This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/3130332e3231332e3233352e302f32342d3234203d3e20313337333636.roa
File: 3130332e3231332e3233352e302f32342d3234203d3e20313337333636.roa (raw, json)
Hash identifier: Lsn42fS5u6tzmVAFqel+kOrjmVEuvr9qNasBHNEDW8Y=
Subject key identifier: A5:7D:27:19:BB:2D:04:39:B5:18:B0:62:26:12:A3:6B:CC:62:3C:E2
Certificate issuer: /CN=846D8A4B978C6F595D44EACDB8259295CD43C499
Certificate serial: 5E129C36A95F3502F792A29D5C74150E9525413F
Authority key identifier: 84:6D:8A:4B:97:8C:6F:59:5D:44:EA:CD:B8:25:92:95:CD:43:C4:99
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/3130332e3231332e3233352e302f32342d3234203d3e20313337333636.roa
Signing time: Sat 31 Jan 2026 02:11:14 +0000
ROA not before: Sat 31 Jan 2026 02:06:14 +0000
ROA not after: Sat 30 Jan 2027 02:11:14 +0000
asID: 137366
IP address blocks: 103.213.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.crl
rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:12:9c:36:a9:5f:35:02:f7:92:a2:9d:5c:74:15:0e:95:25:41:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846D8A4B978C6F595D44EACDB8259295CD43C499
Validity
Not Before: Jan 31 02:06:14 2026 GMT
Not After : Jan 30 02:11:14 2027 GMT
Subject: CN=A57D2719BB2D0439B518B0622612A36BCC623CE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c6:bd:9d:2b:40:b1:88:10:0a:80:a2:f0:17:
23:3d:1a:03:f1:0e:60:0d:b2:fe:45:67:7b:56:22:
f8:2a:bb:7a:11:eb:4d:0b:99:8f:ed:1a:57:4f:bd:
26:da:e2:5f:05:f8:74:41:12:09:df:d1:29:97:ce:
18:d7:e2:f1:3c:a0:36:74:e9:fb:07:3b:ec:f2:a8:
27:74:90:a0:af:6d:89:0c:62:94:54:3f:70:eb:67:
fa:06:86:49:ba:b5:c1:9b:27:eb:2b:c9:64:26:3b:
c2:e1:c4:5d:4e:16:89:f0:ff:92:e6:88:fc:db:20:
14:5d:c9:e9:77:df:64:1f:ce:6a:00:5b:6e:4a:44:
dc:d2:ce:2c:8e:13:ee:f1:5c:5e:1a:50:c7:ee:33:
95:d8:02:44:a0:8c:e8:b3:80:66:78:86:3f:4f:ce:
7e:d0:a3:2b:64:2e:da:b1:7c:b2:7c:bc:d3:92:9f:
4a:8f:31:37:09:06:31:2f:b7:f9:4d:a4:cf:b5:04:
1a:60:b5:37:8e:38:44:08:b3:04:80:53:d9:6d:dc:
cd:17:6f:59:b5:ba:30:08:fb:93:aa:a2:b2:7e:9a:
f0:8d:02:02:8d:c9:75:d2:77:35:a8:d1:a9:33:1b:
6b:39:1d:a8:6b:ad:cc:26:23:83:13:46:b8:38:ae:
d8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7D:27:19:BB:2D:04:39:B5:18:B0:62:26:12:A3:6B:CC:62:3C:E2
X509v3 Authority Key Identifier:
keyid:84:6D:8A:4B:97:8C:6F:59:5D:44:EA:CD:B8:25:92:95:CD:43:C4:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/3130332e3231332e3233352e302f32342d3234203d3e20313337333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.213.235.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:20:33:69:65:8c:7e:1a:49:10:ee:9b:9d:c5:33:04:87:51:
bf:da:85:86:2b:3e:7e:d3:d3:04:ef:8a:5f:06:9a:fd:24:3f:
b0:35:8a:4f:4c:ab:c1:f5:bd:47:dc:fb:06:7b:ad:e7:94:1d:
ba:c4:b0:94:35:9d:6a:56:cc:d3:be:74:7d:61:ae:77:02:7e:
18:8f:cc:5e:0a:d8:d9:9d:59:be:93:aa:ca:3a:2f:5e:01:fb:
f2:a8:d6:92:3f:ef:94:b0:b1:27:d4:75:d3:42:13:cc:a4:72:
89:f9:ed:d2:ef:83:1a:74:68:47:ac:48:1b:f6:ae:57:22:c1:
8b:53:61:c5:f3:fd:2a:9d:a4:4b:98:ed:91:10:b9:8c:ef:2c:
a8:e0:9d:98:1b:a7:77:d9:de:4a:4f:2a:84:93:33:48:cc:67:
1b:2a:59:a3:10:93:d9:c0:27:1e:58:81:0c:10:be:2c:7c:2b:
0d:3d:72:f5:c1:85:2b:c6:7e:a1:2d:0b:79:25:88:29:82:cd:
ce:97:41:8e:3e:0e:a5:37:8c:26:f4:55:0d:8a:3e:77:21:7d:
89:e7:e0:c5:2c:c4:1c:c0:88:fb:59:03:f4:a5:7b:b2:01:aa:
b4:e3:10:3c:01:6e:bf:3f:79:18:72:c8:0a:a8:3f:1d:f5:6a:
71:cb:ee:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:41:40 2026 by rpki-client