This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/3130332e3234302e3131312e302f32342d3234203d3e203538383139.roa
File: 3130332e3234302e3131312e302f32342d3234203d3e203538383139.roa (raw, json)
Hash identifier: LrqOLogV2pqJm1JD+jgGDFnoqudanN5BU7ote6ngSrk=
Subject key identifier: F4:67:AC:24:0C:9B:A6:F1:EB:E4:EA:A6:7A:33:1D:F5:81:06:DF:09
Certificate issuer: /CN=F8DF40E4C95F9EBF81453870736995E91BBB92F7
Certificate serial: 71ECC715CA294B3EB3D7B2F048468A4B4B6DB6D0
Authority key identifier: F8:DF:40:E4:C9:5F:9E:BF:81:45:38:70:73:69:95:E9:1B:BB:92:F7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8DF40E4C95F9EBF81453870736995E91BBB92F7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/3130332e3234302e3131312e302f32342d3234203d3e203538383139.roa
Signing time: Thu 09 Oct 2025 12:02:26 +0000
ROA not before: Thu 09 Oct 2025 11:57:26 +0000
ROA not after: Thu 08 Oct 2026 12:02:26 +0000
asID: 58819
IP address blocks: 103.240.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.crl
rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8DF40E4C95F9EBF81453870736995E91BBB92F7.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 19:20:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:ec:c7:15:ca:29:4b:3e:b3:d7:b2:f0:48:46:8a:4b:4b:6d:b6:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8DF40E4C95F9EBF81453870736995E91BBB92F7
Validity
Not Before: Oct 9 11:57:26 2025 GMT
Not After : Oct 8 12:02:26 2026 GMT
Subject: CN=F467AC240C9BA6F1EBE4EAA67A331DF58106DF09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:eb:33:c1:48:d7:0e:36:49:06:65:24:2a:69:
d8:8b:f0:72:3b:d3:76:8c:a4:77:a0:6f:32:dc:3b:
64:cd:71:c1:bc:9e:55:c1:0a:16:d6:05:89:66:98:
05:06:ec:4c:ef:40:05:18:d7:10:98:f8:c3:b1:ab:
ea:06:6f:7f:b0:18:c4:5f:60:42:21:ff:5e:0d:02:
10:46:0f:06:5b:66:66:7b:51:4e:78:d2:e2:37:64:
c8:3c:73:fa:e2:c7:18:1b:61:2d:b2:97:e3:23:1b:
cc:45:68:e4:1f:ad:dd:d2:a4:a0:2a:9d:5e:14:c5:
1d:47:a8:f7:0d:48:65:97:6a:2e:ef:71:09:cb:e8:
f0:53:dd:94:3f:18:43:94:d2:62:cb:a8:a3:b2:b4:
d3:b4:f6:0d:bb:8b:8f:c8:a3:e2:0c:33:eb:b1:ec:
b8:33:56:67:35:47:87:68:3c:77:3b:bb:44:75:cd:
af:aa:3d:89:87:20:b7:14:7b:4a:87:05:b5:73:f3:
d2:f3:63:2e:69:06:b5:fd:27:5a:dd:96:2a:a1:84:
bd:65:51:8d:72:70:ca:ab:c7:d3:f7:01:b9:56:e5:
42:95:4d:6b:d6:a1:58:f4:e1:b2:b4:82:c9:fd:ea:
61:a4:d2:ba:44:69:aa:af:dd:cb:bd:e7:70:f3:fb:
81:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:67:AC:24:0C:9B:A6:F1:EB:E4:EA:A6:7A:33:1D:F5:81:06:DF:09
X509v3 Authority Key Identifier:
keyid:F8:DF:40:E4:C9:5F:9E:BF:81:45:38:70:73:69:95:E9:1B:BB:92:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8DF40E4C95F9EBF81453870736995E91BBB92F7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/3130332e3234302e3131312e302f32342d3234203d3e203538383139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.240.111.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:16:9a:86:89:82:b7:82:2e:71:00:ab:38:bf:70:72:16:29:
08:2a:83:8c:22:cb:6e:d6:ad:29:2c:18:95:b8:09:de:f8:98:
b5:49:5e:5f:be:fb:58:d0:d3:96:66:cf:93:3b:e2:11:17:53:
47:4a:86:0b:ce:2c:f4:66:a3:10:fb:3c:68:2b:fe:fb:a0:24:
2c:b0:6b:6a:77:10:f9:90:80:32:ca:22:fb:5c:2b:e2:12:53:
1e:07:c2:df:ad:ab:c0:4c:1b:b2:8e:24:8b:19:4c:6d:72:f3:
6f:a6:16:c4:1e:ee:55:8e:24:bd:fb:1b:77:d2:ae:c0:52:5f:
43:d0:87:4d:6e:0e:79:47:4b:18:af:8b:bd:e4:c3:1c:43:27:
fd:e1:5b:2d:f8:ad:b0:bd:72:d2:b1:28:3c:42:3f:17:19:d9:
2a:44:00:85:cb:30:db:96:00:61:57:23:01:2e:78:b2:a5:66:
42:fc:86:ba:0a:b5:c6:33:78:62:a1:db:1e:05:07:da:04:88:
b2:86:4a:df:59:25:11:2c:66:f1:cb:f7:72:78:43:78:2a:28:
e9:c4:3d:f5:b4:ce:05:ca:ee:76:93:62:8b:28:12:69:e2:c6:
e1:84:e4:9b:10:4b:1b:d1:5e:18:26:bf:12:84:94:0a:7e:c7:
22:90:9a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:13:24 2025 by rpki-client