This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/3130332e31312e39372e302f32342d3234203d3e203535363533.roa
File: 3130332e31312e39372e302f32342d3234203d3e203535363533.roa (raw, json)
Hash identifier: zhsac+dR+hLwxuxKAvs58KLjwCG2OW3/qJ9XL7XL52Y=
Subject key identifier: E0:F6:3C:9F:A1:CB:BD:66:04:9C:80:8A:93:A0:C9:D2:A4:AA:E7:B3
Certificate issuer: /CN=FC646066A689B77054AF95653FA324395357E6A3
Certificate serial: 5DD76D1901CE27E9EF92C3511B70F89870EC420E
Authority key identifier: FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/3130332e31312e39372e302f32342d3234203d3e203535363533.roa
Signing time: Sat 08 Nov 2025 10:22:50 +0000
ROA not before: Sat 08 Nov 2025 10:17:50 +0000
ROA not after: Sat 07 Nov 2026 10:22:50 +0000
asID: 55653
IP address blocks: 103.11.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl
rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 00:25:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:d7:6d:19:01:ce:27:e9:ef:92:c3:51:1b:70:f8:98:70:ec:42:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC646066A689B77054AF95653FA324395357E6A3
Validity
Not Before: Nov 8 10:17:50 2025 GMT
Not After : Nov 7 10:22:50 2026 GMT
Subject: CN=E0F63C9FA1CBBD66049C808A93A0C9D2A4AAE7B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9c:d6:6b:18:c5:d0:20:20:2a:aa:a8:50:fc:
b7:76:6a:5d:61:27:44:cc:f9:67:6e:26:85:59:b3:
81:c4:75:52:ae:07:50:60:99:73:84:4e:02:f3:e7:
63:e2:86:8d:12:a5:dc:db:46:ae:a4:d3:9d:51:cb:
43:da:fc:c8:04:02:b7:48:7a:5b:2d:fc:79:b3:78:
9b:98:c7:63:5e:16:fc:f9:5d:26:d5:3e:ec:21:cf:
e8:5a:ec:d9:c2:ed:8b:73:56:55:72:a9:b2:ed:7f:
6e:39:8d:71:24:d3:bf:87:c1:d5:05:c7:fe:22:c8:
ab:e8:2f:17:63:6a:c8:7b:d1:01:1c:8c:d7:bb:d1:
6e:3c:f2:64:61:bc:61:f7:51:d0:95:78:7d:9c:2c:
b6:f3:80:d2:e1:11:9a:21:04:61:12:ca:43:46:1c:
a2:ab:09:ae:11:bd:ee:39:98:6a:08:44:9d:07:d0:
ea:bf:6d:5c:51:9d:5d:d5:d9:5b:f9:53:55:79:21:
ca:82:cf:48:b7:fd:d0:c3:eb:16:de:ce:2c:d5:90:
0b:0a:d9:ae:f8:a2:a6:37:89:b9:66:f5:36:12:1c:
bd:a6:06:28:31:fc:9f:81:3b:bd:81:c1:7c:22:9a:
55:53:fb:ef:fe:ee:3d:9e:41:70:0a:45:de:d1:ad:
7d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F6:3C:9F:A1:CB:BD:66:04:9C:80:8A:93:A0:C9:D2:A4:AA:E7:B3
X509v3 Authority Key Identifier:
keyid:FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/3130332e31312e39372e302f32342d3234203d3e203535363533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.11.97.0/24
Signature Algorithm: sha256WithRSAEncryption
03:c9:c9:14:9b:34:5c:b9:03:f7:34:67:57:1f:2f:15:52:f9:
bf:96:d5:83:af:8f:ad:16:f1:ec:4d:5a:3a:99:a5:a3:b8:b0:
a3:cb:81:e4:34:73:41:68:1d:de:05:24:dd:d5:7b:a1:43:76:
a4:19:91:be:d5:40:13:ce:8d:87:65:95:50:ef:53:4a:08:40:
d2:e9:6c:80:0a:a2:4e:53:d9:a6:1a:fc:b4:b7:6d:30:da:57:
ed:78:8c:1a:47:cf:c2:de:ef:57:8d:96:38:31:10:b0:26:9e:
48:82:a2:dc:e6:00:c6:c4:91:77:c2:70:dd:80:7c:45:62:a0:
ae:18:82:5a:37:f1:69:01:9a:0c:58:84:69:b0:10:b1:3b:a9:
f4:0a:5c:14:99:1a:1c:88:4d:2d:1d:cb:7e:c2:51:88:ac:8c:
ee:44:39:8e:d4:43:77:50:15:36:c0:a5:79:92:ed:17:c3:f7:
ba:1d:e9:27:0f:93:08:65:75:f3:4e:2d:ab:7a:47:33:49:2e:
6d:59:bc:22:4d:77:ba:a4:0e:4f:65:dc:f7:44:4c:b1:a3:eb:
5c:5c:d3:35:9f:21:ea:0a:07:47:94:8b:88:86:a4:54:a6:38:
33:0f:ee:39:03:b0:1c:92:3c:f2:23:17:65:e5:8f:99:d0:83:
7a:6f:98:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:49:16 2025 by rpki-client