This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/3130332e3138362e3230302e302f32342d3234203d3e20313439373231.roa
File: 3130332e3138362e3230302e302f32342d3234203d3e20313439373231.roa (raw, json)
Hash identifier: MVBRsOIN1IZt0jLk1q+iLxrhtC7Paa/XY5pFKcxb+gg=
Subject key identifier: 1B:1B:19:CE:8A:E1:F1:54:F0:4F:F1:9A:AE:81:49:6D:15:8A:5A:05
Certificate issuer: /CN=B21EB18A21CA5136A04F43EC18E1AA867B348052
Certificate serial: 5E4F8CA22605F78E47A77AE2BC7C69B1EEC3451F
Authority key identifier: B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/3130332e3138362e3230302e302f32342d3234203d3e20313439373231.roa
Signing time: Tue 13 Jan 2026 09:03:06 +0000
ROA not before: Tue 13 Jan 2026 08:58:06 +0000
ROA not after: Tue 12 Jan 2027 09:03:06 +0000
asID: 149721
IP address blocks: 103.186.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl
rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 17:14:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:4f:8c:a2:26:05:f7:8e:47:a7:7a:e2:bc:7c:69:b1:ee:c3:45:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B21EB18A21CA5136A04F43EC18E1AA867B348052
Validity
Not Before: Jan 13 08:58:06 2026 GMT
Not After : Jan 12 09:03:06 2027 GMT
Subject: CN=1B1B19CE8AE1F154F04FF19AAE81496D158A5A05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:27:40:a6:9c:bc:cf:2f:23:93:02:1b:6e:98:
58:1f:7d:34:a0:8e:7f:9b:c1:62:05:54:55:85:83:
41:20:8f:65:4b:ca:78:39:ec:de:0a:90:10:58:c6:
45:e2:25:d0:af:19:32:bc:0b:d7:92:da:b9:00:24:
c7:d9:4b:03:a4:fb:5f:a2:8d:01:85:3a:27:16:1b:
de:12:20:d2:e2:4b:5d:c2:49:1b:3f:71:42:e1:a1:
c2:72:ae:c6:c4:da:9b:e3:e2:dc:c8:fa:c1:53:5f:
fe:d4:27:ab:7f:8a:ce:52:dc:ea:34:2c:fe:7d:3c:
57:fb:20:81:5d:b1:76:d1:04:3f:ca:4d:8d:56:14:
44:86:8a:ab:1e:ef:44:46:55:bf:f4:ef:31:c6:f1:
f6:5c:fd:80:c3:b9:a4:48:98:71:9a:0b:e2:60:fc:
54:1f:b7:8f:ec:71:12:81:ef:01:1b:db:dd:20:37:
a8:24:08:3a:64:06:2b:a4:93:14:ed:28:5e:a1:d7:
fa:97:3e:71:fd:13:95:7f:b1:5e:c3:de:34:cb:33:
a7:b0:d2:76:e1:f3:b3:19:69:cf:ca:dc:89:f6:2f:
ad:c0:ef:2e:98:f0:f8:ea:64:08:b3:a0:ff:06:00:
4e:5e:97:e3:1c:a1:34:b2:d1:d7:05:82:7c:f4:75:
7c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1B:19:CE:8A:E1:F1:54:F0:4F:F1:9A:AE:81:49:6D:15:8A:5A:05
X509v3 Authority Key Identifier:
keyid:B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/3130332e3138362e3230302e302f32342d3234203d3e20313439373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.186.200.0/24
Signature Algorithm: sha256WithRSAEncryption
22:67:bd:0e:ee:f2:45:79:0e:c0:31:06:b9:09:84:35:15:02:
99:2f:63:ba:67:63:74:9c:3c:95:94:0d:83:e5:62:bb:3f:5f:
3f:d1:c6:76:fe:77:44:fb:9c:dc:d1:a0:57:53:cc:ec:d9:2c:
24:5e:94:40:a5:e1:de:1b:fa:d7:7f:a9:0d:81:7d:24:be:e0:
a6:40:7f:5c:27:e7:e2:22:bb:13:f1:ea:04:0b:2e:f1:c9:33:
e8:54:87:a3:66:4b:ab:6e:69:57:ee:fc:bf:80:2a:2e:b2:83:
96:c5:e9:64:d5:11:cc:16:f7:2f:b8:5e:54:46:81:cb:a8:72:
7b:4c:e5:2d:5b:29:77:6a:4b:9d:ec:8b:b2:74:ec:bb:2a:b1:
0a:39:15:94:d4:48:8c:38:18:b5:11:1d:2c:73:99:bb:cb:ec:
02:8f:13:0f:ff:d0:01:2b:fe:0e:e8:f6:5d:35:48:6b:71:7d:
f2:f5:ec:c2:b9:d7:5d:10:8b:00:fe:92:ff:49:fe:ad:30:80:
81:25:a7:3e:0a:c2:a4:71:36:eb:93:69:a2:2e:93:7c:58:d1:
3b:72:97:7c:3e:c7:93:3a:be:ab:52:83:64:6b:18:5f:21:a5:
38:ae:0b:60:02:22:07:25:03:13:ca:b7:52:5d:e4:03:45:1c:
47:c2:8f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:24:56 2026 by rpki-client