This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/3130332e31332e3233342e302f32342d3234203d3e20313530323332.roa
File: 3130332e31332e3233342e302f32342d3234203d3e20313530323332.roa (raw, json)
Hash identifier: Ip+EaY4SHdyARw/IWLE1IYmmOdcG4qcOGk9dRwPX5R8=
Subject key identifier: BA:4A:7E:AF:5A:86:BE:5B:65:58:95:69:53:8B:90:10:0B:FA:4C:89
Certificate issuer: /CN=361B6D7E16A02B7316B6F91ED34B22A907EE866B
Certificate serial: 28D7CFBCE1D45D77D1592E43CE28284F88177CDB
Authority key identifier: 36:1B:6D:7E:16:A0:2B:73:16:B6:F9:1E:D3:4B:22:A9:07:EE:86:6B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/361B6D7E16A02B7316B6F91ED34B22A907EE866B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/3130332e31332e3233342e302f32342d3234203d3e20313530323332.roa
Signing time: Wed 07 Jan 2026 14:00:01 +0000
ROA not before: Wed 07 Jan 2026 13:55:01 +0000
ROA not after: Wed 06 Jan 2027 14:00:01 +0000
asID: 150232
IP address blocks: 103.13.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.crl
rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/361B6D7E16A02B7316B6F91ED34B22A907EE866B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 13:34:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:d7:cf:bc:e1:d4:5d:77:d1:59:2e:43:ce:28:28:4f:88:17:7c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=361B6D7E16A02B7316B6F91ED34B22A907EE866B
Validity
Not Before: Jan 7 13:55:01 2026 GMT
Not After : Jan 6 14:00:01 2027 GMT
Subject: CN=BA4A7EAF5A86BE5B65589569538B90100BFA4C89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:41:e8:5e:5f:67:26:84:2e:28:23:58:5b:dc:
67:34:1d:02:25:29:92:69:74:1f:15:96:75:fa:9c:
11:bf:5e:bb:86:04:30:a5:9d:cf:3b:40:7f:62:19:
8f:6f:33:ad:06:32:ce:de:0e:9b:a3:3d:c7:2e:05:
a3:f9:cc:fa:3c:14:8e:3c:24:a5:6e:a1:0c:57:ff:
4d:0d:47:a9:22:e6:d3:12:83:95:7d:f9:fd:d9:59:
7a:c4:53:7d:8e:1d:21:50:ac:a6:1b:a9:8b:24:f3:
c0:44:fe:9c:e0:92:c3:05:48:03:86:36:91:49:60:
16:0d:10:38:bf:c4:a8:9a:38:4f:97:88:eb:a5:74:
10:fb:96:6a:fd:28:3c:a4:a7:22:ac:06:f2:a8:69:
52:4b:df:1a:9b:4d:d7:5d:41:a0:bf:54:3a:1d:3d:
fc:ed:61:b1:18:35:34:b9:6b:d6:32:49:26:ab:f0:
a0:2b:bb:b6:d5:6d:59:f1:74:60:08:59:e2:61:82:
3e:cd:2a:f7:43:90:f5:9c:e3:e2:14:2b:82:5b:43:
c3:ea:96:13:b3:7d:53:43:c7:60:af:d9:f9:95:7f:
00:cc:ce:1a:5e:b6:12:ae:37:48:7f:34:4a:9a:5c:
f8:04:4a:08:6e:6b:1c:fc:8f:a4:a7:15:3d:4a:34:
64:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4A:7E:AF:5A:86:BE:5B:65:58:95:69:53:8B:90:10:0B:FA:4C:89
X509v3 Authority Key Identifier:
keyid:36:1B:6D:7E:16:A0:2B:73:16:B6:F9:1E:D3:4B:22:A9:07:EE:86:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/361B6D7E16A02B7316B6F91ED34B22A907EE866B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/3130332e31332e3233342e302f32342d3234203d3e20313530323332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.13.234.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:e5:bc:52:4e:df:3f:68:c5:26:3e:db:ac:60:86:e4:61:e0:
4e:76:8a:cf:0c:2c:c1:00:ae:62:9d:b8:fd:1c:22:f6:de:18:
51:e3:d5:c4:8d:c0:b7:42:32:a5:a2:2e:8b:eb:74:3b:32:19:
3a:9e:7d:43:74:81:da:1b:3e:c7:5f:5e:77:93:eb:87:59:7b:
f5:98:48:ec:47:81:4c:d5:e0:2b:70:7c:ba:46:61:5d:e7:7a:
77:f6:55:8b:2d:f4:28:6c:b6:67:1b:39:43:69:e3:ba:4d:ff:
75:92:be:7e:51:96:be:80:4d:29:ae:d4:51:ee:54:ce:4d:7f:
7d:30:6d:ec:bf:8d:e4:3f:a0:80:af:ec:94:dc:ef:cf:ec:b0:
56:d1:d8:0e:60:31:12:b3:d3:8f:f3:d4:fb:2b:ac:a9:eb:eb:
03:bc:4b:65:0f:1a:2d:e4:66:c3:98:61:bd:78:4b:df:7b:de:
6b:74:cb:85:b4:0f:7e:04:f8:88:77:a2:e6:71:dd:57:6c:92:
f1:01:29:7a:b3:47:b4:f1:3d:43:58:29:ff:d7:0f:58:44:9d:
40:68:e6:0f:64:c4:bc:d2:f9:aa:10:bd:2e:43:f6:80:3d:49:
38:2b:d9:69:67:68:a6:ab:45:7a:7f:d3:96:c5:6e:e6:83:3e:
64:8a:b4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:12:28 2026 by rpki-client