This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/3130332e3139312e3135322e302f32332d3233203d3e20313439393636.roa
File: 3130332e3139312e3135322e302f32332d3233203d3e20313439393636.roa (raw, json)
Hash identifier: SZaaGTU7Ml8jWCbKrNjqIW0C9KF2w5O7LOyZWxmWFS0=
Subject key identifier: 87:EE:C5:74:7F:1E:AB:68:97:E0:98:58:24:1D:E1:DE:4F:EE:5A:14
Certificate issuer: /CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47
Certificate serial: 420986D0E0859B6D1043D9A8526449D2536D7E71
Authority key identifier: 28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/3130332e3139312e3135322e302f32332d3233203d3e20313439393636.roa
Signing time: Sat 15 Nov 2025 05:54:26 +0000
ROA not before: Sat 15 Nov 2025 05:49:26 +0000
ROA not after: Sat 14 Nov 2026 05:54:26 +0000
asID: 149966
IP address blocks: 103.191.152.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl
rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 04:44:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:09:86:d0:e0:85:9b:6d:10:43:d9:a8:52:64:49:d2:53:6d:7e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47
Validity
Not Before: Nov 15 05:49:26 2025 GMT
Not After : Nov 14 05:54:26 2026 GMT
Subject: CN=87EEC5747F1EAB6897E09858241DE1DE4FEE5A14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ad:1a:3e:4d:00:67:ae:9f:31:45:d9:1a:ec:
42:51:29:d1:29:ea:7e:91:5a:b4:c1:03:5e:1f:b9:
f5:89:55:dc:4a:ed:c6:7d:12:23:45:db:2f:7c:2f:
06:e6:54:a9:17:e5:97:3a:41:2b:74:7d:dc:42:e5:
ff:a0:42:f5:54:26:4c:d9:0f:2f:52:7c:7c:77:39:
b1:0f:74:cd:f4:a6:c3:22:71:db:bb:b8:fa:b0:77:
38:1e:19:8a:d5:9a:32:c5:19:02:0e:85:6f:25:42:
c9:6c:81:cf:42:99:bd:92:f1:d5:d5:60:79:31:be:
69:e4:fc:53:6c:a4:b6:dd:07:7f:fa:58:91:58:36:
b1:2b:7f:6a:8e:70:2e:3b:3c:2d:98:ad:94:f1:0d:
b1:ac:d2:a6:53:9a:46:8e:aa:cf:dc:a0:ac:40:f6:
64:5d:ec:91:fa:47:f6:d8:17:70:f9:c1:ad:bc:c1:
d7:c1:13:df:e8:d7:1f:e7:f2:01:82:31:a7:b8:fd:
06:22:a5:13:62:c1:c4:b0:6d:01:b5:70:3c:3e:fc:
20:cf:14:40:91:cf:b8:d1:7c:24:97:f2:7a:7d:1a:
94:24:8a:37:43:59:5b:b9:24:0d:17:f9:b3:e5:11:
f0:50:5c:fe:c2:dc:2a:da:ad:8e:17:e8:f9:00:0b:
a7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:EE:C5:74:7F:1E:AB:68:97:E0:98:58:24:1D:E1:DE:4F:EE:5A:14
X509v3 Authority Key Identifier:
keyid:28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/3130332e3139312e3135322e302f32332d3233203d3e20313439393636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.191.152.0/23
