This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/3130332e3232392e31342e302f32332d3233203d3e20313530313936.roa
File: 3130332e3232392e31342e302f32332d3233203d3e20313530313936.roa (raw, json)
Hash identifier: urtgUYbcx2gytlBhM4p5dgZOXBrHzTqA0gycjFxEv78=
Subject key identifier: AF:F8:50:A4:40:90:E1:80:79:4E:DD:A1:1F:E2:43:9C:B9:15:2C:73
Certificate issuer: /CN=731DB67572B48A3A86F0475A0E21E1A27DFC6A8E
Certificate serial: 2BC5AD531E0B945693417497C7210803A5D3D12D
Authority key identifier: 73:1D:B6:75:72:B4:8A:3A:86:F0:47:5A:0E:21:E1:A2:7D:FC:6A:8E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/3130332e3232392e31342e302f32332d3233203d3e20313530313936.roa
Signing time: Fri 09 Jan 2026 09:02:33 +0000
ROA not before: Fri 09 Jan 2026 08:57:33 +0000
ROA not after: Fri 08 Jan 2027 09:02:33 +0000
asID: 150196
IP address blocks: 103.229.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl
rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:c5:ad:53:1e:0b:94:56:93:41:74:97:c7:21:08:03:a5:d3:d1:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731DB67572B48A3A86F0475A0E21E1A27DFC6A8E
Validity
Not Before: Jan 9 08:57:33 2026 GMT
Not After : Jan 8 09:02:33 2027 GMT
Subject: CN=AFF850A44090E180794EDDA11FE2439CB9152C73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:82:60:44:a7:cf:93:2e:69:e3:88:a5:26:b6:
88:80:83:a3:e3:57:43:22:2e:00:e2:6d:f7:52:5d:
7a:40:b9:38:32:59:89:f1:2e:13:12:c3:e5:6e:1a:
f5:e4:d6:9a:72:29:15:3b:ef:43:c3:26:0e:81:b4:
83:95:d8:68:43:bd:27:0f:32:23:26:57:c1:80:70:
95:18:1b:85:cc:d9:c1:fc:2f:f3:bf:49:89:d0:01:
51:12:91:43:cd:ec:53:52:49:6f:af:cd:ee:16:b0:
a8:41:fc:d6:b3:b9:75:0b:71:a5:91:8d:73:2f:6a:
92:6d:31:2f:30:c7:d1:d6:61:b1:4b:32:4f:22:19:
98:b6:e8:4e:9e:92:35:74:00:1b:45:7d:2a:38:89:
d5:51:17:07:a6:95:a7:de:be:83:a9:c0:ec:b4:ae:
d6:12:96:52:af:b0:29:0d:d6:18:fb:14:cb:47:3b:
73:f2:d4:b0:04:4e:18:cb:5e:7e:e8:3e:26:8b:ef:
2c:52:50:8f:b6:65:72:20:7e:c3:74:1c:43:77:22:
a0:05:e2:a7:54:89:2d:d2:7c:44:f7:22:df:16:fb:
9c:31:52:eb:4d:10:3d:47:51:aa:66:7b:5a:2a:e6:
34:03:9e:4d:97:29:a2:89:c9:04:d3:c2:cd:4f:62:
3a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F8:50:A4:40:90:E1:80:79:4E:DD:A1:1F:E2:43:9C:B9:15:2C:73
X509v3 Authority Key Identifier:
keyid:73:1D:B6:75:72:B4:8A:3A:86:F0:47:5A:0E:21:E1:A2:7D:FC:6A:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/3130332e3232392e31342e302f32332d3233203d3e20313530313936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.229.14.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:db:73:4c:e8:71:98:7e:91:92:4d:ef:53:04:8c:75:e4:4f:
