This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/3130332e3138352e3139372e302f32342d3234203d3e20313333333535.roa
File: 3130332e3138352e3139372e302f32342d3234203d3e20313333333535.roa (raw, json)
Hash identifier: RTSCZBlu6Dp5iZ9tqUQjdWds0uYS19fumhuWQjrAUY0=
Subject key identifier: B7:95:6D:A3:E3:D2:3F:AB:F8:80:28:DD:8B:91:1E:00:C0:46:B4:1D
Certificate issuer: /CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7
Certificate serial: 3DD868CE150949798A50040B92ADBF659728FC9B
Authority key identifier: B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/3130332e3138352e3139372e302f32342d3234203d3e20313333333535.roa
Signing time: Mon 29 Dec 2025 11:00:02 +0000
ROA not before: Mon 29 Dec 2025 10:55:02 +0000
ROA not after: Mon 28 Dec 2026 11:00:02 +0000
asID: 133355
IP address blocks: 103.185.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl
rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:d8:68:ce:15:09:49:79:8a:50:04:0b:92:ad:bf:65:97:28:fc:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7
Validity
Not Before: Dec 29 10:55:02 2025 GMT
Not After : Dec 28 11:00:02 2026 GMT
Subject: CN=B7956DA3E3D23FABF88028DD8B911E00C046B41D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e9:34:02:ba:58:86:b6:de:9c:f8:22:3a:dd:
5d:4a:7e:f2:90:b8:ea:11:32:48:4f:bd:03:2d:96:
2f:12:f3:06:6b:c7:4b:07:d3:f4:a4:e1:73:6e:c8:
52:14:c5:bd:b9:a5:6c:e6:89:aa:dc:3f:0c:94:88:
df:4f:ce:89:62:60:10:f4:f0:7a:88:cf:3b:d3:11:
60:20:4a:07:3f:ed:29:e6:f5:50:e2:21:80:91:9e:
9d:84:2e:e9:c5:ba:91:c1:94:f6:88:17:a8:54:2b:
80:72:64:59:d5:cb:e0:64:92:a0:d9:7b:94:59:00:
13:53:dc:a4:2b:db:01:27:c2:cb:40:81:e4:8e:f5:
35:8c:a0:95:48:be:dd:a4:94:80:24:09:09:a8:0e:
eb:85:7e:47:55:46:c1:40:a4:20:1e:a7:c8:fe:d7:
bd:35:35:80:d6:3e:bb:cd:d0:2a:b7:34:cc:6a:70:
47:00:fa:f2:01:54:16:40:a2:15:39:1d:18:c1:30:
06:ef:77:2a:50:05:96:e6:43:4b:e0:39:88:d5:b5:
0d:72:26:7a:19:d0:42:60:f9:84:dc:0c:35:0d:59:
e7:4a:b9:53:3e:83:84:b1:e3:01:1e:2d:2c:53:09:
43:5c:2c:44:1c:f1:c5:d7:82:87:82:d0:1a:16:03:
cb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:95:6D:A3:E3:D2:3F:AB:F8:80:28:DD:8B:91:1E:00:C0:46:B4:1D
X509v3 Authority Key Identifier:
keyid:B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/3130332e3138352e3139372e302f32342d3234203d3e20313333333535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.185.197.0/24
Signature Algorithm: sha256WithRSAEncryption
53:5b:28:4d:f6:ae:40:c3:63:56:f2:a7:5e:7f:55:ea:fb:f3:
24:16:2a:33:1d:49:84:e1:f3:5b:42:98:d7:af:c9:d8:c7:8e:
ab:a1:d2:04:ba:e1:ae:aa:5a:6b:28:4e:bd:20:97:f3:e2:07:
3b:1a:b9:e3:dc:f1:ba:03:e3:83:5a:97:32:99:d1:09:5b:68:
59:8a:d3:ea:30:10:40:c9:a4:06:77:8f:80:5c:fe:5b:fd:ad:
74:4d:25:97:e3:ef:64:68:12:b4:c6:c4:4b:d6:eb:0e:e0:6e:
a3:a9:b3:58:c7:e7:45:9b:bb:f8:ef:dc:d6:c1:e7:d3:a1:04:
1f:09:20:b9:34:9b:b5:23:b6:83:68:c8:b5:59:7a:06:06:15:
e6:e3:f5:27:e8:ae:09:12:b5:03:f1:5b:bb:31:ce:97:4c:8c:
19:d3:a9:aa:2b:f1:e8:51:6f:dd:28:d8:16:fd:43:79:93:fb:
3b:90:0f:d5:21:a6:e0:a7:5b:45:c0:d9:4a:d9:f0:b5:de:9d:
7b:71:a9:1b:92:b3:d1:93:1a:63:df:e7:b1:b0:85:12:10:d1:
a3:73:3d:7f:cb:f9:3a:a0:a1:62:2e:01:ef:ad:3e:01:04:fc:
f2:ed:a7:e4:fe:7b:9e:89:95:bf:d9:6c:71:ce:90:e6:46:b5:
83:a0:5e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:58:44 2026 by rpki-client