This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/3130332e35362e38302e302f32332d3234203d3e20313532303030.roa
File: 3130332e35362e38302e302f32332d3234203d3e20313532303030.roa (raw, json)
Hash identifier: DfqIL490+LsA+4agQ2y8Kna/SVON2TJhoIAx11noI9Y=
Subject key identifier: D1:D6:80:17:EC:8D:4B:26:25:E1:A1:28:A6:F2:75:CE:E1:04:BB:C0
Certificate issuer: /CN=A2F0AF113182368555F5F0F92DC1A0EBD9895596
Certificate serial: 3D1DB683E5BD549233B5C4CFCF0792211740B731
Authority key identifier: A2:F0:AF:11:31:82:36:85:55:F5:F0:F9:2D:C1:A0:EB:D9:89:55:96
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F0AF113182368555F5F0F92DC1A0EBD9895596.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/3130332e35362e38302e302f32332d3234203d3e20313532303030.roa
Signing time: Thu 06 Nov 2025 08:02:27 +0000
ROA not before: Thu 06 Nov 2025 07:57:27 +0000
ROA not after: Thu 05 Nov 2026 08:02:27 +0000
asID: 152000
IP address blocks: 103.56.80.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.crl
rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F0AF113182368555F5F0F92DC1A0EBD9895596.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 08:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:1d:b6:83:e5:bd:54:92:33:b5:c4:cf:cf:07:92:21:17:40:b7:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2F0AF113182368555F5F0F92DC1A0EBD9895596
Validity
Not Before: Nov 6 07:57:27 2025 GMT
Not After : Nov 5 08:02:27 2026 GMT
Subject: CN=D1D68017EC8D4B2625E1A128A6F275CEE104BBC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:36:a4:44:1a:cf:2b:50:2f:ed:7d:0d:fe:f7:
8e:f9:9e:58:bb:48:4f:cd:9d:99:04:53:11:93:8b:
a8:1b:a6:60:65:28:78:de:06:0c:ad:69:e4:90:10:
58:98:75:21:4d:0c:f9:57:84:80:3d:25:29:c4:b4:
bd:6e:92:e5:7f:87:1f:04:29:11:02:6d:ce:e9:86:
6f:f0:48:e8:6f:4d:cd:2a:ed:e2:09:92:05:5d:0a:
88:76:e0:aa:52:0f:de:a9:12:9f:0a:93:b6:60:8c:
6f:5f:bc:dc:6a:0b:98:e9:4c:c4:77:61:89:b8:4d:
17:6f:a1:0e:98:09:91:76:d2:09:6d:a8:92:be:b8:
5e:0a:27:82:8e:b1:fa:b6:08:9e:a9:c7:d5:d1:55:
94:90:d2:49:52:fe:fe:07:c3:d0:ad:45:76:f0:d0:
ea:9c:9d:68:07:00:f8:5e:4e:bc:ea:1b:d0:03:ea:
4a:ed:e7:27:1a:f2:7e:a6:3b:d4:4d:4f:2e:91:9f:
c3:1c:f8:81:ae:6b:0f:03:f2:93:03:51:32:ff:4c:
8b:c5:8e:4d:69:45:87:6b:5d:3d:f9:28:4b:46:76:
a6:a6:6e:ba:fc:7d:ea:ae:bd:c3:bc:4c:58:06:67:
b2:7b:09:80:52:ed:f9:e1:0c:a2:9c:df:ff:73:b8:
cc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D6:80:17:EC:8D:4B:26:25:E1:A1:28:A6:F2:75:CE:E1:04:BB:C0
X509v3 Authority Key Identifier:
keyid:A2:F0:AF:11:31:82:36:85:55:F5:F0:F9:2D:C1:A0:EB:D9:89:55:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F0AF113182368555F5F0F92DC1A0EBD9895596.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/3130332e35362e38302e302f32332d3234203d3e20313532303030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.56.80.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:9e:43:88:85:1e:16:54:2b:e5:b9:fb:34:38:a7:8d:58:c1:
