This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/3130332e3134352e3130382e302f32342d3234203d3e20313339343436.roa
File: 3130332e3134352e3130382e302f32342d3234203d3e20313339343436.roa (raw, json)
Hash identifier: pWW6aChZuEDy/+0vrjLWEhH3QTbtcqu7md1QFPSZMbA=
Subject key identifier: B2:C3:18:69:67:89:AA:7B:D6:87:46:4D:D8:13:62:95:DF:F2:F9:DF
Certificate issuer: /CN=FE4F0E88F020271FABB0940107AF13E80DCCA4CE
Certificate serial: 64D3BAA9807CEA8400B103E67C6BA4E06AD0C38D
Authority key identifier: FE:4F:0E:88:F0:20:27:1F:AB:B0:94:01:07:AF:13:E8:0D:CC:A4:CE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/3130332e3134352e3130382e302f32342d3234203d3e20313339343436.roa
Signing time: Tue 23 Dec 2025 08:01:51 +0000
ROA not before: Tue 23 Dec 2025 07:56:51 +0000
ROA not after: Tue 22 Dec 2026 08:01:51 +0000
asID: 139446
IP address blocks: 103.145.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.crl
rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:d3:ba:a9:80:7c:ea:84:00:b1:03:e6:7c:6b:a4:e0:6a:d0:c3:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FE4F0E88F020271FABB0940107AF13E80DCCA4CE
Validity
Not Before: Dec 23 07:56:51 2025 GMT
Not After : Dec 22 08:01:51 2026 GMT
Subject: CN=B2C318696789AA7BD687464DD8136295DFF2F9DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:50:d7:c1:70:0d:14:a7:78:97:c8:d3:f3:b3:
a9:3c:ba:b4:46:8a:9f:8b:bb:fa:e6:5a:fd:f9:7d:
d3:45:15:09:fd:b8:e3:cf:e9:f1:6b:92:c2:0a:b7:
d5:4e:1c:39:d5:dc:2a:ae:9f:67:0e:74:7b:ea:6f:
04:3d:ce:31:50:b9:60:99:40:b4:5e:94:f4:4d:42:
85:3f:b4:fa:d6:5c:bf:9a:8a:bb:55:01:1b:66:ea:
7a:bf:08:79:b7:44:b3:76:d4:fe:c9:a1:c8:ec:08:
9d:ee:2d:3a:2f:b0:37:f3:ac:74:a8:1f:ed:47:35:
47:fe:2c:e2:26:e4:b7:0b:c6:5c:c3:c8:b1:48:8d:
d8:86:b1:b0:40:83:d8:87:14:c3:44:12:b5:b5:61:
ba:67:ab:10:ce:51:9d:6f:11:a6:c5:30:25:58:ba:
1a:10:ca:2c:18:92:07:8a:f2:ea:c2:7a:4b:28:8c:
e4:54:24:69:5e:2b:00:2d:56:88:78:2d:60:f3:9b:
e4:e4:64:2c:4b:e8:43:8a:9d:a6:9f:0d:37:8c:07:
c6:77:e3:15:25:57:41:82:5a:a3:44:c3:99:92:3e:
99:fe:24:a1:6f:a3:7a:94:e1:a2:8a:a0:8f:39:f2:
30:f2:b2:b9:fb:2f:28:e7:2b:87:51:db:fb:16:b8:
7a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C3:18:69:67:89:AA:7B:D6:87:46:4D:D8:13:62:95:DF:F2:F9:DF
X509v3 Authority Key Identifier:
keyid:FE:4F:0E:88:F0:20:27:1F:AB:B0:94:01:07:AF:13:E8:0D:CC:A4:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/3130332e3134352e3130382e302f32342d3234203d3e20313339343436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.145.108.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:a5:05:23:db:43:6d:99:c2:78:83:d8:d7:5b:e1:fd:70:02:
dd:14:fa:ff:78:2d:44:f3:8a:a8:10:24:d9:8f:8a:98:3f:c7:
68:10:9b:38:ef:b2:ab:13:e1:b1:65:a5:a0:3c:3a:aa:05:cd:
75:c4:98:4d:9d:0d:a4:03:49:ea:9f:d5:f0:dc:3c:cb:8a:3f:
4c:de:2c:2a:00:c7:a3:2e:6a:e6:af:fe:9e:49:20:93:13:f7:
57:02:51:be:c4:ad:18:3a:b0:03:1d:a2:fa:5e:80:6e:2a:aa:
7e:83:29:65:21:35:48:27:11:87:70:5d:39:c8:3d:03:18:16:
63:12:b8:dc:fa:79:fe:b5:37:cd:10:5f:f3:31:ed:1f:a3:b3:
b1:d5:56:ed:38:01:c4:7f:a7:1d:72:e8:25:f8:5d:c9:8b:b0:
73:99:0f:91:80:02:5a:81:32:56:cc:e8:2c:e2:50:f4:ac:50:
49:b1:54:ab:9d:32:ce:40:35:25:eb:9c:f9:c2:63:a5:e4:b0:
47:d6:80:a7:14:84:74:3c:4b:f8:0f:31:c7:46:fb:59:a1:71:
99:fd:d9:18:b8:81:72:fe:cc:b4:b3:88:c9:09:2b:84:ba:96:
16:18:53:1d:48:c4:ab:0a:c5:67:27:39:f3:4e:42:de:d8:91:
8c:12:f9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 16:19:47 2026 by rpki-client