This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/3130332e3139362e3135362e302f32342d3234203d3e20313530393531.roa
File: 3130332e3139362e3135362e302f32342d3234203d3e20313530393531.roa (raw, json)
Hash identifier: XWHKWl1bl7orQ2vAhEeH2m+P668uWWue/l7jGZqhA9o=
Subject key identifier: 46:4A:BF:75:CC:7B:2A:73:12:4D:19:CB:80:05:C5:38:6F:9F:A9:9B
Certificate issuer: /CN=708351A7D650085780AA7D6B77F317953F16F999
Certificate serial: 3299CDD0171963E5BEC43610243353A4C6BA29F4
Authority key identifier: 70:83:51:A7:D6:50:08:57:80:AA:7D:6B:77:F3:17:95:3F:16:F9:99
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/3130332e3139362e3135362e302f32342d3234203d3e20313530393531.roa
Signing time: Mon 22 Dec 2025 07:00:01 +0000
ROA not before: Mon 22 Dec 2025 06:55:01 +0000
ROA not after: Mon 21 Dec 2026 07:00:01 +0000
asID: 150951
IP address blocks: 103.196.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.crl
rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 20:38:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:99:cd:d0:17:19:63:e5:be:c4:36:10:24:33:53:a4:c6:ba:29:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708351A7D650085780AA7D6B77F317953F16F999
Validity
Not Before: Dec 22 06:55:01 2025 GMT
Not After : Dec 21 07:00:01 2026 GMT
Subject: CN=464ABF75CC7B2A73124D19CB8005C5386F9FA99B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:28:59:ae:2b:fb:81:c6:f5:bb:00:b6:8a:43:
4d:09:96:7c:c9:7b:e5:4e:70:18:b6:c9:f0:ac:7d:
bc:1e:fe:c1:c7:64:81:ef:fb:fb:e1:da:bb:b1:8a:
86:d6:35:0e:30:b0:c3:c4:f6:43:3e:a1:cf:ee:61:
83:a3:c5:ba:07:dc:62:2e:a5:9c:2e:98:c3:12:52:
48:33:cb:42:17:24:18:06:2e:4e:6f:32:41:0d:4a:
22:6b:60:6e:89:4a:5f:5f:ab:27:66:d3:25:5e:e8:
62:28:28:15:cb:22:2d:0a:bc:b6:b0:2d:be:53:cb:
c5:d4:35:16:03:bf:6d:10:1c:75:73:ae:bb:0a:f1:
79:23:f5:50:2a:d0:73:7e:25:f5:91:f3:26:30:74:
62:37:33:7c:38:e0:b2:09:e5:9c:58:9e:9e:a3:fd:
05:c1:8a:e8:f4:68:9c:b6:9e:c3:b2:10:d7:f0:55:
4a:2c:4b:87:e7:ed:3e:85:86:61:9c:cb:d4:ef:cf:
a9:42:96:9d:7c:d8:a2:ab:ed:91:e0:94:10:27:47:
c7:07:60:c9:5f:e4:23:5e:34:a8:8c:bf:40:95:f7:
1e:ef:1c:f1:17:d3:9e:b9:14:67:6e:00:3d:83:93:
dc:d2:06:c7:2f:67:16:cd:a8:d6:49:06:82:b0:9b:
ca:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4A:BF:75:CC:7B:2A:73:12:4D:19:CB:80:05:C5:38:6F:9F:A9:9B
X509v3 Authority Key Identifier:
keyid:70:83:51:A7:D6:50:08:57:80:AA:7D:6B:77:F3:17:95:3F:16:F9:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/3130332e3139362e3135362e302f32342d3234203d3e20313530393531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.196.156.0/24
Signature Algorithm: sha256WithRSAEncryption
86:56:12:c3:49:5d:30:d9:d9:82:8f:4a:13:45:56:0b:ae:4e:
2b:13:17:86:ad:d6:36:0e:c5:33:12:5e:82:51:54:36:b2:bc:
8a:cf:db:dd:f4:63:7e:07:eb:e1:6b:d0:b6:5c:21:de:a5:ff:
14:cb:ef:16:69:c1:7c:45:b7:c0:30:92:7f:57:00:2b:1b:3f:
9c:1c:bf:2c:b8:3d:bf:3d:34:eb:da:c3:94:3d:ce:ab:3b:e1:
b1:b6:94:ed:6a:0b:6b:97:b7:da:d7:46:2d:f7:e7:9b:d9:92:
72:d3:52:b8:bb:d3:57:7e:5a:50:59:dd:f4:fe:20:7d:08:f3:
de:12:20:0b:40:1b:ee:d3:8f:f3:88:bf:db:b6:74:78:c1:1f:
13:f7:97:07:f1:41:12:60:2b:41:d7:5c:f0:a0:d6:26:52:e4:
5d:97:20:41:fd:6b:1f:45:0a:cf:3b:43:e8:46:ae:ee:12:74:
a4:4a:e8:a1:2d:3c:78:17:95:62:26:97:6a:59:87:46:dd:81:
6f:f3:b5:35:40:5b:48:54:62:75:04:61:e2:1c:93:66:5b:21:
3b:f2:de:a1:17:e9:b0:a8:88:ee:78:9b:89:e3:64:5e:7f:5e:
bb:a4:ef:42:5c:b4:ef:16:a0:84:3c:2c:79:72:de:3c:3a:09:
bf:8a:83:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:19:33 2026 by rpki-client