This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/3130332e3139362e31352e302f32342d3234203d3e20313530393231.roa
File: 3130332e3139362e31352e302f32342d3234203d3e20313530393231.roa (raw, json)
Hash identifier: gtw/aKJ5GQlzn7U5EpxJJq4TSnweNLDzm5xumuJJptE=
Subject key identifier: A7:81:DE:73:97:06:C9:2E:81:4A:69:45:95:16:88:13:F2:3C:BA:50
Certificate issuer: /CN=134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85
Certificate serial: 3F226B1A3BA94ED0263A9C7DB21F3CFFD45200FB
Authority key identifier: 13:4F:AD:F5:0F:30:6A:61:C4:DB:EA:14:DB:F9:B8:AF:F4:6C:8A:85
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/3130332e3139362e31352e302f32342d3234203d3e20313530393231.roa
Signing time: Sat 03 Jan 2026 03:00:01 +0000
ROA not before: Sat 03 Jan 2026 02:55:01 +0000
ROA not after: Sat 02 Jan 2027 03:00:01 +0000
asID: 150921
IP address blocks: 103.196.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.crl
rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:22:6b:1a:3b:a9:4e:d0:26:3a:9c:7d:b2:1f:3c:ff:d4:52:00:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85
Validity
Not Before: Jan 3 02:55:01 2026 GMT
Not After : Jan 2 03:00:01 2027 GMT
Subject: CN=A781DE739706C92E814A694595168813F23CBA50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f6:67:d0:67:a6:62:d0:40:1b:e2:6f:00:e9:
4c:41:59:f1:24:90:cd:70:7e:ce:f8:d9:f4:bc:ec:
43:09:e7:a1:1a:00:5f:48:d4:67:2f:2d:9d:eb:8f:
29:fd:07:cc:6d:84:19:ac:de:37:4d:a6:1b:a7:f9:
52:cc:be:ee:8f:32:d8:2e:a2:ec:48:71:4a:8d:b3:
65:6b:1a:e7:08:00:3e:69:5f:b6:5c:23:c8:22:3c:
f8:dd:90:12:fe:b2:31:48:d5:2a:6b:c4:b1:e8:ba:
aa:6a:7e:c2:73:51:de:d7:e3:7a:29:33:0a:27:96:
13:85:68:f6:5f:77:85:ab:79:4d:9c:e5:3d:ed:30:
91:bf:fb:eb:8c:e0:00:e1:4d:fb:65:fb:c6:e4:0b:
f3:64:d3:cf:6d:cb:7d:f9:91:7e:6a:00:6b:9d:40:
e2:66:07:10:c6:c3:3c:8b:12:ca:5e:e9:03:52:19:
ae:70:93:1e:6d:c5:ed:b2:6f:5a:d7:0e:a2:67:9b:
bd:0f:14:53:5b:74:13:02:6a:cf:10:e8:69:ec:92:
63:68:c3:d3:a9:70:c6:1c:71:27:9a:9a:04:e4:5d:
f1:88:84:e5:82:2b:6a:29:b1:3a:90:5b:fe:87:db:
82:3c:f9:de:46:f3:cd:5e:7e:6a:b9:ef:f3:9d:45:
0d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:81:DE:73:97:06:C9:2E:81:4A:69:45:95:16:88:13:F2:3C:BA:50
X509v3 Authority Key Identifier:
keyid:13:4F:AD:F5:0F:30:6A:61:C4:DB:EA:14:DB:F9:B8:AF:F4:6C:8A:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/3130332e3139362e31352e302f32342d3234203d3e20313530393231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.196.15.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:84:a8:7d:1d:01:b7:82:6a:73:8a:d7:f7:70:3c:60:d6:e6:
8b:f8:7c:06:ab:7f:7a:2a:b6:44:89:a3:ea:56:40:60:d2:3f:
f6:1a:16:d4:3c:fe:b3:78:eb:15:93:f2:05:9a:83:d1:2a:e1:
ec:68:df:34:33:cf:24:91:3b:71:2c:aa:69:8b:c6:84:fb:2c:
ed:3b:29:fc:0a:0a:e1:69:b6:d6:ad:53:4d:02:bc:e1:a6:7f:
8d:c8:ed:42:bb:f7:1f:e1:de:4f:2e:e5:8e:46:7d:5e:49:3f:
10:39:e3:f6:e8:98:45:4e:02:3c:d9:a2:e6:95:37:15:a2:22:
77:92:5d:d8:1b:29:f4:c9:7c:dc:85:2a:07:1b:9d:64:92:7d:
c9:42:a0:e6:f1:a0:0e:bc:30:de:f7:f6:a0:3f:89:97:cd:f0:
e5:21:99:17:27:c0:12:72:99:b8:5f:37:58:7a:7f:36:54:5d:
39:07:53:f9:dc:b1:6e:f3:6a:a3:d6:b6:37:9c:e8:ff:c7:23:
ad:cd:63:ba:34:95:ba:7e:0a:2c:07:5a:f1:e6:3a:80:9a:a6:
b3:e1:1b:ec:0e:ac:0f:dd:65:09:ca:00:33:2a:9c:2b:50:cd:
17:f1:40:d8:a9:00:b0:5c:91:ab:e8:f6:6e:46:b4:d7:bf:34:
a4:2a:03:d8
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUPyJrGjupTtAmOpx9sh88/9RSAPswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTM0RkFERjUwRjMwNkE2MUM0REJFQTE0REJGOUI4QUZG
NDZDOEE4NTAeFw0yNjAxMDMwMjU1MDFaFw0yNzAxMDIwMzAwMDFaMDMxMTAvBgNV
BAMTKEE3ODFERTczOTcwNkM5MkU4MTRBNjk0NTk1MTY4ODEzRjIzQ0JBNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa9mfQZ6Zi0EAb4m8A6UxBWfEk
kM1wfs742fS87EMJ56EaAF9I1GcvLZ3rjyn9B8xthBms3jdNphun+VLMvu6PMtgu
ouxIcUqNs2VrGucIAD5pX7ZcI8giPPjdkBL+sjFI1SprxLHouqpqfsJzUd7X43op
MwonlhOFaPZfd4WreU2c5T3tMJG/++uM4ADhTftl+8bkC/Nk089ty335kX5qAGud
QOJmBxDGwzyLEspe6QNSGa5wkx5txe2yb1rXDqJnm70PFFNbdBMCas8Q6GnskmNo
w9OpcMYccSeamgTkXfGIhOWCK2opsTqQW/6H24I8+d5G881efmq57/OdRQ15AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUp4Hec5cGyS6BSmlFlRaIE/I8ulAwHwYDVR0j
BBgwFoAUE0+t9Q8wamHE2+oU2/m4r/RsioUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
OTAyMzRmZS1hNzE1LTQzZTUtOGFhNC1kOTc5Y2QzNTdkMzkvMC8xMzRGQURGNTBG
MzA2QTYxQzREQkVBMTREQkY5QjhBRkY0NkM4QTg1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTM0RkFERjUwRjMwNkE2MUM0REJFQTE0REJGOUI4QUZGNDZD
OEE4NS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U5MDIzNGZlLWE3MTUtNDNlNS04
YWE0LWQ5NzljZDM1N2QzOS8wLzMxMzAzMzJlMzEzOTM2MmUzMTM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzkzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ8QPMA0GCSqG
SIb3DQEBCwUAA4IBAQAdhKh9HQG3gmpzitf3cDxg1uaL+HwGq396KrZEiaPqVkBg
0j/2GhbUPP6zeOsVk/IFmoPRKuHsaN80M88kkTtxLKppi8aE+yztOyn8CgrhabbW
rVNNArzhpn+NyO1Cu/cf4d5PLuWORn1eST8QOeP26JhFTgI82aLmlTcVoiJ3kl3Y
Gyn0yXzchSoHG51kkn3JQqDm8aAOvDDe9/agP4mXzfDlIZkXJ8AScpm4XzdYen82
VF05B1P53LFu82qj1rY3nOj/xyOtzWO6NJW6fgosB1rx5jqAmqaz4RvsDqwP3WUJ
ygAzKpwrUM0X8UDYqQCwXJGr6PZuRrTXvzSkKgPY
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:04:21 2026 by rpki-client