This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3130332e34342e33382e302f32342d3234203d3e20313333373938.roa
File: 3130332e34342e33382e302f32342d3234203d3e20313333373938.roa (raw, json)
Hash identifier: Q+xVAfGGgQSN4ccUeTjdNgImXOcc5JFRliLX5qNYk0Q=
Subject key identifier: 02:3A:C1:8B:5E:43:01:EC:EA:43:6C:CA:5E:E6:BE:43:C9:5F:30:7A
Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Certificate serial: 6BC59FC0528866C8DF93665A6919F87061AC8E14
Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3130332e34342e33382e302f32342d3234203d3e20313333373938.roa
Signing time: Tue 16 Dec 2025 09:00:00 +0000
ROA not before: Tue 16 Dec 2025 08:55:00 +0000
ROA not after: Tue 15 Dec 2026 09:00:00 +0000
asID: 133798
IP address blocks: 103.44.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl
rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 15:37:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:c5:9f:c0:52:88:66:c8:df:93:66:5a:69:19:f8:70:61:ac:8e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Validity
Not Before: Dec 16 08:55:00 2025 GMT
Not After : Dec 15 09:00:00 2026 GMT
Subject: CN=023AC18B5E4301ECEA436CCA5EE6BE43C95F307A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:af:ba:9b:74:64:dc:b5:49:7f:17:77:ca:3f:
82:78:65:42:77:c8:a2:78:49:a6:3a:7c:e6:7b:8f:
74:28:d7:7c:92:8c:c6:31:41:0a:49:5e:22:21:0b:
9e:b9:e6:74:fe:e8:79:47:69:c2:c3:94:ea:af:84:
38:ab:70:fc:c4:bd:c5:65:65:26:a1:ae:db:1a:66:
55:93:93:f0:d6:b2:02:a0:e1:f4:86:c8:24:ea:12:
fa:b8:18:d9:6c:7b:e9:b4:3d:49:b4:b9:ef:ab:44:
1f:6d:54:cc:32:90:f0:d8:10:54:58:af:4f:8a:08:
14:c6:33:42:ee:ee:c6:69:3d:35:27:30:8f:32:75:
c9:78:1a:c8:49:4a:18:c4:e3:f6:54:ca:72:30:a9:
6a:27:07:f9:33:7f:72:83:86:33:f2:9e:28:e2:eb:
b8:88:94:5c:79:25:94:e9:03:52:78:4b:39:02:98:
1e:1a:c7:b6:14:37:31:20:e3:01:0c:25:76:0c:37:
58:c8:99:16:2b:51:1e:c5:a5:02:04:1e:9d:d4:62:
42:99:c8:04:8f:b1:43:ba:dc:6b:af:44:52:6a:93:
96:d5:45:1c:c4:09:09:f2:ed:bd:fa:f8:6a:9b:5a:
29:71:1a:b2:d7:57:88:82:a5:bc:d5:11:18:7b:b4:
36:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3A:C1:8B:5E:43:01:EC:EA:43:6C:CA:5E:E6:BE:43:C9:5F:30:7A
X509v3 Authority Key Identifier:
keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3130332e34342e33382e302f32342d3234203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.44.38.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:bd:0c:ce:0d:a9:b8:a1:10:32:76:9f:21:53:52:9e:0f:6d:
e7:0f:dc:e4:52:6d:ab:3b:4c:6f:32:81:b0:b6:52:78:9e:6d:
12:91:40:d5:dd:a4:d4:ea:70:0d:e7:be:63:01:bb:c1:00:ee:
e9:6e:13:e3:3d:cb:5d:77:3d:ba:1e:e9:e3:1c:38:14:a9:42:
8e:49:cf:62:aa:ec:31:77:64:8e:22:1b:f8:8d:08:1d:75:cb:
b2:e1:a1:cb:22:a5:5f:80:70:00:04:80:4a:09:ce:e2:0a:4d:
0f:91:e8:e8:25:83:21:27:8b:f3:20:d0:d6:a4:34:21:96:0c:
07:62:d1:c7:eb:2c:05:13:9e:1e:61:3f:b8:e4:ff:6b:b0:ca:
cb:65:fa:1c:8d:5c:f6:81:1e:18:e9:c0:99:30:f2:8b:6f:d8:
3c:ce:36:d6:22:f1:5f:bf:dc:43:e0:ea:ed:a8:6b:ec:25:e6:
0f:33:4c:76:85:c8:d0:8d:b6:6b:62:f8:18:3f:85:f5:80:43:
e6:0c:3c:5d:5c:8e:18:36:75:c1:20:0c:33:36:51:f2:b2:41:
c5:fd:44:11:fa:d1:69:ef:99:5f:4f:21:5c:ed:56:53:30:e0:
5c:6a:11:12:a5:c6:c5:2a:c3:d6:df:a1:e3:4a:6f:d6:1e:c0:
fd:cc:a9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 03:05:00 2025 by rpki-client