This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/3130332e3230392e3133312e302f32342d3234203d3e20313333333535.roa
File: 3130332e3230392e3133312e302f32342d3234203d3e20313333333535.roa (raw, json)
Hash identifier: FYuBNptiifXDdz3r8ww5+PIUEMM0vizifHMr9sxc+Mk=
Subject key identifier: C2:F0:74:39:C0:F2:19:E1:E0:5C:7B:65:7F:59:7F:F1:05:1C:3F:EA
Certificate issuer: /CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7
Certificate serial: 56F6833AA9588871C2E62F81E35EB29EE19AB210
Authority key identifier: B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/3130332e3230392e3133312e302f32342d3234203d3e20313333333535.roa
Signing time: Mon 29 Dec 2025 11:00:01 +0000
ROA not before: Mon 29 Dec 2025 10:55:01 +0000
ROA not after: Mon 28 Dec 2026 11:00:01 +0000
asID: 133355
IP address blocks: 103.209.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl
rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:f6:83:3a:a9:58:88:71:c2:e6:2f:81:e3:5e:b2:9e:e1:9a:b2:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7
Validity
Not Before: Dec 29 10:55:01 2025 GMT
Not After : Dec 28 11:00:01 2026 GMT
Subject: CN=C2F07439C0F219E1E05C7B657F597FF1051C3FEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bc:30:53:b6:39:0e:69:97:43:8e:3e:51:75:
8c:08:c7:27:f3:4f:bf:e6:8e:f8:81:49:3c:b0:1f:
52:39:19:66:70:97:70:28:cf:d3:6d:01:d2:44:e2:
67:ff:df:81:6a:9d:b5:29:1b:8c:2b:3c:3e:c8:85:
1c:db:af:4c:90:c7:10:e3:2a:0c:ff:6c:a8:3a:c2:
97:12:4f:99:9d:fc:fc:dd:8a:0e:0f:00:7b:cb:2c:
f9:b9:95:a3:fa:38:e3:76:34:76:1f:26:af:83:55:
da:2e:e7:6d:f8:91:be:e0:e9:d5:a7:a2:aa:74:00:
3a:2a:fe:cb:b8:4b:81:7e:59:18:22:aa:9b:10:8a:
c2:5d:ff:db:87:19:a8:6a:14:48:3e:02:ab:4d:b3:
43:a8:3f:bd:0f:c4:b1:c4:47:64:7e:a4:d4:94:a8:
96:aa:c8:d0:78:14:34:c5:4c:18:85:2f:83:04:72:
ad:dd:a6:15:77:75:b7:02:58:0a:3e:4b:dc:22:5d:
0e:ae:91:3d:18:a0:46:0a:80:39:3c:4f:9c:c7:36:
e1:3b:e9:4e:18:84:09:46:3b:5f:e6:5d:5b:3e:0f:
1f:04:d9:a2:f7:b1:a6:f1:f2:72:f4:93:22:aa:63:
9d:9a:18:4f:bf:5a:08:c1:46:bb:d0:74:81:c4:8a:
45:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F0:74:39:C0:F2:19:E1:E0:5C:7B:65:7F:59:7F:F1:05:1C:3F:EA
X509v3 Authority Key Identifier:
keyid:B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/3130332e3230392e3133312e302f32342d3234203d3e20313333333535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.209.131.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:7f:73:46:d4:51:6a:2d:3d:13:f5:d1:2e:67:f4:ed:51:71:
