This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/3130332e39372e37372e302f32342d3234203d3e20313336313331.roa
File: 3130332e39372e37372e302f32342d3234203d3e20313336313331.roa (raw, json)
Hash identifier: audNLou8WkSNI41O6Bj42zTe5yNLL3IkDF/evFV7jOs=
Subject key identifier: 29:83:C2:E5:D0:11:34:5E:20:EF:50:BE:1C:A2:E3:03:FE:0D:9B:DD
Certificate issuer: /CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67
Certificate serial: 20CE7624611570DF935FC7F3CAC6B474C4CB5C55
Authority key identifier: 7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/3130332e39372e37372e302f32342d3234203d3e20313336313331.roa
Signing time: Thu 21 Aug 2025 10:00:01 +0000
ROA not before: Thu 21 Aug 2025 09:55:01 +0000
ROA not after: Thu 20 Aug 2026 10:00:01 +0000
asID: 136131
IP address blocks: 103.97.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl
rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 20:18:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:ce:76:24:61:15:70:df:93:5f:c7:f3:ca:c6:b4:74:c4:cb:5c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67
Validity
Not Before: Aug 21 09:55:01 2025 GMT
Not After : Aug 20 10:00:01 2026 GMT
Subject: CN=2983C2E5D011345E20EF50BE1CA2E303FE0D9BDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f7:a4:ed:43:66:dc:f6:80:ce:ad:19:d4:ee:
fa:65:e1:69:60:fd:a6:be:dd:eb:68:74:b5:62:f0:
b3:b2:f1:ad:27:d9:b8:c9:99:32:b2:99:aa:aa:f1:
56:ef:f7:49:88:30:dd:1c:c4:ed:6c:19:01:94:ae:
9a:f9:e4:22:e8:06:5a:02:54:32:e0:af:ab:84:0c:
43:73:52:ed:50:90:45:64:fd:87:f7:57:ad:15:fd:
f0:e9:4b:c4:a7:fa:a2:72:aa:6a:f2:da:1f:d4:b1:
70:99:6c:02:e9:59:cc:66:e6:09:ef:fe:33:fa:e1:
0b:32:dd:8d:ad:c7:2a:7c:31:ff:ea:6e:bd:9b:ca:
20:0f:4e:1d:3c:10:d7:ba:3c:a2:c3:d5:3d:a1:84:
49:c7:55:6b:0f:ec:6d:d1:e8:f5:6f:d9:f1:5e:74:
e8:40:37:a4:06:31:ef:c5:a2:5a:c0:b1:9c:8b:fd:
9f:a0:9a:85:0e:37:c3:6b:21:ff:0b:5e:4a:fc:99:
89:94:1e:7d:d6:64:22:0e:61:6a:ce:49:4a:07:b8:
6b:f8:c7:c4:a5:59:b6:d0:a6:b1:f3:32:cd:1c:6d:
46:e9:92:55:51:38:e9:2a:a4:d8:07:73:6b:3d:ea:
83:f8:f4:fd:c6:99:2f:d7:3f:1e:1b:d0:14:ab:4a:
d3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:83:C2:E5:D0:11:34:5E:20:EF:50:BE:1C:A2:E3:03:FE:0D:9B:DD
X509v3 Authority Key Identifier:
keyid:7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/3130332e39372e37372e302f32342d3234203d3e20313336313331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.97.77.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:d5:78:2b:bd:ef:7c:9b:91:22:13:a4:17:b1:56:2c:fd:11:
a3:1b:66:16:70:a4:8b:8a:fe:a4:95:22:9a:d0:dd:63:a1:d9:
53:40:d1:50:90:75:7c:61:08:3f:d3:ab:36:93:b1:32:b3:ce:
75:d5:9a:59:17:95:94:c5:5d:e9:b5:53:9a:7f:e1:56:1b:da:
23:57:54:69:87:7a:c7:fd:8e:ff:72:b3:cd:11:1c:73:e9:0a:
ca:df:8e:c9:19:5b:2f:6e:f5:35:cc:6b:c4:ae:02:3a:ce:c8:
63:73:50:24:89:56:5f:99:2b:6b:05:e7:79:26:b3:a1:00:20:
02:c8:11:ef:71:bc:32:cf:12:ab:6d:03:dd:af:37:cf:ed:16:
c8:ee:c1:8e:f0:c7:78:a0:9a:3b:8b:b1:3c:93:7a:3f:09:07:
8b:72:22:a3:72:cf:13:46:f4:aa:5f:a8:ae:7d:74:0a:3e:67:
af:f0:03:28:db:8a:86:2e:76:52:27:78:81:22:21:17:01:8b:
68:d3:f3:b1:c6:a3:41:89:9f:12:63:fe:29:60:6c:4c:26:82:
db:e7:18:58:d0:0c:33:35:50:3b:58:80:2a:8b:44:bc:cb:af:
91:74:cd:f8:bf:af:a9:20:c0:f2:d6:ec:3e:a3:34:4c:fc:5e:
ee:4a:d5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:53:05 2025 by rpki-client