This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/3130332e3134332e3132382e302f32342d3234203d3e20313339333933.roa
File: 3130332e3134332e3132382e302f32342d3234203d3e20313339333933.roa (raw, json)
Hash identifier: WrbEtwkzEelam58TNUV4Bn/EuB71NKCGwrujJRp3Bd8=
Subject key identifier: 1F:2D:08:CD:D3:95:97:C3:BA:E0:01:A4:71:A9:33:18:9F:08:73:1A
Certificate issuer: /CN=29BE771FE6D788CA509E787787F218ADFB43DDB2
Certificate serial: 56A8899089FB143E6C1764B9CD014C79BA41E55B
Authority key identifier: 29:BE:77:1F:E6:D7:88:CA:50:9E:78:77:87:F2:18:AD:FB:43:DD:B2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/3130332e3134332e3132382e302f32342d3234203d3e20313339333933.roa
Signing time: Wed 24 Sep 2025 09:36:13 +0000
ROA not before: Wed 24 Sep 2025 09:31:13 +0000
ROA not after: Wed 23 Sep 2026 09:36:13 +0000
asID: 139393
IP address blocks: 103.143.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.crl
rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Dec 2025 15:45:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:a8:89:90:89:fb:14:3e:6c:17:64:b9:cd:01:4c:79:ba:41:e5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29BE771FE6D788CA509E787787F218ADFB43DDB2
Validity
Not Before: Sep 24 09:31:13 2025 GMT
Not After : Sep 23 09:36:13 2026 GMT
Subject: CN=1F2D08CDD39597C3BAE001A471A933189F08731A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ec:11:53:98:0c:6a:da:77:03:80:a0:84:82:
fe:32:41:fe:c6:6b:2c:35:e4:6d:a1:26:6f:0d:c4:
7f:ea:59:49:d8:18:b4:db:29:92:8c:c2:59:94:b7:
92:06:10:b4:fd:6d:fd:74:89:88:2b:0c:58:a9:e2:
47:38:34:a6:57:7b:c6:4e:e6:9e:fc:ed:4d:7a:be:
aa:ee:45:db:ba:d5:f0:f5:5f:ec:ba:ba:c3:8c:1d:
41:02:9a:c1:62:50:c8:d0:5c:55:93:bd:51:ce:a6:
25:e5:d7:8c:d3:22:fd:d9:a0:61:9e:8f:2a:32:fe:
db:63:58:eb:0d:7a:50:2e:11:df:22:67:50:dd:0c:
b0:94:36:fd:d1:76:3b:fa:f0:f2:4f:69:6d:d0:ab:
a4:60:92:57:4b:71:74:ce:9b:d2:de:86:3e:a2:40:
cb:b3:bd:39:4d:bf:d8:08:f2:41:38:1f:3b:bf:a7:
50:59:99:48:58:5e:84:b1:eb:bb:d8:62:be:a9:a1:
1e:7d:96:a7:f2:e3:cb:70:7e:6c:4a:ba:a2:e5:42:
95:2c:9d:c1:64:0b:b0:c1:5b:fe:2a:57:45:4d:86:
8d:65:a1:c4:0f:0c:53:c7:61:4d:6e:fe:c4:d5:bb:
1e:8d:04:dc:c4:81:d5:19:c3:8d:b7:ab:b1:56:e2:
b0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2D:08:CD:D3:95:97:C3:BA:E0:01:A4:71:A9:33:18:9F:08:73:1A
X509v3 Authority Key Identifier:
keyid:29:BE:77:1F:E6:D7:88:CA:50:9E:78:77:87:F2:18:AD:FB:43:DD:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/3130332e3134332e3132382e302f32342d3234203d3e20313339333933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.143.128.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:10:05:7e:10:ce:75:f3:7e:42:e9:ba:49:01:56:5a:5e:44:
a0:cd:cc:c5:78:e2:6b:d3:6a:d0:13:b4:ab:18:0c:06:86:69:
d2:e3:a1:5f:22:85:45:f9:e3:24:9e:0f:20:33:77:50:af:39:
18:27:35:76:a2:40:9a:ff:2c:b6:c0:6e:b3:74:df:1f:a8:69:
75:07:0c:4b:7a:48:89:91:51:25:91:c5:52:90:16:c0:85:6f:
75:31:7a:f0:be:02:36:9a:21:df:2c:9f:7f:40:3d:41:86:76:
64:51:1f:36:f7:d0:b1:c4:b5:69:fe:05:56:7e:54:5d:70:f9:
24:e0:d7:9f:be:4b:c3:8d:e1:27:db:66:14:87:44:12:e4:5c:
33:96:4c:e4:36:80:47:f4:b1:15:0b:e4:60:9a:13:ab:84:8d:
e8:3a:5b:77:56:e9:6c:13:5d:79:7f:9f:cb:ff:63:ac:33:dc:
28:11:c4:3e:e0:e6:d6:3c:31:a2:81:42:ff:eb:a6:35:9a:c4:
e2:5f:15:24:db:3a:46:62:29:1d:b3:ff:f6:27:50:c9:2c:0d:
e1:85:62:c8:33:cc:c9:e9:2a:3c:90:25:ec:61:dc:e7:a5:5e:
56:a7:9a:66:b2:1c:a6:58:69:c9:9a:a9:de:f4:ff:d1:f9:ea:
27:df:e1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:45:58 2025 by rpki-client