32:a9:37:08:b1:14:b4:3d:c0:9b:63:7b:10:e6:53:ca:ae:d4:
6c:84:e2:95:b8:d0:ca:93:01:28:60:0d:5b:46:d3:85:83:79:
e7:c5:25:ab:42:89:27:1b:19:ba:6c:bc:23:4d:dd:cc:e4:4e:
b4:aa:0e:b2:a6:7f:b9:28:8b:f1:8a:8b:48:cd:87:07:84:75:
3c:24:84:02:89:3b:d2:ae:d3:fc:f8:4f:d6:cf:07:68:de:12:
92:23:3a:0c:3f:56:2d:5e:bc:1b:39:29:3e:c1:ff:0b:29:cd:
37:8c:27:7b:c4:24:49:f9:e4:bb:6a:ee:c2:12:b3:f1:35:f2:
34:7f:29:cc:99:bc:2c:1a:39:78:40:94:61:68:86:0b:68:84:
dd:eb:22:10:e4:6e:80:7c:1b:aa:d5:11:f4:cf:e8:66:cd:25:
ed:ef:1e:dc:c2:b7:cc:0f:fc:8a:e9:64:99:b0:7f:ce:a6:72:
33:5e:7f:88:7c:52:45:0f:2b:10:9e:5b:fc:98:80:e5:f5:7f:
95:dc:66:ff:76:35:a4:51:fc:62:f3:dd:ac:7b:23:a4:e1:af:
f1:c7:eb:d6:64:30:60:22:89:a4:a9:8f:60:01:af:37:fd:57:
9c:72:d7:62
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUPR22g+W9VJIztcTPzweSIRdAtzEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTJGMEFGMTEzMTgyMzY4NTU1RjVGMEY5MkRDMUEwRUJE
OTg5NTU5NjAeFw0yNTExMDYwNzU3MjdaFw0yNjExMDUwODAyMjdaMDMxMTAvBgNV
BAMTKEQxRDY4MDE3RUM4RDRCMjYyNUUxQTEyOEE2RjI3NUNFRTEwNEJCQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKNqREGs8rUC/tfQ3+9475nli7
SE/NnZkEUxGTi6gbpmBlKHjeBgytaeSQEFiYdSFNDPlXhIA9JSnEtL1ukuV/hx8E
KRECbc7phm/wSOhvTc0q7eIJkgVdCoh24KpSD96pEp8Kk7ZgjG9fvNxqC5jpTMR3
YYm4TRdvoQ6YCZF20gltqJK+uF4KJ4KOsfq2CJ6px9XRVZSQ0klS/v4Hw9CtRXbw
0OqcnWgHAPheTrzqG9AD6krt5yca8n6mO9RNTy6Rn8Mc+IGuaw8D8pMDUTL/TIvF
jk1pRYdrXT35KEtGdqambrr8fequvcO8TFgGZ7J7CYBS7fnhDKKc3/9zuMz1AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU0daAF+yNSyYl4aEopvJ1zuEEu8AwHwYDVR0j
BBgwFoAUovCvETGCNoVV9fD5LcGg69mJVZYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
ZWQyOGRlOC0zMGExLTQ5MzItYjUzOS0yMjM4YmE3NTkzMGEvMC9BMkYwQUYxMTMx
ODIzNjg1NTVGNUYwRjkyREMxQTBFQkQ5ODk1NTk2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTJGMEFGMTEzMTgyMzY4NTU1RjVGMEY5MkRDMUEwRUJEOTg5
NTU5Ni5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhlZDI4ZGU4LTMwYTEtNDkzMi1i
NTM5LTIyMzhiYTc1OTMwYS8wLzMxMzAzMzJlMzUzNjJlMzgzMDJlMzAyZjMyMzMy
ZDMyMzQyMDNkM2UyMDMxMzUzMjMwMzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWc4UDANBgkqhkiG
9w0BAQsFAAOCAQEAa55DiIUeFlQr5bn7NDinjVjBMqk3CLEUtD3Am2N7EOZTyq7U
bITilbjQypMBKGANW0bThYN558Ulq0KJJxsZumy8I03dzOROtKoOsqZ/uSiL8YqL
SM2HB4R1PCSEAok70q7T/PhP1s8HaN4SkiM6DD9WLV68GzkpPsH/CynNN4wne8Qk
Sfnku2ruwhKz8TXyNH8pzJm8LBo5eECUYWiGC2iE3esiEORugHwbqtUR9M/oZs0l
7e8e3MK3zA/8iulkmbB/zqZyM15/iHxSRQ8rEJ5b/JiA5fV/ldxm/3Y1pFH8YvPd
rHsjpOGv8cfr1mQwYCKJpKmPYAGvN/1XnHLXYg==
-----END CERTIFICATE-----
Generated at Wed Dec 3 16:36:20 2025 by rpki-client