This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/3130332e3137362e36382e302f32342d3234203d3e20313437313330.roa
File: 3130332e3137362e36382e302f32342d3234203d3e20313437313330.roa (raw, json)
Hash identifier: TGvstWaba6dweQVEmTIVysFvdJ7+Wysk/kSHerlZ+i4=
Subject key identifier: 4A:FA:2F:BA:67:58:27:B8:36:B4:0E:80:A5:D5:7D:6A:44:3E:4A:43
Certificate issuer: /CN=E0B1DDE4FA587276778B8ED650B682C82290CC74
Certificate serial: 438C5BFADBC614667736D58A4D7B45BA96D27A7E
Authority key identifier: E0:B1:DD:E4:FA:58:72:76:77:8B:8E:D6:50:B6:82:C8:22:90:CC:74
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B1DDE4FA587276778B8ED650B682C82290CC74.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/3130332e3137362e36382e302f32342d3234203d3e20313437313330.roa
Signing time: Mon 02 Feb 2026 10:00:00 +0000
ROA not before: Mon 02 Feb 2026 09:55:00 +0000
ROA not after: Mon 01 Feb 2027 10:00:00 +0000
asID: 147130
IP address blocks: 103.176.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/E0B1DDE4FA587276778B8ED650B682C82290CC74.crl
rsync://repo-rpki.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/E0B1DDE4FA587276778B8ED650B682C82290CC74.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B1DDE4FA587276778B8ED650B682C82290CC74.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:8c:5b:fa:db:c6:14:66:77:36:d5:8a:4d:7b:45:ba:96:d2:7a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E0B1DDE4FA587276778B8ED650B682C82290CC74
Validity
Not Before: Feb 2 09:55:00 2026 GMT
Not After : Feb 1 10:00:00 2027 GMT
Subject: CN=4AFA2FBA675827B836B40E80A5D57D6A443E4A43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:df:4f:ae:ce:1a:a9:a7:4e:3a:68:b9:b6:fe:
8e:1f:da:e9:3f:1f:5d:2b:99:94:77:86:07:a2:27:
12:97:2d:9d:f7:aa:f0:78:20:e9:c3:3b:7f:85:48:
58:66:3b:c5:42:12:c7:02:6c:b9:0d:4b:0c:c7:7b:
d6:65:a2:05:6e:90:17:e9:96:6f:e5:53:b9:df:4e:
50:3b:26:e2:c9:32:2c:bc:36:6e:e1:68:c3:4d:b7:
38:cc:91:7a:59:69:bf:ac:01:59:7c:8e:82:72:69:
d2:8b:fb:a1:d7:e8:96:91:a2:83:af:32:86:f9:d9:
ca:e1:2e:81:84:af:92:58:78:7a:6f:c0:4f:20:da:
31:6a:52:08:bc:3f:1c:7a:6e:d7:18:83:93:c4:d6:
86:6c:f4:d4:13:ca:1c:10:21:d5:5c:b2:ee:19:9e:
b5:8d:88:c9:25:58:5e:97:8f:33:28:3b:54:a4:f7:
8f:b9:7a:c3:93:3c:33:70:db:6f:6b:d3:bf:af:67:
ca:06:2b:64:18:74:6b:06:92:41:94:c3:82:53:15:
5e:3a:58:4c:03:19:89:df:23:b1:59:31:0d:fc:0f:
17:dd:fc:12:b9:f2:d6:aa:81:09:ce:72:4b:c5:49:
ef:b8:a3:3d:99:aa:b6:dd:b5:81:af:66:3b:67:a0:
fd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FA:2F:BA:67:58:27:B8:36:B4:0E:80:A5:D5:7D:6A:44:3E:4A:43
X509v3 Authority Key Identifier:
keyid:E0:B1:DD:E4:FA:58:72:76:77:8B:8E:D6:50:B6:82:C8:22:90:CC:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/E0B1DDE4FA587276778B8ED650B682C82290CC74.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B1DDE4FA587276778B8ED650B682C82290CC74.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/3130332e3137362e36382e302f32342d3234203d3e20313437313330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.176.68.0/24
Signature Algorithm: sha256WithRSAEncryption
50:e5:d6:44:69:92:b0:d7:4f:24:b9:65:7d:69:d4:12:73:88:
4d:2d:d0:83:80:c3:64:48:3d:74:e9:51:4e:3a:1a:cc:df:0b:
0a:8c:54:fd:a4:97:01:ec:09:db:9c:2d:93:d1:56:7a:20:dc:
55:8f:d2:26:3a:2a:54:03:ca:85:ed:47:60:b2:9a:8b:d7:34:
89:f2:5f:21:d3:c8:17:ec:54:93:e7:00:73:b9:2b:dc:bb:d3:
c9:a9:f1:b3:ca:8e:13:e3:09:ba:45:af:e9:84:b8:b5:24:33:
69:15:34:6b:65:05:2e:7c:a3:fa:ec:5e:39:ff:43:29:0a:a0:
24:cd:0b:4e:dc:88:91:1f:f1:6a:1a:b3:11:5f:ca:80:05:95:
31:1a:69:28:97:4c:86:a3:c8:b3:3b:08:b5:fd:6a:44:97:75:
56:db:f2:ee:8d:e6:67:45:02:df:57:9e:1f:f2:5a:22:22:27:
0f:bf:6b:d6:b7:ba:fc:cc:aa:eb:e8:44:3d:5e:f7:e9:9c:b1:
9d:c3:43:eb:ac:a5:eb:6a:af:8d:69:9d:5c:04:c8:c4:8d:47:
4d:8c:1a:4b:61:70:37:a7:6e:94:09:38:d9:db:f4:c8:3c:54:
c6:d4:43:bc:77:55:70:d6:7d:d0:9d:39:dc:8b:af:69:9f:2f:
82:14:52:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 13:04:22 2026 by rpki-client