This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/3130332e36372e38302e302f32342d3234203d3e20313532303031.roa
File: 3130332e36372e38302e302f32342d3234203d3e20313532303031.roa (raw, json)
Hash identifier: u3jgsDSo3O7gCdt5jEOR1X0Y8olBMi4/W5ZYcUsryek=
Subject key identifier: 7E:9F:AD:3C:97:F2:1C:48:50:B7:03:2F:FB:18:E4:CD:54:62:46:F5
Certificate issuer: /CN=16889A9053AE7EB169CF822E9EE670A5C618F97E
Certificate serial: 0C5CCC6C08E38C7CD460BBE34C7F109ED6FD1A7C
Authority key identifier: 16:88:9A:90:53:AE:7E:B1:69:CF:82:2E:9E:E6:70:A5:C6:18:F9:7E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16889A9053AE7EB169CF822E9EE670A5C618F97E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/3130332e36372e38302e302f32342d3234203d3e20313532303031.roa
Signing time: Tue 11 Nov 2025 08:00:36 +0000
ROA not before: Tue 11 Nov 2025 07:55:36 +0000
ROA not after: Tue 10 Nov 2026 08:00:36 +0000
asID: 152001
IP address blocks: 103.67.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.crl
rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16889A9053AE7EB169CF822E9EE670A5C618F97E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 11:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:5c:cc:6c:08:e3:8c:7c:d4:60:bb:e3:4c:7f:10:9e:d6:fd:1a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16889A9053AE7EB169CF822E9EE670A5C618F97E
Validity
Not Before: Nov 11 07:55:36 2025 GMT
Not After : Nov 10 08:00:36 2026 GMT
Subject: CN=7E9FAD3C97F21C4850B7032FFB18E4CD546246F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:77:c5:36:b8:62:66:0d:9b:c7:90:47:13:ad:
44:8e:47:5b:1e:e5:be:dc:48:26:16:1b:3e:71:21:
7b:69:06:fc:7d:3f:51:de:3c:13:ca:47:ca:38:77:
09:e4:68:04:68:c1:7c:79:24:d2:26:44:a9:83:9d:
a7:6b:d9:bd:cb:10:a4:34:6d:55:d5:2b:ee:a0:b6:
19:fb:de:68:0d:41:94:c2:ee:68:3e:7b:45:f8:e1:
f7:24:ab:88:5b:1b:6c:30:75:be:cb:c4:de:55:3e:
de:5a:9b:0e:e3:3c:a5:fe:8a:29:91:47:88:ab:ac:
72:35:4d:58:cd:26:6f:fd:c2:8a:a4:2d:d0:39:42:
56:68:86:39:f6:21:44:59:01:10:68:e3:23:10:34:
ce:39:e5:c2:ef:e5:89:e2:d9:75:90:03:cc:40:ad:
3d:cb:2d:09:0d:1d:3e:11:87:9e:6f:93:7a:68:8b:
a4:d0:10:44:12:0a:a4:b4:f1:fa:e0:18:c5:e9:1d:
f8:df:e7:4d:6d:e0:51:d0:13:01:f4:cb:f7:01:0a:
d8:72:73:3f:17:56:4c:8f:38:87:53:41:52:ba:b7:
58:59:d4:42:2a:87:19:a8:9b:9d:fd:46:70:4e:30:
31:98:8b:d8:67:8c:3b:54:dc:d9:6b:8b:59:b3:2e:
57:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:9F:AD:3C:97:F2:1C:48:50:B7:03:2F:FB:18:E4:CD:54:62:46:F5
X509v3 Authority Key Identifier:
keyid:16:88:9A:90:53:AE:7E:B1:69:CF:82:2E:9E:E6:70:A5:C6:18:F9:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16889A9053AE7EB169CF822E9EE670A5C618F97E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/3130332e36372e38302e302f32342d3234203d3e20313532303031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.67.80.0/24
Signature Algorithm: sha256WithRSAEncryption
27:ca:60:40:5f:7d:0e:f5:28:9c:8f:94:a3:8a:aa:87:00:8b:
8d:08:ef:b6:0f:3c:ba:a3:99:ff:1a:f3:6a:f8:84:e7:4a:2f:
9d:da:15:18:71:eb:6a:85:a5:71:fc:72:c3:a0:29:f9:97:3b:
cc:14:bd:e5:68:43:a2:17:96:43:dc:71:a8:93:72:5e:92:4a:
2b:83:76:e1:33:15:9f:9c:66:3f:32:9b:a4:f4:20:b0:4a:0b:
0e:47:c9:da:33:f6:05:04:5b:f7:2f:68:42:b4:59:b5:01:3b:
51:66:da:4a:39:ee:d5:e9:fd:c0:85:fa:34:7a:56:7b:8a:e0:
c6:5e:27:05:97:b0:a5:93:4b:a3:23:d6:b2:57:29:da:e1:23:
2a:27:cd:13:11:bd:4d:a7:c3:b6:ef:be:a5:00:3a:ea:8d:76:
be:17:2a:53:9f:bf:fd:df:f6:48:cc:d8:4d:71:40:5d:87:2f:
dd:ec:71:01:f4:8b:83:c5:e2:ff:f0:10:57:f0:33:46:07:a1:
b1:20:3b:dd:f7:02:33:ad:07:7f:9f:50:ea:42:ef:8c:73:6d:
f1:9c:9a:10:60:31:f6:c9:d2:88:f7:7f:2a:49:f5:9a:7f:6f:
52:cb:18:25:17:fd:04:00:b0:15:3f:d3:41:56:de:af:3f:3b:
43:a3:85:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:21:56 2025 by rpki-client