This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/3130332e39352e382e302f32342d3234203d3e20313335343838.roa
File: 3130332e39352e382e302f32342d3234203d3e20313335343838.roa (raw, json)
Hash identifier: AA52rkzyrvi9rx6IuPvoxChCUlojIckMTzbSuJyQ2Ps=
Subject key identifier: 14:A2:82:75:C0:CB:8F:AA:9E:BC:B8:DE:5F:94:94:F8:DF:D4:6E:06
Certificate issuer: /CN=415543D423E0BD035D612DEA9BF060290E5552D2
Certificate serial: 51DD9E47B8998066224EA7B9E7E28A8210887F4A
Authority key identifier: 41:55:43:D4:23:E0:BD:03:5D:61:2D:EA:9B:F0:60:29:0E:55:52:D2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/3130332e39352e382e302f32342d3234203d3e20313335343838.roa
Signing time: Mon 26 Jan 2026 04:03:08 +0000
ROA not before: Mon 26 Jan 2026 03:58:08 +0000
ROA not after: Mon 25 Jan 2027 04:03:08 +0000
asID: 135488
IP address blocks: 103.95.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.crl
rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 23:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:dd:9e:47:b8:99:80:66:22:4e:a7:b9:e7:e2:8a:82:10:88:7f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=415543D423E0BD035D612DEA9BF060290E5552D2
Validity
Not Before: Jan 26 03:58:08 2026 GMT
Not After : Jan 25 04:03:08 2027 GMT
Subject: CN=14A28275C0CB8FAA9EBCB8DE5F9494F8DFD46E06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d8:7d:c1:d4:20:87:d1:2c:c7:1c:d6:c8:8b:
16:70:d9:79:4f:be:b9:e9:b1:73:84:61:ac:8b:95:
c5:5f:ac:fe:96:d2:5f:b5:19:17:55:e7:de:cc:be:
29:b5:d7:31:d0:9b:fe:f1:2a:b3:80:2d:c6:54:83:
7f:9c:5c:50:c3:86:44:24:8a:66:01:df:e6:26:b8:
b7:68:ca:7c:b2:41:69:d3:70:9b:32:39:4c:32:9c:
ee:a9:cd:7a:cc:d0:41:98:57:8f:83:30:83:dd:17:
c5:6d:f0:c7:f6:c7:0f:da:58:41:7a:39:df:aa:ba:
ed:81:ee:f7:8b:9f:1d:58:bf:fd:03:85:62:f3:86:
88:35:1f:47:ea:cb:f6:2f:ee:63:2d:7d:e7:83:c1:
dd:1d:c9:80:21:ab:82:c7:15:04:88:77:40:d0:82:
8c:fe:cc:5d:9c:5d:99:a3:80:4e:90:f0:c3:50:24:
94:3e:c7:6c:19:9f:77:ba:c7:ab:0c:45:0c:13:05:
70:e7:02:1c:fb:f7:78:76:1b:e2:c2:ea:14:90:57:
40:28:97:10:a5:b3:6f:27:9f:50:2c:c0:e0:8c:b2:
6d:c1:95:4f:76:92:49:55:81:14:c3:69:cd:f0:d0:
9e:bb:30:4c:71:a2:99:90:b9:e6:f8:13:9e:5c:16:
a0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A2:82:75:C0:CB:8F:AA:9E:BC:B8:DE:5F:94:94:F8:DF:D4:6E:06
X509v3 Authority Key Identifier:
keyid:41:55:43:D4:23:E0:BD:03:5D:61:2D:EA:9B:F0:60:29:0E:55:52:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/3130332e39352e382e302f32342d3234203d3e20313335343838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.95.8.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:68:a5:e4:05:ae:53:94:0d:4c:39:c7:e9:8b:87:ae:55:94:
