This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/3130332e3134382e34352e302f32342d3234203d3e20313339393832.roa
File: 3130332e3134382e34352e302f32342d3234203d3e20313339393832.roa (raw, json)
Hash identifier: NIprOafL/FkfE+7MXVPnJMsMOXtIi5Oz7VSZiSJ3HkA=
Subject key identifier: 21:8C:CA:65:E3:AD:A0:F2:4B:11:50:80:0C:A1:54:A0:9E:14:63:1B
Certificate issuer: /CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4
Certificate serial: 5E4C8B9FF9176762DD43795B43C23231FF647A6D
Authority key identifier: 36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/3130332e3134382e34352e302f32342d3234203d3e20313339393832.roa
Signing time: Fri 09 Jan 2026 16:00:01 +0000
ROA not before: Fri 09 Jan 2026 15:55:01 +0000
ROA not after: Fri 08 Jan 2027 16:00:01 +0000
asID: 139982
IP address blocks: 103.148.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl
rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 13:09:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:4c:8b:9f:f9:17:67:62:dd:43:79:5b:43:c2:32:31:ff:64:7a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4
Validity
Not Before: Jan 9 15:55:01 2026 GMT
Not After : Jan 8 16:00:01 2027 GMT
Subject: CN=218CCA65E3ADA0F24B1150800CA154A09E14631B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fb:37:68:96:45:8b:21:41:82:53:c9:af:14:
86:88:40:59:78:6a:0a:d2:ba:96:a1:f8:1b:d1:e5:
ec:61:4b:6f:70:d8:ef:b7:53:75:ba:53:bd:c0:98:
e0:5c:39:03:6e:c5:5c:0c:42:75:7c:17:49:1a:50:
32:ac:07:f6:b0:ec:2d:42:f7:13:91:9f:4c:3f:29:
cb:67:ac:03:1d:1e:2e:13:68:29:0a:dc:b8:63:68:
bb:b0:7b:46:f0:5a:a0:82:57:52:36:46:fb:fa:e4:
b1:c3:cf:d1:4d:64:61:00:f0:64:20:0b:c4:4f:7e:
dc:62:99:04:05:ae:9c:03:a3:8e:23:8c:34:9f:de:
3c:ce:b9:b9:d9:b9:93:f9:45:b1:5d:45:8c:9d:f3:
8d:a8:a5:9b:01:fb:b5:4d:28:1f:21:e9:35:c0:26:
ea:8e:d2:e9:81:85:13:a1:a2:78:f4:1f:11:30:e9:
4a:40:4e:ef:65:01:2b:76:79:26:3c:d1:32:64:2d:
1d:b6:b3:4e:e5:34:79:fd:95:3f:d5:ed:f5:cf:7e:
d8:a1:96:33:8d:13:ff:b5:8c:eb:f3:cb:cb:5b:a5:
6d:fd:b1:39:55:7d:19:f0:4b:1b:32:cb:c0:29:42:
c3:b8:17:23:c9:27:32:84:ea:fa:52:37:b0:7e:be:
5c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8C:CA:65:E3:AD:A0:F2:4B:11:50:80:0C:A1:54:A0:9E:14:63:1B
X509v3 Authority Key Identifier:
keyid:36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/3130332e3134382e34352e302f32342d3234203d3e20313339393832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.148.45.0/24
Signature Algorithm: sha256WithRSAEncryption
48:bd:06:ff:34:7a:65:8e:66:6f:aa:77:08:e8:1f:fc:6f:66:
24:52:f0:9c:7d:3c:5f:e7:cc:28:67:1b:2d:97:2f:49:03:21:
bc:69:37:ea:20:31:b2:92:e7:1c:a2:5e:47:83:e5:02:45:17:
19:5f:b0:da:26:a4:35:6e:1f:fd:72:95:d6:6e:e4:01:9e:94:
69:82:76:90:98:ed:3f:ea:2c:1f:2f:4f:40:8e:fc:c5:a5:5b:
dd:a2:c9:af:42:ba:a9:26:2b:7f:b9:4e:df:9d:4e:f0:e2:71:
6f:71:15:a2:5b:3a:c5:1f:c7:bd:3f:b4:de:ae:68:08:50:84:
0a:b2:ee:b3:2e:24:07:f3:51:ad:41:dd:d2:69:e1:08:60:64:
e6:2e:ae:3a:36:c8:5e:be:63:08:6e:e8:6a:36:02:81:e2:6a:
06:a4:c5:d2:7b:c0:10:5a:67:3d:ab:43:0d:be:13:ff:4e:a6:
dc:6d:c3:40:89:82:5f:00:a5:74:cc:18:a2:3c:8d:e5:0e:c1:
38:1b:f8:7c:31:38:46:f1:52:31:cd:74:b7:41:07:48:d7:00:
ee:e5:d4:d6:fe:ed:61:c9:2d:74:7f:1d:28:7d:65:95:6c:26:
4e:ea:6f:57:29:b1:0e:a9:19:06:36:93:02:13:86:66:59:b3:
57:0b:f9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:23:10 2026 by rpki-client