This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/3130332e3135382e39382e302f32332d3234203d3e203338373736.roa
File: 3130332e3135382e39382e302f32332d3234203d3e203338373736.roa (raw, json)
Hash identifier: g4/2gGmpn32hkKxV0sqfqROaCQsBlE1YLxPaRAMg4a0=
Subject key identifier: 68:64:72:3E:D0:87:43:77:5D:79:03:90:EF:81:79:2B:F8:12:18:D3
Certificate issuer: /CN=FD0F38979237143A0D44165912E79E2FACD5A3BA
Certificate serial: 1E23FB11599718C98DEC73F5479D32BA82F6EB70
Authority key identifier: FD:0F:38:97:92:37:14:3A:0D:44:16:59:12:E7:9E:2F:AC:D5:A3:BA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FD0F38979237143A0D44165912E79E2FACD5A3BA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/3130332e3135382e39382e302f32332d3234203d3e203338373736.roa
Signing time: Sun 15 Jun 2025 10:20:04 +0000
ROA not before: Sun 15 Jun 2025 10:15:04 +0000
ROA not after: Sun 14 Jun 2026 10:20:04 +0000
asID: 38776
IP address blocks: 103.158.98.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Dec 2025 23:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:23:fb:11:59:97:18:c9:8d:ec:73:f5:47:9d:32:ba:82:f6:eb:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FD0F38979237143A0D44165912E79E2FACD5A3BA
Validity
Not Before: Jun 15 10:15:04 2025 GMT
Not After : Jun 14 10:20:04 2026 GMT
Subject: CN=6864723ED08743775D790390EF81792BF81218D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:36:df:91:b9:1d:b3:cf:09:59:68:98:14:50:
64:76:97:89:1b:4b:be:14:19:36:52:af:14:35:2a:
af:d2:00:62:62:23:1c:85:9f:4b:cd:00:88:80:2b:
21:cd:df:02:a5:ff:db:01:8b:cc:d0:23:0f:c4:d2:
45:bd:87:3b:2b:ee:51:19:28:48:f3:6a:01:c4:3f:
a0:d9:c4:92:33:d1:fb:80:52:ce:67:93:e2:89:d0:
22:bb:91:94:1f:2b:77:fa:f7:60:11:f0:ab:81:cc:
4c:d2:6b:75:37:2e:d9:aa:39:bc:14:bf:b3:04:66:
c5:f4:c7:4e:81:d4:fc:36:c8:84:ea:48:a4:e6:73:
85:b0:f6:1d:80:57:13:e5:9a:1c:a3:10:67:fc:85:
97:36:65:70:2d:35:5c:ca:63:8e:5f:90:2a:6c:56:
4b:5a:50:b6:ea:f5:73:16:d0:2b:f4:e9:73:91:5f:
ac:33:92:95:7c:4c:eb:34:f5:5f:c3:09:e9:b8:ec:
1f:55:f8:27:a0:28:12:8c:10:0d:6c:de:5e:44:f1:
1f:60:02:cf:02:dd:57:8b:a6:e3:4e:4d:87:0b:2f:
f7:58:49:15:cc:73:f9:28:89:e5:fd:af:20:3f:23:
1a:f0:0f:fb:a1:bc:b0:f9:5c:54:1f:cb:79:08:2d:
a7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:64:72:3E:D0:87:43:77:5D:79:03:90:EF:81:79:2B:F8:12:18:D3
X509v3 Authority Key Identifier:
keyid:FD:0F:38:97:92:37:14:3A:0D:44:16:59:12:E7:9E:2F:AC:D5:A3:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FD0F38979237143A0D44165912E79E2FACD5A3BA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/3130332e3135382e39382e302f32332d3234203d3e203338373736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.158.98.0/23
