This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/3130332e35352e32322e302f32332d3234203d3e20313530343930.roa
File: 3130332e35352e32322e302f32332d3234203d3e20313530343930.roa (raw, json)
Hash identifier: IQtHv5dJn+zbb+MIajlDdDAnYnBEq1Yu3MvRxA0jXsM=
Subject key identifier: 90:6D:DB:5E:1E:80:AE:6E:06:B8:60:C6:43:D6:22:61:67:A7:BC:4B
Certificate issuer: /CN=B4A42192F8CDBE935CE5927E5AD3C63C8196152D
Certificate serial: 6E616CEF27357D14B3E7FE1531DE21D8E204059E
Authority key identifier: B4:A4:21:92:F8:CD:BE:93:5C:E5:92:7E:5A:D3:C6:3C:81:96:15:2D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/3130332e35352e32322e302f32332d3234203d3e20313530343930.roa
Signing time: Tue 23 Dec 2025 18:00:00 +0000
ROA not before: Tue 23 Dec 2025 17:55:00 +0000
ROA not after: Tue 22 Dec 2026 18:00:00 +0000
asID: 150490
IP address blocks: 103.55.22.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.crl
rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 01:13:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:61:6c:ef:27:35:7d:14:b3:e7:fe:15:31:de:21:d8:e2:04:05:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4A42192F8CDBE935CE5927E5AD3C63C8196152D
Validity
Not Before: Dec 23 17:55:00 2025 GMT
Not After : Dec 22 18:00:00 2026 GMT
Subject: CN=906DDB5E1E80AE6E06B860C643D6226167A7BC4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e1:ab:df:01:10:ae:60:58:39:17:d9:92:36:
ca:1e:03:14:0c:d9:e4:50:65:99:f4:7e:ec:b2:fa:
7b:77:7a:ae:62:5f:86:5e:6b:d5:0b:b9:be:51:2b:
a6:2c:68:9e:7f:9b:43:c7:19:c6:46:0f:16:00:84:
28:0f:01:c4:1b:3f:44:4d:62:45:4a:8e:82:a4:ca:
d0:58:54:d2:08:34:0f:d8:75:82:ba:91:5e:52:6a:
b6:ec:3d:4c:f4:2b:34:c8:62:e5:97:0b:82:3f:43:
60:b6:57:bb:2d:8c:f8:a4:73:4e:1e:74:cd:1e:cb:
26:ef:19:7b:5e:6b:e7:0e:07:98:20:16:53:3d:eb:
60:26:c0:18:eb:f7:39:48:df:40:71:95:4f:59:1b:
98:8b:92:db:f0:eb:eb:a0:c7:dd:f8:23:07:5d:32:
3d:45:95:b3:64:bb:66:24:ae:18:8d:90:7f:eb:16:
fc:ef:ff:b5:a8:6c:fb:99:b0:5b:31:3f:fa:16:1d:
39:2b:99:7d:92:3a:c9:b9:e0:0f:b0:a7:6d:59:a6:
ee:7e:49:a5:04:ab:3c:d7:fc:da:1b:bc:c4:49:09:
83:93:c7:b1:d2:f7:a6:9c:15:4b:b7:06:74:74:80:
6b:c2:8b:f8:66:cc:97:a6:af:ab:28:2f:7b:03:3c:
f5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:6D:DB:5E:1E:80:AE:6E:06:B8:60:C6:43:D6:22:61:67:A7:BC:4B
X509v3 Authority Key Identifier:
keyid:B4:A4:21:92:F8:CD:BE:93:5C:E5:92:7E:5A:D3:C6:3C:81:96:15:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/3130332e35352e32322e302f32332d3234203d3e20313530343930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.55.22.0/23
Signature Algorithm: sha256WithRSAEncryption
21:a0:f0:ee:91:c4:ce:79:6a:56:4e:1d:d2:03:fa:cf:91:6e:
0b:e0:74:2d:67:90:f7:37:43:01:a9:c0:43:36:cf:e6:65:7c:
89:d0:91:f8:8c:b3:16:38:54:fd:28:34:fe:7d:2e:a8:fb:1e:
45:d2:a4:83:aa:28:93:5d:19:5e:70:8d:d7:d3:9f:ac:e0:18:
47:e6:d6:43:36:2d:5a:02:4a:ac:c0:bd:07:ea:95:9e:37:b7:
71:41:10:a7:4e:42:13:e0:c9:8f:2c:4e:e3:31:3b:69:63:0c:
df:c6:95:f3:21:b1:76:60:f0:68:9e:9a:05:9f:cd:9d:3b:1a:
b7:a6:f7:22:27:4f:b0:ef:0b:92:8d:c9:73:88:a4:67:9b:11:
66:b2:36:6b:4e:01:4f:65:97:77:2c:c3:d6:d5:de:a9:8e:94:
2f:b8:3b:03:61:87:3c:b0:b2:f7:e7:cc:ac:72:de:68:01:0b:
4a:3b:67:3b:d1:12:5b:b6:77:4a:d6:23:6c:90:16:f4:a6:f4:
23:dc:81:fa:af:e9:fe:b1:41:14:6f:6b:18:ae:4e:d5:3b:c6:
a4:e5:20:5c:dd:74:28:c6:8d:77:0c:55:46:70:23:53:fc:48:
32:50:e3:d6:81:88:c5:3e:41:b4:da:86:17:29:0d:c1:2b:9b:
ff:d1:45:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 00:39:20 2025 by rpki-client