This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/3130332e3134382e34342e302f32342d3234203d3e20313339393832.roa
File: 3130332e3134382e34342e302f32342d3234203d3e20313339393832.roa (raw, json)
Hash identifier: V9ZamZCw6D4mYhUfCXfPGFZw7f/kJlQ2HuBrz1q+Cyg=
Subject key identifier: E1:EB:98:73:91:0B:A4:AD:FE:5F:BE:EB:89:38:4B:30:4F:44:9D:C9
Certificate issuer: /CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4
Certificate serial: 7FC2D90198AC8B06751210D18AA1A9B9D8B9BC8D
Authority key identifier: 36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/3130332e3134382e34342e302f32342d3234203d3e20313339393832.roa
Signing time: Fri 09 Jan 2026 16:00:01 +0000
ROA not before: Fri 09 Jan 2026 15:55:01 +0000
ROA not after: Fri 08 Jan 2027 16:00:01 +0000
asID: 139982
IP address blocks: 103.148.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl
rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 13:09:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:c2:d9:01:98:ac:8b:06:75:12:10:d1:8a:a1:a9:b9:d8:b9:bc:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4
Validity
Not Before: Jan 9 15:55:01 2026 GMT
Not After : Jan 8 16:00:01 2027 GMT
Subject: CN=E1EB9873910BA4ADFE5FBEEB89384B304F449DC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:91:10:4d:3a:80:96:0e:28:cc:cc:0d:c2:49:
ee:c6:0b:73:6b:f6:8c:69:8e:07:d2:72:16:b8:d7:
cf:c5:2f:cb:b9:91:4a:36:61:85:2c:74:0c:af:b1:
99:9e:e1:81:e9:42:4d:6a:9d:83:34:00:cd:9e:81:
b4:8f:21:e7:8b:59:37:df:31:c5:f5:2f:6a:14:d8:
3f:b0:d8:fd:f0:af:ab:c8:de:01:b2:07:b8:57:90:
4f:f8:9b:8b:74:36:2b:aa:f2:2a:77:35:74:b3:03:
01:ef:05:a9:47:2a:10:d2:21:09:d5:f9:fe:d4:8e:
b7:5f:c0:18:04:7e:71:c3:84:62:5e:f8:61:a1:fd:
98:76:05:17:46:bc:9a:87:dd:11:1b:e6:29:dd:13:
a1:7d:d7:c7:61:6e:d8:0c:ff:67:3c:74:a0:bf:d7:
8e:54:83:ea:b6:67:19:b8:81:4e:d4:57:bf:ed:8e:
48:c2:57:9a:44:c4:92:82:d2:1c:81:50:1f:92:9a:
5b:9b:83:04:88:99:99:ba:92:01:9b:89:4a:a0:3e:
82:c0:b0:a6:82:f1:79:72:6f:3a:5b:e9:78:98:0c:
99:df:eb:52:c6:11:99:6d:d4:60:74:4b:0e:31:34:
9b:0f:f6:c7:9b:9f:a8:e8:6a:26:f1:a0:79:20:f6:
29:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:EB:98:73:91:0B:A4:AD:FE:5F:BE:EB:89:38:4B:30:4F:44:9D:C9
X509v3 Authority Key Identifier:
keyid:36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/3130332e3134382e34342e302f32342d3234203d3e20313339393832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.148.44.0/24
Signature Algorithm: sha256WithRSAEncryption
84:3c:b4:22:b5:67:4c:b7:c6:41:86:b7:f1:5a:ad:24:9b:eb:
3d:21:9d:35:47:02:55:8a:19:2c:89:d4:eb:bc:c2:77:6a:27:
c6:87:7c:1e:51:75:9d:44:2a:78:d2:0f:d4:b1:4c:b6:f6:3f:
ef:c7:9f:d8:94:09:ee:bc:7a:0c:bf:94:9e:f4:55:d0:73:1b:
55:a8:e9:73:d6:19:e5:93:a0:36:99:2b:a1:ac:28:fd:02:1b:
bb:04:93:bb:60:19:c9:a5:c0:a8:ca:23:0e:1e:d8:05:ed:b6:
e9:96:c9:9f:06:b9:11:10:17:47:f1:29:78:cc:fb:5d:63:85:
9f:71:da:91:b2:47:32:9a:9d:ed:bb:cf:64:e1:b5:30:5d:6a:
9c:af:a5:43:39:da:24:d0:38:24:f9:b5:9b:0c:8b:fd:94:33:
fe:2b:f8:8b:e9:b0:cc:ec:8e:db:7d:7e:3d:d5:55:e7:b5:89:
41:03:d4:c1:da:67:3b:5b:0a:d9:ba:57:4f:45:57:fd:5b:2d:
08:7c:45:bb:76:5a:8a:38:b1:c5:3f:8f:62:0f:2f:59:4e:b4:
1e:7a:fe:4e:12:a1:6f:4f:7b:ac:e0:35:65:cc:17:8d:14:39:
5e:af:df:7c:32:b5:04:06:3d:0e:c9:61:35:ce:f6:ee:cc:ab:
a9:87:c7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:23:10 2026 by rpki-client