This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/3130332e36372e38312e302f32342d3234203d3e20313532303031.roa
File: 3130332e36372e38312e302f32342d3234203d3e20313532303031.roa (raw, json)
Hash identifier: q8j/X9Ua/0mbnku+j9y9HsFIzPIhDRyObBOKzKCiRT8=
Subject key identifier: A4:8A:26:BE:A0:14:7B:A1:5F:BF:3B:B4:AA:F7:A9:5C:35:34:7C:06
Certificate issuer: /CN=16889A9053AE7EB169CF822E9EE670A5C618F97E
Certificate serial: 0A4947716BD737CE5127059E40D0E9BA4E0E364F
Authority key identifier: 16:88:9A:90:53:AE:7E:B1:69:CF:82:2E:9E:E6:70:A5:C6:18:F9:7E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16889A9053AE7EB169CF822E9EE670A5C618F97E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/3130332e36372e38312e302f32342d3234203d3e20313532303031.roa
Signing time: Tue 11 Nov 2025 08:00:36 +0000
ROA not before: Tue 11 Nov 2025 07:55:36 +0000
ROA not after: Tue 10 Nov 2026 08:00:36 +0000
asID: 152001
IP address blocks: 103.67.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.crl
rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16889A9053AE7EB169CF822E9EE670A5C618F97E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 11:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:49:47:71:6b:d7:37:ce:51:27:05:9e:40:d0:e9:ba:4e:0e:36:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16889A9053AE7EB169CF822E9EE670A5C618F97E
Validity
Not Before: Nov 11 07:55:36 2025 GMT
Not After : Nov 10 08:00:36 2026 GMT
Subject: CN=A48A26BEA0147BA15FBF3BB4AAF7A95C35347C06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8e:c9:58:a0:47:60:78:0b:ef:73:be:4a:0c:
5b:4d:70:b6:5e:f4:aa:29:36:f4:ea:ed:0a:3c:cc:
6e:5f:d1:68:2d:b9:c1:21:bb:37:29:6d:12:f9:d0:
d1:d1:1f:98:9e:b1:c0:b9:fd:a1:92:1d:c1:1f:3b:
94:f3:f9:b6:3e:f3:44:1f:de:d5:d2:82:bc:ac:46:
b9:ac:ff:fa:18:c8:5e:03:46:3b:1d:c2:90:f4:2e:
2c:28:25:c2:d7:6b:07:77:75:11:d4:c3:e0:e3:e3:
4d:78:55:29:47:87:43:57:af:e7:f1:cb:fe:1f:56:
89:b4:af:1f:3f:e6:db:6e:31:a6:23:22:40:fc:4e:
7c:23:83:0a:1d:52:aa:b8:3b:ab:e8:79:be:17:fa:
f5:91:7f:42:63:d5:93:01:f4:00:29:ad:80:18:a2:
24:17:d6:76:46:70:7c:e7:43:56:26:20:4e:86:0f:
f0:da:ab:c3:0d:a8:89:2e:9a:13:a4:44:b2:8e:0f:
a8:76:cd:d1:aa:7c:6f:4c:98:0c:8b:a3:8d:cb:e1:
e9:0c:7f:d0:13:87:7e:be:6c:3d:20:bd:b7:83:51:
22:14:56:1a:8e:81:54:05:7a:d9:ce:61:af:57:e1:
36:95:5d:93:1d:60:70:20:cf:bd:db:70:29:07:03:
8c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8A:26:BE:A0:14:7B:A1:5F:BF:3B:B4:AA:F7:A9:5C:35:34:7C:06
X509v3 Authority Key Identifier:
keyid:16:88:9A:90:53:AE:7E:B1:69:CF:82:2E:9E:E6:70:A5:C6:18:F9:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16889A9053AE7EB169CF822E9EE670A5C618F97E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/3130332e36372e38312e302f32342d3234203d3e20313532303031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.67.81.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:d3:51:06:13:5b:06:a6:d0:34:79:f9:9b:9b:cc:4c:07:91:
47:29:35:2d:6f:3b:4c:6c:c7:d9:bd:13:c0:f3:eb:b5:60:e3:
65:2f:44:0c:b6:a3:54:ad:bc:1c:0b:e8:d7:88:90:15:e4:f6:
1a:7e:be:b3:af:78:1f:5a:d2:ce:88:06:3e:96:16:4d:94:f4:
e9:4f:15:73:8d:32:4d:62:d8:c4:2f:f1:c0:89:4e:a8:e1:22:
74:6e:5f:cf:b1:9b:b3:3e:b0:67:cd:f6:33:d2:0c:a6:13:cd:
95:ff:8e:49:ac:70:38:ca:5a:de:22:ea:3f:74:14:e6:1b:b2:
48:e5:fa:a8:05:aa:f2:6f:4a:4e:29:d6:0f:bd:f5:97:27:d0:
66:54:cd:a1:e7:1c:7b:57:36:56:31:a1:fd:57:ea:bc:d3:70:
c5:23:ac:18:cf:4b:7e:f4:f6:98:7c:57:6d:17:48:35:b6:8f:
91:bc:87:b4:8c:9b:6c:6c:ff:67:4d:70:ce:7f:55:b8:e0:79:
79:8b:55:d0:ed:bb:44:00:d0:bb:8a:0f:d0:6c:2f:f8:d8:f5:
67:8a:e0:6c:4f:1e:11:9b:85:0f:19:56:2c:77:fd:56:d3:25:
f2:cd:cb:0e:1c:11:08:86:d0:8b:26:64:a6:e8:52:36:0d:f5:
4d:d3:59:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:21:54 2025 by rpki-client