This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/3130332e32322e3230342e302f32322d3234203d3e20313334363430.roa
File: 3130332e32322e3230342e302f32322d3234203d3e20313334363430.roa (raw, json)
Hash identifier: koH5q5oLKcLR5X6MYFdU+MrvD6zwh8v3JGfpyVLK7F8=
Subject key identifier: EE:F2:63:00:0F:09:65:6A:B4:C3:30:25:4A:79:58:6D:F6:1D:63:BA
Certificate issuer: /CN=A075EFE65C596438427C6A22E60EB0A01ADEDA8A
Certificate serial: 2949E925ED9C54DF00F60A7DC2130FA43E1DC5C1
Authority key identifier: A0:75:EF:E6:5C:59:64:38:42:7C:6A:22:E6:0E:B0:A0:1A:DE:DA:8A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/3130332e32322e3230342e302f32322d3234203d3e20313334363430.roa
Signing time: Wed 14 Jan 2026 11:00:01 +0000
ROA not before: Wed 14 Jan 2026 10:55:01 +0000
ROA not after: Wed 13 Jan 2027 11:00:01 +0000
asID: 134640
IP address blocks: 103.22.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.crl
rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:49:e9:25:ed:9c:54:df:00:f6:0a:7d:c2:13:0f:a4:3e:1d:c5:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A075EFE65C596438427C6A22E60EB0A01ADEDA8A
Validity
Not Before: Jan 14 10:55:01 2026 GMT
Not After : Jan 13 11:00:01 2027 GMT
Subject: CN=EEF263000F09656AB4C330254A79586DF61D63BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:b6:46:db:96:b8:5b:10:f6:c7:09:8b:ef:2e:
08:f1:90:35:46:af:24:f0:ce:92:62:39:d4:91:77:
f2:a9:58:b6:82:12:a3:52:fc:33:32:94:3a:a6:4a:
6f:bb:69:f2:79:0b:74:ba:b8:eb:fa:f8:d2:78:89:
bf:51:1e:6f:e4:25:5e:71:33:0b:b3:d6:e6:a2:01:
d2:64:32:69:6c:7f:38:98:f6:34:dc:82:a6:ac:53:
c9:b8:88:9c:23:eb:6d:39:f3:0a:6b:97:65:79:76:
3a:b4:93:10:57:ef:25:93:e6:e5:24:c4:88:60:d7:
f5:8b:28:28:01:d9:9b:cb:6a:67:9a:2b:49:cb:f8:
8f:f5:00:55:6e:68:4b:68:c5:09:14:ce:da:46:08:
cf:26:54:54:ad:48:2e:80:51:84:a9:cb:3c:5d:10:
8d:38:2f:df:b9:16:20:b9:b6:02:ae:f1:f8:e4:c7:
3c:75:e3:21:24:21:62:8d:df:1d:e3:b4:03:1b:5c:
a3:7b:e5:53:82:a2:6d:47:14:85:34:84:0e:a4:e4:
7a:86:80:6b:e0:0f:e7:79:3c:61:cf:34:96:75:e3:
ca:e9:84:25:7f:86:14:7e:0a:aa:db:f2:da:28:b6:
67:d1:6e:06:8d:5c:db:6c:6b:55:a9:46:13:38:b4:
fd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F2:63:00:0F:09:65:6A:B4:C3:30:25:4A:79:58:6D:F6:1D:63:BA
X509v3 Authority Key Identifier:
keyid:A0:75:EF:E6:5C:59:64:38:42:7C:6A:22:E6:0E:B0:A0:1A:DE:DA:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/3130332e32322e3230342e302f32322d3234203d3e20313334363430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.22.204.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:c3:fc:d5:cd:63:c5:8f:56:9e:4e:c7:d7:e2:63:02:85:7e:
aa:32:01:28:c2:db:98:70:51:d1:8c:74:c0:fb:f0:c7:cb:da:
a4:64:5b:5c:3b:94:91:7e:3f:ba:a7:f6:c3:97:df:ee:33:4e:
be:b5:86:62:bd:4e:45:f6:ab:cc:cd:32:d3:9d:14:66:8c:7d:
6e:68:05:f5:0e:6e:9b:50:ec:5d:af:af:cc:6c:dc:7a:d4:4d:
68:e6:eb:8b:d6:a0:0d:89:01:e8:e5:5e:38:fc:63:42:a2:0e:
59:31:86:c8:7f:39:5b:83:a3:cc:39:99:4f:56:ff:7f:23:67:
05:4d:37:be:e3:34:1a:52:69:7f:36:e0:1f:54:58:5e:62:a4:
26:6a:7c:38:98:48:b4:0e:28:55:d1:1a:aa:9e:10:03:47:fb:
f0:66:2d:da:70:9c:c9:59:54:2b:c2:63:6c:1b:05:a4:05:08:
6b:45:2d:f0:95:ad:9f:66:e0:e0:cf:e9:aa:8e:7c:bc:9c:86:
70:be:9b:e9:06:d7:36:d5:8f:3f:05:da:dd:61:ef:20:3f:c4:
37:64:9d:d4:1a:91:71:5a:86:bc:c7:fc:c2:e5:d2:97:f1:1b:
5e:49:1d:99:b7:48:15:62:60:44:00:e9:7b:5a:de:a1:85:ce:
02:91:ac:c0
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUKUnpJe2cVN8A9gp9whMPpD4dxcEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA3NUVGRTY1QzU5NjQzODQyN0M2QTIyRTYwRUIwQTAx
QURFREE4QTAeFw0yNjAxMTQxMDU1MDFaFw0yNzAxMTMxMTAwMDFaMDMxMTAvBgNV
BAMTKEVFRjI2MzAwMEYwOTY1NkFCNEMzMzAyNTRBNzk1ODZERjYxRDYzQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3tkbblrhbEPbHCYvvLgjxkDVG
ryTwzpJiOdSRd/KpWLaCEqNS/DMylDqmSm+7afJ5C3S6uOv6+NJ4ib9RHm/kJV5x
Mwuz1uaiAdJkMmlsfziY9jTcgqasU8m4iJwj62058wprl2V5djq0kxBX7yWT5uUk
xIhg1/WLKCgB2ZvLameaK0nL+I/1AFVuaEtoxQkUztpGCM8mVFStSC6AUYSpyzxd
EI04L9+5FiC5tgKu8fjkxzx14yEkIWKN3x3jtAMbXKN75VOCom1HFIU0hA6k5HqG
gGvgD+d5PGHPNJZ148rphCV/hhR+Cqrb8tootmfRbgaNXNtsa1WpRhM4tP2bAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU7vJjAA8JZWq0wzAlSnlYbfYdY7owHwYDVR0j
BBgwFoAUoHXv5lxZZDhCfGoi5g6woBre2oowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
MDRkMDM5Ny1mZmEwLTQ5MDMtODA1Zi0wODQ1MjdiYzQzMGMvMC9BMDc1RUZFNjVD
NTk2NDM4NDI3QzZBMjJFNjBFQjBBMDFBREVEQThBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTA3NUVGRTY1QzU5NjQzODQyN0M2QTIyRTYwRUIwQTAxQURF
REE4QS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkwNGQwMzk3LWZmYTAtNDkwMy04
MDVmLTA4NDUyN2JjNDMwYy8wLzMxMzAzMzJlMzIzMjJlMzIzMDM0MmUzMDJmMzIz
MjJkMzIzNDIwM2QzZTIwMzEzMzM0MzYzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZxbMMA0GCSqG
SIb3DQEBCwUAA4IBAQA8w/zVzWPFj1aeTsfX4mMChX6qMgEowtuYcFHRjHTA+/DH
y9qkZFtcO5SRfj+6p/bDl9/uM06+tYZivU5F9qvMzTLTnRRmjH1uaAX1Dm6bUOxd
r6/MbNx61E1o5uuL1qANiQHo5V44/GNCog5ZMYbIfzlbg6PMOZlPVv9/I2cFTTe+
4zQaUml/NuAfVFheYqQmanw4mEi0DihV0RqqnhADR/vwZi3acJzJWVQrwmNsGwWk
BQhrRS3wla2fZuDgz+mqjny8nIZwvpvpBtc21Y8/BdrdYe8gP8Q3ZJ3UGpFxWoa8
x/zC5dKX8RteSR2Zt0gVYmBEAOl7Wt6hhc4CkazA
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:23:16 2026 by rpki-client