This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/3130332e3235322e3130312e302f32342d3234203d3e203539313437.roa
File: 3130332e3235322e3130312e302f32342d3234203d3e203539313437.roa (raw, json)
Hash identifier: N8BYJ8Ja8cI/O8F5jWMsSdJz8j5GkTqxxcCM4rTW7ZA=
Subject key identifier: 06:29:EE:6D:17:D7:B3:86:A5:AE:E5:5F:26:4B:96:5A:00:AB:CA:77
Certificate issuer: /CN=0E7BF2CE27D899D8E985DBD9311DF8B250C58581
Certificate serial: 68760A73218EEF71564292AF8637AFF0A63BEAAD
Authority key identifier: 0E:7B:F2:CE:27:D8:99:D8:E9:85:DB:D9:31:1D:F8:B2:50:C5:85:81
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/3130332e3235322e3130312e302f32342d3234203d3e203539313437.roa
Signing time: Thu 22 Jan 2026 08:00:01 +0000
ROA not before: Thu 22 Jan 2026 07:55:01 +0000
ROA not after: Thu 21 Jan 2027 08:00:01 +0000
asID: 59147
IP address blocks: 103.252.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.crl
rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 22:54:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:76:0a:73:21:8e:ef:71:56:42:92:af:86:37:af:f0:a6:3b:ea:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E7BF2CE27D899D8E985DBD9311DF8B250C58581
Validity
Not Before: Jan 22 07:55:01 2026 GMT
Not After : Jan 21 08:00:01 2027 GMT
Subject: CN=0629EE6D17D7B386A5AEE55F264B965A00ABCA77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:d5:c1:9d:c2:ae:75:65:20:54:e8:a4:fc:93:
19:b4:36:69:98:47:d5:e2:46:dd:57:80:88:f2:90:
aa:ff:6b:88:1e:63:b9:de:21:33:8c:8e:60:47:32:
0e:08:a5:9f:5f:69:ba:23:de:0c:3b:6f:b0:ed:33:
51:74:a9:65:53:77:75:a3:6c:c4:01:da:67:03:de:
cc:31:81:c2:d3:f3:f5:ff:72:18:e3:c2:28:56:4a:
84:8d:ed:5d:df:92:d1:29:ba:61:84:d3:60:72:76:
5f:5f:e6:5e:64:36:6e:b9:09:39:64:d4:68:30:a9:
bf:65:0f:37:68:08:30:64:17:a7:1b:3c:9c:24:f0:
f6:97:64:e5:8a:83:9b:dc:d1:e0:5f:57:38:fb:7a:
dd:65:d4:38:0c:ad:38:52:2b:6e:92:4a:0c:84:e5:
85:5c:9c:0f:23:d6:05:61:10:91:ea:78:fb:94:db:
90:b9:8f:17:29:3c:37:c1:60:53:e2:37:1a:88:ab:
42:71:00:04:7d:e2:65:20:99:9f:2e:be:29:16:40:
89:f5:27:d0:d9:4f:39:fb:14:10:d2:1e:17:82:a3:
81:2e:a9:a3:be:ef:6f:32:6a:d9:f3:6e:60:bf:a8:
39:54:ee:6e:c9:fe:8b:f0:42:dd:04:b4:94:5a:c3:
d1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:29:EE:6D:17:D7:B3:86:A5:AE:E5:5F:26:4B:96:5A:00:AB:CA:77
X509v3 Authority Key Identifier:
keyid:0E:7B:F2:CE:27:D8:99:D8:E9:85:DB:D9:31:1D:F8:B2:50:C5:85:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/3130332e3235322e3130312e302f32342d3234203d3e203539313437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.252.101.0/24
Signature Algorithm: sha256WithRSAEncryption
