This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3130332e3137302e39372e302f32342d3234203d3e20313432333638.roa
File: 3130332e3137302e39372e302f32342d3234203d3e20313432333638.roa (raw, json)
Hash identifier: qmdGYePJd+wN/ivsAkmPcsWhCMrqFbcUBgTD/u1jg9I=
Subject key identifier: 1D:B7:51:F5:F0:A1:39:AE:05:FA:98:BE:BE:C6:48:B6:48:75:7A:AA
Certificate issuer: /CN=3BA10823C279932D7573B930625CD2884433C744
Certificate serial: 377843C5110FFDC7E04BAFC930F45EA3DF1AACFA
Authority key identifier: 3B:A1:08:23:C2:79:93:2D:75:73:B9:30:62:5C:D2:88:44:33:C7:44
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3130332e3137302e39372e302f32342d3234203d3e20313432333638.roa
Signing time: Sat 31 Jan 2026 12:00:00 +0000
ROA not before: Sat 31 Jan 2026 11:55:00 +0000
ROA not after: Sat 30 Jan 2027 12:00:00 +0000
asID: 142368
IP address blocks: 103.170.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.crl
rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 20:22:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:78:43:c5:11:0f:fd:c7:e0:4b:af:c9:30:f4:5e:a3:df:1a:ac:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BA10823C279932D7573B930625CD2884433C744
Validity
Not Before: Jan 31 11:55:00 2026 GMT
Not After : Jan 30 12:00:00 2027 GMT
Subject: CN=1DB751F5F0A139AE05FA98BEBEC648B648757AAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b9:62:15:aa:d9:da:d6:7c:3d:5e:a6:62:6f:
cc:ac:d6:64:74:79:85:a3:19:e2:86:a2:76:ca:43:
c2:62:c8:61:89:5b:b5:19:9a:63:10:51:b6:2e:b8:
c3:7b:34:75:8f:7b:e2:a5:33:f0:07:75:34:f4:9c:
07:7a:10:80:12:4f:ba:50:96:96:31:ef:2b:e8:25:
ef:ce:a9:4e:92:7b:e0:c0:a5:83:1d:09:a5:04:c8:
a6:74:20:15:69:3c:99:d9:e0:9d:f2:6f:a6:7a:62:
02:89:16:c8:c0:59:9d:9e:f5:4c:5b:fc:67:77:bb:
0f:d0:64:8d:a5:e1:44:eb:79:bd:7c:3e:4f:3f:2f:
9a:e5:92:47:3b:1e:91:13:c7:c8:0b:4e:77:1d:bf:
1c:6f:ed:75:de:6f:35:c8:16:ca:79:4e:25:b3:32:
83:e8:0b:13:24:cc:b7:3d:ac:1f:18:25:41:ce:1a:
3c:aa:fd:69:8a:18:c9:e2:00:d3:4d:f0:d1:b3:63:
a3:b1:27:6e:5d:cd:06:88:20:11:94:64:0c:e6:40:
b2:84:89:9e:31:0e:40:0b:a7:a4:7b:d6:e3:3c:ea:
48:f1:69:78:5e:f8:e2:d3:cd:66:ff:b6:1a:d5:37:
24:48:3a:2d:3c:1b:df:64:6e:48:2e:18:ce:58:ee:
0c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B7:51:F5:F0:A1:39:AE:05:FA:98:BE:BE:C6:48:B6:48:75:7A:AA
X509v3 Authority Key Identifier:
keyid:3B:A1:08:23:C2:79:93:2D:75:73:B9:30:62:5C:D2:88:44:33:C7:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3130332e3137302e39372e302f32342d3234203d3e20313432333638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.170.97.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:00:ce:13:84:69:c9:5d:2e:6b:7c:55:73:9f:fd:1f:59:05:
fe:ed:40:4e:3a:83:c6:b3:1c:f6:6e:91:49:86:3d:8e:94:e6:
51:c1:9e:93:e9:8c:08:f2:d4:25:6d:fb:e8:2a:90:70:22:f7:
44:92:88:4d:c0:d4:82:5c:5b:11:42:d0:dd:6c:94:1c:aa:72:
d6:24:37:f8:ea:7f:fc:cc:54:55:5c:6c:14:9f:3b:f1:6d:6b:
14:4b:74:b1:d3:6a:c0:5e:29:d0:77:f6:8e:0e:5e:e3:60:fb:
4c:1f:02:38:56:22:ca:ca:55:6c:b7:16:73:53:19:12:57:0e:
8d:8e:49:77:d2:bb:0e:25:91:8d:0a:f8:5f:61:7b:96:6e:99:
68:4e:c5:27:da:43:63:66:71:41:2a:c6:e4:93:d1:be:83:72:
9a:ad:21:d6:f4:cd:f0:bc:bf:53:82:5f:03:bb:01:d4:8c:d7:
76:41:f8:b0:39:51:da:92:94:43:5a:f4:0e:d9:5b:e4:94:21:
d2:0f:b0:9a:f1:d5:be:4d:82:56:df:5a:c8:4c:af:eb:06:e2:
1c:1a:dd:8e:81:94:ff:2f:12:36:67:5b:93:e3:e0:81:51:63:
67:98:a0:bc:cb:a8:c7:7a:85:f0:9b:df:22:90:91:b3:7c:88:
f9:2d:d0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 13:02:16 2026 by rpki-client