This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3130332e32392e342e302f32332d3233203d3e203338373533.roa
File: 3130332e32392e342e302f32332d3233203d3e203338373533.roa (raw, json)
Hash identifier: ZkhYkzVtq81XABJqvLnT7l2LGdKJfgSAWlXb3DM5Me8=
Subject key identifier: 10:DE:EE:8B:FB:7C:84:9D:0E:EC:83:08:BD:D2:14:8A:A0:52:41:39
Certificate issuer: /CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
Certificate serial: 286A4249D6B9D4A6E332A6E5F33B77B06228AF0C
Authority key identifier: 11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3130332e32392e342e302f32332d3233203d3e203338373533.roa
Signing time: Tue 03 Jun 2025 08:03:23 +0000
ROA not before: Tue 03 Jun 2025 07:58:23 +0000
ROA not after: Tue 02 Jun 2026 08:03:23 +0000
asID: 38753
IP address blocks: 103.29.4.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl
rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 13:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:6a:42:49:d6:b9:d4:a6:e3:32:a6:e5:f3:3b:77:b0:62:28:af:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
Validity
Not Before: Jun 3 07:58:23 2025 GMT
Not After : Jun 2 08:03:23 2026 GMT
Subject: CN=10DEEE8BFB7C849D0EEC8308BDD2148AA0524139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c5:93:98:23:20:e7:50:90:b3:ad:b3:aa:bf:
a0:48:2a:34:a2:6a:a3:45:88:28:24:77:53:f4:c3:
28:59:8c:87:38:e7:22:25:20:30:52:90:78:6d:09:
9e:67:4a:c2:10:39:d0:37:b0:89:c4:85:fe:d2:78:
be:ad:e9:76:84:bb:f2:23:cc:5a:ab:af:a9:c5:8b:
57:b2:47:f1:d8:7f:89:d3:27:08:27:5e:29:29:ff:
3c:af:da:25:0d:41:2f:af:02:49:c6:02:22:b6:40:
27:a1:df:9c:73:34:e2:2e:c8:3b:b2:18:66:9b:aa:
95:f6:74:d2:64:21:d2:47:2c:87:db:e2:8e:1d:90:
eb:4e:0c:31:f3:e1:ef:04:5b:bb:6f:8b:49:0f:3c:
bb:4c:a5:4b:fb:f2:7f:1a:5b:1e:53:7f:11:5b:6b:
96:e8:b9:d8:da:04:a3:f3:1e:11:5f:b7:6d:37:51:
7e:99:31:ba:50:46:45:4f:5d:f6:6a:8f:f3:d2:0f:
3c:88:e8:26:47:ef:72:c9:b2:76:68:11:5d:4b:0e:
8e:08:90:cd:a7:fa:42:16:78:80:c2:3b:fa:28:01:
8f:f6:c3:a3:f9:3e:e6:16:91:72:79:14:c2:11:96:
d1:c4:1f:b5:c0:13:cb:23:3c:a9:ed:61:3f:6c:ee:
47:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:DE:EE:8B:FB:7C:84:9D:0E:EC:83:08:BD:D2:14:8A:A0:52:41:39
X509v3 Authority Key Identifier:
keyid:11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3130332e32392e342e302f32332d3233203d3e203338373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.29.4.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:5e:1e:0c:c8:fa:81:41:bd:18:3c:59:89:e1:b8:92:15:69:
78:f9:44:c4:8c:bf:8c:82:6e:99:d3:38:29:92:1c:ba:13:2d:
f1:c7:74:4e:b9:86:77:1b:9b:06:59:9a:1c:8c:a7:da:3b:c2:
82:4b:7c:69:27:e7:df:b4:cc:c2:60:2c:b8:30:00:96:65:46:
31:82:78:db:81:38:f1:2f:79:87:74:12:4f:e7:72:c0:6c:0b:
50:cb:97:50:c9:ca:99:1d:90:cc:39:cb:af:3a:b9:4f:aa:e5:
e9:7a:b0:8c:7a:1c:09:cb:8a:19:df:d3:7f:74:72:47:0e:d2:
ae:02:4f:fd:f5:b2:b7:37:17:65:60:a9:34:da:28:38:85:71:
0d:d2:ec:25:a7:c0:9a:d1:a0:4e:cd:93:e8:b1:ed:f1:3f:61:
2c:a8:ae:4d:97:49:4b:9b:e6:8e:15:a1:64:1b:22:f1:df:76:
c7:0a:93:fd:82:79:d0:89:80:24:54:7b:b8:a6:19:24:89:43:
94:d6:b0:6f:78:ec:71:ae:8d:f8:9b:86:4d:e7:68:73:27:28:
bb:8f:f3:b8:dc:d4:f0:56:c9:83:3f:4f:07:8a:a3:83:b7:f1:
ae:25:3a:e9:ba:f0:b3:72:0f:44:d8:c8:bb:b6:99:38:bf:87:
97:9d:3f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 15:30:12 2025 by rpki-client