06:3c:0e:9c:6d:4a:c6:a5:5f:dc:6e:8b:27:15:03:9a:6f:6f:
d1:46:56:39:da:d6:19:cf:80:d5:c4:00:ec:6a:fe:61:36:92:
d1:25:cc:4f:32:27:02:a7:f9:da:df:4a:38:32:05:8f:0c:ae:
81:47:28:35:9c:98:19:45:99:85:d3:94:8b:dd:22:1b:e6:b7:
52:6a:ed:40:61:14:23:f9:f7:0c:92:dc:14:17:bd:e9:1f:b1:
7c:03:36:75:d4:f7:d4:31:f2:2f:0e:ba:a5:f3:6e:6f:bd:8f:
02:59:7e:9b:65:cd:22:57:c5:00:76:23:f8:92:7d:02:62:7e:
57:79:ee:e8:9f:37:13:f1:7d:bd:8c:29:0d:f1:bd:50:0e:b8:
ef:f2:02:81:ee:c7:b0:21:09:5b:e1:6b:75:27:10:02:f4:c6:
3f:39:15:9a:4b:a2:3a:d5:50:2d:54:75:e1:7e:86:8b:52:56:
45:65:da:dd:0e:77:62:18:19:40:4a:c8:c4:11:cf:0f:5f:63:
d6:44:73:e5:8a:de:04:9c:f4:c6:a0:a8:1b:65:ff:86:d1:67:
7c:74:42:5d:88:29:57:4d:24:df:e8:af:ce:8c:90:c0:d6:6f:
06:66:a9:5d:dc:59:9c:bb:63:9d:9b:66:f6:bb:31:9c:c1:01:
b1:6f:5e:41
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUaHYKcyGO73FWQpKvhjev8KY76q0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEU3QkYyQ0UyN0Q4OTlEOEU5ODVEQkQ5MzExREY4QjI1
MEM1ODU4MTAeFw0yNjAxMjIwNzU1MDFaFw0yNzAxMjEwODAwMDFaMDMxMTAvBgNV
BAMTKDA2MjlFRTZEMTdEN0IzODZBNUFFRTU1RjI2NEI5NjVBMDBBQkNBNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD21cGdwq51ZSBU6KT8kxm0NmmY
R9XiRt1XgIjykKr/a4geY7neITOMjmBHMg4IpZ9faboj3gw7b7DtM1F0qWVTd3Wj
bMQB2mcD3swxgcLT8/X/chjjwihWSoSN7V3fktEpumGE02Bydl9f5l5kNm65CTlk
1Ggwqb9lDzdoCDBkF6cbPJwk8PaXZOWKg5vc0eBfVzj7et1l1DgMrThSK26SSgyE
5YVcnA8j1gVhEJHqePuU25C5jxcpPDfBYFPiNxqIq0JxAAR94mUgmZ8uvikWQIn1
J9DZTzn7FBDSHheCo4EuqaO+728yatnzbmC/qDlU7m7J/ovwQt0EtJRaw9HPAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUBinubRfXs4alruVfJkuWWgCryncwHwYDVR0j
BBgwFoAUDnvyzifYmdjphdvZMR34slDFhYEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
MGM1NTAzNC01ZjM2LTQxNzMtYjY0Yy1hOTc1ZTMyMzEzOGEvMC8wRTdCRjJDRTI3
RDg5OUQ4RTk4NURCRDkzMTFERjhCMjUwQzU4NTgxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMEU3QkYyQ0UyN0Q4OTlEOEU5ODVEQkQ5MzExREY4QjI1MEM1
ODU4MS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UwYzU1MDM0LTVmMzYtNDE3My1i
NjRjLWE5NzVlMzIzMTM4YS8wLzMxMzAzMzJlMzIzNTMyMmUzMTMwMzEyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNTM5MzEzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ/xlMA0GCSqG
SIb3DQEBCwUAA4IBAQAGPA6cbUrGpV/cbosnFQOab2/RRlY52tYZz4DVxADsav5h
NpLRJcxPMicCp/na30o4MgWPDK6BRyg1nJgZRZmF05SL3SIb5rdSau1AYRQj+fcM
ktwUF73pH7F8AzZ11PfUMfIvDrql825vvY8CWX6bZc0iV8UAdiP4kn0CYn5Xee7o
nzcT8X29jCkN8b1QDrjv8gKB7sewIQlb4Wt1JxAC9MY/ORWaS6I61VAtVHXhfoaL
UlZFZdrdDndiGBlASsjEEc8PX2PWRHPlit4EnPTGoKgbZf+G0Wd8dEJdiClXTSTf
6K/OjJDA1m8GZqld3Fmcu2Odm2b2uzGcwQGxb15B
-----END CERTIFICATE-----
Generated at Mon Jan 26 02:48:01 2026 by rpki-client