This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/3130332e3136302e3230322e302f32332d3233203d3e20313431363036.roa
File: 3130332e3136302e3230322e302f32332d3233203d3e20313431363036.roa (raw, json)
Hash identifier: viIMDthrb71zqv1fZqfsi9l1jzw0Csy97g9EKJWFEFg=
Subject key identifier: 23:45:16:B0:10:90:03:24:43:43:CF:49:FA:A4:AA:CC:32:E5:B1:22
Certificate issuer: /CN=407B7C7EE09EDBAA0A3525E209FF8E93E48653C8
Certificate serial: 3A771F6D5C9B5D4860631C202244F3E8F4ADF6AB
Authority key identifier: 40:7B:7C:7E:E0:9E:DB:AA:0A:35:25:E2:09:FF:8E:93:E4:86:53:C8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/3130332e3136302e3230322e302f32332d3233203d3e20313431363036.roa
Signing time: Mon 02 Feb 2026 04:00:00 +0000
ROA not before: Mon 02 Feb 2026 03:55:00 +0000
ROA not after: Mon 01 Feb 2027 04:00:00 +0000
asID: 141606
IP address blocks: 103.160.202.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl
rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:77:1f:6d:5c:9b:5d:48:60:63:1c:20:22:44:f3:e8:f4:ad:f6:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407B7C7EE09EDBAA0A3525E209FF8E93E48653C8
Validity
Not Before: Feb 2 03:55:00 2026 GMT
Not After : Feb 1 04:00:00 2027 GMT
Subject: CN=234516B0109003244343CF49FAA4AACC32E5B122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ff:98:cf:72:3e:d9:8a:cc:49:b8:19:28:16:
c1:1c:f1:7c:1d:1f:59:9d:ad:ff:4f:7c:2d:22:64:
f4:e9:55:d8:97:8b:35:c0:62:ce:bf:08:a8:2a:9a:
3b:af:28:a1:b5:a4:59:ab:1f:29:38:56:0d:db:af:
0d:43:d3:24:87:a3:f5:f5:d5:25:27:0f:f0:65:e8:
13:25:da:cf:87:b6:68:b7:d6:00:bd:1c:20:a3:cb:
c2:d7:01:93:67:b5:1a:e8:8c:23:9e:eb:7a:bc:99:
90:48:8a:88:bf:bd:58:b2:b9:c5:8f:54:20:f0:3a:
1b:db:16:85:44:ef:bc:c8:c8:b0:93:d4:25:29:05:
e2:b8:6e:d6:86:7f:26:40:c4:62:b5:a7:0e:62:e6:
94:c0:4b:bc:40:8d:22:ca:cc:47:9a:e1:5a:be:b8:
dd:52:71:8f:c0:03:27:67:76:7a:2b:2d:c7:f4:66:
60:21:c0:ec:b6:ff:0d:ca:60:f4:57:1d:bd:cb:4a:
9b:13:c5:d1:a8:60:4e:5f:0d:c6:8c:6e:2d:92:84:
1b:f9:7b:82:a8:18:d9:85:f6:20:e2:9f:d3:bc:ef:
ca:04:1d:14:85:ed:0a:0e:c6:c5:c1:21:71:2b:ef:
c0:05:de:d3:3b:dd:ba:8f:bc:d6:f5:03:55:a1:7e:
68:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:45:16:B0:10:90:03:24:43:43:CF:49:FA:A4:AA:CC:32:E5:B1:22
X509v3 Authority Key Identifier:
keyid:40:7B:7C:7E:E0:9E:DB:AA:0A:35:25:E2:09:FF:8E:93:E4:86:53:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/3130332e3136302e3230322e302f32332d3233203d3e20313431363036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.160.202.0/23
Signature Algorithm: sha256WithRSAEncryption
