This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/3130332e33392e37302e302f32332d3233203d3e20313530323734.roa
File: 3130332e33392e37302e302f32332d3233203d3e20313530323734.roa (raw, json)
Hash identifier: 8hPKjOrrKRezfNVZLnLavcGoDjYQomlxrK85beUxD9E=
Subject key identifier: 58:75:1F:BB:02:73:27:7E:4F:FF:EC:C2:00:6A:0D:E0:AB:15:8F:A2
Certificate issuer: /CN=9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B
Certificate serial: 04E8FE2096E2392CA8B8E44361F265798787078C
Authority key identifier: 9F:FC:46:BA:A3:F1:95:22:AF:5B:DD:60:DF:7D:E9:2E:94:F5:AB:7B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/3130332e33392e37302e302f32332d3233203d3e20313530323734.roa
Signing time: Thu 22 Jan 2026 05:00:02 +0000
ROA not before: Thu 22 Jan 2026 04:55:02 +0000
ROA not after: Thu 21 Jan 2027 05:00:02 +0000
asID: 150274
IP address blocks: 103.39.70.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.crl
rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 06:51:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:e8:fe:20:96:e2:39:2c:a8:b8:e4:43:61:f2:65:79:87:87:07:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B
Validity
Not Before: Jan 22 04:55:02 2026 GMT
Not After : Jan 21 05:00:02 2027 GMT
Subject: CN=58751FBB0273277E4FFFECC2006A0DE0AB158FA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0f:a5:d3:f8:1c:fb:e4:e8:38:c9:3b:31:32:
ae:c1:1b:e5:ae:04:32:8e:9e:ad:14:d3:6c:5b:7c:
dd:33:0d:72:26:0f:fb:32:d1:60:93:b9:7e:40:19:
ec:de:ad:09:9a:97:17:1e:ac:9b:f1:00:6d:3a:ec:
bf:66:62:02:10:86:12:9c:cd:7b:89:b6:d1:48:21:
59:74:97:86:36:69:61:db:ba:8f:db:a9:c0:b7:6c:
f7:25:7a:1d:82:e7:a0:0a:4c:fc:1a:b6:35:ea:48:
d7:a8:28:93:1b:be:4b:85:8a:b6:0f:c3:24:a4:71:
99:7a:d7:0a:9c:8f:72:a4:fa:fa:94:f8:38:85:7c:
92:3f:4b:14:d6:02:44:31:c9:14:c7:f7:7a:35:9a:
60:8d:4e:a8:04:b7:68:88:0e:e5:44:78:04:1c:0d:
72:8a:87:d7:66:f7:70:44:24:b4:74:ac:c8:14:39:
ba:c6:87:a8:22:22:f3:b9:c3:08:fe:9e:09:38:b5:
8b:67:e3:ed:4e:eb:06:51:ff:52:bd:23:b3:f5:07:
13:de:9b:cf:39:e5:1a:6a:48:fa:a7:86:93:49:52:
25:a3:c0:ba:8a:6a:0f:80:27:81:74:d8:59:31:63:
c9:e3:a6:f0:18:d5:13:86:13:50:a6:9d:21:76:79:
3f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:75:1F:BB:02:73:27:7E:4F:FF:EC:C2:00:6A:0D:E0:AB:15:8F:A2
X509v3 Authority Key Identifier:
keyid:9F:FC:46:BA:A3:F1:95:22:AF:5B:DD:60:DF:7D:E9:2E:94:F5:AB:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/3130332e33392e37302e302f32332d3233203d3e20313530323734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.39.70.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:e6:1b:4c:1c:40:e9:43:25:a4:e5:86:ad:9c:96:81:41:e0:
88:b0:a2:19:4f:5e:ec:15:f5:3a:df:1e:fa:a6:e9:29:c4:b4:
ec:7f:4f:8d:23:49:af:ea:ba:85:b2:e6:7c:63:5d:e5:60:26:
bc:4d:2f:97:93:b8:d5:55:8f:ec:71:16:e9:80:31:51:52:7b:
0a:35:23:63:50:53:dd:f1:3e:a9:6b:23:a4:ee:29:5f:07:b5:
60:2b:64:8c:2a:38:4b:24:a2:fa:d6:e4:82:c2:da:81:17:5b:
4c:aa:79:70:6e:22:8e:6f:5f:b3:b9:4d:84:60:ed:95:bd:bf:
fa:8b:c1:ea:ad:58:5b:22:f7:58:10:27:2d:5a:3e:97:49:46:
58:59:51:a9:ca:3c:4c:ea:80:b1:2a:06:68:8f:06:b0:53:06:
a2:3e:d9:c3:53:64:21:bd:4f:d8:3c:4c:a7:86:c2:67:40:06:
a6:51:08:b4:51:01:ec:fb:01:0d:e5:ec:de:e4:6b:e7:ef:4e:
19:cf:e6:82:f6:eb:58:1d:77:04:69:84:61:52:d4:7f:b1:7d:
7a:f9:21:6b:52:99:84:45:b5:14:cd:40:50:1d:6c:ae:4c:89:
c7:4b:76:b8:d4:ab:6e:69:aa:07:70:8a:ce:6a:67:e3:b3:f3:
a4:f7:3e:2a
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUBOj+IJbiOSyouORDYfJleYeHB4wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUZGQzQ2QkFBM0YxOTUyMkFGNUJERDYwREY3REU5MkU5
NEY1QUI3QjAeFw0yNjAxMjIwNDU1MDJaFw0yNzAxMjEwNTAwMDJaMDMxMTAvBgNV
BAMTKDU4NzUxRkJCMDI3MzI3N0U0RkZGRUNDMjAwNkEwREUwQUIxNThGQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbD6XT+Bz75Og4yTsxMq7BG+Wu
BDKOnq0U02xbfN0zDXImD/sy0WCTuX5AGezerQmalxcerJvxAG067L9mYgIQhhKc
zXuJttFIIVl0l4Y2aWHbuo/bqcC3bPcleh2C56AKTPwatjXqSNeoKJMbvkuFirYP
wySkcZl61wqcj3Kk+vqU+DiFfJI/SxTWAkQxyRTH93o1mmCNTqgEt2iIDuVEeAQc
DXKKh9dm93BEJLR0rMgUObrGh6giIvO5wwj+ngk4tYtn4+1O6wZR/1K9I7P1BxPe
m8855RpqSPqnhpNJUiWjwLqKag+AJ4F02FkxY8njpvAY1ROGE1CmnSF2eT+xAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUWHUfuwJzJ35P/+zCAGoN4KsVj6IwHwYDVR0j
BBgwFoAUn/xGuqPxlSKvW91g333pLpT1q3swDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
ZTU3ZDU0My1iYWYwLTQzNDgtODg1Ny0zZDI2MDFjM2E4MDMvMC85RkZDNDZCQUEz
RjE5NTIyQUY1QkRENjBERjdERTkyRTk0RjVBQjdCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUZGQzQ2QkFBM0YxOTUyMkFGNUJERDYwREY3REU5MkU5NEY1
QUI3Qi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNlNTdkNTQzLWJhZjAtNDM0OC04
ODU3LTNkMjYwMWMzYTgwMy8wLzMxMzAzMzJlMzMzOTJlMzczMDJlMzAyZjMyMzMy
ZDMyMzMyMDNkM2UyMDMxMzUzMDMyMzczNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWcnRjANBgkqhkiG
9w0BAQsFAAOCAQEAnOYbTBxA6UMlpOWGrZyWgUHgiLCiGU9e7BX1Ot8e+qbpKcS0
7H9PjSNJr+q6hbLmfGNd5WAmvE0vl5O41VWP7HEW6YAxUVJ7CjUjY1BT3fE+qWsj
pO4pXwe1YCtkjCo4SySi+tbkgsLagRdbTKp5cG4ijm9fs7lNhGDtlb2/+ovB6q1Y
WyL3WBAnLVo+l0lGWFlRqco8TOqAsSoGaI8GsFMGoj7Zw1NkIb1P2DxMp4bCZ0AG
plEItFEB7PsBDeXs3uRr5+9OGc/mgvbrWB13BGmEYVLUf7F9evkha1KZhEW1FM1A
UB1srkyJx0t2uNSrbmmqB3CKzmpn47PzpPc+Kg==
-----END CERTIFICATE-----
Generated at Mon Feb 2 17:25:03 2026 by rpki-client