This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/3130332e3137342e36342e302f32342d3234203d3e20313437313236.roa
File: 3130332e3137342e36342e302f32342d3234203d3e20313437313236.roa (raw, json)
Hash identifier: jeWguCwm76CmsJXg1ZgYbmX+MUCuiZr0yr59XcYu9Ow=
Subject key identifier: 6B:A3:4E:CD:49:9E:1C:E0:9F:1B:C0:9F:E3:0F:20:54:BC:99:32:F0
Certificate issuer: /CN=DE99361912581A3A43349B6FFB379A285B0972E7
Certificate serial: 7A65718D18FEE975FB6AF52E00439365E14B4A8D
Authority key identifier: DE:99:36:19:12:58:1A:3A:43:34:9B:6F:FB:37:9A:28:5B:09:72:E7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/3130332e3137342e36342e302f32342d3234203d3e20313437313236.roa
Signing time: Tue 06 Jan 2026 05:41:23 +0000
ROA not before: Tue 06 Jan 2026 05:36:23 +0000
ROA not after: Tue 05 Jan 2027 05:41:23 +0000
asID: 147126
IP address blocks: 103.174.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.crl
rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 11:35:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:65:71:8d:18:fe:e9:75:fb:6a:f5:2e:00:43:93:65:e1:4b:4a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE99361912581A3A43349B6FFB379A285B0972E7
Validity
Not Before: Jan 6 05:36:23 2026 GMT
Not After : Jan 5 05:41:23 2027 GMT
Subject: CN=6BA34ECD499E1CE09F1BC09FE30F2054BC9932F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:62:35:8f:18:fb:8f:94:fd:f9:85:ae:f3:2f:
7f:b9:b7:46:f5:ae:ed:c6:cf:ed:89:0f:11:5d:1e:
14:29:a0:1e:a9:1b:fd:c8:60:fb:fd:d9:55:22:b4:
ae:a6:4d:ab:b3:67:0b:fa:f0:15:f2:db:ff:58:32:
61:ec:d8:ff:9f:da:ef:26:a2:3e:35:9a:2a:0a:f4:
88:b7:c7:25:90:4f:8f:91:9b:9e:ed:63:05:bb:fa:
31:6b:6d:87:f0:8a:df:06:6d:44:8c:68:41:ff:d6:
87:32:64:6d:83:d7:11:f3:39:23:1f:fe:d3:d7:9c:
e6:8f:0c:f1:06:dc:ad:4e:ce:e0:28:ee:13:0f:72:
8e:9c:3a:c0:ee:b2:6c:df:f6:8c:f2:ab:91:0f:4f:
c1:40:5d:07:03:f9:bb:1b:ff:ab:24:72:4b:9b:a7:
29:2e:6f:d2:5d:3c:66:58:36:51:ae:cd:f8:a9:0e:
1a:b1:08:2a:23:b2:ef:86:3f:27:ac:dd:97:47:d4:
ff:a7:4e:1f:d1:8e:61:6c:9d:e3:0a:c0:a3:c3:be:
c2:04:68:ef:81:85:01:f8:b7:9a:3c:7d:6b:17:41:
47:61:83:06:aa:23:0b:be:e4:3b:18:47:33:a2:fc:
a2:81:37:2a:92:9c:4f:b1:a8:a0:e5:95:61:4c:11:
30:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A3:4E:CD:49:9E:1C:E0:9F:1B:C0:9F:E3:0F:20:54:BC:99:32:F0
X509v3 Authority Key Identifier:
keyid:DE:99:36:19:12:58:1A:3A:43:34:9B:6F:FB:37:9A:28:5B:09:72:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/3130332e3137342e36342e302f32342d3234203d3e20313437313236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.174.64.0/24
Signature Algorithm: sha256WithRSAEncryption
91:78:7b:57:ac:f0:22:10:85:99:cf:d0:77:18:01:3b:de:80:
c9:96:c1:1c:30:a2:15:05:e4:2b:3e:dc:af:3a:a3:80:3f:88:
e5:37:df:64:45:62:76:2a:85:07:2f:0b:df:e7:87:a4:f8:85:
f3:7e:3b:6c:fa:a1:dc:40:69:51:19:45:e4:85:0c:45:64:03:
bc:1b:13:d2:91:bd:2c:22:e1:d2:9a:e9:01:ea:ee:35:b7:9d:
50:17:91:b9:69:74:c4:d8:21:0e:d5:13:2c:3d:b5:e0:bb:83:
8f:a0:e9:ba:ed:7b:cd:1b:fb:ef:63:79:b1:3b:47:5c:0c:a3:
2e:30:43:5b:d5:48:87:aa:3a:2e:94:7d:3c:e5:fb:d4:81:6c:
4e:7c:e9:9e:da:22:06:64:3d:58:9b:d2:b7:d6:33:a8:a1:4a:
55:7c:c2:84:75:51:dc:e0:65:25:b2:77:6e:37:af:5e:ff:0f:
a6:f6:d3:ca:ed:af:f8:86:74:0a:a7:4b:53:3a:23:67:c9:34:
62:83:06:0b:eb:e3:84:d9:62:ff:f0:93:68:8d:3c:ff:ac:89:
be:0e:d6:f1:a0:6b:e7:a1:fc:e1:56:0a:57:0d:99:a2:e8:7d:
68:51:32:d6:d7:73:e7:77:a7:ca:a6:1d:79:20:f9:09:54:cd:
ef:34:50:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:30:43 2026 by rpki-client