This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/3130332e3233362e3135312e302f32342d3234203d3e203535363634.roa
File: 3130332e3233362e3135312e302f32342d3234203d3e203535363634.roa (raw, json)
Hash identifier: vN+gGGeaJ1gj8tThDKmMiECC35znNoNYchE+0HwB4qo=
Subject key identifier: 84:FE:5B:FE:E9:7C:18:63:AF:EE:60:A5:BB:A0:E0:6C:69:B9:51:C1
Certificate issuer: /CN=7932E1C92B451A2FD7A5E85B541135E25AD074D5
Certificate serial: 020F14A44AA820A9C1BA32AE27C274B2F59B4B31
Authority key identifier: 79:32:E1:C9:2B:45:1A:2F:D7:A5:E8:5B:54:11:35:E2:5A:D0:74:D5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7932E1C92B451A2FD7A5E85B541135E25AD074D5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/3130332e3233362e3135312e302f32342d3234203d3e203535363634.roa
Signing time: Tue 09 Dec 2025 11:34:02 +0000
ROA not before: Tue 09 Dec 2025 11:29:02 +0000
ROA not after: Tue 08 Dec 2026 11:34:02 +0000
asID: 55664
IP address blocks: 103.236.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/7932E1C92B451A2FD7A5E85B541135E25AD074D5.crl
rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/7932E1C92B451A2FD7A5E85B541135E25AD074D5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7932E1C92B451A2FD7A5E85B541135E25AD074D5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 08:24:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:0f:14:a4:4a:a8:20:a9:c1:ba:32:ae:27:c2:74:b2:f5:9b:4b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7932E1C92B451A2FD7A5E85B541135E25AD074D5
Validity
Not Before: Dec 9 11:29:02 2025 GMT
Not After : Dec 8 11:34:02 2026 GMT
Subject: CN=84FE5BFEE97C1863AFEE60A5BBA0E06C69B951C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:63:b6:aa:ea:78:08:dc:29:8b:e3:40:8e:b4:
a3:3d:94:2f:82:b5:5f:7a:89:8c:0d:3b:34:6d:95:
28:93:30:78:cc:c0:f9:3f:9d:51:1a:30:b5:de:81:
08:7a:41:4a:d2:f4:34:e1:6e:31:70:87:90:f8:56:
6b:0b:a0:e3:7f:7f:38:e0:fa:fd:1f:f9:9f:b6:05:
1c:16:08:7f:05:aa:d6:94:27:58:fd:f1:8f:22:72:
05:f1:8b:32:9c:26:15:71:57:d8:c0:29:81:44:93:
c3:3d:7a:3c:b6:df:51:de:79:2e:0b:73:68:27:e4:
ef:59:41:d1:a6:8d:6e:9e:13:65:58:ae:cf:4e:4a:
62:de:fb:7a:86:91:61:b7:b3:b0:74:af:3d:dc:5f:
96:b9:ab:51:0d:73:c0:9b:5c:6b:62:d6:23:92:ea:
5f:8c:5c:be:bf:e3:05:f3:77:fe:8b:26:78:ee:9b:
95:a3:ae:5e:7d:74:cc:e6:7f:37:5b:ae:24:ae:d8:
da:1d:9b:e0:ec:13:df:23:90:09:4e:7b:46:ea:1c:
ea:7b:4f:3b:ed:88:48:02:16:4e:32:80:d4:39:20:
b9:c9:71:35:3f:e0:58:30:a3:96:85:1e:ec:f0:e0:
04:80:13:af:6c:b0:fd:5a:bc:95:f5:87:d6:3d:fe:
a3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:FE:5B:FE:E9:7C:18:63:AF:EE:60:A5:BB:A0:E0:6C:69:B9:51:C1
X509v3 Authority Key Identifier:
keyid:79:32:E1:C9:2B:45:1A:2F:D7:A5:E8:5B:54:11:35:E2:5A:D0:74:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/7932E1C92B451A2FD7A5E85B541135E25AD074D5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7932E1C92B451A2FD7A5E85B541135E25AD074D5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/3130332e3233362e3135312e302f32342d3234203d3e203535363634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.236.151.0/24
Signature Algorithm: sha256WithRSAEncryption
46:e2:4a:27:05:a3:6e:51:c7:31:86:2d:e1:e8:29:18:ef:53:
47:9b:e9:26:0d:9c:9d:35:50:7b:d7:ff:a5:00:6c:42:e7:71:
f5:19:1d:06:a4:4d:d1:33:3a:34:65:be:c0:3f:5e:8a:50:fc:
bf:f4:4b:36:17:58:56:9f:d0:45:9e:cb:be:44:48:5a:92:db:
b5:b9:7a:2b:89:42:2f:23:41:63:b6:cb:a5:93:a4:4a:bb:d6:
91:8c:e0:f6:89:87:52:7f:f5:6a:b8:29:f8:52:27:6c:c1:1e:
ed:a7:6a:f2:84:94:b0:6c:79:8f:dc:b0:b9:b1:a8:a9:e7:22:
b8:6b:6b:5d:7b:51:10:fa:01:4b:4d:02:f9:68:d2:b5:0f:27:
4f:5d:61:44:4e:c2:9d:ea:de:8b:14:ce:6c:8a:da:db:71:31:
3c:96:36:81:a0:06:23:a2:10:69:f8:69:08:8e:df:51:44:c1:
99:a4:8b:42:d8:2d:f3:16:0b:1b:7d:c5:fb:3d:ce:fc:d6:b8:
18:1c:15:dd:b4:01:45:5b:dc:4e:53:0e:76:4c:59:4d:b5:3b:
d8:4e:ae:07:d9:eb:94:c9:29:ad:29:c9:a4:6c:70:08:9a:0f:
87:e9:1f:18:09:f3:76:57:66:d2:15:d0:04:af:9b:d3:71:46:
96:f8:ec:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:18:31 2025 by rpki-client