This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/3130332e3134332e39352e302f32342d3234203d3e20313339333932.roa
File: 3130332e3134332e39352e302f32342d3234203d3e20313339333932.roa (raw, json)
Hash identifier: kHcd0PiR+avo06lt/QU/A5Sa1D2RSw2rXV6RMIKGIO8=
Subject key identifier: B1:8B:DA:BC:AA:E4:5A:47:E5:C1:3F:8C:19:31:7C:5D:63:D1:33:E3
Certificate issuer: /CN=38992A0A64D724D15761F2F9410D85186E2311FE
Certificate serial: 06A6627B36D5C7BDCC651BBFB640085979F5434F
Authority key identifier: 38:99:2A:0A:64:D7:24:D1:57:61:F2:F9:41:0D:85:18:6E:23:11:FE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/3130332e3134332e39352e302f32342d3234203d3e20313339333932.roa
Signing time: Wed 22 Oct 2025 00:00:01 +0000
ROA not before: Tue 21 Oct 2025 23:55:01 +0000
ROA not after: Wed 21 Oct 2026 00:00:01 +0000
asID: 139392
IP address blocks: 103.143.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.crl
rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 06:37:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:a6:62:7b:36:d5:c7:bd:cc:65:1b:bf:b6:40:08:59:79:f5:43:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38992A0A64D724D15761F2F9410D85186E2311FE
Validity
Not Before: Oct 21 23:55:01 2025 GMT
Not After : Oct 21 00:00:01 2026 GMT
Subject: CN=B18BDABCAAE45A47E5C13F8C19317C5D63D133E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:61:8e:99:91:d0:48:33:9d:80:53:f1:ed:b6:
71:91:79:a9:03:45:e3:40:dc:8d:e2:d1:d3:f0:4d:
33:0b:c1:e0:19:5b:84:65:4e:d2:56:af:24:94:a6:
1e:95:cb:c8:cf:72:e8:46:18:9e:e5:f9:12:f0:81:
d5:85:47:1e:d7:5d:00:53:7e:c6:66:b4:6a:46:48:
24:9d:92:31:44:96:0b:ba:d9:cc:26:d4:fe:b7:3a:
16:a2:18:08:84:f0:62:49:13:91:ac:01:e5:28:45:
a1:e0:f6:ae:2b:08:15:28:2b:50:54:4c:f0:0a:af:
59:14:af:b2:dc:d1:dc:4b:07:15:e8:3a:e3:1f:86:
24:28:f5:f5:56:21:12:24:23:3d:76:fb:61:62:be:
16:09:cb:84:cc:98:bc:89:3f:ee:e0:62:b8:8d:e2:
fa:08:90:cf:7e:a0:40:28:1b:bf:f7:6b:f9:40:3b:
40:c0:e8:24:3f:5d:13:af:8f:42:7f:64:d8:01:65:
c4:fb:9b:3d:f3:b4:c1:64:05:65:96:17:0b:4e:58:
8a:28:d6:04:bd:f8:8d:42:53:2b:67:9f:86:37:87:
fd:3c:4c:82:cd:33:9d:fb:04:66:e8:e2:79:a8:2c:
10:74:d9:d5:af:a9:20:c6:0c:ee:e5:d7:0f:ca:4d:
57:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8B:DA:BC:AA:E4:5A:47:E5:C1:3F:8C:19:31:7C:5D:63:D1:33:E3
X509v3 Authority Key Identifier:
keyid:38:99:2A:0A:64:D7:24:D1:57:61:F2:F9:41:0D:85:18:6E:23:11:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/3130332e3134332e39352e302f32342d3234203d3e20313339333932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.143.95.0/24
Signature Algorithm: sha256WithRSAEncryption
55:67:aa:de:d7:f7:a3:92:7d:91:61:21:65:e7:00:e1:6f:04:
00:d3:98:80:72:2a:d6:c1:0c:60:ce:7f:56:01:33:5f:67:a0:
30:04:9b:90:2c:3c:5a:37:16:31:23:f2:f6:18:d7:22:30:4d:
04:6a:29:e9:a1:46:fb:2c:10:e3:f6:fc:aa:38:38:27:98:ea:
37:f1:63:12:33:96:83:49:ae:ac:28:17:96:9d:ae:63:42:5c:
3e:a8:70:3c:aa:d1:82:f1:46:c5:b0:fb:c8:83:01:e5:3a:83:
07:fd:68:23:8e:2f:dd:38:f4:06:ce:1d:0d:99:0e:02:35:56:
f1:c4:76:14:3a:3d:21:67:44:68:e9:2a:e9:44:75:4b:8d:a3:
45:80:2a:87:b4:71:a6:26:60:1f:32:c8:21:50:b9:dd:1b:3f:
62:4c:fa:bf:3c:91:00:67:a8:de:a1:33:76:0d:4f:8a:b9:50:
b9:00:10:5a:b1:7a:8d:35:ca:45:53:b2:41:69:c4:76:55:0c:
67:ba:79:4b:bb:4c:b7:d1:30:67:37:11:6f:de:39:0d:f0:8c:
60:98:8c:06:a8:3f:33:4c:b7:7b:50:cd:b0:30:7f:c4:b5:93:
4c:96:ee:5c:21:6f:60:dc:60:31:79:b8:7a:4c:f2:4e:bf:f8:
e1:ce:04:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:56:27 2025 by rpki-client