This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/3130332e3130392e3230372e302f32342d3234203d3e20313530393335.roa
File: 3130332e3130392e3230372e302f32342d3234203d3e20313530393335.roa (raw, json)
Hash identifier: W7qNwUKI6yVYK0QKsHqMQf5TpfiakU3FHDTDzkx2y0k=
Subject key identifier: F7:35:B3:8B:FF:EB:D3:9F:19:B5:C1:91:AA:F1:B4:94:86:C4:BC:75
Certificate issuer: /CN=4A243A1EC4991C40D3A6148515E3C51981B425F7
Certificate serial: 41E1CE650795442D10DB3958BE265262D1A91B00
Authority key identifier: 4A:24:3A:1E:C4:99:1C:40:D3:A6:14:85:15:E3:C5:19:81:B4:25:F7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/3130332e3130392e3230372e302f32342d3234203d3e20313530393335.roa
Signing time: Tue 11 Mar 2025 10:00:01 +0000
ROA not before: Tue 11 Mar 2025 09:55:01 +0000
ROA not after: Tue 10 Mar 2026 10:00:01 +0000
asID: 150935
IP address blocks: 103.109.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.crl
rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 03:56:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:e1:ce:65:07:95:44:2d:10:db:39:58:be:26:52:62:d1:a9:1b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A243A1EC4991C40D3A6148515E3C51981B425F7
Validity
Not Before: Mar 11 09:55:01 2025 GMT
Not After : Mar 10 10:00:01 2026 GMT
Subject: CN=F735B38BFFEBD39F19B5C191AAF1B49486C4BC75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:9b:24:f3:73:38:c5:d4:e2:d5:f8:1e:e2:25:
8b:fa:4e:9f:b2:69:46:3c:10:29:33:dd:a4:f3:4c:
49:3a:03:bd:30:eb:99:a6:14:72:37:18:84:f1:d6:
aa:e3:42:d2:c5:63:d7:ab:c2:82:39:ec:ea:d3:46:
d7:35:3f:03:dc:9f:11:e3:ac:33:4f:c5:14:f6:8a:
ab:22:2c:72:bf:96:c0:12:35:86:20:6b:bc:f6:53:
6d:32:43:f7:7f:41:71:a3:7a:67:48:83:9e:46:ae:
89:30:4d:e9:88:78:76:cf:e2:92:83:b5:49:e8:a6:
37:7a:42:e2:31:28:94:bb:0c:19:9e:d4:ce:f4:2b:
5d:fe:5b:7a:0b:40:40:70:ad:9a:f8:76:33:39:28:
fc:50:62:9c:f1:a0:58:e6:91:80:29:c0:e1:5b:45:
c5:22:b8:c7:b6:b0:61:fd:29:3c:08:ae:aa:6c:05:
af:02:31:44:32:0f:eb:ee:f4:01:94:a6:3e:6a:c7:
20:49:a6:72:42:6a:88:07:ba:f6:96:c5:04:ed:63:
7f:bb:29:55:3c:4b:ce:50:a9:66:89:5f:5d:a9:f8:
7d:10:b5:b0:e1:91:ab:cb:32:52:8a:3a:82:da:91:
1b:01:1d:29:60:71:9b:27:76:34:d7:f9:60:1d:8e:
6e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:35:B3:8B:FF:EB:D3:9F:19:B5:C1:91:AA:F1:B4:94:86:C4:BC:75
X509v3 Authority Key Identifier:
keyid:4A:24:3A:1E:C4:99:1C:40:D3:A6:14:85:15:E3:C5:19:81:B4:25:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/3130332e3130392e3230372e302f32342d3234203d3e20313530393335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.109.207.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:7b:ee:14:1b:d2:8f:f7:b6:ed:b9:13:7f:e9:ff:fb:c4:d1:
be:3a:11:47:17:08:0f:c3:6f:99:26:1d:e3:ac:1b:52:c7:71:
fa:8e:be:bd:08:b1:46:ea:c9:22:36:51:84:58:ec:d6:98:c7:
d5:3c:29:94:71:13:a4:4a:13:e5:e9:b9:e3:fc:5c:6b:87:c7:
83:6c:87:f1:14:fc:ad:6a:9f:79:2d:79:cf:c0:3b:01:e1:69:
9d:74:d2:d6:e4:d6:37:36:15:5c:4d:3f:28:03:86:2c:ba:59:
2c:07:95:2a:f8:cf:3b:8b:3c:d0:a6:dc:bc:4b:21:80:ea:76:
8e:ac:7f:d7:81:27:ea:c1:cd:47:6c:de:28:75:12:8b:68:f6:
35:7f:1e:f2:91:b5:99:e4:ae:74:fb:af:cb:1e:91:17:ed:39:
61:49:06:38:a7:b0:16:71:28:ad:8d:a7:12:74:39:7d:cf:f7:
69:a9:ff:f2:29:b9:f7:74:44:51:33:06:ce:79:ca:a9:c3:46:
dc:50:04:50:ce:23:c8:3a:59:78:b2:2a:a9:54:98:dc:ac:07:
cd:56:5d:c6:8a:ea:f3:5c:8c:4a:08:c3:ed:ce:ac:05:43:3b:
63:60:cf:11:e7:6e:96:f3:90:62:0f:2a:14:e3:80:c5:42:63:
59:46:f8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:10:54 2025 by rpki-client