This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/3130332e3232332e322e302f32342d3234203d3e20313335343435.roa
File: 3130332e3232332e322e302f32342d3234203d3e20313335343435.roa (raw, json)
Hash identifier: ad6HqEhyKfMFzweJkQHndTfkf4zH5ZdsD2lMwMM0pnE=
Subject key identifier: F2:DD:37:AB:22:00:86:CF:C1:21:10:BD:F4:F1:3B:98:D5:D8:51:F6
Certificate issuer: /CN=6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B
Certificate serial: 40053D6F4AC70F7F3D952C92A266B63BAF1BD518
Authority key identifier: 6B:4D:14:FC:6D:37:4A:FC:CA:B1:90:C5:4D:DF:3A:1A:9D:4D:93:0B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/3130332e3232332e322e302f32342d3234203d3e20313335343435.roa
Signing time: Wed 28 Jan 2026 17:00:03 +0000
ROA not before: Wed 28 Jan 2026 16:55:03 +0000
ROA not after: Wed 27 Jan 2027 17:00:03 +0000
asID: 135445
IP address blocks: 103.223.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.crl
rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 15:23:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:05:3d:6f:4a:c7:0f:7f:3d:95:2c:92:a2:66:b6:3b:af:1b:d5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B
Validity
Not Before: Jan 28 16:55:03 2026 GMT
Not After : Jan 27 17:00:03 2027 GMT
Subject: CN=F2DD37AB220086CFC12110BDF4F13B98D5D851F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:35:78:e3:5f:f2:42:48:c4:05:b7:2f:bf:26:
ec:e2:1d:6a:40:c2:59:a4:67:7b:bc:82:7d:bc:9a:
b9:d0:de:6c:7d:76:bd:77:d1:4d:cb:b3:82:69:08:
3b:70:c2:8e:52:e6:d4:fb:ed:22:5e:9f:a5:e2:91:
97:31:a0:7b:cb:10:90:ed:ff:4c:58:04:2d:c5:27:
ec:75:dc:1a:0e:c8:68:f8:73:e1:5e:23:30:f6:c5:
f5:13:de:c2:92:5b:9f:66:4f:78:00:d4:47:c6:3d:
7c:cb:97:5d:0d:cb:9e:e9:14:7d:61:6a:54:b6:56:
ae:f7:90:e3:d4:0d:6b:b3:c6:00:0c:c4:56:2a:eb:
d4:ab:fd:77:7d:e2:61:b3:a2:15:b9:51:60:30:62:
83:b3:c9:5f:ef:b8:51:17:6e:57:f1:ca:e6:38:2b:
d5:14:46:07:50:59:58:da:06:1f:d3:42:81:0d:da:
03:6c:ff:7c:f1:2c:95:af:ea:68:03:f0:94:22:27:
a5:37:6d:3b:3b:dc:44:b3:8a:04:4d:db:f8:22:67:
18:4a:f0:27:e4:71:8e:2e:51:3f:c6:c9:4e:72:0e:
aa:f7:e3:e2:98:94:35:07:1e:ec:40:71:54:34:eb:
d2:be:67:cf:59:5e:19:39:2a:3e:af:37:9e:a3:6b:
b1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DD:37:AB:22:00:86:CF:C1:21:10:BD:F4:F1:3B:98:D5:D8:51:F6
X509v3 Authority Key Identifier:
keyid:6B:4D:14:FC:6D:37:4A:FC:CA:B1:90:C5:4D:DF:3A:1A:9D:4D:93:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/3130332e3232332e322e302f32342d3234203d3e20313335343435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.223.2.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:9c:6e:dd:e5:b3:cd:fc:4d:19:e2:67:67:eb:2e:64:5b:e2:
02:89:74:9d:72:99:81:80:97:b5:bb:31:cb:9e:9c:f3:41:de:
af:52:18:90:77:10:5e:98:26:39:f6:2d:69:f0:35:5d:d6:f4:
29:b3:c6:d2:af:76:02:34:87:72:a8:d1:86:d4:87:13:94:d5:
09:33:9b:a9:7c:a7:39:20:ae:24:ef:7a:49:4e:a5:30:39:8d:
4d:8c:e7:61:de:82:47:18:de:77:e4:20:59:d8:7b:79:77:86:
cd:0e:af:fe:a5:6b:1c:3b:88:1c:d9:da:20:ef:d3:df:a3:7f:
dd:75:26:d7:e6:6b:f2:e0:c0:51:ba:f9:6f:e4:ff:99:a9:35:
96:06:51:2c:f2:04:17:d7:10:69:2a:f9:87:00:f5:19:87:2b:
eb:6b:04:ad:d5:e8:77:e4:4b:62:fc:c7:73:14:df:56:fa:03:
d0:28:07:67:1b:d7:40:ea:02:83:90:f9:d1:2f:85:a3:2f:07:
31:c5:72:b1:4a:24:a7:63:1b:a7:a2:21:3c:3f:d1:77:6b:1a:
54:07:b0:5c:ac:8e:d2:4b:dc:61:05:a6:cf:9c:bf:2b:c9:03:
85:64:cd:6d:ca:89:55:ec:59:c7:5f:ae:41:ef:45:7e:4e:dd:
60:db:96:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:53:55 2026 by rpki-client