This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e31362e3133392e302f32342d3234203d3e20313430333839.roa
File: 3130332e31362e3133392e302f32342d3234203d3e20313430333839.roa (raw, json)
Hash identifier: BXn8trO0P5e/1ZUlXQePX/B600/BNafep7EhXvrxe5I=
Subject key identifier: F5:ED:97:97:FC:A1:31:B9:FA:E5:FD:51:B4:97:51:6E:E0:12:AA:A0
Certificate issuer: /CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
Certificate serial: 29B9E3718DA0741C6F2773D82BBB141CA31F18D8
Authority key identifier: 01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e31362e3133392e302f32342d3234203d3e20313430333839.roa
Signing time: Thu 01 Jan 2026 05:02:46 +0000
ROA not before: Thu 01 Jan 2026 04:57:46 +0000
ROA not after: Thu 31 Dec 2026 05:02:46 +0000
asID: 140389
IP address blocks: 103.16.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl
rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 18:20:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:b9:e3:71:8d:a0:74:1c:6f:27:73:d8:2b:bb:14:1c:a3:1f:18:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
Validity
Not Before: Jan 1 04:57:46 2026 GMT
Not After : Dec 31 05:02:46 2026 GMT
Subject: CN=F5ED9797FCA131B9FAE5FD51B497516EE012AAA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3e:1e:f4:bd:25:af:66:04:62:e6:4b:87:56:
49:39:bc:4a:96:84:2c:7e:c3:b6:6e:26:a3:c1:ab:
d0:c5:18:60:c8:5b:2b:e4:72:69:3e:ae:19:fe:5a:
83:4a:fa:e3:f5:28:02:a6:0a:d2:99:12:22:03:15:
08:b7:22:2a:ba:83:a3:91:63:a2:05:88:93:c0:f9:
cc:3f:b8:04:61:63:8f:74:bc:55:bb:93:45:db:cd:
1d:49:d3:b4:c5:c3:f2:88:ea:27:fd:e9:aa:be:62:
b8:d1:5f:fa:ad:00:f9:61:33:58:ad:70:c2:ed:29:
7a:89:bd:cd:57:97:87:1d:40:a0:b6:92:d5:bb:a2:
15:d9:0d:b0:1f:5b:e3:b2:97:54:0b:1f:61:9f:a8:
8f:dd:c4:b1:2f:b6:9d:65:db:43:5f:34:27:82:44:
c1:0b:94:1b:5e:a3:89:ed:34:74:f8:25:30:73:38:
b4:81:20:bb:35:fd:b8:7c:c1:b4:d1:81:01:85:c4:
17:f5:04:3f:83:3f:21:cb:79:8b:07:09:2c:e0:ba:
5b:00:22:a8:8a:4c:a9:f9:06:25:5b:c2:d8:db:51:
ec:b9:87:d6:93:81:88:81:f7:24:07:f6:e8:e2:57:
4b:f6:37:df:94:92:b4:e8:d9:6d:64:4b:05:6b:c2:
c2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:ED:97:97:FC:A1:31:B9:FA:E5:FD:51:B4:97:51:6E:E0:12:AA:A0
X509v3 Authority Key Identifier:
keyid:01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e31362e3133392e302f32342d3234203d3e20313430333839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.16.139.0/24
Signature Algorithm: sha256WithRSAEncryption
41:f0:84:b9:4d:07:25:92:c0:4b:7d:4f:80:de:dc:15:1f:12:
ab:6b:61:e2:e9:55:1f:2d:f5:c5:58:94:b6:8a:ae:be:fe:83:
14:08:d8:25:84:ef:86:00:4b:50:86:62:04:66:8d:c3:63:a4:
3e:23:4b:90:c8:0f:ad:c4:0b:63:54:c9:1d:05:33:58:9d:82:
03:2b:af:5e:9f:ec:86:ee:cf:89:01:a1:7d:dc:fc:92:ac:dd:
a7:d8:ba:27:36:88:10:1a:13:52:f7:c6:af:f4:cf:e6:c2:d6:
5e:e5:b4:1e:3f:ab:21:f5:16:ef:8c:76:a8:9c:03:cf:1a:0a:
4d:4e:5d:b7:01:5d:f5:f3:46:c2:6f:ab:1f:9f:e9:95:8e:27:
db:1c:c5:f9:76:22:a3:49:71:00:17:d5:c8:e8:b2:03:0c:c8:
f0:33:af:70:06:c5:9c:fc:b0:ce:b5:2d:a6:80:19:a1:73:32:
4e:93:a5:43:65:55:91:d5:31:c5:ea:0e:9d:cf:e9:ba:71:17:
b5:41:a5:dd:fd:22:1e:17:5a:87:a8:25:51:cd:b9:93:c4:98:
69:9a:da:54:26:51:3f:9a:61:37:5f:14:ac:86:07:45:1a:0b:
41:dd:43:87:2e:c3:b3:a3:57:e0:24:6f:1a:74:0f:28:f2:cc:
32:59:f9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:41:19 2026 by rpki-client