This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/3131352e3136362e3131312e302f32342d3234203d3e203136353039.roa
File: 3131352e3136362e3131312e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier: ul2W8U1WXYV/UtaI5hejlGS5Gre0MLyAGqAqqJhxqtU=
Subject key identifier: B6:D1:F2:C2:02:C1:A2:A3:DA:EB:54:32:3E:23:4C:0D:A3:55:0E:21
Certificate issuer: /CN=47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097
Certificate serial: 0EF74E04FF9E42F9E3BF767A76279767E5E0CBE7
Authority key identifier: 47:B3:FB:F3:9D:8D:FE:5B:C5:CF:D2:BE:D3:9F:0F:A1:52:61:90:97
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/3131352e3136362e3131312e302f32342d3234203d3e203136353039.roa
Signing time: Mon 12 Jan 2026 10:34:36 +0000
ROA not before: Mon 12 Jan 2026 10:29:36 +0000
ROA not after: Mon 11 Jan 2027 10:34:36 +0000
asID: 16509
IP address blocks: 115.166.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl
rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Jan 2026 22:03:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:f7:4e:04:ff:9e:42:f9:e3:bf:76:7a:76:27:97:67:e5:e0:cb:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097
Validity
Not Before: Jan 12 10:29:36 2026 GMT
Not After : Jan 11 10:34:36 2027 GMT
Subject: CN=B6D1F2C202C1A2A3DAEB54323E234C0DA3550E21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:5c:e0:76:7a:0f:d9:81:c0:ce:71:ae:f9:eb:
1b:c0:fc:d2:a2:ad:c8:91:a0:16:6e:ed:32:ec:63:
91:d0:14:0c:ba:ce:69:8e:b9:54:22:ee:4d:2c:eb:
0c:a4:c3:1b:e3:f3:1c:40:35:ac:d9:a3:dd:f7:e4:
da:73:58:2e:ac:9a:50:0b:d5:c7:e3:cb:d5:5a:3b:
91:93:1c:e5:ae:e5:07:ca:d9:1c:a3:4a:79:ac:3f:
57:47:f3:a5:67:70:7e:f9:c0:4c:dd:5e:a2:52:33:
b8:b4:eb:cb:9d:2b:7d:21:ab:79:3e:82:58:d6:f1:
c2:bd:be:b0:de:db:b7:45:62:6d:af:c3:aa:ea:9b:
10:a0:07:57:c6:72:7e:04:4a:af:2c:00:b2:69:2c:
39:f5:e6:2b:76:e2:d1:af:01:94:9e:8d:97:6b:69:
ec:4e:fe:e2:8b:da:2c:94:98:e8:6a:d0:f0:91:96:
ff:31:b7:1e:3b:68:6e:a2:00:f4:45:aa:9b:f7:e7:
c1:19:66:c0:7e:9f:20:3d:7d:af:49:ee:e4:ec:1f:
11:02:1e:f1:a3:96:9f:3d:84:1e:c1:64:63:c4:2a:
dd:5f:a8:f2:92:67:78:1e:56:43:8d:c8:b9:f5:ee:
31:7a:59:3e:19:e6:a9:80:a2:ec:95:ec:e3:63:07:
53:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D1:F2:C2:02:C1:A2:A3:DA:EB:54:32:3E:23:4C:0D:A3:55:0E:21
X509v3 Authority Key Identifier:
keyid:47:B3:FB:F3:9D:8D:FE:5B:C5:CF:D2:BE:D3:9F:0F:A1:52:61:90:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/3131352e3136362e3131312e302f32342d3234203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
115.166.111.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:7c:ba:74:22:4a:2a:37:d1:43:cc:3a:1b:c4:11:64:5c:6d:
b0:b5:b5:b1:9a:d2:8d:1c:a4:d0:29:a2:51:fe:58:c7:11:00:
55:3a:27:74:bb:06:2d:2f:bf:c4:6e:55:6d:94:d2:a8:64:f6:
0c:a2:77:96:44:e4:b3:10:e5:a0:06:dd:2b:7b:12:0e:a3:59:
0f:41:6d:df:95:b6:3f:fc:b5:17:d2:56:11:f3:f4:1f:1c:d9:
93:65:49:44:f0:8a:6c:1b:7b:4a:77:18:88:24:26:62:25:9a:
93:a2:f8:1c:22:3e:8a:9d:12:e5:71:17:ee:f7:0c:5f:4e:b8:
29:21:42:fb:0f:fc:19:5b:bf:41:0d:6c:9d:c0:05:85:88:22:
b5:f3:0f:18:44:a1:62:04:3c:ac:17:27:a7:b5:96:bd:30:bd:
f9:f1:26:d6:88:48:0d:34:6e:dd:c6:08:09:aa:fb:5b:a4:c8:
93:17:f7:c4:55:4b:a1:8a:06:e6:6f:ae:37:44:7e:45:3d:ac:
ad:f8:9e:6d:c8:9c:4e:44:d3:f7:28:8d:41:c9:a7:2e:17:99:
d8:e4:b2:d5:4b:51:63:db:cc:3b:3c:2f:82:18:ff:c2:2e:32:
04:b0:d6:a0:1e:74:7a:fc:e7:39:71:88:3b:39:28:dd:89:3c:
90:75:82:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 17 06:46:19 2026 by rpki-client