This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/3130332e3232332e302e302f32322d3232203d3e20313335343435.roa
File: 3130332e3232332e302e302f32322d3232203d3e20313335343435.roa (raw, json)
Hash identifier: YtNffJndwQcapH1jWbfKctNyKIPis6S631TlqbJG5D0=
Subject key identifier: A8:A5:2A:57:99:5E:C5:DB:8E:53:52:02:87:76:8C:EA:E1:C2:02:40
Certificate issuer: /CN=6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B
Certificate serial: 518596160C6272A1F41D463AA8A774837B6CFFED
Authority key identifier: 6B:4D:14:FC:6D:37:4A:FC:CA:B1:90:C5:4D:DF:3A:1A:9D:4D:93:0B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/3130332e3232332e302e302f32322d3232203d3e20313335343435.roa
Signing time: Sat 31 Jan 2026 05:01:46 +0000
ROA not before: Sat 31 Jan 2026 04:56:46 +0000
ROA not after: Sat 30 Jan 2027 05:01:46 +0000
asID: 135445
IP address blocks: 103.223.0.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.crl
rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 15:23:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:85:96:16:0c:62:72:a1:f4:1d:46:3a:a8:a7:74:83:7b:6c:ff:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B
Validity
Not Before: Jan 31 04:56:46 2026 GMT
Not After : Jan 30 05:01:46 2027 GMT
Subject: CN=A8A52A57995EC5DB8E53520287768CEAE1C20240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:23:ee:c9:20:8b:3b:82:86:97:bd:be:c9:6d:
69:6a:d0:58:f9:ec:63:fb:f4:ca:7f:7b:d9:e4:dc:
10:3d:65:66:3a:ce:57:7d:ed:c6:9f:dc:30:50:e1:
41:cc:fc:2a:4a:5c:35:bf:4f:33:c2:8e:6a:00:ec:
f7:d9:43:c4:59:72:f2:26:3f:80:fd:cd:85:90:2c:
03:d5:16:28:0f:65:2d:30:7c:80:f9:10:eb:d3:b9:
a1:f9:f4:db:98:a2:4d:60:1d:5b:6c:f1:43:91:20:
1c:3f:eb:88:8a:63:3a:b9:b7:07:5f:08:f8:c6:a0:
19:2f:5c:1c:08:03:27:d7:cd:f9:5e:f6:60:7e:c5:
de:3d:3b:35:c2:07:87:aa:59:aa:5d:b6:d0:4f:22:
0b:f2:a1:76:fe:db:a4:74:83:33:5b:e4:b4:ec:18:
f0:e9:7e:d9:d0:e8:2c:1d:de:c3:64:84:80:12:12:
4e:ab:23:58:7c:6b:99:06:0b:c3:3b:d7:4b:4f:58:
8c:d4:71:63:dc:4b:b7:ed:0f:ea:c1:8e:e5:04:25:
de:f1:91:75:5d:d7:7a:f7:df:39:b1:9a:32:51:ee:
4d:cf:13:66:77:aa:91:6f:5f:a6:cf:75:c9:a1:2f:
75:36:19:d9:68:83:8b:79:21:d0:2c:37:d3:05:9c:
63:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A5:2A:57:99:5E:C5:DB:8E:53:52:02:87:76:8C:EA:E1:C2:02:40
X509v3 Authority Key Identifier:
keyid:6B:4D:14:FC:6D:37:4A:FC:CA:B1:90:C5:4D:DF:3A:1A:9D:4D:93:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/3130332e3232332e302e302f32322d3232203d3e20313335343435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.223.0.0/22
Signature Algorithm: sha256WithRSAEncryption
93:d5:55:d9:5d:d2:34:c1:e4:40:74:9e:43:5c:f3:be:20:b2:
bc:1d:09:14:38:9c:da:3e:87:bf:f2:7b:66:38:12:82:3c:75:
28:02:af:25:c5:46:e3:57:7a:dc:7d:b1:09:0d:ae:9f:38:de:
8f:d0:90:43:c0:de:e6:87:21:3b:41:c9:81:0f:4d:e5:35:4c:
2b:a7:14:52:89:34:e2:7e:ee:4e:23:63:4d:6c:bc:46:89:10:
3c:05:c8:31:de:90:4f:5e:38:af:c7:73:b5:d3:32:53:22:7f:
5a:ed:9e:0e:04:62:ff:c9:40:91:0e:7f:06:84:a9:da:8d:11:
7e:1b:82:cb:7e:d6:35:7b:eb:9a:d4:d5:23:14:da:71:30:53:
13:a5:c6:9b:ab:23:54:e1:e5:c1:58:2f:12:c4:35:28:89:d2:
8b:94:ca:32:89:f4:cf:67:45:b5:19:0d:35:87:a3:58:02:ef:
e8:bb:9e:4d:14:3a:48:cf:89:1b:5d:db:fa:07:49:19:dc:59:
cd:17:2f:fb:d8:cf:93:39:0c:d4:d9:7f:11:fc:2d:9a:e1:3f:
0c:42:88:33:f7:54:1e:90:6f:36:e2:5f:3d:ec:21:4c:a9:94:
65:6a:71:a3:66:05:e3:c3:3f:6f:81:ad:fa:90:a6:9a:64:c4:
3b:eb:d0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:52:42 2026 by rpki-client