This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/3130332e3137392e3235322e302f32332d3233203d3e20313439333530.roa
File: 3130332e3137392e3235322e302f32332d3233203d3e20313439333530.roa (raw, json)
Hash identifier: MoFvv+++vTB85GXC2Kbs1Zs2yMHHdxOOMsOAsgFAkGY=
Subject key identifier: C5:9C:57:65:2B:5F:CE:D0:9A:45:DF:DA:19:94:8D:8D:86:85:F1:2A
Certificate issuer: /CN=8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E
Certificate serial: 66CBB874D6B71C31534B45BF5860C976832BB835
Authority key identifier: 8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/3130332e3137392e3235322e302f32332d3233203d3e20313439333530.roa
Signing time: Mon 22 Dec 2025 11:01:16 +0000
ROA not before: Mon 22 Dec 2025 10:56:16 +0000
ROA not after: Mon 21 Dec 2026 11:01:16 +0000
asID: 149350
IP address blocks: 103.179.252.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl
rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 19:19:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:cb:b8:74:d6:b7:1c:31:53:4b:45:bf:58:60:c9:76:83:2b:b8:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E
Validity
Not Before: Dec 22 10:56:16 2025 GMT
Not After : Dec 21 11:01:16 2026 GMT
Subject: CN=C59C57652B5FCED09A45DFDA19948D8D8685F12A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:45:89:0a:34:4d:43:d5:47:62:8c:7b:42:1f:
ea:a6:34:29:8a:73:3f:88:ae:1e:61:f8:f4:74:24:
82:01:56:95:85:95:70:0b:bf:64:37:87:10:58:03:
15:f1:e9:20:7e:b0:36:2e:4c:35:6b:b2:e4:c1:52:
29:83:e9:61:f0:70:1f:36:75:d9:03:fe:49:ac:90:
b0:f1:a0:c9:bc:4b:62:3f:b1:13:5b:9b:1a:8d:ad:
f5:9f:2b:a4:49:53:51:b8:03:b3:51:6a:46:54:59:
26:93:b3:65:06:68:c7:df:9f:24:56:c0:86:20:2f:
5f:03:e0:c8:e7:d0:64:c5:62:ea:a7:fd:fc:2f:88:
1e:fa:43:a3:03:05:e6:67:b9:89:01:34:69:8b:5f:
70:1a:aa:8b:ce:0e:39:f3:57:3a:ca:ca:64:a5:f4:
6e:8c:1c:3f:01:07:9b:14:1f:97:64:f0:b6:ef:67:
e4:6e:50:38:72:74:b5:70:e3:2c:10:e7:5c:60:e2:
53:95:f9:2e:27:2a:ba:7e:9c:f2:e5:1f:e4:e1:40:
e2:90:e3:fd:12:27:c9:d0:39:11:f3:99:40:0e:fa:
d7:3f:96:b9:c7:19:16:0d:cc:47:fa:f6:0b:61:97:
e3:2c:fd:38:d0:f7:be:25:3f:2b:5b:36:07:bc:aa:
bb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9C:57:65:2B:5F:CE:D0:9A:45:DF:DA:19:94:8D:8D:86:85:F1:2A
X509v3 Authority Key Identifier:
keyid:8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/3130332e3137392e3235322e302f32332d3233203d3e20313439333530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.179.252.0/23
Signature Algorithm: sha256WithRSAEncryption
70:5a:01:3f:40:12:60:73:d5:97:75:40:f4:04:60:8b:8f:02:
af:ed:23:8d:c3:5e:4d:b7:38:f1:b7:77:54:c9:95:a9:42:8a:
91:0b:4c:bf:9f:3a:ba:59:44:56:1e:d6:a5:fd:d8:1e:e6:ba:
3e:7f:b7:f8:8a:34:a0:74:d2:2c:d1:d7:fc:d7:b3:6e:56:43:
cc:cc:8a:0e:48:2f:26:69:05:72:ef:3e:57:87:cc:75:83:d7:
d6:3f:f3:ea:74:28:7c:3b:e7:17:8d:a8:b6:c5:5c:46:1c:77:
2b:50:2f:91:47:af:a6:fe:63:b2:c3:c1:e5:1c:f6:c6:c1:6a:
a7:d2:b3:17:77:12:26:30:a9:45:f3:4d:39:14:9b:f5:f2:54:
f2:40:d4:2a:a6:c1:0d:25:82:94:eb:68:d1:b1:87:e3:45:03:
94:ad:18:b5:68:9a:86:01:8d:c7:39:ed:e2:c9:40:c1:3e:fb:
ce:55:9d:c5:1f:3b:80:d8:b0:ae:76:e4:b7:c9:15:d7:4d:79:
46:c0:ea:10:81:75:ee:f8:37:ce:ac:aa:42:a5:b5:d7:e1:fd:
78:aa:a2:2e:74:f6:f8:d0:9c:c7:95:25:1f:f7:c6:1d:66:63:
16:07:69:d2:65:4e:aa:24:32:0c:8a:fb:ca:ae:8d:8f:7c:1a:
48:41:81:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:56:41 2026 by rpki-client