17:59:d6:7f:13:59:70:d7:05:23:57:ce:76:19:67:79:0a:ad:
58:3e:12:38:b5:e9:d1:ab:19:58:ea:d2:74:e8:23:eb:a2:69:
d2:c6:c0:25:43:8d:10:c8:be:4e:71:c6:f7:a3:6d:ed:78:74:
6d:cb:5e:86:70:b1:72:0a:51:e7:3f:0b:68:74:85:a5:0f:f1:
e2:44:c2:01:38:8c:67:f9:54:68:d8:99:10:84:75:e8:06:26:
ca:82:ee:88:4b:3c:bf:2a:81:6a:d8:26:94:62:ea:a7:a9:1f:
1c:6c:06:57:13:f8:72:1f:8c:51:17:6b:b1:30:a8:2b:55:0d:
c7:8b:d4:e9:a5:81:1e:48:b7:5b:16:a7:cc:41:f1:ad:d1:fa:
8c:c1:c5:35:30:bc:ef:ca:97:9c:3d:dd:0f:b4:2a:2a:ac:92:
27:51:f6:0a:a6:d6:26:0e:6f:b5:41:5a:58:68:7f:c2:c3:fb:
27:2c:24:4f:29:b2:a6:8f:81:13:a5:53:af:93:0c:9d:58:5e:
10:23:69:08:3d:bd:f4:7b:f9:f7:76:d0:9f:4d:6c:dc:64:73:
bb:9d:eb:f8:f4:4f:fa:7f:a9:fc:a1:f0:b1:0f:49:bf:96:87:
ce:9c:cd:2b
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUVvaDOqlYiHHC5i+B416ynuGashAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYwQUYz
QTgxRkZGNzAeFw0yNTEyMjkxMDU1MDFaFw0yNjEyMjgxMTAwMDFaMDMxMTAvBgNV
BAMTKEMyRjA3NDM5QzBGMjE5RTFFMDVDN0I2NTdGNTk3RkYxMDUxQzNGRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCovDBTtjkOaZdDjj5RdYwIxyfz
T7/mjviBSTywH1I5GWZwl3Aoz9NtAdJE4mf/34FqnbUpG4wrPD7IhRzbr0yQxxDj
Kgz/bKg6wpcST5md/Pzdig4PAHvLLPm5laP6OON2NHYfJq+DVdou5234kb7g6dWn
oqp0ADoq/su4S4F+WRgiqpsQisJd/9uHGahqFEg+AqtNs0OoP70PxLHER2R+pNSU
qJaqyNB4FDTFTBiFL4MEcq3dphV3dbcCWAo+S9wiXQ6ukT0YoEYKgDk8T5zHNuE7
6U4YhAlGO1/mXVs+Dx8E2aL3sabx8nL0kyKqY52aGE+/WgjBRrvQdIHEikWlAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUwvB0OcDyGeHgXHtlf1l/8QUcP+owHwYDVR0j
BBgwFoAUub62DNYiTUHzM6B+GCDwrzqB//cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
MWY4N2Y1YS1mNmY5LTQ2OGQtODk1ZS0zMTQ0ODdmNWUyNWUvMC9COUJFQjYwQ0Q2
MjI0RDQxRjMzM0EwN0UxODIwRjBBRjNBODFGRkY3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYwQUYzQTgx
RkZGNy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IxZjg3ZjVhLWY2ZjktNDY4ZC04
OTVlLTMxNDQ4N2Y1ZTI1ZS8wLzMxMzAzMzJlMzIzMDM5MmUzMTMzMzEyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzMzMzM1MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn0YMwDQYJ
KoZIhvcNAQELBQADggEBAJx/c0bUUWotPRP10S5n9O1RcRdZ1n8TWXDXBSNXznYZ
Z3kKrVg+Eji16dGrGVjq0nToI+uiadLGwCVDjRDIvk5xxvejbe14dG3LXoZwsXIK
Uec/C2h0haUP8eJEwgE4jGf5VGjYmRCEdegGJsqC7ohLPL8qgWrYJpRi6qepHxxs
BlcT+HIfjFEXa7EwqCtVDceL1OmlgR5It1sWp8xB8a3R+ozBxTUwvO/Kl5w93Q+0
KiqskidR9gqm1iYOb7VBWlhof8LD+ycsJE8psqaPgROlU6+TDJ1YXhAjaQg9vfR7
+fd20J9NbNxkc7ud6/j0T/p/qfyh8LEPSb+Wh86czSs=
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:57:31 2026 by rpki-client