025 GMT
Not After : May 7 11:00:01 2026 GMT
Subject: CN=FFA940732FB47295CCD71346A945C00374DA1ABA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:35:4b:41:27:18:0f:0b:61:23:bf:ae:ed:98:
fd:2a:ca:67:37:ee:5e:65:74:b6:92:91:7e:ca:55:
58:b6:fd:f0:32:71:2e:3e:f0:df:55:8a:50:d6:a1:
59:34:cb:7c:f3:6b:37:34:b7:fd:e6:d6:32:45:12:
82:aa:11:f2:3d:3d:c2:13:87:47:f6:65:4e:9c:f3:
71:04:1f:fa:db:af:d6:cc:49:27:3a:6c:0c:0a:2d:
40:cd:0b:37:db:4e:30:c8:77:72:c4:95:8e:36:19:
60:c4:d7:8d:31:61:11:77:b4:2b:13:93:93:76:ec:
02:53:8b:44:a4:30:12:b7:3b:15:c0:3f:13:53:8a:
ab:f9:0e:da:94:9c:76:e8:e3:fc:6d:8c:37:43:12:
67:2d:ae:f1:8a:d0:57:a9:39:6b:f8:78:16:cc:19:
ef:98:5d:b5:b6:82:df:b5:a5:07:fe:9f:e9:50:7a:
b5:58:b7:52:30:a2:18:23:c3:ab:93:3b:d7:5e:63:
3b:f8:5d:8a:da:ab:00:7b:96:11:f8:99:a2:a6:ff:
78:84:89:70:5a:5c:f3:74:73:3f:dc:6b:4d:98:15:
60:09:fd:52:9b:4d:19:79:16:17:0d:f1:7e:75:d0:
10:0c:fc:3e:1d:14:e1:1d:d9:36:c8:06:a2:5e:01:
92:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A9:40:73:2F:B4:72:95:CC:D7:13:46:A9:45:C0:03:74:DA:1A:BA
X509v3 Authority Key Identifier:
keyid:3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34352e302f32342d3234203d3e203233363934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.66.45.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:de:e2:c5:57:f6:c7:0b:30:af:14:d9:57:1e:0c:0d:cf:2c:
45:45:7f:a0:8b:38:7e:fc:dd:05:7a:ed:b0:e6:c3:cf:cd:39:
73:f0:09:a6:0a:99:72:28:42:d1:e2:8a:0b:90:96:a7:4d:7c:
44:9a:f7:59:4e:dd:7f:3d:d6:c5:e9:26:5f:ee:42:ba:74:88:
17:e1:f8:85:43:65:39:4b:2a:8d:a7:b6:f5:d6:21:b2:39:45:
b1:14:e5:ae:f3:7c:19:d3:6a:e1:b7:c0:9f:54:f3:3c:06:f2:
a6:94:76:c8:94:0e:1a:de:eb:7a:fc:d9:9a:9d:1b:80:f2:41:
5d:2d:ca:4f:fb:d6:50:33:cc:f1:83:02:76:06:c7:05:58:6c:
8f:c0:ea:ad:47:c8:86:0a:4e:f0:9f:72:50:21:5d:00:b5:e7:
d0:9c:7c:13:0a:30:67:ca:ea:67:29:39:86:59:c1:b9:2d:19:
e1:3b:a9:6e:2c:a1:f9:78:90:af:a3:8d:81:16:5f:84:55:b0:
ee:9d:a2:4c:f0:96:53:28:46:b9:fd:69:ac:f7:5b:42:98:11:
ee:ed:72:41:d6:65:3d:17:f3:14:2e:c0:a2:80:e0:42:00:ba:
53:cf:0b:31:33:8a:2e:32:74:5e:0a:44:55:76:bb:7c:18:32:
d7:35:4a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:47:06 2025 by rpki-client