This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/3130332e32332e39382e302f32342d3234203d3e20313530323435.roa
File: 3130332e32332e39382e302f32342d3234203d3e20313530323435.roa (raw, json)
Hash identifier: qlt9XTkJ4F0GfOW5becHUk3LV0da9rpuvfoDawVXZZE=
Subject key identifier: 46:92:45:87:78:81:22:0D:D1:37:14:49:A2:44:44:92:2B:40:25:D6
Certificate issuer: /CN=B2B2F42BF1978AD094186480A7DA0086FD7C2919
Certificate serial: 13B22D97775CDEBB6F09BCD85C45F1B438DB4F82
Authority key identifier: B2:B2:F4:2B:F1:97:8A:D0:94:18:64:80:A7:DA:00:86:FD:7C:29:19
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/3130332e32332e39382e302f32342d3234203d3e20313530323435.roa
Signing time: Sat 17 Jan 2026 07:00:01 +0000
ROA not before: Sat 17 Jan 2026 06:55:01 +0000
ROA not after: Sat 16 Jan 2027 07:00:01 +0000
asID: 150245
IP address blocks: 103.23.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.crl
rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:b2:2d:97:77:5c:de:bb:6f:09:bc:d8:5c:45:f1:b4:38:db:4f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2B2F42BF1978AD094186480A7DA0086FD7C2919
Validity
Not Before: Jan 17 06:55:01 2026 GMT
Not After : Jan 16 07:00:01 2027 GMT
Subject: CN=469245877881220DD1371449A24444922B4025D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:35:b0:3d:a0:f7:de:e7:54:03:62:43:e2:84:
df:44:f2:df:96:c8:2d:96:c2:3e:08:40:8d:f8:61:
45:c9:57:72:07:46:66:53:ff:09:a8:81:22:34:ab:
44:46:ea:bb:a8:8c:bb:0b:94:6a:45:19:21:01:69:
63:53:b7:ef:0c:53:1e:f9:a4:aa:c0:79:24:c0:2f:
34:83:5e:71:48:9a:39:17:eb:ca:06:c4:e3:f9:08:
75:59:ea:40:6c:24:f4:08:81:fc:58:74:fd:99:34:
7a:77:88:50:b5:1c:6d:80:bb:d2:6b:d1:79:53:9e:
dc:4c:50:cb:2b:dd:6d:d5:2a:35:80:11:91:45:97:
73:0a:ed:58:74:47:b3:5f:82:e1:b2:c9:82:e9:d9:
b9:02:dd:60:a6:b4:14:22:ed:b8:fe:07:47:9f:5f:
e5:db:77:db:8b:62:6d:0c:24:72:24:35:ec:5a:4f:
b1:b9:b8:3c:da:e7:c7:5f:6a:6d:68:32:a8:72:07:
a7:d2:48:70:d0:f7:42:93:7a:f1:7d:69:25:0a:e6:
b3:7d:28:ef:82:99:f9:4a:37:b1:cb:5b:01:0b:c5:
46:46:fb:e9:21:58:11:79:7f:90:99:15:3b:4c:99:
ac:3f:34:6e:48:33:a1:73:23:1a:7d:71:1e:ab:db:
d9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:92:45:87:78:81:22:0D:D1:37:14:49:A2:44:44:92:2B:40:25:D6
X509v3 Authority Key Identifier:
keyid:B2:B2:F4:2B:F1:97:8A:D0:94:18:64:80:A7:DA:00:86:FD:7C:29:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/3130332e32332e39382e302f32342d3234203d3e20313530323435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.23.98.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:08:f9:ea:68:84:d0:fa:38:a1:28:a1:e6:15:c6:ca:9d:d4:
36:2b:7a:d5:a9:6f:65:44:f4:25:97:bc:14:73:0c:75:3e:3d:
09:87:c8:cc:5f:df:da:d2:99:05:d7:6d:63:a4:3f:11:fa:50:
b8:15:f3:61:90:96:71:96:ef:b4:91:2c:bf:c2:2a:dd:ce:94:
43:a1:45:6c:77:5b:c5:75:ac:81:e6:1d:36:96:9b:79:60:c2:
76:ce:c3:d7:0e:85:23:c3:6b:4f:98:78:63:ae:ff:8a:9d:75:
8c:c3:29:7d:2e:88:fd:a2:bc:21:7c:7d:ab:6d:bc:ac:ec:a1:
aa:65:c4:19:59:5f:4a:97:6c:ec:aa:b4:1f:03:63:a3:9b:94:
1f:51:1f:b8:0e:2c:69:0d:cb:67:46:45:58:a1:30:44:2a:22:
1d:66:1d:09:f6:36:7e:31:70:07:57:a4:36:bb:41:58:22:05:
80:2b:08:4e:57:72:25:0e:5b:05:be:7b:75:8c:4d:42:30:35:
55:47:0a:21:3b:ed:03:de:2f:6a:92:5b:75:66:25:de:a6:8d:
5b:c1:52:96:fa:bf:0d:ec:0c:0b:61:80:f3:9a:5b:d1:a2:82:
8c:c1:bf:62:73:78:35:29:b4:47:9c:03:f4:01:8e:04:62:45:
ba:5b:5c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:38:19 2026 by rpki-client