This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/3130332e3134352e3230302e302f32332d3234203d3e20313339343530.roa
File: 3130332e3134352e3230302e302f32332d3234203d3e20313339343530.roa (raw, json)
Hash identifier: TDJsbNMl+lAMAT0NLVIT8psIHchVbCcnWDmPVMhPBr8=
Subject key identifier: 29:EE:C0:2C:A9:5B:BB:45:39:80:42:B2:AB:DF:7E:7B:65:83:BC:94
Certificate issuer: /CN=789C41F8FF72D4E00F36194AF24A543B3264FF5C
Certificate serial: 790215F14DAAFF3A2CDAAE3DF5E7C7890F2B24F1
Authority key identifier: 78:9C:41:F8:FF:72:D4:E0:0F:36:19:4A:F2:4A:54:3B:32:64:FF:5C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/3130332e3134352e3230302e302f32332d3234203d3e20313339343530.roa
Signing time: Thu 22 Jan 2026 06:00:01 +0000
ROA not before: Thu 22 Jan 2026 05:55:01 +0000
ROA not after: Thu 21 Jan 2027 06:00:01 +0000
asID: 139450
IP address blocks: 103.145.200.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.crl
rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 19:44:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:02:15:f1:4d:aa:ff:3a:2c:da:ae:3d:f5:e7:c7:89:0f:2b:24:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=789C41F8FF72D4E00F36194AF24A543B3264FF5C
Validity
Not Before: Jan 22 05:55:01 2026 GMT
Not After : Jan 21 06:00:01 2027 GMT
Subject: CN=29EEC02CA95BBB45398042B2ABDF7E7B6583BC94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:01:4c:6b:ee:ae:f4:4f:53:9a:78:e4:63:02:
ae:27:1c:0c:3d:ea:94:0d:15:ae:38:3f:d1:61:46:
1f:dd:eb:ff:a9:b7:6e:aa:ac:ad:d7:e9:df:ba:c0:
0e:f8:c7:72:d2:b7:59:79:d7:ba:55:66:75:08:bd:
a1:c9:58:16:c0:7a:a9:7a:48:b2:2c:8b:aa:a5:c5:
e4:19:1e:7a:33:50:15:26:28:00:d9:2c:94:5d:d3:
ce:b7:3b:6d:df:81:61:78:a0:2f:52:93:ff:f1:9e:
81:5d:69:64:06:f4:38:0e:bf:50:c8:6a:ac:66:b5:
1f:90:05:d8:c0:40:03:d5:8f:b1:e5:b1:84:47:33:
8d:23:b9:48:21:fd:a1:d8:bb:71:8a:5d:cd:ac:43:
03:f0:82:17:11:b6:35:c0:0a:71:dc:eb:fb:c2:d8:
0b:ec:b5:7e:ed:0a:a6:cf:be:3c:0f:ca:66:04:22:
91:0b:02:a1:f5:65:8a:d6:c5:86:4d:e4:52:36:33:
83:a0:24:8c:be:d1:aa:fc:2b:79:f9:4f:c7:f4:03:
5c:6b:03:aa:c4:4b:6e:a5:1b:3f:23:5b:a9:3d:ed:
01:6b:bc:62:33:0e:ec:45:8b:d6:f4:06:ba:c2:14:
07:eb:cb:89:51:5e:bb:a3:86:98:0c:a0:2e:bb:51:
fe:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:EE:C0:2C:A9:5B:BB:45:39:80:42:B2:AB:DF:7E:7B:65:83:BC:94
X509v3 Authority Key Identifier:
keyid:78:9C:41:F8:FF:72:D4:E0:0F:36:19:4A:F2:4A:54:3B:32:64:FF:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/3130332e3134352e3230302e302f32332d3234203d3e20313339343530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.145.200.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:51:42:2e:9f:1c:4d:e1:69:ff:47:70:e9:0a:d8:11:9d:f3:
90:6d:fd:b2:30:f5:46:13:2a:32:72:a9:dd:67:e5:e0:87:64:
eb:6f:d3:1f:88:c2:78:a8:87:83:c9:a5:f8:31:f4:6e:ef:a4:
f1:f5:9d:80:80:79:16:8c:0e:8a:60:bb:95:5d:b3:12:44:56:
a2:37:08:95:3d:cd:77:35:8e:35:10:92:2a:c8:9d:f2:60:24:
98:96:f5:e5:40:08:27:cd:30:59:d9:eb:5b:30:67:1c:e0:aa:
cc:5d:e8:9f:14:7d:49:6e:ec:c5:55:a0:c9:ad:27:27:05:69:
a5:c0:5a:63:81:86:63:cb:c1:f6:e3:33:11:c0:9f:01:ee:a8:
ea:7c:c7:59:5f:ea:3c:df:97:4d:ec:45:c2:59:4f:40:d7:69:
af:78:2c:1e:a8:7a:c2:35:d8:9b:29:11:74:8a:5d:44:d2:d4:
79:95:86:21:f2:9b:3b:be:e5:77:f9:4e:dd:fd:42:9d:3b:10:
80:8e:fb:1d:37:f9:41:45:cb:04:53:47:50:91:f2:5d:cd:8a:
15:0b:4c:89:e5:f4:98:65:e1:b8:14:18:5f:4a:e8:cc:45:75:
2b:75:a7:31:56:a4:b0:8c:1c:7c:c5:a6:7b:fb:27:0e:31:ae:
25:ce:54:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:11:16 2026 by rpki-client