This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/3130332e3136382e3134372e302f32342d3234203d3e20313430343433.roa
File: 3130332e3136382e3134372e302f32342d3234203d3e20313430343433.roa (raw, json)
Hash identifier: 8U1YdeabpMcYCkPujQ3tfYK2Gg3om+TR67FcBFNrj1s=
Subject key identifier: 4B:D1:9B:B4:57:23:FC:3D:ED:A5:59:14:A8:57:1F:C5:3F:A8:99:E9
Certificate issuer: /CN=4F40845626DE4E373F550B654EA4E833B6EB4D27
Certificate serial: 10F6454EA7065CA2E020FA56330A3985CF6650C3
Authority key identifier: 4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/3130332e3136382e3134372e302f32342d3234203d3e20313430343433.roa
Signing time: Fri 30 Jan 2026 06:00:00 +0000
ROA not before: Fri 30 Jan 2026 05:55:00 +0000
ROA not after: Fri 29 Jan 2027 06:00:00 +0000
asID: 140443
IP address blocks: 103.168.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl
rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:f6:45:4e:a7:06:5c:a2:e0:20:fa:56:33:0a:39:85:cf:66:50:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F40845626DE4E373F550B654EA4E833B6EB4D27
Validity
Not Before: Jan 30 05:55:00 2026 GMT
Not After : Jan 29 06:00:00 2027 GMT
Subject: CN=4BD19BB45723FC3DEDA55914A8571FC53FA899E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:45:50:69:c1:11:c6:16:61:81:e2:54:7e:0f:
63:88:e5:48:2a:59:49:1d:3b:37:99:0e:7d:15:b8:
73:04:c7:c9:84:af:1a:b4:64:4a:24:8f:8c:b8:1b:
ed:5b:fc:db:d5:91:c0:a6:6b:0d:08:82:f6:2c:9f:
65:d4:d1:10:bd:6b:5d:38:42:ea:21:78:fd:9e:f5:
12:7a:2b:1a:c7:85:ff:15:3f:4a:a3:f0:a7:34:ce:
ad:b0:63:cf:b0:7a:6b:f2:55:2b:4b:35:59:d1:ca:
2a:97:94:45:51:51:61:a0:11:02:71:38:d9:69:39:
8c:86:d5:4b:37:ce:82:0e:56:6d:d3:af:ea:89:b0:
c9:88:2e:da:f6:1b:a9:09:40:d6:0b:fd:02:e1:34:
98:ed:b4:3b:92:88:08:1e:d9:b9:b1:f8:5f:c3:dd:
32:14:3d:81:b6:7a:33:98:13:9f:ec:cc:08:a1:8a:
79:9c:60:52:c3:60:bc:cb:56:d5:42:38:9c:67:05:
f4:44:22:b8:21:bf:08:2c:0e:1b:bd:d0:bf:5f:fb:
fa:0c:a7:22:a3:6b:16:db:8b:3f:2c:0e:b3:73:92:
ff:b2:77:db:61:48:b2:19:fc:79:0a:47:76:a5:45:
6e:08:a6:6d:c8:43:f3:00:c3:fd:5f:64:29:4a:56:
db:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D1:9B:B4:57:23:FC:3D:ED:A5:59:14:A8:57:1F:C5:3F:A8:99:E9
X509v3 Authority Key Identifier:
keyid:4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/3130332e3136382e3134372e302f32342d3234203d3e20313430343433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.168.147.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:65:94:9b:84:85:50:b7:fd:36:32:85:ba:50:1c:e4:91:04:
60:36:42:c2:9f:fb:e1:54:e4:27:5a:0c:98:d8:45:41:f1:29:
20:06:19:08:8e:40:0c:ed:56:ae:b3:62:fe:ab:59:1e:1f:33:
c4:32:26:c7:c0:9c:2e:4a:a2:c8:0b:2e:15:1f:71:9f:2a:db:
d6:28:2d:f7:fe:82:ac:22:cd:4b:15:c8:e9:72:c9:f4:bc:52:
46:66:0a:6b:69:b7:b2:91:98:fc:2e:88:fe:4b:b7:8d:0e:8f:
39:7d:99:35:a6:d7:cd:83:e1:89:2c:30:a3:31:5e:b9:ec:3c:
20:b1:27:7f:c5:59:b2:f8:32:01:cf:16:b4:10:5a:27:9b:39:
b1:3c:58:5b:58:2e:3c:33:63:53:d4:3b:e0:86:90:3b:f6:66:
99:a3:4b:b2:d7:24:c1:ec:db:ba:ee:28:9f:30:ec:4e:5e:30:
86:20:8d:1a:8f:08:a6:ba:d2:91:40:83:7c:26:b9:84:6a:33:
eb:51:3a:bd:b4:35:70:8e:71:ae:bd:07:21:5f:01:ea:cf:0c:
e6:8c:d2:08:d8:5e:59:4e:e4:a4:0c:72:f8:3a:a6:d4:2d:1b:
fd:70:c6:45:ff:7f:66:87:a2:ac:33:65:db:35:3a:26:d2:8c:
90:94:d3:99
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUEPZFTqcGXKLgIPpWMwo5hc9mUMMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4MzNC
NkVCNEQyNzAeFw0yNjAxMzAwNTU1MDBaFw0yNzAxMjkwNjAwMDBaMDMxMTAvBgNV
BAMTKDRCRDE5QkI0NTcyM0ZDM0RFREE1NTkxNEE4NTcxRkM1M0ZBODk5RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIRVBpwRHGFmGB4lR+D2OI5Ugq
WUkdOzeZDn0VuHMEx8mErxq0ZEokj4y4G+1b/NvVkcCmaw0IgvYsn2XU0RC9a104
QuoheP2e9RJ6KxrHhf8VP0qj8Kc0zq2wY8+wemvyVStLNVnRyiqXlEVRUWGgEQJx
ONlpOYyG1Us3zoIOVm3Tr+qJsMmILtr2G6kJQNYL/QLhNJjttDuSiAge2bmx+F/D
3TIUPYG2ejOYE5/szAihinmcYFLDYLzLVtVCOJxnBfREIrghvwgsDhu90L9f+/oM
pyKjaxbbiz8sDrNzkv+yd9thSLIZ/HkKR3alRW4Ipm3IQ/MAw/1fZClKVtuFAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUS9GbtFcj/D3tpVkUqFcfxT+omekwHwYDVR0j
BBgwFoAUT0CEVibeTjc/VQtlTqToM7brTScwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
YTQ2MzYwZC02NjJiLTRmN2QtYmIxNy1kODYwODIxNTI0NzEvMC80RjQwODQ1NjI2
REU0RTM3M0Y1NTBCNjU0RUE0RTgzM0I2RUI0RDI3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4MzNCNkVC
NEQyNy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhNDYzNjBkLTY2MmItNGY3ZC1i
YjE3LWQ4NjA4MjE1MjQ3MS8wLzMxMzAzMzJlMzEzNjM4MmUzMTM0MzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzNDM0MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnqJMwDQYJ
KoZIhvcNAQELBQADggEBAKxllJuEhVC3/TYyhbpQHOSRBGA2QsKf++FU5CdaDJjY
RUHxKSAGGQiOQAztVq6zYv6rWR4fM8QyJsfAnC5KosgLLhUfcZ8q29YoLff+gqwi
zUsVyOlyyfS8UkZmCmtpt7KRmPwuiP5Lt40Ojzl9mTWm182D4YksMKMxXrnsPCCx
J3/FWbL4MgHPFrQQWiebObE8WFtYLjwzY1PUO+CGkDv2ZpmjS7LXJMHs27ruKJ8w
7E5eMIYgjRqPCKa60pFAg3wmuYRqM+tROr20NXCOca69ByFfAerPDOaM0gjYXllO
5KQMcvg6ptQtG/1wxkX/f2aHoqwzZds1OibSjJCU05k=
-----END CERTIFICATE-----
Generated at Mon Feb 2 14:29:09 2026 by rpki-client