This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/3130332e3136382e34362e302f32332d3233203d3e20313432333130.roa
File: 3130332e3136382e34362e302f32332d3233203d3e20313432333130.roa (raw, json)
Hash identifier: UuTu7e3+zWAM3tqzM1lDC6GDGKFz8QAZ3rF08nv/dYo=
Subject key identifier: 28:B6:F3:D2:15:5A:9C:EF:D2:30:5A:B4:54:36:6A:13:9D:00:97:FD
Certificate issuer: /CN=F2CC4B38295BA8B211B55A53DA0ACB76DA636E70
Certificate serial: 34154D6F7E156DBDCA887A4B54A4ECC5EA9258A5
Authority key identifier: F2:CC:4B:38:29:5B:A8:B2:11:B5:5A:53:DA:0A:CB:76:DA:63:6E:70
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/3130332e3136382e34362e302f32332d3233203d3e20313432333130.roa
Signing time: Sat 31 Jan 2026 08:58:34 +0000
ROA not before: Sat 31 Jan 2026 08:53:34 +0000
ROA not after: Sat 30 Jan 2027 08:58:34 +0000
asID: 142310
IP address blocks: 103.168.46.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl
rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 18:51:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:15:4d:6f:7e:15:6d:bd:ca:88:7a:4b:54:a4:ec:c5:ea:92:58:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2CC4B38295BA8B211B55A53DA0ACB76DA636E70
Validity
Not Before: Jan 31 08:53:34 2026 GMT
Not After : Jan 30 08:58:34 2027 GMT
Subject: CN=28B6F3D2155A9CEFD2305AB454366A139D0097FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7b:a7:46:ab:93:a6:29:2d:9d:85:e0:2f:d4:
86:e1:0e:28:38:ee:3f:aa:fb:9d:c2:db:54:42:15:
7e:33:6d:fe:91:5d:fd:e0:18:c7:62:e0:05:5f:7b:
e6:36:b8:6f:7d:aa:60:85:a6:3a:7f:30:10:85:e9:
17:1d:2e:51:dc:55:15:8e:50:82:9e:a0:ac:ac:e6:
c6:54:df:e4:2e:66:db:f6:57:65:4b:eb:45:47:0e:
d0:69:68:6e:fc:78:95:16:76:14:68:73:74:10:ae:
a4:64:6e:8e:5f:5f:1c:01:50:97:3f:32:25:c5:9f:
df:e3:0a:b6:28:3c:31:f5:b8:3a:5c:bf:7f:2c:31:
33:c2:46:73:cf:3b:1e:1c:c7:ba:6b:50:9b:8e:57:
fc:67:f6:23:56:75:8b:8d:40:5a:14:f5:d1:d7:e0:
7d:42:c3:6d:8f:d6:2b:13:62:48:1e:74:51:3a:8c:
a9:5f:84:51:d9:b3:79:e3:76:33:3f:ec:ce:85:e7:
66:59:23:b3:44:b1:04:6c:e7:ed:33:1d:6b:32:12:
0f:17:ea:16:ed:c5:29:4a:de:60:0b:43:3f:1a:04:
d8:33:f6:c4:47:ec:56:f3:fe:0d:24:c8:b8:3c:5a:
db:d7:28:92:41:bd:81:ff:83:cc:f4:e1:d2:3d:47:
ef:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B6:F3:D2:15:5A:9C:EF:D2:30:5A:B4:54:36:6A:13:9D:00:97:FD
X509v3 Authority Key Identifier:
keyid:F2:CC:4B:38:29:5B:A8:B2:11:B5:5A:53:DA:0A:CB:76:DA:63:6E:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/3130332e3136382e34362e302f32332d3233203d3e20313432333130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.168.46.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:bc:e2:a8:1a:f7:c6:bf:f9:ec:47:ad:d9:fd:98:01:cb:50:
