This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/3130332e3134352e35332e302f32342d3234203d3e20313339343535.roa
File: 3130332e3134352e35332e302f32342d3234203d3e20313339343535.roa (raw, json)
Hash identifier: t0f8hH0p5YUalqHFkiu1kyX28Ot7aEHcWn8PNYVXvq0=
Subject key identifier: 6A:3B:AA:71:B5:D8:D6:62:09:8D:66:EA:2D:ED:E2:3A:91:E7:DD:26
Certificate issuer: /CN=90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3
Certificate serial: 24F69B69F05D5EA2EE61133692644D975FB0D997
Authority key identifier: 90:E2:CC:AC:A3:23:EA:B2:14:5F:54:B7:CF:65:C5:FA:EC:EF:83:A3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/3130332e3134352e35332e302f32342d3234203d3e20313339343535.roa
Signing time: Wed 02 Apr 2025 18:00:02 +0000
ROA not before: Wed 02 Apr 2025 17:55:02 +0000
ROA not after: Wed 01 Apr 2026 18:00:02 +0000
asID: 139455
IP address blocks: 103.145.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl
rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 12:28:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:f6:9b:69:f0:5d:5e:a2:ee:61:13:36:92:64:4d:97:5f:b0:d9:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3
Validity
Not Before: Apr 2 17:55:02 2025 GMT
Not After : Apr 1 18:00:02 2026 GMT
Subject: CN=6A3BAA71B5D8D662098D66EA2DEDE23A91E7DD26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9f:9b:3f:d4:58:fb:83:ae:cc:f7:65:39:d6:
16:3b:11:0b:54:3d:a5:44:10:06:45:18:96:95:c3:
3f:73:ad:ac:46:cd:7d:e4:a6:8f:df:39:c3:6d:9f:
e0:d2:0b:10:a6:50:cf:07:69:24:02:27:ae:60:c3:
10:73:1c:3c:48:7a:1b:8c:36:07:a5:ee:d3:e7:78:
3e:c1:af:17:f7:fb:a2:2b:22:03:1e:7b:12:e8:9f:
16:c1:c6:ef:63:a1:84:3e:c7:1a:d8:07:35:2d:e7:
d6:f5:ac:0d:00:a0:d1:cf:5e:e5:4a:df:70:11:b5:
cc:a6:04:b2:c8:68:56:2e:f4:b0:a4:25:03:01:60:
a3:3f:31:43:da:90:1e:bf:93:2f:9c:0b:20:2a:05:
f3:01:65:d0:80:b5:59:92:62:3e:8f:d8:ec:d9:0a:
b0:b6:db:7d:2b:8f:d7:64:66:6c:cb:a5:de:44:2c:
44:b3:46:d7:91:d0:62:8a:3e:e8:23:79:27:cd:45:
31:6e:2f:3a:b4:56:8f:81:31:a7:e1:81:b0:6f:5c:
c8:04:13:cc:5b:92:55:2e:77:1e:da:a8:fa:7b:4f:
ec:e3:8b:b5:82:b0:1d:9c:3c:18:a5:5e:53:de:19:
51:4e:7c:34:f9:24:36:6c:41:8e:a3:db:33:61:1a:
a8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3B:AA:71:B5:D8:D6:62:09:8D:66:EA:2D:ED:E2:3A:91:E7:DD:26
X509v3 Authority Key Identifier:
keyid:90:E2:CC:AC:A3:23:EA:B2:14:5F:54:B7:CF:65:C5:FA:EC:EF:83:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/3130332e3134352e35332e302f32342d3234203d3e20313339343535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.145.53.0/24
Signature Algorithm: sha256WithRSAEncryption
96:35:0b:8b:4c:45:0d:e4:3b:90:66:d3:42:48:b6:25:38:a0:
f5:34:fd:58:6b:bf:e6:79:c9:19:08:60:1d:d0:84:8a:f3:54:
6a:f4:c3:f0:9e:cb:2e:f3:fe:92:5f:62:7b:ca:a8:b4:96:f1:
1a:18:4b:40:20:f1:06:84:01:bc:57:f7:7c:e1:ba:15:64:90:
a5:01:2e:fb:ef:22:e4:63:25:88:9e:17:08:ec:3b:70:fd:c6:
92:f9:1e:b5:b4:aa:db:3b:5c:45:1f:2a:4b:98:2b:97:c0:aa:
c2:38:58:1c:f9:9d:e2:b9:61:6c:d8:b8:e6:77:bd:ce:ad:79:
39:21:83:00:55:a1:84:80:55:7c:57:48:45:62:70:80:d9:a2:
e6:56:63:5e:ff:5f:85:c6:e3:78:ed:01:0f:ba:a1:ad:d6:e0:
79:64:6b:f7:22:1e:b5:8a:d7:68:56:49:50:24:f8:18:39:32:
e1:43:16:85:8b:4c:ef:33:45:85:67:c6:ce:c0:47:b9:1d:07:
c2:4d:8f:15:26:9b:6a:4e:c9:17:eb:2d:c8:59:49:d7:ce:fc:
f1:58:2a:f2:ce:37:5e:41:98:34:c9:4e:04:30:ee:fb:e9:48:
80:b8:73:ef:e6:2f:e6:55:a5:11:02:49:d8:8c:8d:12:68:24:
09:ff:dc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:51:34 2025 by rpki-client