This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/3130332e3232332e302e302f32342d3234203d3e20313335343435.roa
File: 3130332e3232332e302e302f32342d3234203d3e20313335343435.roa (raw, json)
Hash identifier: oU2dsUyq8KP+bstPYjrTEHeb92F1aA4n/slytW0yuBs=
Subject key identifier: EA:36:74:FE:17:9A:F0:C1:08:5A:AA:05:7D:53:DB:63:C2:FE:F5:49
Certificate issuer: /CN=6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B
Certificate serial: 2BA89A5E07184104989061C1D064A678C02A1CE6
Authority key identifier: 6B:4D:14:FC:6D:37:4A:FC:CA:B1:90:C5:4D:DF:3A:1A:9D:4D:93:0B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/3130332e3232332e302e302f32342d3234203d3e20313335343435.roa
Signing time: Wed 28 Jan 2026 17:00:03 +0000
ROA not before: Wed 28 Jan 2026 16:55:03 +0000
ROA not after: Wed 27 Jan 2027 17:00:03 +0000
asID: 135445
IP address blocks: 103.223.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.crl
rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 15:23:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:a8:9a:5e:07:18:41:04:98:90:61:c1:d0:64:a6:78:c0:2a:1c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B
Validity
Not Before: Jan 28 16:55:03 2026 GMT
Not After : Jan 27 17:00:03 2027 GMT
Subject: CN=EA3674FE179AF0C1085AAA057D53DB63C2FEF549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e4:03:90:71:1e:ea:52:07:e0:ee:1c:f8:07:
38:c1:14:28:69:ca:23:b2:f3:da:96:fd:2d:94:54:
6b:82:50:7f:ae:14:42:f3:85:f1:76:72:ad:29:2e:
53:8b:09:d4:b9:b5:46:07:8c:ef:5d:2a:99:f1:b9:
73:b4:ee:b0:2b:11:0e:5c:a4:e7:96:68:76:d4:1f:
09:f2:65:88:4e:87:e4:6a:2e:e4:81:b6:df:5f:af:
ec:f6:96:46:98:20:10:29:49:32:33:25:66:c4:aa:
ff:f0:fd:4b:bf:21:e0:32:4b:c5:7c:3b:8c:9f:6e:
f1:2f:a5:39:c8:10:1a:97:56:43:23:82:eb:42:38:
49:b9:17:cb:e8:c8:aa:19:e8:64:2b:73:fc:27:e1:
ec:cf:ba:3c:1c:6b:98:e0:c2:7d:73:cc:60:33:5a:
9a:05:28:e0:bc:96:0a:f9:ac:e9:e7:45:ad:ab:96:
48:87:ce:46:34:cf:1c:42:ec:ad:65:f6:ed:d7:70:
f9:c2:81:dc:93:1f:86:d8:0b:f4:6c:75:9f:cc:b7:
9f:7f:8c:4b:a2:d9:e5:84:74:70:1b:22:b0:03:63:
ca:86:35:c5:f2:86:59:74:87:51:6f:9a:0b:e7:e4:
a7:64:ce:ff:47:b2:c5:64:30:82:ad:aa:4d:cc:8c:
cb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:36:74:FE:17:9A:F0:C1:08:5A:AA:05:7D:53:DB:63:C2:FE:F5:49
X509v3 Authority Key Identifier:
keyid:6B:4D:14:FC:6D:37:4A:FC:CA:B1:90:C5:4D:DF:3A:1A:9D:4D:93:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/3130332e3232332e302e302f32342d3234203d3e20313335343435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.223.0.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:84:b4:e7:e7:bb:e7:6a:78:87:a9:2f:b7:6d:3a:9c:61:6c:
7e:3d:cb:e7:82:a5:70:95:22:09:0e:48:92:7b:6b:d5:9b:d9:
7c:45:20:78:a0:b5:a8:1b:d2:f6:c8:98:07:26:45:00:a8:a7:
7c:97:64:c0:8c:57:be:89:0a:4f:71:08:01:b8:fb:66:44:e2:
8a:0a:20:21:bb:4f:79:14:8b:69:37:d5:28:78:e6:4f:ca:61:
15:40:20:d7:09:ca:06:02:74:3a:28:21:92:76:1a:76:c6:df:
fc:27:7b:c0:8a:5b:42:09:95:44:9b:ef:b5:4b:46:62:a9:ce:
d0:eb:ff:85:88:d5:2f:fb:de:b0:16:93:30:1f:d2:de:ce:85:
d5:ff:53:c1:db:52:c6:20:90:d3:ff:7d:01:14:d3:05:fb:e4:
62:fd:f8:a0:68:7b:06:7a:ca:9b:3e:4d:e5:81:7c:92:ba:1d:
f1:a3:24:9e:39:09:e6:3b:9c:0f:08:c4:52:c9:4c:de:04:5a:
1e:e8:ee:49:05:65:f8:72:82:c3:fa:4b:73:8a:7a:70:0a:25:
82:a9:1f:eb:28:5c:91:b5:c1:49:ee:8f:9b:c2:ac:6f:e7:05:
35:df:d1:91:aa:63:fe:1f:b4:36:3d:6f:0f:39:97:5d:81:6b:
18:eb:72:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 16:00:24 2026 by rpki-client