This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/3130332e3136382e3134362e302f32342d3234203d3e20313430343433.roa
File: 3130332e3136382e3134362e302f32342d3234203d3e20313430343433.roa (raw, json)
Hash identifier: 6CnrGX1LrXJO/2xiSh7/WQeAAu4zVMBvJoPd9Ck/Xbs=
Subject key identifier: D6:D2:20:16:38:0C:19:1E:59:8D:A1:09:2A:70:11:7B:E3:8C:86:00
Certificate issuer: /CN=4F40845626DE4E373F550B654EA4E833B6EB4D27
Certificate serial: 25D28BDF23C4D3090A6B4A4C15916117D6D9DB6A
Authority key identifier: 4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/3130332e3136382e3134362e302f32342d3234203d3e20313430343433.roa
Signing time: Fri 30 Jan 2026 07:00:56 +0000
ROA not before: Fri 30 Jan 2026 06:55:56 +0000
ROA not after: Fri 29 Jan 2027 07:00:56 +0000
asID: 140443
IP address blocks: 103.168.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl
rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:d2:8b:df:23:c4:d3:09:0a:6b:4a:4c:15:91:61:17:d6:d9:db:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F40845626DE4E373F550B654EA4E833B6EB4D27
Validity
Not Before: Jan 30 06:55:56 2026 GMT
Not After : Jan 29 07:00:56 2027 GMT
Subject: CN=D6D22016380C191E598DA1092A70117BE38C8600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:58:bb:62:1d:d4:79:7a:0b:70:25:73:b8:15:
23:ed:ab:45:c5:f8:65:50:73:92:ab:d8:41:f5:86:
08:ba:12:64:6b:a5:67:85:4b:1f:5f:49:70:75:b4:
f8:d6:9b:0e:0b:ed:8a:e2:c3:a0:6b:f3:d3:07:40:
0b:0b:cc:96:b1:f4:f5:98:53:69:de:26:46:39:ea:
23:4d:3c:65:be:90:85:bb:cd:bf:02:8b:95:fd:c8:
f1:ef:f1:1a:9d:f1:91:ac:94:9e:31:8e:8c:24:d1:
24:ba:d0:20:5d:60:48:dd:c2:ba:c2:98:c0:59:5f:
78:b8:a9:96:91:32:1a:62:86:fc:db:db:57:cb:42:
b4:4e:75:d6:92:78:85:e6:66:84:22:07:cc:d5:27:
82:a6:2d:c6:b2:e9:c1:4e:d8:88:d4:97:5b:eb:a3:
c0:02:67:93:cb:df:dd:fc:0a:ca:fd:00:13:99:5d:
70:cc:a1:10:04:b3:3d:49:c3:8a:5f:8c:4a:1c:d8:
83:7b:ec:ac:f0:20:d4:5f:5e:fc:04:c4:bd:60:c1:
3f:6c:cc:5e:69:24:5f:3e:80:5f:f0:26:57:a5:32:
c8:22:dd:15:aa:23:9c:98:8e:92:28:25:0d:ce:6d:
cb:99:37:87:b3:bc:7b:6d:d4:5b:45:e0:8b:ee:80:
b0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D2:20:16:38:0C:19:1E:59:8D:A1:09:2A:70:11:7B:E3:8C:86:00
X509v3 Authority Key Identifier:
keyid:4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/3130332e3136382e3134362e302f32342d3234203d3e20313430343433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.168.146.0/24
Signature Algorithm: sha256WithRSAEncryption
12:e5:5b:9b:f6:fa:f1:b1:d2:ed:47:06:fc:e8:81:50:c8:5b:
2b:05:2d:2f:87:62:7d:6b:17:9b:00:71:69:74:f0:b6:e3:92:
2f:8f:c7:d5:a1:b7:43:22:f4:b3:a3:fe:9b:d3:2a:e1:9c:fd:
b4:ce:35:ba:58:ec:62:f4:3e:47:55:b6:2c:05:30:32:07:91:
b3:83:c8:83:79:e4:ab:fa:dd:1a:2b:43:74:6f:27:b7:21:35:
44:37:d6:ee:6e:79:df:85:d4:d9:59:a6:38:58:e7:3a:bf:d4:
78:96:00:c9:c5:39:0f:82:f4:6c:8a:15:a8:9a:e9:54:a7:4d:
0e:6f:bc:ce:cc:10:7f:43:30:ba:8e:02:b1:0d:bc:f1:88:a9:
df:1d:df:26:34:f5:b6:99:b0:67:81:77:05:79:ef:6e:09:db:
57:70:17:1d:25:33:54:4e:45:7d:fc:27:64:d9:a6:0b:2f:c5:
db:01:3a:f3:95:1c:b3:db:fe:04:16:4a:9d:1f:37:9b:ef:54:
b7:87:71:a1:81:5b:8a:75:02:c6:fc:a5:f2:9b:0d:d9:23:4a:
12:f4:88:3d:74:2b:21:2f:1d:05:c7:ba:27:a6:78:e7:94:98:
63:98:22:f5:4f:5d:fa:12:b7:d6:7a:0b:cb:5f:ad:bf:19:28:
cd:b9:07:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 14:28:59 2026 by rpki-client