This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/3130332e37392e3133302e302f32332d3233203d3e20313430343433.roa
File: 3130332e37392e3133302e302f32332d3233203d3e20313430343433.roa (raw, json)
Hash identifier: RNdh1+r+BNYLHAu4V1jupY7hG6iYrh06nO6HbqG1vXI=
Subject key identifier: 94:D8:DF:1E:10:65:85:D9:18:D9:AB:D6:AE:69:6E:A5:84:F7:65:C1
Certificate issuer: /CN=BD6194D3C25B637B15DAEB654B288A451054ABE0
Certificate serial: 670F4A82A631E46279AF54584A24E29814F0B487
Authority key identifier: BD:61:94:D3:C2:5B:63:7B:15:DA:EB:65:4B:28:8A:45:10:54:AB:E0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/3130332e37392e3133302e302f32332d3233203d3e20313430343433.roa
Signing time: Thu 13 Nov 2025 05:00:01 +0000
ROA not before: Thu 13 Nov 2025 04:55:01 +0000
ROA not after: Thu 12 Nov 2026 05:00:01 +0000
asID: 140443
IP address blocks: 103.79.130.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.crl
rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 02:34:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:0f:4a:82:a6:31:e4:62:79:af:54:58:4a:24:e2:98:14:f0:b4:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD6194D3C25B637B15DAEB654B288A451054ABE0
Validity
Not Before: Nov 13 04:55:01 2025 GMT
Not After : Nov 12 05:00:01 2026 GMT
Subject: CN=94D8DF1E106585D918D9ABD6AE696EA584F765C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:05:be:11:5f:fa:01:9e:f6:3a:c1:86:86:9e:
dc:3b:37:6e:21:c0:fb:1c:39:fb:ed:5f:1c:82:14:
43:96:b6:d7:50:70:22:9a:b3:56:b8:e5:3d:3d:61:
74:a2:f3:2c:ce:21:33:db:2f:0b:a8:c4:91:e8:4b:
a5:cf:5f:ee:5c:16:32:cd:84:55:2f:f6:b5:80:54:
79:d4:3d:61:4a:81:9f:a4:1c:43:fc:ec:bb:05:62:
f6:c2:1e:c4:65:87:24:96:bf:3f:1c:59:fd:3d:34:
68:6d:8b:c2:9e:f7:f7:a3:9c:94:94:dd:e9:c8:fb:
64:31:35:93:c7:ef:f4:9c:de:ad:4f:49:d8:f4:2f:
ed:b1:01:65:40:b0:06:66:04:55:58:85:b4:ca:4e:
ae:16:1c:ef:a5:6c:bb:8e:d1:ce:1d:92:36:62:8e:
3e:5a:ad:02:1b:a4:41:64:52:bd:b1:1f:af:48:19:
3a:b7:6d:46:41:f3:7c:b1:3f:10:62:e9:93:da:c4:
04:46:06:b4:c0:0a:bc:e1:23:51:4f:38:3f:ba:01:
43:14:40:c4:e8:f3:11:01:c8:b5:ea:9d:1f:c8:9d:
95:7c:53:06:30:5f:f9:cc:37:4b:a1:f0:7f:d3:3f:
4c:72:29:55:a2:89:a2:14:ee:30:9c:ed:20:23:76:
a3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D8:DF:1E:10:65:85:D9:18:D9:AB:D6:AE:69:6E:A5:84:F7:65:C1
X509v3 Authority Key Identifier:
keyid:BD:61:94:D3:C2:5B:63:7B:15:DA:EB:65:4B:28:8A:45:10:54:AB:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/3130332e37392e3133302e302f32332d3233203d3e20313430343433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.79.130.0/23
Signature Algorithm: sha256WithRSAEncryption
93:07:98:d9:6c:21:77:dc:bd:01:09:24:1d:49:8b:55:7b:72:
04:70:97:31:44:b4:3a:63:34:37:46:70:f5:49:1c:30:2e:b7:
ef:13:91:5c:25:23:b0:a5:62:78:26:ae:cd:9f:3e:46:5e:ce:
47:db:9e:16:38:9c:e6:db:d0:84:78:b0:97:b8:65:3d:3d:4a:
aa:15:bb:e5:bf:45:4b:e5:e2:a0:f3:00:c8:37:de:cd:8c:9e:
f9:5b:09:ec:72:7b:a9:53:a0:06:78:90:6c:67:62:3f:3d:f8:
79:17:92:70:f6:9d:18:a2:08:8e:f6:bd:3c:6f:09:be:95:f2:
37:7a:13:eb:32:e2:83:86:fe:e1:60:d4:4f:ff:43:cd:63:ae:
67:0a:0f:58:7c:42:a8:e8:be:aa:07:a5:cf:29:37:1c:05:89:
6a:1f:3c:cb:c7:dc:d0:bb:1a:16:a8:5b:55:d5:c6:cc:20:de:
d5:ab:47:24:7e:a2:f1:dd:1d:8f:0f:74:e9:28:b5:1f:be:c5:
f2:a9:c9:2d:f0:c4:d0:38:f1:c4:fb:92:16:13:60:60:2c:d5:
13:47:4f:6d:2f:fb:a0:37:6b:a3:01:fc:95:84:7a:ef:56:8e:
ef:62:d4:97:f9:1f:69:4c:94:d1:6c:9e:75:a5:99:06:b3:77:
1b:8f:d7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 15:28:59 2025 by rpki-client