21:85:ff:3d:a5:95:16:82:6b:44:6b:b1:d1:dd:35:84:94:9d:
12:11:85:f7:da:69:c7:35:fb:ea:35:5a:3c:c4:30:e8:af:e2:
8f:f9:30:ed:23:5f:a4:f7:a9:a1:35:70:88:c0:f2:99:38:80:
f3:c6:e4:73:e5:60:a3:0b:5e:cf:d9:ef:6a:65:2c:33:41:97:
54:c0:82:1e:cc:01:b0:16:d3:41:c6:57:41:a1:f9:49:25:ea:
34:ad:cc:7d:f2:b4:cf:1d:f3:94:ce:76:27:e6:ca:67:25:ed:
20:7f:80:b9:2b:5a:83:cc:54:9a:14:82:7c:21:c0:32:98:b1:
04:29:45:69:46:a8:d7:5b:c9:d5:22:34:e1:71:e8:29:72:06:
1b:66:30:1e:37:0c:7f:97:f2:ed:77:35:e2:e8:3a:ee:82:de:
73:6c:41:77:2f:db:d6:53:8c:12:8f:8f:a3:4c:29:63:66:f8:
48:7b:5e:18:73:8b:40:ad:43:ef:54:ad:8e:3d:f9:54:32:53:
d4:ea:43:c8:94:1a:08:2f:92:88:7c:ca:f6:49:2d:fe:d0:e8:
79:60:b9:c8:45:a0:55:f8:a4:2b:f3:8e:7f:b5:8d:55:6d:f1:
3a:59:fd:99
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUNBVNb34Vbb3KiHpLVKTsxeqSWKUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJDQzRCMzgyOTVCQThCMjExQjU1QTUzREEwQUNCNzZE
QTYzNkU3MDAeFw0yNjAxMzEwODUzMzRaFw0yNzAxMzAwODU4MzRaMDMxMTAvBgNV
BAMTKDI4QjZGM0QyMTU1QTlDRUZEMjMwNUFCNDU0MzY2QTEzOUQwMDk3RkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTe6dGq5OmKS2dheAv1IbhDig4
7j+q+53C21RCFX4zbf6RXf3gGMdi4AVfe+Y2uG99qmCFpjp/MBCF6RcdLlHcVRWO
UIKeoKys5sZU3+QuZtv2V2VL60VHDtBpaG78eJUWdhRoc3QQrqRkbo5fXxwBUJc/
MiXFn9/jCrYoPDH1uDpcv38sMTPCRnPPOx4cx7prUJuOV/xn9iNWdYuNQFoU9dHX
4H1Cw22P1isTYkgedFE6jKlfhFHZs3njdjM/7M6F52ZZI7NEsQRs5+0zHWsyEg8X
6hbtxSlK3mALQz8aBNgz9sRH7Fbz/g0kyLg8WtvXKJJBvYH/g8z04dI9R++xAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUKLbz0hVanO/SMFq0VDZqE50Al/0wHwYDVR0j
BBgwFoAU8sxLOClbqLIRtVpT2grLdtpjbnAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
NDI5M2M2NC1lYTAwLTQxM2YtOTA5MC0yYjE5MGIxYTQ1YWYvMC9GMkNDNEIzODI5
NUJBOEIyMTFCNTVBNTNEQTBBQ0I3NkRBNjM2RTcwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjJDQzRCMzgyOTVCQThCMjExQjU1QTUzREEwQUNCNzZEQTYz
NkU3MC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y0MjkzYzY0LWVhMDAtNDEzZi05
MDkwLTJiMTkwYjFhNDVhZi8wLzMxMzAzMzJlMzEzNjM4MmUzNDM2MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzEzNDMyMzMzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6guMA0GCSqG
SIb3DQEBCwUAA4IBAQCovOKoGvfGv/nsR63Z/ZgBy1Ahhf89pZUWgmtEa7HR3TWE
lJ0SEYX32mnHNfvqNVo8xDDor+KP+TDtI1+k96mhNXCIwPKZOIDzxuRz5WCjC17P
2e9qZSwzQZdUwIIezAGwFtNBxldBoflJJeo0rcx98rTPHfOUznYn5spnJe0gf4C5
K1qDzFSaFIJ8IcAymLEEKUVpRqjXW8nVIjThcegpcgYbZjAeNwx/l/LtdzXi6Dru
gt5zbEF3L9vWU4wSj4+jTCljZvhIe14Yc4tArUPvVK2OPflUMlPU6kPIlBoIL5KI
fMr2SS3+0Oh5YLnIRaBV+KQr845/tY1VbfE6Wf2Z
-----END CERTIFICATE-----
Generated at Mon Feb 2 12:59:39 2026 by rpki-client