This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/3130332e3231332e3233342e302f32342d3234203d3e20313531303033.roa
File: 3130332e3231332e3233342e302f32342d3234203d3e20313531303033.roa (raw, json)
Hash identifier: AL1FDBHVs75iHHEWETfE/oeUPgYWLb0khAD81mZRSQM=
Subject key identifier: 63:FE:57:F9:55:26:22:15:78:B0:73:99:11:49:E0:69:87:23:AD:68
Certificate issuer: /CN=846D8A4B978C6F595D44EACDB8259295CD43C499
Certificate serial: 75BB9F0B080C51D4BB4D3291239259DF1EB509BD
Authority key identifier: 84:6D:8A:4B:97:8C:6F:59:5D:44:EA:CD:B8:25:92:95:CD:43:C4:99
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/3130332e3231332e3233342e302f32342d3234203d3e20313531303033.roa
Signing time: Mon 01 Dec 2025 15:00:02 +0000
ROA not before: Mon 01 Dec 2025 14:55:02 +0000
ROA not after: Mon 30 Nov 2026 15:00:02 +0000
asID: 151003
IP address blocks: 103.213.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.crl
rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Dec 2025 15:58:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:bb:9f:0b:08:0c:51:d4:bb:4d:32:91:23:92:59:df:1e:b5:09:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846D8A4B978C6F595D44EACDB8259295CD43C499
Validity
Not Before: Dec 1 14:55:02 2025 GMT
Not After : Nov 30 15:00:02 2026 GMT
Subject: CN=63FE57F95526221578B073991149E0698723AD68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8d:84:25:47:94:bd:a2:40:d5:fc:df:59:57:
5e:49:19:92:d6:b3:9b:f7:8d:51:3b:e0:45:ed:1c:
ff:b6:5b:89:68:d0:cd:c9:97:0a:84:d6:52:34:09:
19:7c:c3:82:e0:42:64:36:7f:28:2c:0d:f6:21:ed:
08:0f:6c:19:e2:ef:4c:c5:c4:33:29:db:6c:28:5f:
8f:b5:89:87:59:4b:af:41:f5:e2:2a:84:bd:a6:a4:
a6:d2:53:64:0e:67:32:30:a7:27:5e:b2:6a:6e:28:
42:5c:0e:50:ed:a3:b6:26:25:74:9e:4d:b4:a7:2e:
d9:17:30:58:47:51:0d:68:69:71:d3:7e:6f:44:05:
08:f4:3c:7e:74:66:ce:4e:b2:31:96:17:0c:fa:16:
88:96:b6:16:b6:3b:68:7e:31:bd:dc:e7:b7:66:a9:
18:d8:91:4e:c7:0c:61:bf:e7:a0:b2:1f:ec:37:dc:
0d:4f:61:dd:71:ab:74:b0:6e:54:71:92:06:ba:06:
1d:41:5b:49:f8:fc:a5:be:79:ae:7f:8d:aa:89:ea:
c8:de:6f:03:57:8c:ba:e1:42:18:80:60:1a:e6:f0:
4b:96:3a:b2:05:5b:e7:99:93:97:ca:fb:df:3b:be:
5f:34:b4:5e:97:c0:ee:a7:b3:a1:45:aa:2e:df:2f:
09:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:FE:57:F9:55:26:22:15:78:B0:73:99:11:49:E0:69:87:23:AD:68
X509v3 Authority Key Identifier:
keyid:84:6D:8A:4B:97:8C:6F:59:5D:44:EA:CD:B8:25:92:95:CD:43:C4:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/3130332e3231332e3233342e302f32342d3234203d3e20313531303033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.213.234.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:5b:9d:5f:9a:09:bc:16:a0:1a:bf:24:21:c5:c7:29:87:46:
74:d7:cd:04:d7:35:ca:13:5b:aa:53:f0:cc:ee:03:15:39:b1:
9a:72:01:68:63:a5:69:8c:29:39:0f:6b:fc:fa:fb:7e:0a:47:
43:6e:29:08:63:60:4a:86:f9:e4:de:5c:84:82:a3:73:28:fc:
dd:2a:f5:b8:e8:69:a2:8e:e0:17:ff:21:13:35:98:7c:1b:5d:
cc:97:55:2b:b7:d5:d7:ff:f9:f9:4d:b7:f4:38:2d:53:1f:52:
6e:cc:e2:6e:08:33:de:22:b0:6e:38:96:46:a1:7e:ee:3f:5e:
75:2e:f9:e5:6d:06:33:7c:83:5c:b7:10:5e:69:a9:80:5b:4f:
26:a6:28:0a:f2:9f:2f:e3:59:76:d8:74:33:f7:04:77:0a:18:
79:07:4b:89:c0:f6:11:09:de:0b:4e:0c:d3:b8:18:1d:55:50:
43:45:1f:24:e3:13:98:c2:32:fb:48:f3:91:e7:31:33:97:9c:
8a:3c:1d:49:7c:1e:73:1d:bd:94:b2:1f:c0:d2:6e:10:59:1a:
fa:2f:f3:76:31:a4:25:52:cd:b2:21:86:9a:34:f8:3c:a7:f7:
bb:27:b0:db:f3:4c:c9:72:8d:df:e2:a5:3a:2e:17:7d:78:04:
23:67:f7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:58:37 2025 by rpki-client