This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/3130332e3130372e3133362e302f32332d3233203d3e20313530393332.roa
File: 3130332e3130372e3133362e302f32332d3233203d3e20313530393332.roa (raw, json)
Hash identifier: gLiHyGd6WfmJC01zh8qXOegj/FVbvbjfIzy7JVajz2s=
Subject key identifier: 9D:DD:51:E7:43:DB:71:59:8F:24:91:C8:03:14:85:56:00:3A:47:ED
Certificate issuer: /CN=CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8
Certificate serial: 34B8F1A4693E779864D56D0EF46638395786A608
Authority key identifier: CC:2F:A8:A6:92:DD:D4:4F:4E:A7:0E:AE:AC:32:04:D5:3E:64:55:C8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/3130332e3130372e3133362e302f32332d3233203d3e20313530393332.roa
Signing time: Mon 22 Dec 2025 07:02:35 +0000
ROA not before: Mon 22 Dec 2025 06:57:35 +0000
ROA not after: Mon 21 Dec 2026 07:02:35 +0000
asID: 150932
IP address blocks: 103.107.136.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl
rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 21:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:b8:f1:a4:69:3e:77:98:64:d5:6d:0e:f4:66:38:39:57:86:a6:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8
Validity
Not Before: Dec 22 06:57:35 2025 GMT
Not After : Dec 21 07:02:35 2026 GMT
Subject: CN=9DDD51E743DB71598F2491C803148556003A47ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:25:77:dc:11:2d:12:f7:2d:13:b1:a3:d4:18:
65:e0:00:7f:1b:f9:b6:e1:b6:1e:ce:3b:02:a3:5e:
15:fd:9a:a0:52:50:8d:a6:b2:87:91:02:26:e7:16:
5f:bb:be:15:3c:82:df:9d:ff:dd:b6:62:c8:3c:18:
41:c2:51:60:94:04:82:c7:30:4c:9a:e2:6f:d0:6a:
aa:97:57:19:5e:23:fc:7d:03:82:44:cb:98:ee:91:
16:37:c2:92:b4:fd:bd:7d:76:d0:da:18:07:71:49:
24:71:a8:07:b2:17:7d:71:56:ee:bc:bb:d3:63:e4:
46:b3:40:01:cd:6a:ce:06:de:76:cc:e0:11:5b:93:
70:fc:1c:20:1a:46:91:83:a5:f9:36:55:f6:d4:62:
1b:3d:e5:26:8d:d6:13:97:e1:f2:27:f9:05:b8:dc:
d5:61:0d:8d:89:79:38:4e:7a:9e:03:02:c8:df:31:
29:e0:96:ef:fd:cf:a4:c7:e9:ab:51:8c:8d:ea:37:
a1:2e:28:8c:1a:ef:02:2d:06:b6:3e:14:36:41:b8:
cb:b6:35:05:b2:c7:61:31:8a:fb:9a:70:f7:44:d2:
93:bc:68:29:65:b1:2b:99:85:9d:b2:27:79:01:fb:
09:e8:e0:73:46:ab:09:9a:49:f8:04:e9:6b:87:a0:
01:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:DD:51:E7:43:DB:71:59:8F:24:91:C8:03:14:85:56:00:3A:47:ED
X509v3 Authority Key Identifier:
keyid:CC:2F:A8:A6:92:DD:D4:4F:4E:A7:0E:AE:AC:32:04:D5:3E:64:55:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/3130332e3130372e3133362e302f32332d3233203d3e20313530393332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.107.136.0/23
Signature Algorithm: sha256WithRSAEncryption
d7:ba:8a:26:e8:d3:26:89:b6:de:fb:8f:0f:61:15:b3:4a:62:
f8:f3:56:4f:72:09:0a:b8:e3:47:59:45:f2:bc:c2:07:eb:c1:
03:bf:9d:98:af:8c:8f:c5:5f:6b:7c:3d:98:67:4f:75:fe:21:
c1:d7:b3:12:08:5d:03:e7:71:cf:ae:56:c8:62:c0:03:36:ab:
da:64:69:fb:05:22:2a:d1:61:43:10:78:2c:4c:53:06:1a:19:
c5:d5:1d:23:24:2d:91:1a:0e:91:64:1f:ab:c5:e3:3f:f5:7b:
05:45:7b:08:b0:1f:b9:89:2f:31:33:65:a9:62:ff:d2:39:9c:
cf:00:fc:92:80:fa:bb:ad:f6:f2:0f:5d:70:43:37:1b:bb:72:
b6:eb:2d:20:3d:d4:51:c9:59:0d:c2:49:f7:d0:3f:95:33:1a:
e8:35:01:c3:4b:44:ac:8f:24:1e:1b:e6:dd:07:c4:2b:be:6a:
ab:0a:ea:9e:ef:f0:c4:9e:ef:d9:dc:a7:94:f1:c8:bc:a8:06:
bf:b9:e5:5d:80:d0:25:c5:19:83:93:bd:3d:39:14:10:db:33:
60:e3:dc:61:93:99:7f:92:12:82:4f:ac:41:99:17:13:f9:f5:
b2:e8:9f:cb:a9:e1:9d:82:ba:c2:7d:e3:a9:51:d5:fb:12:c7:
65:dc:d4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 03:04:06 2025 by rpki-client