c4:ee:76:7d:79:1a:0f:82:ca:06:be:c8:10:3e:57:2a:f8:21:
35:7b:1b:59:f5:a6:96:0a:79:90:e5:cd:6f:17:59:83:16:3b:
11:53:f5:7e:3d:61:97:6e:69:13:81:b7:b9:d3:47:58:83:40:
f7:b8:89:d9:24:48:06:de:ef:4b:f7:b4:a3:73:91:50:a1:6d:
c3:f3:62:5a:50:e6:da:60:76:97:da:2a:a8:ea:66:25:22:cf:
5a:1a:42:19:de:4d:20:f8:90:a9:8c:ab:64:6c:bc:01:75:a1:
94:bf:a1:fd:bc:7b:cd:2b:2a:bf:dc:97:29:45:ba:26:b9:50:
94:15:fd:19:ed:34:b8:24:b6:bf:36:cf:28:42:2b:b9:ee:25:
b7:e8:e6:bc:16:a0:50:7d:89:71:1b:86:57:05:54:ff:4c:f2:
1a:fe:97:51:39:b9:84:fd:c2:fa:a2:f4:11:4c:99:a7:a8:fa:
45:4c:e8:d1:55:c0:9c:c7:78:52:12:84:1d:5d:94:42:7f:99:
6e:a8:c7:69:86:ee:bc:d1:64:6b:4d:27:80:4e:d4:ae:91:cf:
69:d7:db:0e:23:7a:b9:df:ee:9e:f8:4e:44:4a:04:a4:e7:d9:
a4:90:db:ab
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUUd2eR7iZgGYiTqe55+KKghCIf0owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYwMjkw
RTU1NTJEMjAeFw0yNjAxMjYwMzU4MDhaFw0yNzAxMjUwNDAzMDhaMDMxMTAvBgNV
BAMTKDE0QTI4Mjc1QzBDQjhGQUE5RUJDQjhERTVGOTQ5NEY4REZENDZFMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+2H3B1CCH0SzHHNbIixZw2XlP
vrnpsXOEYayLlcVfrP6W0l+1GRdV597Mvim11zHQm/7xKrOALcZUg3+cXFDDhkQk
imYB3+YmuLdoynyyQWnTcJsyOUwynO6pzXrM0EGYV4+DMIPdF8Vt8Mf2xw/aWEF6
Od+quu2B7veLnx1Yv/0DhWLzhog1H0fqy/Yv7mMtfeeDwd0dyYAhq4LHFQSId0DQ
goz+zF2cXZmjgE6Q8MNQJJQ+x2wZn3e6x6sMRQwTBXDnAhz793h2G+LC6hSQV0Ao
lxCls28nn1AswOCMsm3BlU92kklVgRTDac3w0J67MExxopmQueb4E55cFqBTAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUFKKCdcDLj6qevLjeX5SU+N/UbgYwHwYDVR0j
BBgwFoAUQVVD1CPgvQNdYS3qm/BgKQ5VUtIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
MzY0NjVlYy05MTYwLTQ1OWItOGQxMS05NDhmYzI2ZGExYzAvMC80MTU1NDNENDIz
RTBCRDAzNUQ2MTJERUE5QkYwNjAyOTBFNTU1MkQyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYwMjkwRTU1
NTJEMi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EzNjQ2NWVjLTkxNjAtNDU5Yi04
ZDExLTk0OGZjMjZkYTFjMC8wLzMxMzAzMzJlMzkzNTJlMzgyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTMzMzUzNDM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnXwgwDQYJKoZIhvcN
AQELBQADggEBAD1opeQFrlOUDUw5x+mLh65VlMTudn15Gg+Cyga+yBA+Vyr4ITV7
G1n1ppYKeZDlzW8XWYMWOxFT9X49YZduaROBt7nTR1iDQPe4idkkSAbe70v3tKNz
kVChbcPzYlpQ5tpgdpfaKqjqZiUiz1oaQhneTSD4kKmMq2RsvAF1oZS/of28e80r
Kr/clylFuia5UJQV/RntNLgktr82zyhCK7nuJbfo5rwWoFB9iXEbhlcFVP9M8hr+
l1E5uYT9wvqi9BFMmaeo+kVM6NFVwJzHeFIShB1dlEJ/mW6ox2mG7rzRZGtNJ4BO
1K6Rz2nX2w4jernf7p74TkRKBKTn2aSQ26s=
-----END CERTIFICATE-----
Generated at Mon Feb 2 13:02:21 2026 by rpki-client