This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/3130332e3139302e39342e302f32342d3234203d3e20313530353531.roa
File: 3130332e3139302e39342e302f32342d3234203d3e20313530353531.roa (raw, json)
Hash identifier: XvrWKabUzo+8QdekV/WCEKHm2CO1S57vakuFbZ2xMyY=
Subject key identifier: 8E:AA:0A:9F:A1:A8:06:43:F3:A6:C6:53:73:4C:19:2D:B1:62:10:F9
Certificate issuer: /CN=1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD
Certificate serial: 58F255BC6A68A6F7C2363C2386466D373EF54E1A
Authority key identifier: 1E:AF:FD:F7:6C:26:1A:0C:98:01:D9:F2:B0:2D:5B:A1:49:67:F3:CD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/3130332e3139302e39342e302f32342d3234203d3e20313530353531.roa
Signing time: Tue 02 Dec 2025 04:02:33 +0000
ROA not before: Tue 02 Dec 2025 03:57:33 +0000
ROA not after: Tue 01 Dec 2026 04:02:33 +0000
asID: 150551
IP address blocks: 103.190.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.crl
rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 11:57:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:f2:55:bc:6a:68:a6:f7:c2:36:3c:23:86:46:6d:37:3e:f5:4e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD
Validity
Not Before: Dec 2 03:57:33 2025 GMT
Not After : Dec 1 04:02:33 2026 GMT
Subject: CN=8EAA0A9FA1A80643F3A6C653734C192DB16210F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:35:e5:9e:6a:c6:cd:18:f0:63:d6:e5:80:af:
c5:67:f7:90:7e:99:93:a1:ee:a7:15:3a:3f:25:d3:
0a:c2:70:d7:7c:4a:b6:26:79:cc:e6:d0:fe:53:05:
11:40:c4:49:b3:e7:9d:d8:dd:1e:2e:87:35:08:48:
73:9e:62:e9:12:ab:be:e1:76:1d:0d:bf:f1:23:0a:
f8:c7:9b:fe:4a:4a:b6:8d:70:8a:ac:ee:2c:ea:26:
86:59:f1:fe:0c:b9:ed:cf:11:41:17:e3:e9:4b:aa:
47:8d:ab:6f:2c:ca:69:8d:a1:1d:9a:9a:78:8d:89:
3b:b2:67:9b:c9:ab:af:ad:0d:bc:df:60:58:f4:6e:
4e:a0:86:78:2a:d7:ff:1d:a6:07:24:e9:4d:35:72:
0a:d6:51:26:69:6f:73:85:ca:3c:15:74:52:04:2d:
bc:37:e6:de:37:f4:4d:34:2f:38:ef:b3:d3:83:52:
06:6f:71:b2:2a:56:bd:42:e8:d5:49:76:3c:cc:af:
75:62:93:e5:16:8d:fb:99:bf:93:02:6b:69:1d:68:
9e:4d:b8:eb:67:d5:f8:2f:8c:8c:e3:b8:d7:87:b4:
5f:38:df:fb:4b:48:76:fb:66:c2:15:bc:29:c8:0d:
51:08:22:ca:eb:98:63:aa:62:32:1f:c8:ef:e9:41:
4f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AA:0A:9F:A1:A8:06:43:F3:A6:C6:53:73:4C:19:2D:B1:62:10:F9
X509v3 Authority Key Identifier:
keyid:1E:AF:FD:F7:6C:26:1A:0C:98:01:D9:F2:B0:2D:5B:A1:49:67:F3:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/3130332e3139302e39342e302f32342d3234203d3e20313530353531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.190.94.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:61:86:78:d8:cb:21:fc:e1:09:fb:8e:2d:15:74:76:62:e5:
73:95:9d:10:17:57:30:18:30:cb:3e:1c:84:71:fc:11:30:92:
37:73:43:fa:3c:33:94:1f:92:f2:0c:3a:d4:0b:33:c1:78:6d:
c7:5e:b0:af:78:7b:54:dc:ea:a8:47:9b:f7:07:20:2a:99:4d:
4d:bf:e7:b0:8d:6d:fc:86:29:6d:aa:f7:22:4f:f9:f7:4b:06:
69:47:ab:6d:4b:9e:bf:cb:76:9f:fe:a2:bd:d3:5c:d5:66:8a:
84:0f:bc:f0:76:70:4d:dc:fa:7d:a3:b2:91:2f:7f:6a:61:f8:
99:8b:b9:3a:01:97:11:14:e6:6d:1f:e6:93:1f:89:61:86:3a:
7a:70:99:0f:01:36:d0:ff:dd:38:74:28:45:2f:a2:70:55:fd:
34:db:7c:cf:b9:b0:56:9f:fc:4d:d1:36:6c:85:27:54:fd:33:
a5:32:c9:26:a0:9a:de:d7:65:a7:43:65:45:c1:ac:76:e6:c4:
84:79:3c:34:f4:92:c7:19:38:7c:c1:01:52:bd:69:72:86:0d:
98:36:1f:a9:d0:f6:aa:f9:c1:b0:e2:47:e0:f6:19:16:fa:b9:
18:ef:aa:e3:ac:6f:6f:b2:b5:55:c7:b1:fe:02:db:af:ef:56:
37:2f:ed:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:06:56 2025 by rpki-client