63:97:ad:d0:e9:56:4b:18:30:f7:7e:a2:f7:a0:17:96:08:74:
4b:ae:3a:9c:6c:2c:aa:44:7e:de:c8:e7:01:86:28:13:46:56:
03:91:d3:5b:ed:a8:3d:0f:da:5c:76:24:b2:16:60:9b:85:66:
81:24:78:e2:92:e6:de:e8:a4:03:e3:3d:a1:06:f9:09:5d:be:
5c:b1:41:be:f6:0b:15:f2:ac:12:d6:03:35:5c:5a:ff:63:d9:
d8:47:fe:b5:38:39:9f:cd:44:8f:27:f4:97:aa:8b:b0:3f:dc:
52:27:76:e5:77:43:7c:7b:1b:eb:43:b3:3a:be:de:e6:00:2f:
86:35:d1:5e:b8:37:ca:7c:14:b7:42:1b:87:6b:8e:ae:09:1b:
e6:29:bc:cb:3a:fe:30:bd:b4:d1:0f:fc:27:ac:6d:b5:b1:c1:
3c:1c:e2:63:8a:00:54:3f:dc:49:9f:a6:4c:90:4e:ee:4e:3b:
19:b7:74:ad:11:86:26:c3:cf:80:38:6d:9c:ae:a9:41:6b:82:
1d:d0:67:42:b4:1f:46:a6:c1:03:54:1b:29:02:ca:75:fb:b8:
86:93:41:c7:1a:4b:80:d1:35:09:7b:74:c1:ad:1d:4d:4a:d3:
90:8c:6f:6c:31:fc:7b:d2:6c:62:07:94:55:c1:0d:af:de:35:
2e:94:e8:dd
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUOncfbVybXUhgYxwgIkTz6PSt9qswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhFOTNF
NDg2NTNDODAeFw0yNjAyMDIwMzU1MDBaFw0yNzAyMDEwNDAwMDBaMDMxMTAvBgNV
BAMTKDIzNDUxNkIwMTA5MDAzMjQ0MzQzQ0Y0OUZBQTRBQUNDMzJFNUIxMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+/5jPcj7ZisxJuBkoFsEc8Xwd
H1mdrf9PfC0iZPTpVdiXizXAYs6/CKgqmjuvKKG1pFmrHyk4Vg3brw1D0ySHo/X1
1SUnD/Bl6BMl2s+Htmi31gC9HCCjy8LXAZNntRrojCOe63q8mZBIioi/vViyucWP
VCDwOhvbFoVE77zIyLCT1CUpBeK4btaGfyZAxGK1pw5i5pTAS7xAjSLKzEea4Vq+
uN1ScY/AAydndnorLcf0ZmAhwOy2/w3KYPRXHb3LSpsTxdGoYE5fDcaMbi2ShBv5
e4KoGNmF9iDin9O878oEHRSF7QoOxsXBIXEr78AF3tM73bqPvNb1A1WhfmhBAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUI0UWsBCQAyRDQ89J+qSqzDLlsSIwHwYDVR0j
BBgwFoAUQHt8fuCe26oKNSXiCf+Ok+SGU8gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
ZDY0YmY2YS00MzAyLTQ2MGYtOTY2OS0wOWE1MGE3M2FmMWEvMC80MDdCN0M3RUUw
OUVEQkFBMEEzNTI1RTIwOUZGOEU5M0U0ODY1M0M4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhFOTNFNDg2
NTNDOC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZkNjRiZjZhLTQzMDItNDYwZi05
NjY5LTA5YTUwYTczYWYxYS8wLzMxMzAzMzJlMzEzNjMwMmUzMjMwMzIyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzEzNjMwMzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnoMowDQYJ
KoZIhvcNAQELBQADggEBAGOXrdDpVksYMPd+ovegF5YIdEuuOpxsLKpEft7I5wGG
KBNGVgOR01vtqD0P2lx2JLIWYJuFZoEkeOKS5t7opAPjPaEG+QldvlyxQb72CxXy
rBLWAzVcWv9j2dhH/rU4OZ/NRI8n9Jeqi7A/3FInduV3Q3x7G+tDszq+3uYAL4Y1
0V64N8p8FLdCG4drjq4JG+YpvMs6/jC9tNEP/CesbbWxwTwc4mOKAFQ/3EmfpkyQ
Tu5OOxm3dK0RhibDz4A4bZyuqUFrgh3QZ0K0H0amwQNUGykCynX7uIaTQccaS4DR
NQl7dMGtHU1K05CMb2wx/HvSbGIHlFXBDa/eNS6U6N0=
-----END CERTIFICATE-----
Generated at Mon Feb 2 14:28:23 2026 by rpki-client