This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/3130332e35342e38332e302f32342d3234203d3e20313530353132.roa
File: 3130332e35342e38332e302f32342d3234203d3e20313530353132.roa (raw, json)
Hash identifier: NLpjQTON2Z80uPvHtmw/0JAegSKn6kWFoxLR7SImnLM=
Subject key identifier: E9:DF:A4:0A:3D:DE:99:10:FA:8C:D8:05:C0:42:E8:00:16:89:00:08
Certificate issuer: /CN=2ADCBF290A98776E6F59353351C879A1502B884A
Certificate serial: 16D9F5889A0CF0C5FF38752D3C028D8875C62946
Authority key identifier: 2A:DC:BF:29:0A:98:77:6E:6F:59:35:33:51:C8:79:A1:50:2B:88:4A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2ADCBF290A98776E6F59353351C879A1502B884A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/3130332e35342e38332e302f32342d3234203d3e20313530353132.roa
Signing time: Mon 24 Nov 2025 11:00:02 +0000
ROA not before: Mon 24 Nov 2025 10:55:02 +0000
ROA not after: Mon 23 Nov 2026 11:00:02 +0000
asID: 150512
IP address blocks: 103.54.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.crl
rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2ADCBF290A98776E6F59353351C879A1502B884A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 15:19:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:d9:f5:88:9a:0c:f0:c5:ff:38:75:2d:3c:02:8d:88:75:c6:29:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ADCBF290A98776E6F59353351C879A1502B884A
Validity
Not Before: Nov 24 10:55:02 2025 GMT
Not After : Nov 23 11:00:02 2026 GMT
Subject: CN=E9DFA40A3DDE9910FA8CD805C042E80016890008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:60:ef:c7:7e:7e:56:b3:6a:74:e9:f2:bb:30:
83:c4:a8:30:2b:7f:61:58:8e:bf:a7:bc:24:72:eb:
86:cf:be:98:66:54:1c:ac:1b:47:4b:fb:17:0c:e1:
11:29:0e:5b:8d:35:13:86:e8:b5:c5:b7:a3:02:aa:
60:d6:66:ec:6f:f5:0c:40:24:2a:d7:19:ed:d7:4b:
bc:5a:de:dc:ec:3c:78:3a:c6:45:02:f9:cb:53:a3:
e4:e8:d7:90:31:f9:b8:bf:d5:25:c8:c3:86:48:87:
c5:5c:89:8f:e1:50:7f:e4:aa:58:7c:77:ef:83:a9:
60:59:2d:42:d6:58:00:e9:4a:d2:5d:64:e7:d8:5d:
96:5f:3d:24:08:6d:83:7f:aa:34:f1:5d:54:44:a6:
ec:cc:dc:ab:46:f4:78:56:4f:65:09:9d:a1:c5:f0:
77:86:54:40:a1:13:56:76:ce:cb:81:e9:7d:d2:f6:
cc:33:84:75:56:b5:84:94:83:92:b4:78:42:69:ba:
6e:ee:e3:69:60:5e:33:82:c1:27:a5:7e:52:22:5f:
b9:c4:fc:52:86:cd:66:45:0d:44:94:96:23:c8:78:
c9:45:8b:e2:e0:0e:a1:66:a1:7a:08:cf:64:3b:b0:
28:bc:26:8e:4b:0b:1b:0c:f6:c6:f4:18:6e:97:4e:
96:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:DF:A4:0A:3D:DE:99:10:FA:8C:D8:05:C0:42:E8:00:16:89:00:08
X509v3 Authority Key Identifier:
keyid:2A:DC:BF:29:0A:98:77:6E:6F:59:35:33:51:C8:79:A1:50:2B:88:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2ADCBF290A98776E6F59353351C879A1502B884A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/3130332e35342e38332e302f32342d3234203d3e20313530353132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.54.83.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:20:7c:f4:78:c2:12:ba:c7:4b:9c:32:6b:26:94:1a:39:19:
8a:8d:4c:a1:f9:47:d2:4e:d0:a2:5e:83:4e:c6:ae:c6:ff:26:
da:2e:58:50:ee:a0:4e:50:7c:51:a8:bc:99:1c:95:a1:e8:6f:
0a:67:81:ec:d9:fd:0a:58:0c:7c:55:bc:cf:67:74:e8:22:03:
96:bd:2a:28:d6:27:be:58:8b:39:a0:d0:6c:3c:69:49:a2:62:
03:c5:0f:62:bc:89:4e:13:58:27:e8:cf:87:bc:d0:5f:9d:60:
55:cc:a1:e9:16:d5:f5:7f:2d:eb:60:c2:28:79:44:27:ca:10:
fc:97:be:31:6a:40:f3:e6:bb:ef:fd:58:2e:1f:a4:3f:80:26:
2f:86:98:a6:c2:e9:07:9a:41:59:0f:d7:31:2d:fd:0e:56:ca:
7c:67:28:78:30:a0:26:1c:89:71:97:5c:ea:7e:3a:45:b5:de:
76:99:95:7a:7c:9b:99:15:b7:87:6f:ed:41:a6:71:9f:fb:fa:
57:8a:fa:06:4b:ed:44:8a:00:5f:36:e2:d8:56:35:0e:18:62:
7d:4f:38:3d:5b:34:68:b9:42:15:b3:a5:65:44:fb:64:c8:e8:
29:be:f6:a4:4f:b0:f5:f9:71:7f:7f:f0:05:5d:0b:e1:3b:07:
05:ca:da:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:35:29 2025 by rpki-client