This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/3130332e31392e3137362e302f32332d3234203d3e20313332363437.roa
File: 3130332e31392e3137362e302f32332d3234203d3e20313332363437.roa (raw, json)
Hash identifier: MZSp8BNqe8zJ+1B8Y+uVUUB7aRgdsoqlbK7HkPjCz8s=
Subject key identifier: 74:F1:95:5E:B1:C6:1D:13:4C:1D:AB:EF:FC:91:9C:7E:19:D5:D6:F1
Certificate issuer: /CN=EC9D9872A710FE713DC62241D587703BDF7DC1D6
Certificate serial: 6BB3B815A4B7C5F277E7817B70AE58898D095B3E
Authority key identifier: EC:9D:98:72:A7:10:FE:71:3D:C6:22:41:D5:87:70:3B:DF:7D:C1:D6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/3130332e31392e3137362e302f32332d3234203d3e20313332363437.roa
Signing time: Fri 12 Dec 2025 08:23:02 +0000
ROA not before: Fri 12 Dec 2025 08:18:02 +0000
ROA not after: Fri 11 Dec 2026 08:23:02 +0000
asID: 132647
IP address blocks: 103.19.176.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.crl
rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Dec 2025 02:25:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:b3:b8:15:a4:b7:c5:f2:77:e7:81:7b:70:ae:58:89:8d:09:5b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC9D9872A710FE713DC62241D587703BDF7DC1D6
Validity
Not Before: Dec 12 08:18:02 2025 GMT
Not After : Dec 11 08:23:02 2026 GMT
Subject: CN=74F1955EB1C61D134C1DABEFFC919C7E19D5D6F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fd:94:4c:43:72:1b:92:9b:9b:f4:74:8b:49:
86:ee:a7:b4:27:a3:dd:05:ea:1b:e5:5e:36:7a:07:
7b:03:f1:42:59:a7:40:2e:3f:d3:2f:4f:b4:85:ef:
a5:fb:1c:2f:f0:1c:ec:13:a6:7a:e3:95:ff:01:1f:
37:89:44:f5:dc:14:1e:07:05:9d:61:17:38:b8:a8:
f4:8a:db:b5:03:b5:35:fc:03:b8:75:94:7f:f5:8b:
f7:49:fd:25:c4:2a:36:20:35:dd:c1:26:fc:2a:1a:
c2:11:01:3b:71:63:c9:c6:3f:f9:84:de:2f:3f:5f:
e7:40:60:09:66:11:32:10:83:0b:94:6b:fb:f0:fa:
d7:f1:06:ca:32:f3:1c:53:a8:d2:5c:6b:a2:87:fe:
77:52:d7:09:61:6b:cd:7e:5a:90:12:bb:5f:2a:7c:
51:ae:5b:a5:35:b7:71:bf:0b:84:9a:87:a5:ce:63:
db:25:94:d1:87:13:32:1e:58:df:96:86:a5:3e:25:
db:a4:90:89:81:b2:37:9f:e3:50:ad:8f:4d:ac:42:
ff:c9:bb:f0:5b:c7:3a:2c:14:d1:64:78:3b:33:0a:
95:f4:63:43:6e:a1:d7:ce:f9:61:72:28:be:ed:89:
be:20:a1:19:11:96:f6:39:82:9b:d7:6d:ff:de:ef:
37:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F1:95:5E:B1:C6:1D:13:4C:1D:AB:EF:FC:91:9C:7E:19:D5:D6:F1
X509v3 Authority Key Identifier:
keyid:EC:9D:98:72:A7:10:FE:71:3D:C6:22:41:D5:87:70:3B:DF:7D:C1:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/3130332e31392e3137362e302f32332d3234203d3e20313332363437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.19.176.0/23
Signature Algorithm: sha256WithRSAEncryption
79:f0:57:e1:84:eb:e7:46:9b:ca:d2:98:86:09:8f:9a:f0:08:
be:bf:9b:21:78:a0:cf:ea:ec:4d:7c:8d:37:e9:33:cd:e8:93:
96:49:d4:27:db:a3:89:ad:85:db:d8:d5:b1:d0:bb:34:22:a0:
b5:50:50:b1:16:10:1f:ce:a1:a6:a6:d9:d2:16:d4:39:d6:b9:
0e:ea:11:db:22:48:54:46:16:1c:f1:f9:99:30:4f:54:f0:f5:
16:e5:55:31:76:1d:59:d8:df:59:af:f8:c8:b0:1f:a8:3c:c8:
a8:62:47:ac:0d:10:54:ff:50:e6:60:1a:3c:d5:9d:f6:bb:c2:
6e:09:8e:97:d9:7b:03:ae:63:84:39:aa:a4:c8:74:1f:e3:df:
d8:57:fb:d4:c7:98:b9:90:1f:4d:fb:4e:28:43:b6:2b:f3:38:
12:51:7d:8d:d5:08:ef:2d:6d:8d:93:01:5a:0d:30:e4:50:89:
38:31:6f:ac:dd:b2:29:38:97:ae:0b:5c:68:f5:af:fd:7c:9f:
50:2e:27:50:d8:69:e4:55:91:f6:20:48:92:53:41:3d:6c:f1:
29:29:e6:2a:34:39:f7:b8:fc:ad:68:a4:94:f9:a6:e2:5a:80:
8a:b4:33:44:7a:c5:91:fc:d6:d6:a5:e1:9f:2b:f0:c4:58:0f:
1f:55:7b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:33:30 2025 by rpki-client