This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/3130332e3130372e3133372e302f32342d3234203d3e20313530393332.roa
File: 3130332e3130372e3133372e302f32342d3234203d3e20313530393332.roa (raw, json)
Hash identifier: nO1NSzeB5XT9XzKpF7F6P+AZbf5v5+SS/A0zE49DbPg=
Subject key identifier: EF:9B:2E:2A:30:16:EF:1C:4D:4B:B6:97:F9:4D:17:1A:D1:4B:F8:A6
Certificate issuer: /CN=CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8
Certificate serial: 0F285E5E0C78F717A21992E31675AB0CD101C382
Authority key identifier: CC:2F:A8:A6:92:DD:D4:4F:4E:A7:0E:AE:AC:32:04:D5:3E:64:55:C8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/3130332e3130372e3133372e302f32342d3234203d3e20313530393332.roa
Signing time: Thu 29 Jan 2026 16:00:03 +0000
ROA not before: Thu 29 Jan 2026 15:55:03 +0000
ROA not after: Thu 28 Jan 2027 16:00:03 +0000
asID: 150932
IP address blocks: 103.107.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl
rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 04:40:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:28:5e:5e:0c:78:f7:17:a2:19:92:e3:16:75:ab:0c:d1:01:c3:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8
Validity
Not Before: Jan 29 15:55:03 2026 GMT
Not After : Jan 28 16:00:03 2027 GMT
Subject: CN=EF9B2E2A3016EF1C4D4BB697F94D171AD14BF8A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:01:7f:96:cc:f9:bc:20:8e:ef:cb:99:87:43:
34:40:00:09:f1:b7:18:af:28:7d:d8:60:f4:fd:3d:
fc:f8:3d:60:22:1a:6e:1f:c7:08:32:f8:c6:a5:49:
75:60:58:04:fb:66:99:15:e7:fb:df:9f:77:3e:61:
0e:94:30:7b:91:14:67:3a:2f:1c:1e:3d:e5:18:ef:
bf:5a:76:ea:bc:93:ef:dd:9c:1b:f5:44:12:2e:11:
d1:88:53:6e:d8:00:80:5f:2d:8e:ce:d9:85:cc:9a:
ff:39:d9:08:1e:52:31:46:c4:60:6b:6a:87:83:13:
a9:ae:0d:0e:05:2d:7e:55:cc:b9:bd:10:1d:e0:b6:
78:9f:18:8a:0e:a9:cb:8c:f4:d0:15:c3:98:ee:8b:
65:ec:df:b8:31:86:b0:6a:9e:3c:5f:c2:95:d4:e6:
bf:4c:85:b1:e6:5b:60:0c:31:82:69:07:c4:cc:ac:
13:16:49:55:fb:35:4d:ae:84:66:9c:3b:23:ec:ed:
76:2f:ce:5c:74:08:4f:73:3f:a2:40:be:ce:a5:a2:
2f:da:55:5b:96:81:44:54:f5:d8:8d:07:c1:4c:3f:
83:d3:c1:0f:35:b6:41:ea:7d:f3:77:93:ea:1b:6f:
c6:9e:07:c9:17:81:da:f8:07:b7:a2:c2:5f:dd:58:
81:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:9B:2E:2A:30:16:EF:1C:4D:4B:B6:97:F9:4D:17:1A:D1:4B:F8:A6
X509v3 Authority Key Identifier:
keyid:CC:2F:A8:A6:92:DD:D4:4F:4E:A7:0E:AE:AC:32:04:D5:3E:64:55:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/3130332e3130372e3133372e302f32342d3234203d3e20313530393332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.107.137.0/24
Signature Algorithm: sha256WithRSAEncryption
91:99:17:1d:f7:64:cd:9d:fd:4a:59:5f:cc:39:b9:a2:18:92:
14:07:91:7d:96:ae:31:2f:94:e6:bb:3d:a4:5d:a6:6d:29:8d:
65:f4:2e:0c:27:37:9f:c7:6e:28:df:6b:c2:a6:b6:21:7f:87:
8e:0e:4b:81:5e:d7:ff:e2:67:a7:be:2a:e9:36:07:8e:6e:87:
84:7e:b1:c5:a6:31:64:d6:e8:7f:74:89:56:7b:30:25:0c:7e:
eb:7b:cc:90:78:b7:8e:62:79:e5:d8:24:1e:97:f8:ff:d5:77:
10:52:37:3a:7b:5a:35:c8:a0:62:9a:bf:18:7b:b1:14:a8:53:
8e:fc:6f:8a:77:86:f3:25:c6:58:7e:fb:b0:ca:c0:b6:53:6a:
98:db:e8:97:65:f4:44:7d:99:88:e2:e7:02:08:7c:bc:46:52:
2c:1c:fa:fd:57:76:51:99:0c:4c:e4:21:99:a4:2e:6c:83:16:
f3:1a:c5:4b:4a:bf:cb:b4:73:bf:4d:95:2d:6e:ad:04:18:e6:
22:39:6e:a4:3d:3f:65:7d:38:81:75:0a:9e:6e:c5:ac:d6:88:
43:c6:00:e2:c3:86:8d:6e:74:9e:72:9d:2c:aa:d6:fa:2a:cc:
91:53:59:75:b5:e2:23:59:b6:1e:b9:78:55:09:15:6f:dd:f5:
28:a2:10:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:55:49 2026 by rpki-client