Signature Algorithm: sha256WithRSAEncryption
23:75:67:ab:e1:46:7b:f2:4d:f3:5e:b3:31:bb:06:c1:65:c1:
ac:f9:58:5f:d1:58:76:19:39:a8:3e:ba:6b:d5:a7:98:30:39:
0a:98:2e:1f:55:9a:31:9d:c4:e6:15:b8:2d:a2:20:60:5f:e0:
30:65:d0:96:03:ce:54:57:78:0e:a0:3d:0d:0d:e0:14:86:41:
6b:21:91:50:5a:a7:02:6a:49:b1:d0:9d:36:df:08:e7:63:ec:
7c:2a:4a:a3:b8:b9:29:ac:1d:18:b2:77:d8:55:e2:04:5e:89:
d4:6c:1d:f1:4d:fb:b2:bf:8d:4f:d3:13:c2:dc:2f:b7:02:7e:
98:3b:74:c9:72:4c:02:26:81:cd:86:43:c5:ff:37:96:d0:72:
f9:d1:9a:72:8d:14:df:a9:37:51:84:c4:8a:80:4f:1a:17:f4:
00:38:08:62:8a:5d:94:d0:53:5a:02:1e:22:89:5f:15:3c:03:
18:9f:6d:e7:74:17:0a:f5:d3:5a:6c:5b:dd:3d:96:52:bd:4c:
17:f3:6f:69:22:89:9a:c1:52:fb:0d:7b:d5:d3:6c:09:06:ba:
31:bd:98:c4:30:64:94:3f:49:bc:60:e3:81:44:06:77:6e:46:
db:60:6a:a9:78:3e:64:5b:42:f9:ea:68:22:65:ec:12:ea:6f:
75:18:f7:1e
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUHiP7EVmXGMmN7HP1R50yuoL263AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkQwRjM4OTc5MjM3MTQzQTBENDQxNjU5MTJFNzlFMkZB
Q0Q1QTNCQTAeFw0yNTA2MTUxMDE1MDRaFw0yNjA2MTQxMDIwMDRaMDMxMTAvBgNV
BAMTKDY4NjQ3MjNFRDA4NzQzNzc1RDc5MDM5MEVGODE3OTJCRjgxMjE4RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVNt+RuR2zzwlZaJgUUGR2l4kb
S74UGTZSrxQ1Kq/SAGJiIxyFn0vNAIiAKyHN3wKl/9sBi8zQIw/E0kW9hzsr7lEZ
KEjzagHEP6DZxJIz0fuAUs5nk+KJ0CK7kZQfK3f692AR8KuBzEzSa3U3LtmqObwU
v7MEZsX0x06B1Pw2yITqSKTmc4Ww9h2AVxPlmhyjEGf8hZc2ZXAtNVzKY45fkCps
VktaULbq9XMW0Cv06XORX6wzkpV8TOs09V/DCem47B9V+CegKBKMEA1s3l5E8R9g
As8C3VeLpuNOTYcLL/dYSRXMc/koieX9ryA/IxrwD/uhvLD5XFQfy3kILadRAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUaGRyPtCHQ3ddeQOQ74F5K/gSGNMwHwYDVR0j
BBgwFoAU/Q84l5I3FDoNRBZZEueeL6zVo7owDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
ZDY4NTAwYy00OWY4LTRmMDEtODc3NC1mN2MzMTY0YTBhNTgvMC9GRDBGMzg5Nzky
MzcxNDNBMEQ0NDE2NTkxMkU3OUUyRkFDRDVBM0JBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRkQwRjM4OTc5MjM3MTQzQTBENDQxNjU5MTJFNzlFMkZBQ0Q1
QTNCQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdkNjg1MDBjLTQ5ZjgtNGYwMS04
Nzc0LWY3YzMxNjRhMGE1OC8wLzMxMzAzMzJlMzEzNTM4MmUzOTM4MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzMzODM3MzczNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWeeYjANBgkqhkiG
9w0BAQsFAAOCAQEAI3Vnq+FGe/JN816zMbsGwWXBrPlYX9FYdhk5qD66a9WnmDA5
CpguH1WaMZ3E5hW4LaIgYF/gMGXQlgPOVFd4DqA9DQ3gFIZBayGRUFqnAmpJsdCd
Nt8I52PsfCpKo7i5KawdGLJ32FXiBF6J1Gwd8U37sr+NT9MTwtwvtwJ+mDt0yXJM
AiaBzYZDxf83ltBy+dGaco0U36k3UYTEioBPGhf0ADgIYopdlNBTWgIeIolfFTwD
GJ9t53QXCvXTWmxb3T2WUr1MF/NvaSKJmsFS+w171dNsCQa6Mb2YxDBklD9JvGDj
gUQGd25G22BqqXg+ZFtC+epoImXsEupvdRj3Hg==
-----END CERTIFICATE-----
Generated at Thu Dec 25 03:39:37 2025 by rpki-client