This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/3130332e3134332e3234342e302f32332d3233203d3e20313332363337.roa
File: 3130332e3134332e3234342e302f32332d3233203d3e20313332363337.roa (raw, json)
Hash identifier: BNnKvvCVYuhYuPiWLtu0g7CENyoqMhejtTMBFTTfKsk=
Subject key identifier: 47:1E:3B:62:84:13:C8:62:BC:1D:72:62:D1:6C:D5:5D:E4:D0:14:0F
Certificate issuer: /CN=9EA3AB422D824FDD9A25622F84924203216B1ED1
Certificate serial: 72942A20BFCA9B77B5468B1830192453CB1D4E33
Authority key identifier: 9E:A3:AB:42:2D:82:4F:DD:9A:25:62:2F:84:92:42:03:21:6B:1E:D1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/3130332e3134332e3234342e302f32332d3233203d3e20313332363337.roa
Signing time: Sat 31 Jan 2026 09:12:05 +0000
ROA not before: Sat 31 Jan 2026 09:07:05 +0000
ROA not after: Sat 30 Jan 2027 09:12:05 +0000
asID: 132637
IP address blocks: 103.143.244.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.crl
rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 19:46:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:94:2a:20:bf:ca:9b:77:b5:46:8b:18:30:19:24:53:cb:1d:4e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9EA3AB422D824FDD9A25622F84924203216B1ED1
Validity
Not Before: Jan 31 09:07:05 2026 GMT
Not After : Jan 30 09:12:05 2027 GMT
Subject: CN=471E3B628413C862BC1D7262D16CD55DE4D0140F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:3f:33:e7:d6:c2:97:fd:a7:4e:1e:6d:83:89:
07:cf:7d:49:ab:10:a9:7b:4f:98:54:62:44:e4:af:
a3:b4:5d:55:d9:81:a8:e0:1e:97:7d:20:38:4a:41:
5a:f6:77:d6:f5:d7:a7:bb:68:9e:ca:80:26:b1:fe:
fa:d1:b5:96:f2:99:e1:29:da:5a:58:6f:70:c9:dc:
44:a1:0b:50:6b:d2:b3:f6:4c:ef:f7:df:6f:dc:ea:
77:8d:7e:13:65:d2:1e:f1:52:17:57:c6:e6:d9:c9:
f6:e8:dd:6c:5e:a9:a0:c2:36:e8:8b:26:18:33:5c:
50:02:05:5a:69:b4:c0:47:3a:7d:bf:25:e1:49:f2:
03:4f:1d:ca:50:07:4e:d6:34:6f:58:87:77:fc:bd:
e2:b6:04:e3:76:79:58:a0:5b:fb:95:14:e4:23:7d:
8e:0a:c9:d3:08:0f:2e:20:26:00:60:9e:1c:0a:1f:
c6:49:34:60:ed:de:8f:01:b4:ab:2f:cd:19:10:de:
4c:63:d0:61:bf:ee:79:a4:25:62:ad:d6:61:77:3b:
cd:0a:6a:db:9b:25:ff:48:ae:a9:7d:77:54:9d:92:
fb:02:98:4d:e8:04:4f:8e:3b:74:1e:41:8f:aa:7f:
8d:9b:7f:60:09:9c:7b:88:bc:5f:6c:82:b5:d1:54:
c3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1E:3B:62:84:13:C8:62:BC:1D:72:62:D1:6C:D5:5D:E4:D0:14:0F
X509v3 Authority Key Identifier:
keyid:9E:A3:AB:42:2D:82:4F:DD:9A:25:62:2F:84:92:42:03:21:6B:1E:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/3130332e3134332e3234342e302f32332d3233203d3e20313332363337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.143.244.0/23
Signature Algorithm: sha256WithRSAEncryption
69:fc:51:8e:13:6a:7a:b0:1f:03:4c:14:99:39:b3:db:3a:11:
2c:90:e4:9a:37:d3:db:e9:30:46:74:68:83:cf:7c:c6:f7:99:
8e:85:2f:35:4c:fe:a6:11:0b:36:92:3c:93:97:42:1d:37:bf:
ce:07:93:f2:13:ec:11:14:4c:f3:23:8b:1a:d4:33:c8:7b:10:
32:03:aa:8b:a4:c8:db:04:d9:01:d9:79:f0:0a:4d:67:2b:12:
fa:19:f1:2c:42:c4:b7:f0:08:2c:db:ff:b4:29:47:45:12:cc:
7c:f4:10:86:b6:cb:55:16:5a:ae:e2:4a:aa:b7:57:97:d3:53:
86:b0:7b:03:41:ab:2a:37:67:43:ae:18:5e:ad:01:70:62:a2:
ad:37:93:63:34:ea:fd:6f:cf:11:9b:20:49:73:69:f5:bf:7b:
ae:f4:e1:7c:58:5a:83:ce:1e:12:29:c0:b2:05:74:2b:65:ed:
c0:d1:63:2f:e9:af:20:bb:9d:7a:66:c9:60:5f:02:ed:ef:28:
67:ed:e3:da:8d:1e:6d:a1:96:c0:db:05:e0:4d:ef:ca:98:94:
6e:2a:cb:47:d7:d3:83:98:6a:c3:0e:f7:4a:a3:28:a5:83:8f:
04:df:5d:92:94:f4:93:b4:78:6f:81:13:e4:01:13:dd:4f:5f:
fa:7d:70:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 17:19:03 2026 by rpki-client