This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/3130332e31312e39382e302f32342d3234203d3e203535363533.roa
File: 3130332e31312e39382e302f32342d3234203d3e203535363533.roa (raw, json)
Hash identifier: Ulal03KaCVZbu0jye4Et6grNN6xfSzGRs7XoejJgRmc=
Subject key identifier: 8D:D5:57:68:C4:F4:B3:3F:03:C0:FD:71:A5:25:FB:B7:FA:E1:2E:87
Certificate issuer: /CN=FC646066A689B77054AF95653FA324395357E6A3
Certificate serial: 02EAE3AC58F121E4B5DF18D298C7A981B64094DA
Authority key identifier: FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/3130332e31312e39382e302f32342d3234203d3e203535363533.roa
Signing time: Sat 08 Nov 2025 10:23:12 +0000
ROA not before: Sat 08 Nov 2025 10:18:12 +0000
ROA not after: Sat 07 Nov 2026 10:23:12 +0000
asID: 55653
IP address blocks: 103.11.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl
rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 00:25:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:ea:e3:ac:58:f1:21:e4:b5:df:18:d2:98:c7:a9:81:b6:40:94:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC646066A689B77054AF95653FA324395357E6A3
Validity
Not Before: Nov 8 10:18:12 2025 GMT
Not After : Nov 7 10:23:12 2026 GMT
Subject: CN=8DD55768C4F4B33F03C0FD71A525FBB7FAE12E87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6a:39:51:13:c6:10:b3:f8:59:fa:ab:69:46:
3d:45:25:d8:9a:aa:5b:f4:95:a9:6d:46:c8:71:b0:
26:b3:1c:2b:2e:9a:11:b0:2c:21:00:cd:0b:76:16:
f8:2a:fa:8a:4d:b2:84:72:78:cc:fc:44:11:95:9f:
35:12:fd:39:78:b3:2a:04:64:76:5c:44:cd:b8:59:
ef:13:9e:8e:76:66:ce:10:30:19:ab:fa:2a:0f:1b:
00:73:af:45:39:4c:82:e1:22:e2:3c:c0:24:c6:91:
ac:1e:e4:78:4f:83:14:db:45:3d:d2:cc:e9:91:93:
0a:c6:60:7b:46:9d:e7:c9:42:17:09:bf:9a:9e:01:
3d:65:e5:1d:59:82:b6:be:a8:0f:32:87:a9:29:31:
3b:27:ad:19:c0:f6:ca:c0:db:e2:eb:9e:72:be:11:
79:19:87:4f:cd:bd:99:9f:95:08:44:4d:f0:4a:16:
6a:b6:b9:c1:c9:5c:5f:cc:8d:a7:c7:42:15:ee:69:
a2:8b:1c:4c:be:e2:61:67:97:e1:ee:ad:14:33:b0:
2e:bb:d3:a4:57:77:d3:6c:3f:47:19:a0:2e:e8:2e:
32:ce:fc:f8:9a:35:da:15:2d:62:98:c0:b9:d6:ea:
22:9a:e0:3f:b4:e0:0f:23:e0:bf:a2:9d:df:60:ea:
53:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D5:57:68:C4:F4:B3:3F:03:C0:FD:71:A5:25:FB:B7:FA:E1:2E:87
X509v3 Authority Key Identifier:
keyid:FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/3130332e31312e39382e302f32342d3234203d3e203535363533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.11.98.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:3d:be:88:c3:b4:09:27:1c:00:42:4d:ee:26:a3:86:94:74:
d0:8d:92:33:e8:dc:02:b4:d5:e7:d5:71:0d:c1:56:aa:ff:d3:
f0:e6:e2:2d:57:db:0e:45:37:b8:b4:e1:8d:67:e1:5c:e4:57:
6f:99:31:f3:cb:24:2c:94:67:a4:9e:96:be:32:65:91:85:df:
2b:c5:71:2d:ef:40:7d:51:5b:08:7f:a9:23:a7:06:72:48:dd:
91:3c:25:8d:5c:fc:44:f5:79:49:cb:c8:f8:87:9a:02:a7:04:
3f:a6:1f:ac:da:e0:18:50:61:8b:ca:30:01:83:64:f0:f9:ed:
2b:80:2a:89:8d:05:06:7b:44:6a:8a:21:c1:6d:21:6c:f2:35:
78:9c:35:c9:ea:71:2f:f8:37:36:31:3e:7c:13:27:d3:2d:49:
03:87:45:0f:e0:38:25:b8:cf:d2:57:27:d0:60:18:27:bd:08:
21:55:4e:06:b3:5b:ef:c7:12:c0:01:f7:53:53:83:aa:39:28:
00:d2:1e:03:6f:91:3f:b6:a2:3b:73:4e:6d:10:e9:da:68:1c:
b8:c0:9d:cd:bf:58:e1:20:af:67:de:d8:a6:19:7e:0c:60:a0:
5c:0f:39:a0:cf:b2:46:35:94:e6:ab:55:ac:46:30:49:0f:07:
96:05:32:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:49:16 2025 by rpki-client