This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/3130332e3137372e3231382e302f32342d3234203d3e20313331373639.roa
File: 3130332e3137372e3231382e302f32342d3234203d3e20313331373639.roa (raw, json)
Hash identifier: NgiCiwYgDeYQaPatps9fGhPQzocYHvig3vWSvQTITq4=
Subject key identifier: 5C:DD:53:C8:15:43:51:AC:2A:B3:3F:D4:C3:0E:F7:42:4C:02:28:9E
Certificate issuer: /CN=2AAFA81414EDCB1032235F2240FE06773F3E6F16
Certificate serial: 46FCE2EFF83086480700A1349F19CE2415E95A3E
Authority key identifier: 2A:AF:A8:14:14:ED:CB:10:32:23:5F:22:40:FE:06:77:3F:3E:6F:16
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AAFA81414EDCB1032235F2240FE06773F3E6F16.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/3130332e3137372e3231382e302f32342d3234203d3e20313331373639.roa
Signing time: Mon 05 Jan 2026 09:00:00 +0000
ROA not before: Mon 05 Jan 2026 08:55:00 +0000
ROA not after: Mon 04 Jan 2027 09:00:00 +0000
asID: 131769
IP address blocks: 103.177.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.crl
rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AAFA81414EDCB1032235F2240FE06773F3E6F16.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 13:18:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:fc:e2:ef:f8:30:86:48:07:00:a1:34:9f:19:ce:24:15:e9:5a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2AAFA81414EDCB1032235F2240FE06773F3E6F16
Validity
Not Before: Jan 5 08:55:00 2026 GMT
Not After : Jan 4 09:00:00 2027 GMT
Subject: CN=5CDD53C8154351AC2AB33FD4C30EF7424C02289E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:84:bb:74:a1:17:d3:8f:3f:21:50:a4:55:f0:
66:2c:41:b1:57:c9:09:af:e5:a3:c2:54:93:09:7a:
af:d9:a9:81:93:5d:89:4b:b0:14:f3:b3:cf:da:b1:
20:98:b0:54:ec:aa:66:66:1e:c0:8f:39:64:05:48:
26:0c:7e:32:55:19:01:cc:ad:1e:a6:80:65:2a:94:
18:67:bb:a2:0d:f9:71:aa:aa:5c:15:41:2e:fe:fd:
e8:23:61:f4:7e:bd:51:c3:bf:a2:b6:84:82:ad:51:
b1:7f:4b:e2:6d:5d:c7:6a:3c:81:7e:23:ae:f8:66:
e8:72:0a:4e:e5:c2:c3:2b:db:9e:6c:41:83:84:3a:
8a:79:da:31:5f:ce:3c:54:f0:e9:ba:a4:df:cb:ff:
1e:5e:22:75:28:c1:d6:04:02:82:cf:46:ff:c5:3f:
88:1f:a1:79:06:e2:2b:59:d1:8e:83:64:c5:74:49:
fe:58:82:c3:84:28:46:6c:81:5f:f4:45:ca:da:82:
ab:a1:3e:9f:3e:7e:bf:b2:df:be:23:97:50:65:92:
fd:49:97:56:e7:4c:ab:aa:a0:d9:c6:79:d0:fd:ef:
7a:c9:e0:65:8a:20:75:d9:ea:fe:f6:66:1c:a8:29:
a8:91:48:8e:50:85:08:4a:38:ab:63:28:43:14:aa:
17:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DD:53:C8:15:43:51:AC:2A:B3:3F:D4:C3:0E:F7:42:4C:02:28:9E
X509v3 Authority Key Identifier:
keyid:2A:AF:A8:14:14:ED:CB:10:32:23:5F:22:40:FE:06:77:3F:3E:6F:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AAFA81414EDCB1032235F2240FE06773F3E6F16.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/3130332e3137372e3231382e302f32342d3234203d3e20313331373639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.177.218.0/24
