This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e38372e36362e302f32332d3234203d3e20313333383030.roa
File: 3130332e38372e36362e302f32332d3234203d3e20313333383030.roa (raw, json)
Hash identifier: OfM9qbYA2FsZXx9f6aFgGG7j8DkF7jOG45ZDg1DMlXo=
Subject key identifier: 23:37:92:E2:3A:06:53:50:E0:AE:F7:C9:52:5C:6F:34:EA:E0:97:79
Certificate issuer: /CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642
Certificate serial: 54B4CF427135D253122173D1E09159DDE39B95FA
Authority key identifier: 5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e38372e36362e302f32332d3234203d3e20313333383030.roa
Signing time: Tue 20 Jan 2026 08:02:34 +0000
ROA not before: Tue 20 Jan 2026 07:57:34 +0000
ROA not after: Tue 19 Jan 2027 08:02:34 +0000
asID: 133800
IP address blocks: 103.87.66.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl
rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 06:10:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:b4:cf:42:71:35:d2:53:12:21:73:d1:e0:91:59:dd:e3:9b:95:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642
Validity
Not Before: Jan 20 07:57:34 2026 GMT
Not After : Jan 19 08:02:34 2027 GMT
Subject: CN=233792E23A065350E0AEF7C9525C6F34EAE09779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2a:42:6b:cd:6c:4b:d9:de:31:45:13:f3:8e:
0a:6f:68:e2:cf:5c:a5:5c:cb:79:81:e0:59:e0:39:
a5:ab:e0:ff:a3:59:81:9c:31:89:32:2b:43:db:26:
b8:81:96:60:a8:4b:c8:09:0c:ec:84:4e:4c:b1:f7:
76:8b:a9:dc:8d:a1:a5:fd:79:0f:2d:23:08:e8:e7:
5a:f3:06:50:ba:dd:e8:1e:ed:f8:3d:2a:bc:db:37:
b8:e2:81:63:44:ab:19:3c:4e:f0:50:c7:2c:0f:38:
c1:48:df:a4:a5:93:1a:9c:60:54:79:c1:4a:05:80:
26:c3:2f:81:c8:6c:a1:2c:4c:53:48:af:3c:96:28:
3a:d5:09:c4:18:b1:3e:5d:3e:01:16:3a:2f:4c:15:
47:7d:9b:2c:1d:c6:de:1a:6a:7e:65:3e:c9:d5:4a:
92:de:0a:f0:11:21:3b:2f:f0:ea:67:2b:52:bc:5a:
cd:f5:a1:74:74:55:b4:77:9f:38:d4:8f:71:10:07:
42:ae:06:97:53:d0:bf:1d:52:37:48:2d:2e:df:85:
2a:de:e9:04:fc:91:77:49:c6:83:9a:14:5f:d1:71:
2e:a8:5d:39:4d:5e:27:b1:13:ba:e2:20:f4:9c:44:
33:4d:6d:3a:13:72:08:8c:1f:61:ab:21:8c:ba:92:
d4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:37:92:E2:3A:06:53:50:E0:AE:F7:C9:52:5C:6F:34:EA:E0:97:79
X509v3 Authority Key Identifier:
keyid:5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e38372e36362e302f32332d3234203d3e20313333383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.87.66.0/23
Signature Algorithm: sha256WithRSAEncryption
53:f6:f0:a3:e4:61:df:0a:cc:65:13:de:c7:38:57:fc:fe:0b:
9b:9a:d1:df:0e:99:a9:91:65:f0:0c:30:c0:b7:bf:78:f1:6d:
f9:5f:d2:86:68:33:75:92:83:f4:9d:6e:a6:5d:97:f0:a6:88:
63:09:66:9f:88:a1:09:00:43:62:d6:eb:4a:5d:a6:1e:e6:9f:
ee:05:6e:90:3d:01:12:ed:0b:a1:d3:14:bf:30:7a:90:f5:8a:
67:6b:f6:44:14:1f:68:41:ac:8e:6b:26:34:61:b8:36:78:33:
da:39:b7:74:50:7b:0e:ff:35:03:72:96:70:21:09:f5:2c:bc:
07:52:97:c2:24:0c:35:91:dd:6b:22:ce:9c:16:e3:c8:da:a7:
29:3e:fc:39:c6:cd:16:36:68:93:c2:61:aa:21:7f:59:a7:a3:
05:d7:f9:3e:19:ea:3c:11:33:86:4c:8d:72:bc:4b:91:2c:9b:
9d:ae:f5:57:fe:02:41:07:15:23:6c:cb:dd:c6:77:55:b1:82:
32:36:44:52:0b:5e:16:25:f4:ee:3a:58:e5:c5:4a:f6:8c:b1:
e3:bb:8a:a2:90:fc:1e:a3:23:d2:20:13:dc:d7:65:ea:51:a7:
68:a4:d9:58:9b:a0:08:b4:18:97:6f:3f:45:05:f5:9d:6e:de:
5a:5a:95:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:00:50 2026 by rpki-client