This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/3130332e3138362e3230312e302f32342d3234203d3e20313439373231.roa
File: 3130332e3138362e3230312e302f32342d3234203d3e20313439373231.roa (raw, json)
Hash identifier: G1ZAtVFl8VG/gYfc4EYdl05ZPWzNHnTYzxrgL9LheQs=
Subject key identifier: 44:D5:60:EF:DA:22:65:8C:0E:9C:A5:BE:E2:F1:16:CB:98:74:30:10
Certificate issuer: /CN=B21EB18A21CA5136A04F43EC18E1AA867B348052
Certificate serial: 63390B7E149AD0ADB4D7D27BA64DB26CFCD1783B
Authority key identifier: B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/3130332e3138362e3230312e302f32342d3234203d3e20313439373231.roa
Signing time: Tue 13 Jan 2026 09:03:06 +0000
ROA not before: Tue 13 Jan 2026 08:58:06 +0000
ROA not after: Tue 12 Jan 2027 09:03:06 +0000
asID: 149721
IP address blocks: 103.186.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl
rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 17:14:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:39:0b:7e:14:9a:d0:ad:b4:d7:d2:7b:a6:4d:b2:6c:fc:d1:78:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B21EB18A21CA5136A04F43EC18E1AA867B348052
Validity
Not Before: Jan 13 08:58:06 2026 GMT
Not After : Jan 12 09:03:06 2027 GMT
Subject: CN=44D560EFDA22658C0E9CA5BEE2F116CB98743010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:22:36:bc:32:6c:a9:19:a7:70:3d:ec:f7:c1:
30:5b:81:b7:49:08:2d:03:2e:8f:80:60:ce:6e:42:
40:43:b7:4b:47:f8:fc:44:37:3a:54:21:12:c3:a6:
d0:e1:db:4d:48:c2:2a:42:e8:31:d0:5c:01:79:05:
48:c2:e4:76:7f:49:97:c1:69:e0:5e:01:d4:16:d9:
c6:4c:b6:54:db:8d:4f:4f:ad:c4:46:83:23:82:ec:
7f:f0:99:6b:a8:f3:f3:ff:58:26:14:7b:e1:85:06:
12:67:41:4b:f1:20:49:e7:cd:ee:be:4c:c3:69:80:
d6:cf:43:34:a7:9d:3a:c6:67:77:0f:8d:46:02:d6:
ea:6d:76:c8:9c:f4:10:a1:2f:1e:6c:69:ac:7b:a7:
fe:0a:04:07:18:10:13:e1:66:11:da:16:6e:9c:25:
f7:19:dd:57:d9:9c:c4:82:df:a2:88:63:cd:7a:66:
32:88:da:34:97:d0:4f:41:58:0f:e5:97:80:ca:64:
4d:5b:02:b5:49:b8:02:8e:9b:fa:25:c9:2e:f5:33:
6b:50:0d:55:e2:57:a6:4e:46:36:90:0c:3c:3f:42:
1f:d1:90:e6:94:5b:55:ed:eb:1c:79:bf:80:b8:98:
78:fd:22:d5:12:b2:1f:35:18:bb:52:9d:72:8d:60:
cb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D5:60:EF:DA:22:65:8C:0E:9C:A5:BE:E2:F1:16:CB:98:74:30:10
X509v3 Authority Key Identifier:
keyid:B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/3130332e3138362e3230312e302f32342d3234203d3e20313439373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.186.201.0/24
Signature Algorithm: sha256WithRSAEncryption
64:51:8f:fa:bf:0d:43:75:69:52:ad:7c:a9:88:52:b5:9a:84:
2d:c1:be:62:f9:6d:f0:33:e4:04:d3:a3:5b:23:77:5b:1c:03:
97:b4:6b:2c:c6:db:1b:69:1a:5b:51:11:85:0a:f9:a3:63:ce:
06:57:d7:4f:e6:d3:8c:8c:4f:1d:14:06:c6:29:17:e9:95:b6:
83:23:13:01:de:f9:13:43:62:35:af:b8:b2:ea:8e:8d:ca:95:
e8:a8:ce:e7:a9:16:fa:cc:0f:7e:c9:ab:2e:42:9d:a9:f6:a3:
33:fe:36:b5:67:c1:d7:7b:46:78:f7:01:69:48:bd:e9:ca:61:
e2:41:58:6c:e1:4c:91:c3:e8:0a:f0:cd:5e:16:0a:89:e9:a9:
85:5c:72:3c:f0:10:31:ae:33:75:c2:39:28:85:31:ad:60:49:
db:12:0e:58:0f:c3:c4:eb:7c:67:2a:99:22:74:2a:8f:a4:80:
8c:f8:d4:8f:c7:84:ca:d5:2a:a9:22:4b:8f:24:f3:bb:1b:01:
9e:62:a9:cf:81:7e:dc:7b:c4:82:8b:88:5c:b8:05:db:ed:a7:
e9:a5:0f:4d:48:57:9c:8e:ed:33:c7:67:85:96:4d:64:3a:43:
40:d8:f0:9d:be:ae:10:f5:65:5d:a5:ae:84:d2:be:0d:98:a7:
37:6d:cf:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:23:17 2026 by rpki-client