Signature Algorithm: sha256WithRSAEncryption
48:5f:4d:0c:04:28:e6:9b:c4:d6:4b:b4:90:6f:68:d9:08:04:
78:45:98:2b:fd:68:e7:ef:5f:4a:e1:15:2e:c0:35:5c:43:d4:
f1:0d:89:41:5d:63:f1:16:6c:37:d2:ae:a6:72:05:a0:ca:2c:
a5:63:7b:28:58:b2:f9:ae:aa:55:b1:fc:e5:43:2b:46:04:13:
d3:60:f8:1e:ce:ba:ee:4f:cd:d0:5a:71:ac:1d:fc:5f:78:e5:
0a:f5:d8:72:bb:25:91:85:1f:a5:60:73:d9:7e:9b:41:27:3a:
ff:7a:cd:9b:61:9c:42:38:a7:a0:d8:2c:ed:0b:06:b7:f3:94:
ec:04:b5:41:cc:35:ed:b4:0b:85:22:29:ee:a8:eb:45:f4:ee:
94:d1:d5:22:8e:a2:53:d8:7a:e4:e5:e4:06:d5:aa:88:5e:b0:
49:ee:b1:cb:b5:51:27:d9:b9:74:c0:be:8e:f6:70:31:bc:24:
da:bf:c9:1f:ff:ef:f8:4c:a7:3a:20:12:d4:ac:c4:37:6e:0b:
6f:bf:59:ac:11:ab:de:69:e2:48:77:24:2b:8b:9b:9e:71:2d:
76:2f:67:6b:b2:f4:58:4b:94:f8:3c:b9:79:ef:37:33:03:7c:
8f:a5:de:a3:9b:29:82:d1:46:42:9b:52:e7:c9:39:df:93:f8:
e1:38:a8:a9
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIURvzi7/gwhkgHAKE0nxnOJBXpWj4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkFBRkE4MTQxNEVEQ0IxMDMyMjM1RjIyNDBGRTA2Nzcz
RjNFNkYxNjAeFw0yNjAxMDUwODU1MDBaFw0yNzAxMDQwOTAwMDBaMDMxMTAvBgNV
BAMTKDVDREQ1M0M4MTU0MzUxQUMyQUIzM0ZENEMzMEVGNzQyNEMwMjI4OUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbhLt0oRfTjz8hUKRV8GYsQbFX
yQmv5aPCVJMJeq/ZqYGTXYlLsBTzs8/asSCYsFTsqmZmHsCPOWQFSCYMfjJVGQHM
rR6mgGUqlBhnu6IN+XGqqlwVQS7+/egjYfR+vVHDv6K2hIKtUbF/S+JtXcdqPIF+
I674ZuhyCk7lwsMr255sQYOEOop52jFfzjxU8Om6pN/L/x5eInUowdYEAoLPRv/F
P4gfoXkG4itZ0Y6DZMV0Sf5YgsOEKEZsgV/0RcragquhPp8+fr+y374jl1Blkv1J
l1bnTKuqoNnGedD973rJ4GWKIHXZ6v72ZhyoKaiRSI5QhQhKOKtjKEMUqherAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUXN1TyBVDUawqsz/Uww73QkwCKJ4wHwYDVR0j
BBgwFoAUKq+oFBTtyxAyI18iQP4Gdz8+bxYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
YWI4ZTYwZi1mOTkzLTQ1MzQtOWRhMC1mMjg1YTg2MDNmNjkvMC8yQUFGQTgxNDE0
RURDQjEwMzIyMzVGMjI0MEZFMDY3NzNGM0U2RjE2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMkFBRkE4MTQxNEVEQ0IxMDMyMjM1RjIyNDBGRTA2NzczRjNF
NkYxNi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhYjhlNjBmLWY5OTMtNDUzNC05
ZGEwLWYyODVhODYwM2Y2OS8wLzMxMzAzMzJlMzEzNzM3MmUzMjMxMzgyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzEzNzM2Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnsdowDQYJ
KoZIhvcNAQELBQADggEBAEhfTQwEKOabxNZLtJBvaNkIBHhFmCv9aOfvX0rhFS7A
NVxD1PENiUFdY/EWbDfSrqZyBaDKLKVjeyhYsvmuqlWx/OVDK0YEE9Ng+B7Ouu5P
zdBacawd/F945Qr12HK7JZGFH6Vgc9l+m0EnOv96zZthnEI4p6DYLO0LBrfzlOwE
tUHMNe20C4UiKe6o60X07pTR1SKOolPYeuTl5AbVqohesEnuscu1USfZuXTAvo72
cDG8JNq/yR//7/hMpzogEtSsxDduC2+/WawRq95p4kh3JCuLm55xLXYvZ2uy9FhL
lPg8uXnvNzMDfI+l3qObKYLRRkKbUufJOd+T+OE4qKk=
-----END CERTIFICATE-----
Generated at Wed Jan 21 13:27:46 2026 by rpki-client