This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32362e302f32332d3233203d3e20313430343639.roa
File: 3230322e35372e32362e302f32332d3233203d3e20313430343639.roa (raw, json)
Hash identifier: i0qXLSeEhZMkdN2DfH6rqQw93/yoa+3wg07gaHoYz0k=
Subject key identifier: E1:9F:C7:B3:45:6C:24:41:30:74:AE:8C:32:A4:9F:35:FA:DF:B1:C9
Certificate issuer: /CN=1F969EE9B0838D22156118A888B81BF27B859BD5
Certificate serial: 3BB287BB3992B58B96376E84CFA66E36FCEABCEB
Authority key identifier: 1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32362e302f32332d3233203d3e20313430343639.roa
Signing time: Tue 20 Jan 2026 06:00:01 +0000
ROA not before: Tue 20 Jan 2026 05:55:01 +0000
ROA not after: Tue 19 Jan 2027 06:00:01 +0000
asID: 140469
IP address blocks: 202.57.26.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl
rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 01:14:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:b2:87:bb:39:92:b5:8b:96:37:6e:84:cf:a6:6e:36:fc:ea:bc:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F969EE9B0838D22156118A888B81BF27B859BD5
Validity
Not Before: Jan 20 05:55:01 2026 GMT
Not After : Jan 19 06:00:01 2027 GMT
Subject: CN=E19FC7B3456C24413074AE8C32A49F35FADFB1C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:82:08:52:17:01:9f:9b:a4:a2:e0:a0:bf:09:
67:54:07:e2:85:8c:31:bd:63:58:98:f4:ef:33:5d:
3e:05:b5:eb:94:a3:ee:87:40:bb:01:a5:c2:d0:14:
0f:f3:55:08:17:cb:7c:2e:78:86:47:a3:ab:c6:45:
64:55:f1:13:d7:c2:f0:54:2c:db:a0:cb:1b:e9:76:
7e:29:99:c0:c9:b6:e8:c2:08:65:d7:e6:a6:59:20:
84:fb:fa:eb:8e:c2:32:5a:13:6d:f3:66:09:fd:04:
d3:95:11:2f:75:2d:4c:31:5b:b7:5c:6b:5d:1f:92:
b4:37:0f:0d:92:21:a8:a4:73:11:c1:74:78:1f:6b:
0f:da:94:fc:55:a3:ba:65:70:90:19:c9:fc:af:97:
33:a4:a7:bc:77:73:75:d6:c4:65:07:72:a5:66:d7:
02:3d:bc:15:26:af:17:35:c3:be:20:52:7c:a8:fe:
cf:7a:c9:44:2b:82:1f:28:b9:f9:3a:17:0c:a2:03:
58:5d:28:83:48:0a:73:18:16:75:f6:02:ac:c7:8a:
e9:3c:cc:04:ec:ae:38:cc:b2:e8:64:14:3f:24:44:
14:51:a2:59:e0:a8:e2:b6:5c:ee:b4:60:10:61:99:
af:5e:32:8b:37:fe:26:50:35:31:1d:1e:e3:1c:b5:
2d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9F:C7:B3:45:6C:24:41:30:74:AE:8C:32:A4:9F:35:FA:DF:B1:C9
X509v3 Authority Key Identifier:
keyid:1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32362e302f32332d3233203d3e20313430343639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.57.26.0/23
Signature Algorithm: sha256WithRSAEncryption
62:e1:74:45:c5:49:5e:02:c5:6c:8f:93:95:46:7a:2b:a8:c3:
ad:59:4d:94:ca:6a:73:f7:72:7b:da:da:5a:f6:c1:a6:90:73:
a1:af:06:60:fb:78:70:ac:f6:22:42:26:59:77:d0:72:2e:36:
d9:f1:94:52:b4:35:f6:f3:59:7d:b9:ad:ee:33:51:41:08:be:
9b:41:38:2b:93:5f:0c:4b:80:7c:b4:e1:0a:c1:1e:5b:8f:26:
29:10:31:95:e9:05:4b:b0:dc:d7:c4:91:f5:3f:85:3a:88:6b:
13:0d:04:ec:97:fb:9d:f2:32:13:60:ed:f0:17:01:97:bc:fa:
25:d7:ce:0c:80:3f:c1:9c:95:3d:f0:bc:06:0c:72:82:58:74:
aa:53:42:97:d5:1e:73:1c:67:e4:99:80:b8:e0:8c:a9:04:ed:
82:25:8b:58:d9:c9:07:93:d4:d5:5d:0a:37:c6:62:08:be:23:
47:7f:c2:03:0c:1c:d5:de:ba:52:2d:fc:52:9b:2b:0a:03:17:
b9:dd:d1:99:8d:db:29:1f:e0:86:80:7a:c0:e1:3f:d5:e2:c8:
30:28:82:cc:d0:e2:5a:41:32:81:44:0a:9e:2d:3d:7e:e7:33:
df:ae:81:ff:24:4f:88:00:27:80:48:ab:cf:6a:82:bf:93:8a:
8b:a2:b8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:06:42 2026 by rpki-client