67:c4:98:cd:29:19:87:79:ad:17:a3:7a:1b:cd:47:90:51:93:
31:aa:a9:97:3b:91:d2:3d:ef:a6:7a:9d:01:b4:49:2d:c4:2f:
13:2c:60:13:e2:14:26:2e:91:7f:f4:cf:6b:27:34:fa:74:f1:
fd:14:50:30:24:65:09:ed:15:f8:bb:1e:3f:d9:2f:a2:ac:5e:
2a:3b:55:e9:a7:46:1f:8e:b1:e6:7b:91:23:d2:f2:7d:0d:83:
8d:88:62:58:e5:01:81:ec:6f:cc:65:0d:9a:d9:c6:08:0e:ac:
ff:01:9a:0b:1c:45:cc:85:5b:bd:23:c3:a0:e1:53:f3:4c:bd:
db:70:ca:dc:26:7f:46:0a:d1:3c:bb:de:ba:45:5e:61:25:64:
0c:3c:e2:1c:76:85:da:a7:eb:5c:95:24:84:2b:e3:07:f1:c1:
f9:2b:2a:e6:1c:03:fe:55:a0:6d:2d:59:99:64:01:cb:11:d0:
84:5c:0a:8a:21:02:3a:a8:15:fa:87:af:51:09:b0:17:5d:da:
8c:f0:93:e2:ab:a1:7d:14:c9:76:f6:70:c7:bd:2d:fa:76:0d:
6b:d9:81:87:bf:37:30:38:b6:6b:a5:59:36:3e:c9:1a:5f:fb:
16:13:1a:8b
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUK8WtUx4LlFaTQXSXxyEIA6XT0S0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzMxREI2NzU3MkI0OEEzQTg2RjA0NzVBMEUyMUUxQTI3
REZDNkE4RTAeFw0yNjAxMDkwODU3MzNaFw0yNzAxMDgwOTAyMzNaMDMxMTAvBgNV
BAMTKEFGRjg1MEE0NDA5MEUxODA3OTRFRERBMTFGRTI0MzlDQjkxNTJDNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRgmBEp8+TLmnjiKUmtoiAg6Pj
V0MiLgDibfdSXXpAuTgyWYnxLhMSw+VuGvXk1ppyKRU770PDJg6BtIOV2GhDvScP
MiMmV8GAcJUYG4XM2cH8L/O/SYnQAVESkUPN7FNSSW+vze4WsKhB/NazuXULcaWR
jXMvapJtMS8wx9HWYbFLMk8iGZi26E6ekjV0ABtFfSo4idVRFwemlafevoOpwOy0
rtYSllKvsCkN1hj7FMtHO3Py1LAEThjLXn7oPiaL7yxSUI+2ZXIgfsN0HEN3IqAF
4qdUiS3SfET3It8W+5wxUutNED1HUapme1oq5jQDnk2XKaKJyQTTws1PYjovAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUr/hQpECQ4YB5Tt2hH+JDnLkVLHMwHwYDVR0j
BBgwFoAUcx22dXK0ijqG8EdaDiHhon38ao4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
Yjc1YmZkMC1hODZjLTRiZWItOWY5OS1hYWMzM2ZiNWU0OWYvMC83MzFEQjY3NTcy
QjQ4QTNBODZGMDQ3NUEwRTIxRTFBMjdERkM2QThFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzMxREI2NzU3MkI0OEEzQTg2RjA0NzVBMEUyMUUxQTI3REZD
NkE4RS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiNzViZmQwLWE4NmMtNGJlYi05
Zjk5LWFhYzMzZmI1ZTQ5Zi8wLzMxMzAzMzJlMzIzMjM5MmUzMTM0MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzEzNTMwMzEzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ+UOMA0GCSqG
SIb3DQEBCwUAA4IBAQCm23NM6HGYfpGSTe9TBIx15E9nxJjNKRmHea0Xo3obzUeQ
UZMxqqmXO5HSPe+mep0BtEktxC8TLGAT4hQmLpF/9M9rJzT6dPH9FFAwJGUJ7RX4
ux4/2S+irF4qO1Xpp0YfjrHme5Ej0vJ9DYONiGJY5QGB7G/MZQ2a2cYIDqz/AZoL
HEXMhVu9I8Og4VPzTL3bcMrcJn9GCtE8u966RV5hJWQMPOIcdoXap+tclSSEK+MH
8cH5KyrmHAP+VaBtLVmZZAHLEdCEXAqKIQI6qBX6h69RCbAXXdqM8JPiq6F9FMl2
9nDHvS36dg1r2YGHvzcwOLZrpVk2PskaX/sWExqL
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:14:50 2026 by rpki-client