This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/3130332e33392e37302e302f32342d3234203d3e20313530323734.roa
File: 3130332e33392e37302e302f32342d3234203d3e20313530323734.roa (raw, json)
Hash identifier: UIsEV+yUxnoy27zXekEfr9wJFUXejRjvqDfBen4AprU=
Subject key identifier: D9:24:E9:5F:A0:24:0D:C8:6F:72:EB:69:A1:DF:01:5D:EC:16:A9:AD
Certificate issuer: /CN=9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B
Certificate serial: 0FBB196635195953200F7D6B3ADB5DE44EC81730
Authority key identifier: 9F:FC:46:BA:A3:F1:95:22:AF:5B:DD:60:DF:7D:E9:2E:94:F5:AB:7B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/3130332e33392e37302e302f32342d3234203d3e20313530323734.roa
Signing time: Thu 22 Jan 2026 05:00:02 +0000
ROA not before: Thu 22 Jan 2026 04:55:02 +0000
ROA not after: Thu 21 Jan 2027 05:00:02 +0000
asID: 150274
IP address blocks: 103.39.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.crl
rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 06:51:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:bb:19:66:35:19:59:53:20:0f:7d:6b:3a:db:5d:e4:4e:c8:17:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B
Validity
Not Before: Jan 22 04:55:02 2026 GMT
Not After : Jan 21 05:00:02 2027 GMT
Subject: CN=D924E95FA0240DC86F72EB69A1DF015DEC16A9AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2a:1b:ea:b0:c9:dd:cd:bb:4a:34:b4:81:19:
a8:fb:1b:46:f1:60:d3:10:93:af:66:50:bb:e0:e3:
8f:d0:14:74:17:5b:cb:20:3d:a5:f5:08:0f:d1:50:
d0:59:85:39:54:31:83:64:7e:89:9a:97:e7:76:39:
c3:1b:88:c5:15:bd:13:58:23:4d:ee:90:0b:df:a7:
8a:8e:7f:17:a6:3e:6b:f2:9a:c9:6a:6f:95:4a:e3:
1d:09:05:a7:5d:3f:b6:93:a4:98:4a:4a:21:36:c3:
74:4a:c7:ef:c8:cf:00:d8:dd:93:95:7e:50:71:3f:
59:10:46:ce:ab:85:95:8c:2b:d9:78:fd:00:75:6b:
29:89:21:88:b6:43:4a:0d:56:ea:e1:dc:fd:33:a8:
e0:da:e4:5d:a9:f3:c7:da:78:ae:a2:f1:8b:97:61:
fd:e4:25:1f:4c:13:68:78:91:19:81:1b:a1:e4:86:
ba:6a:08:ab:91:c5:eb:8e:d6:30:49:80:51:60:a7:
59:94:0d:08:8a:85:56:84:2e:67:74:cf:8a:10:e9:
0c:45:96:a0:4e:43:6f:b0:f8:e7:7f:87:13:5e:41:
03:4d:71:8b:51:a8:e9:4c:be:ee:50:d0:fe:5a:f6:
1c:9b:3f:4c:eb:05:94:f4:e8:ac:b1:25:8f:b7:71:
b4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:24:E9:5F:A0:24:0D:C8:6F:72:EB:69:A1:DF:01:5D:EC:16:A9:AD
X509v3 Authority Key Identifier:
keyid:9F:FC:46:BA:A3:F1:95:22:AF:5B:DD:60:DF:7D:E9:2E:94:F5:AB:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/3130332e33392e37302e302f32342d3234203d3e20313530323734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.39.70.0/24
Signature Algorithm: sha256WithRSAEncryption
05:12:f3:bc:a7:50:ad:d8:a0:56:7b:4d:7c:5b:5f:87:89:d3:
72:a9:65:f9:fe:7f:98:cb:1e:66:0a:1a:c5:8a:65:b3:f0:16:
f2:5d:c8:29:26:3e:39:d6:a3:f4:20:5e:e0:d7:a9:32:93:66:
80:ac:3d:7f:25:6e:43:46:d0:6b:c3:29:f0:85:c3:70:93:98:
26:e0:3b:5d:a4:b2:bc:37:74:56:93:76:5f:42:da:fd:98:26:
3a:b3:2b:c1:d2:fe:b1:d3:ca:65:fb:33:8b:f7:8c:99:18:37:
94:60:87:6e:7f:f8:1b:1a:16:c1:63:42:0d:ee:9c:32:7e:3e:
b5:f8:b7:1a:a9:fe:ca:f5:2d:84:f0:41:c8:62:9f:3d:c3:d0:
9a:37:bb:33:26:14:be:0c:c2:98:cd:97:7c:67:45:d1:89:93:
14:65:3b:cd:3b:d8:6c:de:09:43:8b:2f:af:7d:72:1e:9a:da:
8c:da:cc:03:dd:c7:96:86:e0:09:bf:e0:33:2a:e4:67:85:3e:
8a:d2:8f:29:f4:11:b3:85:c0:b4:34:a5:44:87:83:cc:5d:0b:
26:98:e7:a9:8f:61:b2:6d:5b:19:b1:fb:85:a8:5e:c4:f8:e9:
b3:bb:51:4c:78:a1:d8:49:43:5a:94:1a:74:b6:29:42:a4:80:
d7:09:9f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 16:00:42 2026 by rpki-client