This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e38372e36372e302f32342d3234203d3e20313333383030.roa
File: 3130332e38372e36372e302f32342d3234203d3e20313333383030.roa (raw, json)
Hash identifier: 6VeZZkQSxmPBfD/p/ZPzZF+ZOY1TH4l3lSmr+WKEfNg=
Subject key identifier: 75:38:D8:BC:8C:C0:F4:3C:79:F4:7A:F2:7E:E7:C2:73:93:AD:6A:11
Certificate issuer: /CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642
Certificate serial: 0D431CEED4B694194E25FBB5B7974F96D75B5B1D
Authority key identifier: 5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e38372e36372e302f32342d3234203d3e20313333383030.roa
Signing time: Mon 19 Jan 2026 04:00:03 +0000
ROA not before: Mon 19 Jan 2026 03:55:03 +0000
ROA not after: Mon 18 Jan 2027 04:00:03 +0000
asID: 133800
IP address blocks: 103.87.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl
rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 06:10:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:43:1c:ee:d4:b6:94:19:4e:25:fb:b5:b7:97:4f:96:d7:5b:5b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642
Validity
Not Before: Jan 19 03:55:03 2026 GMT
Not After : Jan 18 04:00:03 2027 GMT
Subject: CN=7538D8BC8CC0F43C79F47AF27EE7C27393AD6A11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e4:1c:a4:98:be:0a:20:c8:21:89:18:5c:28:
76:97:78:fc:f7:75:69:70:5f:ca:50:48:77:ab:bf:
91:18:04:3b:e6:e3:42:16:5a:c8:50:bd:9d:1d:ea:
68:d6:54:da:7a:10:84:78:3d:2e:cf:05:5d:53:c2:
21:e5:55:72:4e:5c:26:8c:3b:0d:86:39:54:1c:83:
c5:0a:97:fb:2f:06:34:31:8f:f4:2d:2c:f6:dc:75:
15:38:15:72:f8:69:a2:78:20:2b:5c:00:66:d7:8e:
2e:06:c0:8e:68:bd:cd:86:2c:ad:7b:43:a0:e7:5e:
81:45:31:5d:54:a7:16:fa:88:4f:84:fe:91:8c:58:
9e:e3:2f:17:8d:a8:37:d2:47:55:2d:72:dc:ce:4f:
c3:32:65:a9:7f:f5:ec:31:75:aa:7c:8f:a7:35:6a:
7d:f9:cc:5b:95:06:b5:03:ad:46:9d:0a:97:f1:4f:
95:be:03:d0:d9:16:1b:a9:09:1a:94:bb:92:d8:7d:
52:3f:b1:c8:dc:95:02:d2:cd:39:63:b7:95:98:22:
82:02:72:db:0c:04:8d:26:6d:ae:aa:cc:73:87:ef:
e9:dc:97:1c:a7:e7:06:b7:9a:8e:cf:80:8f:3d:2b:
c1:e6:9b:d9:f1:02:21:25:96:80:9e:68:45:2b:5f:
72:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:38:D8:BC:8C:C0:F4:3C:79:F4:7A:F2:7E:E7:C2:73:93:AD:6A:11
X509v3 Authority Key Identifier:
keyid:5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e38372e36372e302f32342d3234203d3e20313333383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.87.67.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:de:8f:9c:86:04:a6:2d:d8:6e:2b:24:1b:10:ad:52:05:f5:
8f:15:89:ff:5f:5d:0a:ca:62:8a:5c:65:88:63:b2:41:48:eb:
19:3c:03:2f:ef:16:05:58:fe:8a:2d:8e:1b:cb:da:58:ec:99:
9d:59:1d:6e:cd:7a:38:96:ea:07:c6:eb:58:84:86:0a:98:44:
0d:be:a9:93:8b:ef:62:db:44:eb:15:2f:48:1f:64:4c:a4:c1:
08:61:61:89:3f:20:ff:75:66:31:d1:d8:8f:af:e6:83:9c:f4:
fd:5b:d6:92:53:2d:d6:cb:77:73:6a:59:3a:cb:a2:77:0e:6b:
72:00:77:a9:7e:db:92:d0:b0:79:80:f1:31:92:1d:4f:0f:a7:
f7:5c:49:68:10:7f:d9:25:be:97:ea:1c:7a:40:22:ee:e4:ae:
ca:ee:f5:1b:ef:16:15:f4:12:eb:06:34:b9:ca:32:52:91:ed:
7c:be:77:ec:e9:95:1a:68:06:ce:d0:12:8b:7e:3c:d6:27:1e:
15:ee:aa:fb:0a:35:b9:89:4c:b3:04:a4:b1:52:50:27:f9:bd:
50:8b:02:07:92:1d:60:03:e9:01:30:bf:e3:06:4c:23:e9:43:
a4:67:92:16:e9:aa:fd:38:54:4d:e1:f3:c8:e9:83:dc:6f:1f:
ad:8a:02:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:00:50 2026 by rpki-client