This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/3130332e3136362e32362e302f32332d3233203d3e20313431393334.roa
File: 3130332e3136362e32362e302f32332d3233203d3e20313431393334.roa (raw, json)
Hash identifier: qsNJTbCdEl5g+CtS1gIL++26d6eTd1asuHFx0fLTFCk=
Subject key identifier: F5:DC:DB:17:FE:C9:19:E3:7C:3E:F4:A7:A5:D7:E1:4C:60:FF:6C:77
Certificate issuer: /CN=00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD
Certificate serial: 2CA670D0C749CA4E6B23AEEE1DBF4E1C60E990AE
Authority key identifier: 00:F9:E3:D4:39:56:F7:75:3B:34:BD:1A:48:76:FF:9F:8D:1B:BF:BD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/3130332e3136362e32362e302f32332d3233203d3e20313431393334.roa
Signing time: Tue 23 Dec 2025 15:39:57 +0000
ROA not before: Tue 23 Dec 2025 15:34:57 +0000
ROA not after: Tue 22 Dec 2026 15:39:57 +0000
asID: 141934
IP address blocks: 103.166.26.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.crl
rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 21:43:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:a6:70:d0:c7:49:ca:4e:6b:23:ae:ee:1d:bf:4e:1c:60:e9:90:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD
Validity
Not Before: Dec 23 15:34:57 2025 GMT
Not After : Dec 22 15:39:57 2026 GMT
Subject: CN=F5DCDB17FEC919E37C3EF4A7A5D7E14C60FF6C77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:53:4f:6a:f4:4d:bd:eb:92:96:47:68:54:ad:
d8:02:18:76:3e:df:01:2b:cc:56:6c:49:ea:69:cc:
b1:b1:c2:73:65:8a:83:d9:38:76:c7:52:39:80:0d:
5f:62:08:bd:89:bd:b8:9e:17:23:30:d7:b0:2c:b3:
d4:64:1c:69:83:2b:4f:64:69:a7:e8:6a:87:83:7d:
38:58:2a:4f:a7:b9:92:e8:6d:09:cf:9f:a3:97:6f:
39:a9:18:cb:96:2e:68:a8:57:ed:ac:d7:3a:e2:6c:
fc:4e:a1:39:80:0a:fc:6b:e5:50:50:81:12:47:1d:
3a:6c:ea:56:c9:ba:10:0c:c3:86:76:b2:0a:fd:39:
13:ed:ee:84:4d:32:92:38:0d:a3:d4:f7:62:c3:f3:
0c:7c:5c:03:20:93:1b:d2:aa:f7:28:9f:82:94:2f:
b6:98:d7:fa:4e:46:75:69:8b:aa:42:16:c2:f7:6f:
dd:a7:ce:27:66:51:45:c7:32:b5:38:5d:e9:f9:41:
7e:0e:ad:03:6f:93:fc:1f:e7:b3:e1:33:21:c6:38:
a8:b7:ad:5e:46:b2:9a:5c:7e:6c:82:70:80:97:4a:
23:7a:48:4b:33:af:d9:bc:28:2b:bb:1c:4f:58:de:
2a:45:7f:10:5a:5a:d7:ac:4b:5e:f8:18:0b:f3:aa:
01:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DC:DB:17:FE:C9:19:E3:7C:3E:F4:A7:A5:D7:E1:4C:60:FF:6C:77
X509v3 Authority Key Identifier:
keyid:00:F9:E3:D4:39:56:F7:75:3B:34:BD:1A:48:76:FF:9F:8D:1B:BF:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/3130332e3136362e32362e302f32332d3233203d3e20313431393334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.166.26.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:03:f3:e3:32:8f:5b:63:4c:18:ad:1d:4e:8a:4b:e5:ce:98:
f3:7a:19:0a:0b:9e:f5:79:e6:e4:b1:e5:e6:51:d8:0a:79:46:
1a:66:90:cd:f1:de:3b:c0:2c:8d:bb:7c:be:b1:38:92:30:5f:
6c:6e:f4:63:61:92:8e:2e:06:72:e7:a4:5d:f1:2c:2c:33:31:
88:ba:02:24:40:ce:3a:70:d2:22:2e:16:7a:01:ba:fd:8b:75:
65:31:ef:a7:20:0a:3f:17:1a:b7:cb:d5:20:cb:ea:93:ba:16:
a4:33:24:a1:4c:6e:26:60:a7:0b:7f:4a:9c:16:32:64:df:bd:
67:5b:9d:5b:ec:22:fc:00:36:2d:0e:3e:72:69:70:f5:e7:24:
d4:07:e2:b8:fa:c1:10:9a:3a:fb:ef:92:7d:c4:ce:1c:16:09:
ea:e2:64:9d:53:23:d7:c9:8a:9a:e5:2b:82:83:e2:c3:ea:fb:
b6:93:9a:3b:41:d5:2d:6d:06:9f:de:d1:5a:c5:a2:8d:a4:c7:
fb:f8:7a:85:ef:09:aa:4b:2f:37:e2:73:00:75:a5:ef:e9:e9:
55:3a:6b:e2:29:19:99:c9:aa:48:57:2a:2c:b9:7e:ea:9e:38:
13:d8:1b:69:49:3f:4a:c7:de:94:87:8f:18:cf:4a:be:cb:78:
af:da:ac:51
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIULKZw0MdJyk5rI67uHb9OHGDpkK4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDBGOUUzRDQzOTU2Rjc3NTNCMzRCRDFBNDg3NkZGOUY4
RDFCQkZCRDAeFw0yNTEyMjMxNTM0NTdaFw0yNjEyMjIxNTM5NTdaMDMxMTAvBgNV
BAMTKEY1RENEQjE3RkVDOTE5RTM3QzNFRjRBN0E1RDdFMTRDNjBGRjZDNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNU09q9E2965KWR2hUrdgCGHY+
3wErzFZsSeppzLGxwnNlioPZOHbHUjmADV9iCL2JvbieFyMw17Ass9RkHGmDK09k
aafoaoeDfThYKk+nuZLobQnPn6OXbzmpGMuWLmioV+2s1zribPxOoTmACvxr5VBQ
gRJHHTps6lbJuhAMw4Z2sgr9ORPt7oRNMpI4DaPU92LD8wx8XAMgkxvSqvcon4KU
L7aY1/pORnVpi6pCFsL3b92nzidmUUXHMrU4Xen5QX4OrQNvk/wf57PhMyHGOKi3
rV5GsppcfmyCcICXSiN6SEszr9m8KCu7HE9Y3ipFfxBaWtesS174GAvzqgE5AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU9dzbF/7JGeN8PvSnpdfhTGD/bHcwHwYDVR0j
BBgwFoAUAPnj1DlW93U7NL0aSHb/n40bv70wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
YTQxNTQzOC1hZDAxLTQyZGMtOGM5Mi0xNTFiYzhjMjcyMWYvMC8wMEY5RTNENDM5
NTZGNzc1M0IzNEJEMUE0ODc2RkY5RjhEMUJCRkJELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDBGOUUzRDQzOTU2Rjc3NTNCMzRCRDFBNDg3NkZGOUY4RDFC
QkZCRC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZhNDE1NDM4LWFkMDEtNDJkYy04
YzkyLTE1MWJjOGMyNzIxZi8wLzMxMzAzMzJlMzEzNjM2MmUzMjM2MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzEzNDMxMzkzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6YaMA0GCSqG
SIb3DQEBCwUAA4IBAQB/A/PjMo9bY0wYrR1OikvlzpjzehkKC571eebkseXmUdgK
eUYaZpDN8d47wCyNu3y+sTiSMF9sbvRjYZKOLgZy56Rd8SwsMzGIugIkQM46cNIi
LhZ6Abr9i3VlMe+nIAo/Fxq3y9Ugy+qTuhakMyShTG4mYKcLf0qcFjJk371nW51b
7CL8ADYtDj5yaXD15yTUB+K4+sEQmjr775J9xM4cFgnq4mSdUyPXyYqa5SuCg+LD
6vu2k5o7QdUtbQaf3tFaxaKNpMf7+HqF7wmqSy834nMAdaXv6elVOmviKRmZyapI
VyosuX7qnjgT2BtpST9Kx96Uh48Yz0q+y3iv2qxR
-----END CERTIFICATE-----
Generated at Wed Dec 24 22:03:35 2025 by rpki-client