This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/3130332e3132312e39382e302f32332d3234203d3e20313335343738.roa
File: 3130332e3132312e39382e302f32332d3234203d3e20313335343738.roa (raw, json)
Hash identifier: GPnT4OvDeWk1bAtYzHobscFEm6YNT5Lhx62DmcP7fds=
Subject key identifier: 51:CA:10:86:64:62:68:AC:35:72:F9:FB:AC:63:5F:A6:F2:D2:B9:7F
Certificate issuer: /CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12
Certificate serial: 0E080D9A53A68B8B2C91B91AAE1D9B1E9674D802
Authority key identifier: AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/3130332e3132312e39382e302f32332d3234203d3e20313335343738.roa
Signing time: Wed 05 Nov 2025 06:02:26 +0000
ROA not before: Wed 05 Nov 2025 05:57:26 +0000
ROA not after: Wed 04 Nov 2026 06:02:26 +0000
asID: 135478
IP address blocks: 103.121.98.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl
rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Dec 2025 22:46:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:08:0d:9a:53:a6:8b:8b:2c:91:b9:1a:ae:1d:9b:1e:96:74:d8:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12
Validity
Not Before: Nov 5 05:57:26 2025 GMT
Not After : Nov 4 06:02:26 2026 GMT
Subject: CN=51CA1086646268AC3572F9FBAC635FA6F2D2B97F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fd:5f:aa:29:aa:bb:28:dd:d9:c5:cc:dc:e6:
2f:5e:7e:05:1e:f4:72:0a:bf:34:55:9e:69:b1:96:
44:ce:d4:bc:77:01:8b:74:a5:5c:f3:c8:fc:ae:41:
a6:20:a1:b8:b7:37:3d:f9:58:ba:e2:60:f7:ac:f0:
f3:f6:ae:50:6b:8f:0f:5c:94:1f:14:c4:7e:cc:15:
e4:15:4e:8d:a6:f6:4f:79:84:56:4b:e4:c9:13:79:
73:c9:b2:74:96:66:7d:ba:63:fe:f7:f6:23:8b:84:
e8:bd:6d:a7:08:13:fb:b2:e7:1e:a0:ac:88:7d:8b:
e8:cc:c4:b1:98:18:12:47:ee:43:a3:92:20:12:11:
07:dc:75:1a:47:96:d1:15:ea:5e:5f:bd:be:84:53:
2a:56:36:c9:9d:66:5b:79:8e:39:58:35:cb:e3:d8:
b0:5f:0c:53:f4:8c:b6:96:f8:a6:5f:20:e3:cb:fa:
36:15:52:a9:d1:ff:cb:35:ad:48:96:4c:e7:2b:ee:
83:ed:50:77:bc:74:0f:d1:21:c3:41:fd:8b:a8:ef:
bb:dd:f5:c2:3e:88:eb:11:af:dc:d7:90:10:ea:b7:
d0:6c:d6:3a:e3:ec:6e:74:97:49:5f:3f:2f:87:7a:
16:53:53:a4:38:60:8f:87:8e:c7:5e:ed:5c:65:ef:
60:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:CA:10:86:64:62:68:AC:35:72:F9:FB:AC:63:5F:A6:F2:D2:B9:7F
X509v3 Authority Key Identifier:
keyid:AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/3130332e3132312e39382e302f32332d3234203d3e20313335343738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.121.98.0/23
Signature Algorithm: sha256WithRSAEncryption
18:90:47:d4:17:dc:6c:01:99:a2:5d:b4:dd:03:31:d5:2d:65:
f0:08:a8:f8:93:51:67:91:a6:82:d1:b2:07:9d:90:77:47:90:
ad:c0:71:e2:6b:12:ba:27:8d:32:8d:02:3d:c3:13:95:3d:d2:
f9:6d:b9:86:7d:75:2c:e3:b5:1e:fa:ab:7f:9c:9a:e0:6b:0b:
51:67:e2:7c:1a:90:63:1e:af:9d:3b:6d:c9:fc:2f:4b:23:51:
fc:dc:20:f5:6c:9f:ba:4d:3f:25:3b:08:20:58:ca:2e:a6:cc:
1b:c3:07:5f:ab:fb:dd:b6:00:40:e4:fe:2f:92:ca:ff:41:51:
2d:f3:45:b6:bb:4e:e2:97:94:a2:dc:ef:bb:d6:c5:a3:37:33:
3e:a3:58:01:1c:10:bb:5e:9f:3e:c1:b7:68:0a:43:d3:14:91:
b9:ff:cf:a1:ea:11:25:22:9e:b1:d0:50:b6:fe:8a:9d:bb:d1:
0d:8b:9e:f4:2d:1c:d0:f8:c9:9c:3b:f3:37:61:93:69:a0:4e:
b9:6c:9e:45:0f:b5:1b:cd:9a:89:12:6f:9b:32:db:ec:f8:57:
2f:45:6e:14:d1:34:c5:dc:ce:bf:a0:1b:b2:2c:e3:af:6b:49:
4f:ed:1a:36:b7:5f:e1:93:28:8e:fc:b5:82:f5:f8:33:fb:fa:
84:86:78:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 11:48:54 2025 by rpki-client