This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3130332e34342e33362e302f32322d3232203d3e20313333373938.roa
File: 3130332e34342e33362e302f32322d3232203d3e20313333373938.roa (raw, json)
Hash identifier: +ops944FqHIo70IoitO0Q7IiJloCzjfrMIBWX+/mlVM=
Subject key identifier: 58:71:59:39:10:DB:37:0F:66:18:9F:76:F1:AE:F8:E0:EB:06:03:3A
Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Certificate serial: 0644F8860868F2A1F45E08D37455B3D5856BB18A
Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3130332e34342e33362e302f32322d3232203d3e20313333373938.roa
Signing time: Tue 09 Dec 2025 04:00:00 +0000
ROA not before: Tue 09 Dec 2025 03:55:00 +0000
ROA not after: Tue 08 Dec 2026 04:00:00 +0000
asID: 133798
IP address blocks: 103.44.36.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl
rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 15:37:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:44:f8:86:08:68:f2:a1:f4:5e:08:d3:74:55:b3:d5:85:6b:b1:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Validity
Not Before: Dec 9 03:55:00 2025 GMT
Not After : Dec 8 04:00:00 2026 GMT
Subject: CN=5871593910DB370F66189F76F1AEF8E0EB06033A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:32:4a:56:ac:30:bd:a5:d3:bd:5d:1f:5d:2a:
42:95:17:a7:fd:ac:2e:9d:ab:28:0f:3d:ac:54:e5:
98:6f:a7:e5:f2:c9:81:37:bb:96:18:f7:1d:08:dc:
4b:a2:cf:38:29:ad:64:13:22:83:a9:f8:8d:6e:5a:
99:d1:13:e1:03:6d:66:40:d4:eb:6b:8e:29:a4:9e:
f2:2e:b1:27:e9:89:62:a4:38:2e:6c:c4:3e:37:06:
70:bb:6c:7a:2c:28:6c:5e:c5:74:82:2d:71:af:cc:
9a:97:06:4d:5f:53:a4:c3:e3:1a:31:c3:c1:b9:a5:
df:18:e4:06:69:52:49:b7:8b:fc:f0:80:76:31:3f:
96:00:2f:28:75:6c:94:89:0e:87:ed:48:14:95:4e:
7d:78:07:97:13:3f:66:03:4b:9f:2d:ba:9a:e5:1a:
27:f5:6e:72:09:6c:98:d8:07:80:15:e1:85:1d:c3:
73:79:34:5c:7a:7c:71:fb:a0:48:33:3a:53:a1:7e:
a3:a3:b6:7f:a0:72:45:dd:8a:6a:1c:c6:2c:b0:31:
d2:ad:3e:1c:94:31:0e:9e:7d:db:74:88:11:e1:2c:
fc:92:00:dd:1a:99:81:bf:7c:82:9a:7a:4a:1f:83:
8d:6d:b4:7d:0f:a0:d3:b9:8c:87:27:ab:ec:eb:30:
1e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:71:59:39:10:DB:37:0F:66:18:9F:76:F1:AE:F8:E0:EB:06:03:3A
X509v3 Authority Key Identifier:
keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3130332e34342e33362e302f32322d3232203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.44.36.0/22
Signature Algorithm: sha256WithRSAEncryption
46:1f:71:67:4b:ce:e2:0e:62:bb:c9:fb:86:57:90:67:df:47:
78:68:bd:cb:1b:25:73:71:48:58:56:68:8d:cb:d4:6f:bf:30:
1c:9f:de:92:f8:b4:b4:2c:15:95:d3:39:01:63:3e:ab:e1:c9:
8a:35:15:83:a5:d8:a7:d5:2e:56:b6:a6:b7:c6:30:19:a7:50:
8c:d5:70:1d:ca:62:ab:ae:63:8b:a4:5e:1a:f3:09:5b:12:9f:
2d:c4:e0:e5:68:9a:55:9b:be:02:df:d1:8b:59:1b:14:97:bb:
6f:e9:47:bd:fe:ca:00:1b:87:46:95:41:1c:14:79:5d:f1:9b:
24:13:9e:67:04:6c:24:52:54:77:94:23:00:34:e4:8a:52:04:
70:e4:3f:2f:01:62:25:48:9d:49:ec:50:dc:d3:bd:c7:77:e6:
d2:e8:07:4f:77:2f:bf:fb:ce:b1:bf:16:46:66:13:e4:10:9e:
e1:19:68:51:dd:09:d3:4e:1b:5e:66:4a:23:b3:81:f8:42:58:
7a:0a:35:6a:9e:b7:28:ed:b3:7c:74:6c:dd:b0:c2:4d:4c:0e:
ff:62:dd:60:f5:80:29:b7:99:5f:33:54:31:44:f1:34:3d:36:
63:1b:3b:51:0a:e3:1a:92:05:96:c0:bb:58:06:f5:ad:5c:a2:
20:b7:b1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 03:05:02 2025 by rpki-client