This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/3130332e3131342e35332e302f32342d3234203d3e20313337333439.roa
File: 3130332e3131342e35332e302f32342d3234203d3e20313337333439.roa (raw, json)
Hash identifier: JOaRhY/bLlBtJRnSgu58P0++I9wpyJMQc7vHKmf/yaA=
Subject key identifier: A9:18:8C:C2:90:56:FE:A7:23:DC:3C:1E:58:C6:7E:4A:8F:DF:FA:16
Certificate issuer: /CN=EADA0AEE51F3910B50A065D57D946E3EAFA8BD11
Certificate serial: 6577F31DC145F4F0436D394C46D0D512F87D789A
Authority key identifier: EA:DA:0A:EE:51:F3:91:0B:50:A0:65:D5:7D:94:6E:3E:AF:A8:BD:11
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/3130332e3131342e35332e302f32342d3234203d3e20313337333439.roa
Signing time: Fri 02 Jan 2026 02:02:04 +0000
ROA not before: Fri 02 Jan 2026 01:57:04 +0000
ROA not after: Fri 01 Jan 2027 02:02:04 +0000
asID: 137349
IP address blocks: 103.114.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.crl
rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:77:f3:1d:c1:45:f4:f0:43:6d:39:4c:46:d0:d5:12:f8:7d:78:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EADA0AEE51F3910B50A065D57D946E3EAFA8BD11
Validity
Not Before: Jan 2 01:57:04 2026 GMT
Not After : Jan 1 02:02:04 2027 GMT
Subject: CN=A9188CC29056FEA723DC3C1E58C67E4A8FDFFA16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:9f:f6:6e:cc:3b:cb:e4:c1:81:b3:ad:eb:93:
4f:db:c1:87:09:e4:04:c1:9c:07:a7:5c:67:7a:dc:
9a:66:68:27:72:6e:58:70:ef:85:af:81:82:1a:42:
72:25:f1:e4:1d:bf:73:40:4a:04:f9:ba:0e:cb:ed:
5e:d9:3c:03:c2:b1:c7:9d:2f:3e:7e:f4:d1:ca:57:
f0:bb:dc:a5:58:74:72:c7:c9:9d:44:d6:fe:a9:8b:
f3:82:7d:f5:c3:2d:d0:bd:bc:8b:95:31:46:c4:af:
3b:e0:3e:89:12:5d:02:bf:93:63:b4:94:de:b8:88:
45:f2:09:9e:d8:e8:39:8c:a2:e6:e2:c2:e3:c1:ed:
97:d1:62:97:42:2e:9b:0b:a2:e1:b4:05:57:4b:7a:
79:f3:12:e2:bd:af:15:bd:47:b3:a9:cc:af:4d:7e:
5b:13:76:1c:b8:bd:4a:a0:fc:c8:16:fd:e9:73:2d:
78:9a:5c:2e:de:bc:4f:f2:8a:f3:69:38:96:6d:c7:
18:fc:36:6c:ad:8d:83:ee:92:39:e5:35:e8:26:34:
b9:eb:44:8b:2d:c0:f1:c9:33:c1:96:68:aa:dd:bc:
2c:8f:38:67:23:89:04:30:40:e9:57:3f:b6:1a:2e:
36:c4:de:e2:53:54:be:b3:8c:34:12:9f:ad:4e:3f:
df:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:18:8C:C2:90:56:FE:A7:23:DC:3C:1E:58:C6:7E:4A:8F:DF:FA:16
X509v3 Authority Key Identifier:
keyid:EA:DA:0A:EE:51:F3:91:0B:50:A0:65:D5:7D:94:6E:3E:AF:A8:BD:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/3130332e3131342e35332e302f32342d3234203d3e20313337333439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.114.53.0/24
Signature Algorithm: sha256WithRSAEncryption
38:77:b7:32:55:78:54:10:fd:7f:99:7a:83:2c:27:d3:f0:00:
91:b4:27:67:58:71:9b:8b:79:15:5c:82:25:b7:66:89:38:c6:
79:99:8a:36:7d:51:f2:a7:9f:cc:59:dd:85:80:3a:c8:75:f9:
60:b8:44:10:43:c6:af:3c:e5:40:2c:1a:e8:98:2b:16:20:16:
64:50:3d:5b:5e:a1:b2:85:f9:37:31:da:f2:06:d6:8e:3d:03:
79:e7:8b:a9:b7:3c:82:67:24:a1:90:7d:7a:8a:5e:02:8c:b4:
3e:50:02:20:5c:47:b3:3a:bc:ca:60:8f:9a:f3:f3:1b:f4:c0:
6f:f4:fd:31:29:02:f5:4a:78:c6:76:8c:31:15:28:8e:7b:f8:
5a:25:3d:c7:b1:d1:3e:9c:1c:73:e3:af:c6:26:5d:ef:af:16:
da:5a:8f:b1:d7:ae:00:9c:a6:c0:4a:0f:28:e7:93:38:05:1b:
43:00:5f:57:b9:a8:d6:a9:3b:06:58:18:99:0e:03:7a:4e:b8:
c1:62:09:6a:4a:9e:76:22:28:80:db:a4:88:31:b3:01:73:68:
db:9e:bf:ce:59:6e:01:70:b3:f7:6d:62:44:db:98:d3:10:00:
88:03:6d:b5:ad:0b:11:16:74:7b:68:e0:a6:01:e6:c0:3f:07:
f6:ea:fd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:55:46 2026 by rpki-client