This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/3130332e3138362e3136382e302f32332d3233203d3e20313439333135.roa
File: 3130332e3138362e3136382e302f32332d3233203d3e20313439333135.roa (raw, json)
Hash identifier: LDlceKPYxiyplmRd0QE331p3kgAPFSC+KzNWGTmFZx4=
Subject key identifier: E7:0F:5F:5B:AA:06:12:7E:56:97:22:1D:7E:4C:D1:70:8A:24:CA:1B
Certificate issuer: /CN=B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45
Certificate serial: 3B210B4D16A6C40DC2371232C1D70753930AC797
Authority key identifier: B0:FA:6C:3E:D4:78:0E:03:2B:0A:3F:16:1E:01:8A:7C:8F:A8:2B:45
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/3130332e3138362e3136382e302f32332d3233203d3e20313439333135.roa
Signing time: Fri 23 Jan 2026 08:00:02 +0000
ROA not before: Fri 23 Jan 2026 07:55:02 +0000
ROA not after: Fri 22 Jan 2027 08:00:02 +0000
asID: 149315
IP address blocks: 103.186.168.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.crl
rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 23:59:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:21:0b:4d:16:a6:c4:0d:c2:37:12:32:c1:d7:07:53:93:0a:c7:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45
Validity
Not Before: Jan 23 07:55:02 2026 GMT
Not After : Jan 22 08:00:02 2027 GMT
Subject: CN=E70F5F5BAA06127E5697221D7E4CD1708A24CA1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:96:f0:fd:88:36:57:c0:f1:78:d9:24:e6:3f:
3b:5b:94:51:f9:c3:d4:c6:41:b8:3a:b8:ec:86:08:
2c:b1:a6:61:f0:b8:ac:43:d9:f3:23:64:6b:24:1a:
1f:2b:7e:00:a1:a0:72:8e:c6:3e:d7:e8:b2:9b:7c:
21:8b:c4:64:f3:6a:10:33:8d:ba:e6:53:d2:2f:25:
5d:1a:40:9d:d5:d4:aa:f3:4c:60:db:c2:4b:4b:2b:
a6:7f:44:fc:37:42:f7:05:e5:48:1f:eb:f2:e1:e1:
c8:5b:8e:89:94:fe:c4:26:62:c7:4d:0b:0f:3e:b0:
c2:e8:02:8a:b1:4a:92:e6:3f:6c:3a:92:47:5d:3a:
7f:6a:ff:97:58:74:74:ac:07:1f:0a:2e:b5:f1:90:
68:c5:13:a1:e7:b6:c0:60:b6:a1:61:fa:fc:01:df:
1e:84:66:58:2c:62:63:ee:3b:09:c3:f0:24:db:b9:
92:7f:1a:b9:ea:09:9a:16:6d:59:34:a9:de:03:02:
a5:30:18:9c:ea:3d:f6:5a:a6:bb:b5:79:91:fd:3e:
c3:be:5a:e7:46:83:12:d0:82:2e:b5:54:6c:4e:0b:
1d:6f:72:5c:13:1e:27:a7:27:b5:4f:09:75:1f:6d:
2b:45:e2:ed:eb:88:34:dc:f1:c7:3e:b4:f2:87:b4:
04:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0F:5F:5B:AA:06:12:7E:56:97:22:1D:7E:4C:D1:70:8A:24:CA:1B
X509v3 Authority Key Identifier:
keyid:B0:FA:6C:3E:D4:78:0E:03:2B:0A:3F:16:1E:01:8A:7C:8F:A8:2B:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/3130332e3138362e3136382e302f32332d3233203d3e20313439333135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.186.168.0/23
Signature Algorithm: sha256WithRSAEncryption
43:a6:80:a4:63:fd:c8:65:c1:90:40:c1:80:97:b1:fd:3b:44:
b9:55:55:88:0c:d4:cd:58:d3:4d:92:92:c0:3b:2a:b1:eb:59:
88:27:0f:c9:9f:a2:3a:90:03:fc:4c:8f:26:3c:03:28:a5:de:
1c:7c:5c:95:80:dd:9b:0c:5e:de:3d:b8:1e:0f:b9:97:22:2d:
68:d9:7f:65:98:1f:03:c5:f6:36:52:89:79:3d:1e:dc:8f:8f:
b2:8f:9a:d9:cf:e4:90:4c:13:d2:0d:08:67:e4:90:f9:49:ff:
f8:54:5e:98:f3:73:0c:90:49:54:fb:af:18:59:b0:1d:be:66:
42:a7:aa:d2:f9:ba:d2:10:f9:26:87:91:22:62:49:d5:25:82:
3a:ef:66:a8:21:7c:df:87:c2:e5:bc:a6:9f:d7:62:fa:b5:d4:
cf:26:2a:64:80:27:49:79:ec:37:ab:fb:3b:96:bc:01:30:40:
d5:f0:e9:d9:64:08:b1:31:2c:0c:fa:bf:13:5c:7f:bd:f3:ab:
dc:f5:76:52:ae:ca:da:b0:38:04:8a:27:9d:ac:52:79:b4:6b:
29:49:60:dc:6f:d1:8a:3f:1b:ff:84:fa:50:6d:e2:83:f5:95:
07:ba:25:31:b0:bb:30:20:c3:75:4e:42:a4:f6:d2:93:6b:48:
53:8a:e2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 14:28:59 2026 by rpki-client