This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3130332e39382e3131362e302f32322d3232203d3e20313336383230.roa
File: 3130332e39382e3131362e302f32322d3232203d3e20313336383230.roa (raw, json)
Hash identifier: D6xVrarR741Tat/B/aD4Gr/765oFGk3PkG8sC2eJZzQ=
Subject key identifier: 92:24:89:64:AD:56:B6:BF:44:34:FB:9E:8F:02:18:6A:84:00:B3:C5
Certificate issuer: /CN=3E2173CCE67F75D29F1CAAA739E6CC6727D6E088
Certificate serial: 2A101918C59BDE04E66A0E31BECA50F2C48D3A6F
Authority key identifier: 3E:21:73:CC:E6:7F:75:D2:9F:1C:AA:A7:39:E6:CC:67:27:D6:E0:88
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3130332e39382e3131362e302f32322d3232203d3e20313336383230.roa
Signing time: Sat 17 May 2025 12:00:01 +0000
ROA not before: Sat 17 May 2025 11:55:01 +0000
ROA not after: Sat 16 May 2026 12:00:01 +0000
asID: 136820
IP address blocks: 103.98.116.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl
rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 12:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:10:19:18:c5:9b:de:04:e6:6a:0e:31:be:ca:50:f2:c4:8d:3a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E2173CCE67F75D29F1CAAA739E6CC6727D6E088
Validity
Not Before: May 17 11:55:01 2025 GMT
Not After : May 16 12:00:01 2026 GMT
Subject: CN=92248964AD56B6BF4434FB9E8F02186A8400B3C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:16:38:15:08:31:4b:1f:1f:e5:f6:88:f6:f6:
66:e2:3c:00:da:13:2f:9d:21:77:10:12:22:d7:7f:
a1:f9:65:5e:75:68:37:14:2d:4e:f9:9d:d7:b0:42:
1a:3a:c3:24:89:22:cf:f3:35:1d:c5:03:27:a3:06:
e4:1f:3f:a3:8f:24:69:a6:67:7b:9f:92:9a:c3:b4:
b8:21:a4:12:b9:bc:24:bf:19:4f:ec:9f:71:f0:99:
d4:6f:3c:61:a7:97:80:8f:57:39:74:59:66:71:e2:
72:c7:bb:3f:68:71:fb:e6:61:9a:40:21:e9:c0:79:
c1:12:8d:c9:9e:6d:48:c5:45:5a:3a:28:ff:0b:bb:
46:bf:d0:3f:de:ab:63:ba:47:32:97:50:2e:65:e2:
8a:f1:7b:d7:f0:f9:03:c2:44:06:54:90:4e:3c:b7:
64:23:7d:6d:90:3d:65:4b:59:7e:b6:8e:04:aa:44:
04:ee:2b:2e:88:6c:5f:44:76:3d:51:9c:a9:65:54:
ed:d6:8f:bc:6f:6e:18:9e:41:ea:65:6f:d1:6a:59:
7d:4a:10:6f:cd:20:01:a3:b2:d8:37:da:39:53:9f:
fe:76:eb:2a:bb:3e:56:35:0e:9a:2f:ea:ab:4c:41:
24:96:6f:17:e9:1a:b4:07:60:1a:9a:ca:b4:ef:f1:
f1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:24:89:64:AD:56:B6:BF:44:34:FB:9E:8F:02:18:6A:84:00:B3:C5
X509v3 Authority Key Identifier:
keyid:3E:21:73:CC:E6:7F:75:D2:9F:1C:AA:A7:39:E6:CC:67:27:D6:E0:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3130332e39382e3131362e302f32322d3232203d3e20313336383230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.98.116.0/22
Signature Algorithm: sha256WithRSAEncryption
93:00:ea:67:56:54:72:30:0b:e9:47:ed:0d:5d:56:8d:ce:e3:
bb:79:10:1c:6f:12:85:0e:1c:7e:a7:03:02:59:1f:89:59:28:
1a:c1:fb:94:35:75:52:70:75:b8:dc:18:92:61:37:d8:71:e2:
9e:aa:e3:37:ef:dc:12:a7:3b:ff:cf:a0:5b:3d:55:8d:a8:bb:
dd:ce:40:9b:0f:db:e8:0a:b5:48:6e:bf:42:4d:ec:51:a8:c7:
a0:cf:cd:8d:49:07:a8:7f:f5:fb:37:84:01:74:d6:1a:18:05:
85:30:3b:ec:9b:98:d8:28:3b:a3:f5:bb:57:a8:3e:c6:e5:a9:
98:d4:62:1d:a5:47:0a:d3:bf:c8:44:ff:ce:41:50:55:3a:b5:
a3:5f:ef:6b:23:f6:cf:0b:66:8c:9f:5e:7f:d9:22:90:05:2e:
19:08:5c:b9:e1:10:e8:0b:22:1a:f3:45:12:ad:ed:ad:f5:c6:
57:ec:16:ad:89:a3:29:15:1d:87:be:38:19:ff:01:71:67:a6:
5f:75:ee:e9:4a:ba:78:35:c7:6b:70:3f:2e:23:96:a0:54:47:
4a:c9:e1:f6:ca:e7:f9:c9:95:9e:7d:18:ef:a9:2d:88:f4:23:
29:37:59:d2:9b:74:a1:60:42:e7:0b:7a:26:1d:62:d9:c6:7b:
5f:b1:c8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:07:02 2025 by rpki-client