This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/3130332e3130322e3234392e302f32342d3234203d3e20313331373639.roa
File: 3130332e3130322e3234392e302f32342d3234203d3e20313331373639.roa (raw, json)
Hash identifier: ovmFPVguepwh1KZwLVmisbEmSv3ixrZq0Db1FT9lUSk=
Subject key identifier: 53:29:31:85:B4:8C:08:FC:A0:AF:A1:BE:97:1B:60:69:B9:19:78:FB
Certificate issuer: /CN=35369AC685201508541197F86A8FDAC2375BE30A
Certificate serial: 068BA7D22C9C760773DCDDF3173C22A15406E31C
Authority key identifier: 35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/3130332e3130322e3234392e302f32342d3234203d3e20313331373639.roa
Signing time: Thu 18 Dec 2025 09:00:02 +0000
ROA not before: Thu 18 Dec 2025 08:55:02 +0000
ROA not after: Thu 17 Dec 2026 09:00:02 +0000
asID: 131769
IP address blocks: 103.102.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl
rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 19:24:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:8b:a7:d2:2c:9c:76:07:73:dc:dd:f3:17:3c:22:a1:54:06:e3:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35369AC685201508541197F86A8FDAC2375BE30A
Validity
Not Before: Dec 18 08:55:02 2025 GMT
Not After : Dec 17 09:00:02 2026 GMT
Subject: CN=53293185B48C08FCA0AFA1BE971B6069B91978FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:04:ef:7c:25:05:91:1d:fd:aa:4b:8f:a1:3a:
79:3b:67:cf:7a:e7:36:37:81:e5:ce:cd:c3:ce:4b:
5b:d7:ec:a2:f4:fe:06:20:35:78:d0:b1:5b:41:63:
2c:b7:87:2d:6b:3a:12:9b:3e:45:6d:87:c4:c3:03:
91:07:af:f4:02:72:dd:09:1d:32:a3:8f:17:b5:75:
f6:ff:ed:fd:fe:45:cc:17:9a:29:4b:b6:a4:26:fe:
4d:cd:9a:c7:b4:ce:4b:2f:e1:48:f7:29:22:14:9f:
66:d3:37:48:c7:85:63:81:fc:21:16:c9:25:51:1c:
2f:db:e2:e7:15:2b:b8:17:60:2e:8a:74:93:d4:79:
37:f2:c1:17:61:48:10:88:65:e5:46:66:bf:e1:b7:
bd:3d:e3:0b:b8:48:11:4a:ec:80:4d:5d:89:56:e0:
d9:71:43:84:96:f1:b1:c7:84:f5:63:b6:ed:5f:a2:
2e:99:1f:05:43:83:91:7d:5d:eb:d8:02:20:d9:ed:
30:78:fc:10:e1:38:e6:83:68:5a:a2:55:a5:82:42:
6f:c0:e5:68:2b:a0:77:c0:36:c5:dc:de:74:2e:33:
d7:d1:84:ed:ab:26:cf:95:b7:ef:6b:c0:c8:41:a2:
58:27:53:c8:8d:d9:ec:1a:02:f6:28:3d:85:31:ee:
ac:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:29:31:85:B4:8C:08:FC:A0:AF:A1:BE:97:1B:60:69:B9:19:78:FB
X509v3 Authority Key Identifier:
keyid:35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/3130332e3130322e3234392e302f32342d3234203d3e20313331373639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.102.249.0/24
Signature Algorithm: sha256WithRSAEncryption
68:9b:7f:e7:71:8a:20:aa:13:dd:5c:7c:96:6a:66:e3:9e:09:
c1:5f:47:12:85:7c:c6:4e:e8:be:91:4f:7f:af:ef:d3:8b:39:
95:65:a9:0c:70:a7:c1:59:ae:b1:b8:44:98:8d:f7:e7:e2:54:
64:7e:ac:bf:f3:5d:22:1e:44:eb:56:ea:00:e5:26:ff:98:e1:
88:d6:1d:d5:f1:92:ed:08:28:e5:06:c1:ad:d9:19:5c:b4:25:
c1:d8:c3:99:92:80:78:2a:e7:18:68:80:03:9c:06:8b:62:cf:
ae:e9:f6:4a:a1:0a:56:d5:b1:ae:47:aa:a4:b4:be:cc:b4:d4:
44:ed:85:f0:4e:e9:80:9e:2e:00:d6:e7:ff:12:68:c7:32:2a:
75:ed:e8:d2:73:89:b2:cb:0c:21:65:08:fa:fb:bd:48:7f:b5:
7e:1b:e4:32:1e:a7:f6:bb:04:0d:e4:79:6a:2e:af:60:3f:27:
e2:ba:de:5f:96:2e:d9:04:53:c3:c1:73:88:bc:d3:21:ad:2c:
6d:98:31:33:96:b6:7a:83:b0:d5:cd:ee:06:f2:5e:e5:50:48:
5c:18:53:91:31:74:5e:9a:7a:1f:8b:d9:dc:58:59:05:67:74:
89:5c:ff:ad:70:2e:72:d4:ea:71:bb:69:59:40:0e:ff:7b:be:
d0:74:e0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:19:51 2025 by rpki-client