This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3130332e32392e352e302f32342d3234203d3e203338373533.roa
File: 3130332e32392e352e302f32342d3234203d3e203338373533.roa (raw, json)
Hash identifier: Gzil5h/RWqBAFpXoAA8mS6nklC4iLaAtX8kVa/PhqPs=
Subject key identifier: E7:13:FC:75:5A:23:1B:E0:9E:8C:C6:11:C1:83:D7:93:C9:39:7F:B8
Certificate issuer: /CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
Certificate serial: 0E4E30A3385EE6FD8B952F8FB01F01DF3B6C5F8F
Authority key identifier: 11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3130332e32392e352e302f32342d3234203d3e203338373533.roa
Signing time: Fri 05 Sep 2025 06:00:01 +0000
ROA not before: Fri 05 Sep 2025 05:55:01 +0000
ROA not after: Fri 04 Sep 2026 06:00:01 +0000
asID: 38753
IP address blocks: 103.29.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl
rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 13:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:4e:30:a3:38:5e:e6:fd:8b:95:2f:8f:b0:1f:01:df:3b:6c:5f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
Validity
Not Before: Sep 5 05:55:01 2025 GMT
Not After : Sep 4 06:00:01 2026 GMT
Subject: CN=E713FC755A231BE09E8CC611C183D793C9397FB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2e:5c:c6:cc:15:64:55:e5:e7:01:3f:ac:f1:
ed:9e:70:da:5b:d3:f9:64:9b:45:1c:45:63:02:dc:
a6:28:38:db:2a:01:53:53:44:2c:21:6a:32:07:56:
56:70:e0:00:a1:40:9d:d8:a9:23:c0:3e:58:aa:e0:
22:4d:e4:e4:eb:de:56:9d:d4:f6:13:27:37:03:cd:
c6:b2:f2:11:a4:c5:a7:ad:0f:11:dd:0b:e4:a1:b2:
39:7e:4f:bf:f9:f4:79:44:49:63:b6:57:89:54:c1:
7a:b9:f4:f1:e8:3e:77:68:c6:44:57:18:c9:f8:0e:
cc:9c:93:46:1a:b0:5e:fa:39:ac:f3:81:09:f8:41:
d0:67:2b:bc:a2:d5:14:e5:da:d4:3b:86:2e:15:83:
9d:ad:5b:fc:84:a1:4c:83:f1:ac:8c:fc:2f:9c:10:
f3:09:37:81:ed:62:d1:f7:f9:ff:8b:43:38:46:d2:
80:af:b3:cd:bb:81:34:2f:5e:f9:83:18:2c:c2:a8:
34:07:1b:31:3f:57:19:0f:4f:3f:ec:46:d3:22:2c:
b9:df:2c:69:0e:8c:00:b0:7a:6d:01:42:35:b8:4f:
a7:ee:ba:82:8c:c9:5a:24:c7:74:15:83:f5:bc:d7:
76:d9:15:1f:36:61:b6:97:fa:be:7b:63:bd:ea:e5:
d5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:13:FC:75:5A:23:1B:E0:9E:8C:C6:11:C1:83:D7:93:C9:39:7F:B8
X509v3 Authority Key Identifier:
keyid:11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3130332e32392e352e302f32342d3234203d3e203338373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.29.5.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:92:74:f4:1d:fa:87:0d:f7:d8:15:46:4c:e8:c4:f5:d6:21:
7f:d8:d8:3b:b5:39:12:6a:88:80:80:31:cb:0d:3e:fb:84:58:
8f:b1:1f:00:92:f6:6c:86:e8:b3:79:e8:a2:f8:d1:48:e7:70:
5a:2e:07:1b:23:6b:ba:a3:d3:ed:48:86:ec:4e:69:a8:d6:72:
a4:8d:3e:0f:86:5e:df:99:c6:0f:fa:6e:0c:e8:96:e6:7c:84:
7c:1c:32:d9:0f:58:87:2b:ed:10:d3:fa:4e:5c:0c:7d:bf:f7:
8c:2d:29:42:19:a7:38:b6:25:77:84:94:d5:b6:8b:a9:17:5f:
07:27:e4:cb:81:19:d5:3e:9b:38:40:67:9c:a0:b3:bb:37:da:
71:6e:cf:16:5a:1e:1b:d1:d5:f1:ce:e3:74:25:9f:05:04:ae:
08:83:cb:49:62:e2:48:00:c6:4f:2f:1f:10:50:fb:51:b0:5e:
2c:e7:37:45:1a:77:3f:60:be:e5:26:ae:ce:c5:a1:c0:12:80:
d1:ab:dd:7d:45:71:92:b5:b3:e8:59:29:cd:11:90:93:ed:40:
e0:18:db:e9:91:11:ab:5f:68:a8:0d:30:02:36:70:8d:d8:8c:
62:a2:94:18:a1:17:29:23:3c:11:7b:be:2c:85:a4:db:3d:1c:
ec:e5:b4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 15:30:40 2025 by rpki-client