This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/3130332e3232332e332e302f32342d3234203d3e20313335343435.roa
File: 3130332e3232332e332e302f32342d3234203d3e20313335343435.roa (raw, json)
Hash identifier: f760Wiq9HOfEvyHxCHFmqg5Ov69QlrgTl9hAGda8ylY=
Subject key identifier: BB:07:D4:D9:DB:D0:79:2B:46:38:5F:43:47:D5:CA:65:45:01:D9:90
Certificate issuer: /CN=6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B
Certificate serial: 5E869B6D745C94E6D04FCE035E4D8468820073E3
Authority key identifier: 6B:4D:14:FC:6D:37:4A:FC:CA:B1:90:C5:4D:DF:3A:1A:9D:4D:93:0B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/3130332e3232332e332e302f32342d3234203d3e20313335343435.roa
Signing time: Wed 28 Jan 2026 17:00:03 +0000
ROA not before: Wed 28 Jan 2026 16:55:03 +0000
ROA not after: Wed 27 Jan 2027 17:00:03 +0000
asID: 135445
IP address blocks: 103.223.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.crl
rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 15:23:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:86:9b:6d:74:5c:94:e6:d0:4f:ce:03:5e:4d:84:68:82:00:73:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B
Validity
Not Before: Jan 28 16:55:03 2026 GMT
Not After : Jan 27 17:00:03 2027 GMT
Subject: CN=BB07D4D9DBD0792B46385F4347D5CA654501D990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7c:ba:19:f8:cd:12:c6:ad:73:eb:c7:7d:fd:
13:34:e1:5a:15:8e:c9:63:7b:f6:a3:75:d5:a4:89:
53:7a:6c:82:3f:89:c0:6f:14:3a:e1:19:c3:1f:e6:
ac:8f:5b:b7:46:5c:53:1e:0a:95:97:14:4d:66:e7:
02:77:85:87:c4:34:66:6e:e5:4c:69:10:d2:68:f0:
75:7e:60:29:74:76:32:14:4c:b6:d2:8f:59:3b:3f:
0e:ba:42:65:6b:4a:e0:25:54:fc:4c:03:c9:68:4b:
1c:47:3c:2e:3f:79:71:c7:c3:95:fb:d2:84:9d:ec:
e9:e4:73:92:c3:8e:08:de:77:49:d7:ee:f1:fa:f1:
b8:7c:27:50:8a:8a:f6:0c:bc:b4:d3:c3:fd:6a:b4:
47:50:2b:09:ee:a2:af:6e:b6:a2:d7:5d:6e:37:23:
db:ce:e6:9b:42:2d:59:ca:07:49:69:97:c9:d1:11:
a3:c3:d8:e2:95:3e:f5:e4:36:e5:2f:87:01:1a:38:
dc:7b:21:6d:6c:80:ef:cb:6c:55:b7:d1:10:a6:06:
e7:de:5a:b2:81:bd:17:ef:07:11:01:7d:e4:f3:66:
7c:3a:74:1f:b6:d0:8c:5e:88:77:04:aa:a8:e8:be:
59:16:39:f0:de:5d:8c:5a:fa:1b:6e:4f:56:59:9a:
f9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:07:D4:D9:DB:D0:79:2B:46:38:5F:43:47:D5:CA:65:45:01:D9:90
X509v3 Authority Key Identifier:
keyid:6B:4D:14:FC:6D:37:4A:FC:CA:B1:90:C5:4D:DF:3A:1A:9D:4D:93:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/3130332e3232332e332e302f32342d3234203d3e20313335343435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.223.3.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:5a:65:5e:3d:17:f0:44:df:3e:42:27:34:1f:95:50:75:2c:
ab:c1:ba:0b:e8:f1:9b:78:c3:d5:ab:bb:ac:42:b3:74:b7:b4:
e2:54:ac:fe:bd:dc:41:1b:88:9c:71:a2:9d:b7:57:8c:b5:9e:
5b:72:96:fe:4a:e0:6f:db:c4:23:95:95:58:5f:ae:b6:1e:29:
a6:ca:e5:76:2d:f3:52:4b:ef:b1:17:25:b7:1c:16:11:63:26:
ae:81:77:47:0f:34:8b:ce:d4:90:ab:85:2e:31:a3:f9:34:f4:
b8:fc:ec:25:f0:20:bf:ae:bb:9e:80:35:9d:c4:4b:07:6b:19:
8a:24:b1:b7:8c:31:0b:fa:8c:70:6a:6e:35:89:08:1b:4b:a5:
cb:95:c7:a9:39:62:3f:d5:54:24:84:5a:04:ac:a6:ac:48:62:
bd:09:03:81:10:b4:a1:d9:70:cc:7b:94:ac:b2:db:ab:c6:3a:
d9:4b:82:7d:3e:d4:be:6d:af:32:c2:2b:49:c1:f1:6a:cc:70:
ca:af:b2:54:aa:42:b7:1f:4a:b1:c9:a6:e5:9c:bf:38:f9:7f:
d4:90:47:df:f9:35:63:96:a8:1a:58:46:c0:19:6b:d7:1c:5e:
03:98:30:a7:1c:8c:96:aa:ea:0e:32:50:a6:f7:fb:05:7a:d4:
92:5a:3c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:52:53 2026 by rpki-client