This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/3130332e3131342e35322e302f32342d3234203d3e20313337333439.roa
File: 3130332e3131342e35322e302f32342d3234203d3e20313337333439.roa (raw, json)
Hash identifier: PtBs+nsRVIu2YcwX9pc77V8UxQKbh+fRc4VIGqtgf9c=
Subject key identifier: 61:B7:AA:9D:8C:FD:BA:73:19:7B:27:D8:B4:6E:06:E5:29:D8:A3:B6
Certificate issuer: /CN=EADA0AEE51F3910B50A065D57D946E3EAFA8BD11
Certificate serial: 1420C67DB150ED0F2D2DE60400CF04BB7A2827FC
Authority key identifier: EA:DA:0A:EE:51:F3:91:0B:50:A0:65:D5:7D:94:6E:3E:AF:A8:BD:11
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/3130332e3131342e35322e302f32342d3234203d3e20313337333439.roa
Signing time: Sat 03 Jan 2026 03:02:41 +0000
ROA not before: Sat 03 Jan 2026 02:57:41 +0000
ROA not after: Sat 02 Jan 2027 03:02:41 +0000
asID: 137349
IP address blocks: 103.114.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.crl
rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:20:c6:7d:b1:50:ed:0f:2d:2d:e6:04:00:cf:04:bb:7a:28:27:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EADA0AEE51F3910B50A065D57D946E3EAFA8BD11
Validity
Not Before: Jan 3 02:57:41 2026 GMT
Not After : Jan 2 03:02:41 2027 GMT
Subject: CN=61B7AA9D8CFDBA73197B27D8B46E06E529D8A3B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:63:31:b2:1a:e7:14:ef:99:7a:48:f5:0d:dc:
8b:4f:89:83:38:25:f4:30:11:9a:bd:bf:4b:7e:2a:
f6:fa:ab:d8:1b:45:bb:f9:75:da:d5:d4:87:0d:4c:
03:62:22:a5:ea:cb:4e:c5:65:21:9e:a3:22:6e:f2:
58:69:3c:fd:9a:54:a6:3b:62:d3:bc:cc:26:fd:65:
0f:4c:1e:56:9e:89:f8:dd:5a:c9:ec:74:11:96:4f:
3b:6a:c5:8b:59:90:3a:af:78:da:fc:75:3a:9e:0a:
fc:c1:b1:da:c0:51:6e:a5:48:32:5d:91:b0:07:cd:
75:b3:fe:46:05:67:c5:b1:e7:a0:07:1a:6f:86:9c:
a0:c0:0e:93:79:5b:b3:3e:26:41:a2:61:ea:89:7d:
79:ca:07:88:8e:ce:76:ea:75:c7:cb:af:73:2e:1f:
c9:e5:cf:b0:30:54:6e:90:4d:81:0a:5f:ad:74:dc:
f4:c7:50:84:d2:8b:84:42:9e:e6:0f:50:ee:38:dc:
b4:1d:03:41:5a:70:52:fb:5d:74:ca:e5:8d:43:8e:
78:f5:23:8c:82:fa:c0:b5:73:bc:7e:ae:22:c6:c3:
cb:60:ba:9a:6f:cd:3b:3f:d8:6c:f8:92:e1:78:cf:
c8:e5:bd:c2:a2:30:9e:12:f7:2c:8e:e4:51:4a:fb:
b6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B7:AA:9D:8C:FD:BA:73:19:7B:27:D8:B4:6E:06:E5:29:D8:A3:B6
X509v3 Authority Key Identifier:
keyid:EA:DA:0A:EE:51:F3:91:0B:50:A0:65:D5:7D:94:6E:3E:AF:A8:BD:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/3130332e3131342e35322e302f32342d3234203d3e20313337333439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.114.52.0/24
Signature Algorithm: sha256WithRSAEncryption
98:fb:fe:b9:cb:d3:f8:b2:cb:a4:09:ee:09:c3:fa:db:03:b0:
8b:34:25:84:c8:2c:9e:39:47:09:fb:33:5b:79:af:0d:e0:00:
f4:65:8c:d5:b5:cd:70:8b:fe:e7:07:80:ad:79:43:ad:95:a1:
c1:89:5b:2f:60:98:b6:8b:6e:bd:45:1e:2a:5e:e0:88:28:a5:
70:bb:13:2d:21:b6:04:dd:4e:2a:4c:49:2e:fb:e8:55:a4:5e:
7d:a0:d3:cc:4b:62:9c:01:a0:e5:6e:9f:e2:de:6b:38:1a:56:
eb:48:f0:a1:20:0c:36:3e:35:28:b3:75:85:85:a4:0f:dc:28:
8b:e7:e7:0b:fa:93:ce:b1:a5:8e:4d:c6:43:45:67:be:54:b7:
cf:ae:8e:a8:80:6a:46:ec:50:e7:33:2a:99:6f:9a:3e:62:70:
23:b0:eb:99:7d:f9:2b:cb:5d:e2:5f:7a:cf:a8:24:4e:59:ce:
3f:a5:89:bc:33:0b:d9:91:18:e0:c5:a4:78:97:8f:ac:ee:28:
63:bf:f9:4b:da:f9:59:8b:b7:25:1f:fa:6e:20:51:41:77:50:
73:c5:29:8d:e5:5f:ca:32:e8:24:28:c4:a2:1d:0d:60:19:bc:
29:85:da:5d:ad:56:71:b1:f3:09:a7:9a:35:a3:82:bd:87:e7:
41:7a:33:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:55:40 2026 by rpki-client