Signature Algorithm: sha256WithRSAEncryption
83:80:bd:06:b6:3b:a6:ef:a6:0e:be:5e:83:c6:cf:52:44:8b:
2a:05:61:ff:e6:91:71:36:7d:17:56:20:34:4d:d4:53:73:70:
b3:e2:b7:7d:09:4b:1e:2b:33:c3:ed:d6:d3:81:bb:87:48:af:
f1:ed:44:6f:c5:27:08:1d:21:aa:f8:bb:a0:4b:b7:13:f6:89:
af:07:10:cd:29:dc:20:73:96:28:15:a1:69:32:e6:3f:38:d5:
af:1e:7e:e7:33:d4:e4:60:b9:35:9a:46:79:2a:71:02:47:d1:
2a:f0:53:e4:40:78:e9:9e:e4:c1:bc:52:27:1d:bc:7c:33:71:
28:a8:36:35:13:73:f6:02:d8:9c:56:3a:98:82:d4:ba:45:12:
af:31:b5:39:74:10:d3:4f:c1:1f:66:9a:10:bb:75:a5:5e:ce:
d0:14:46:a4:e3:9f:58:86:f6:97:dd:d9:f2:45:a0:d6:1c:de:
df:e0:f7:33:48:dc:a3:a6:a6:52:08:fd:d4:40:a1:c8:34:ae:
bf:0f:72:5a:56:a4:c1:7e:d8:5a:63:51:52:13:97:f6:75:e4:
eb:11:5b:c0:a5:ac:03:78:f9:58:3d:da:6e:9e:f8:e0:3d:16:
3d:01:bd:f9:02:14:0a:ba:bb:a7:3a:a9:0a:2a:e8:a6:2f:69:
9e:70:c7:4c
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUQgmG0OCFm20QQ9moUmRJ0lNtfnEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNFNTA0
MzFGMEY0NzAeFw0yNTExMTUwNTQ5MjZaFw0yNjExMTQwNTU0MjZaMDMxMTAvBgNV
BAMTKDg3RUVDNTc0N0YxRUFCNjg5N0UwOTg1ODI0MURFMURFNEZFRTVBMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDArRo+TQBnrp8xRdka7EJRKdEp
6n6RWrTBA14fufWJVdxK7cZ9EiNF2y98LwbmVKkX5Zc6QSt0fdxC5f+gQvVUJkzZ
Dy9SfHx3ObEPdM30psMicdu7uPqwdzgeGYrVmjLFGQIOhW8lQslsgc9Cmb2S8dXV
YHkxvmnk/FNspLbdB3/6WJFYNrErf2qOcC47PC2YrZTxDbGs0qZTmkaOqs/coKxA
9mRd7JH6R/bYF3D5wa28wdfBE9/o1x/n8gGCMae4/QYipRNiwcSwbQG1cDw+/CDP
FECRz7jRfCSX8np9GpQkijdDWVu5JA0X+bPlEfBQXP7C3CrarY4X6PkAC6dTAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUh+7FdH8eq2iX4JhYJB3h3k/uWhQwHwYDVR0j
BBgwFoAUKKv4UipDz3zHJXkFpbo+UEMfD0cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
NmE2Y2ExMi1iMjg3LTRhYzctODdiOC02Y2Q3MzM1M2U2N2YvMC8yOEFCRjg1MjJB
NDNDRjdDQzcyNTc5MDVBNUJBM0U1MDQzMUYwRjQ3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNFNTA0MzFG
MEY0Ny5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI2YTZjYTEyLWIyODctNGFjNy04
N2I4LTZjZDczMzUzZTY3Zi8wLzMxMzAzMzJlMzEzOTMxMmUzMTM1MzIyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzkzOTM2MzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnv5gwDQYJ
KoZIhvcNAQELBQADggEBAIOAvQa2O6bvpg6+XoPGz1JEiyoFYf/mkXE2fRdWIDRN
1FNzcLPit30JSx4rM8Pt1tOBu4dIr/HtRG/FJwgdIar4u6BLtxP2ia8HEM0p3CBz
ligVoWky5j841a8efucz1ORguTWaRnkqcQJH0SrwU+RAeOme5MG8UicdvHwzcSio
NjUTc/YC2JxWOpiC1LpFEq8xtTl0ENNPwR9mmhC7daVeztAURqTjn1iG9pfd2fJF
oNYc3t/g9zNI3KOmplII/dRAocg0rr8PclpWpMF+2FpjUVITl/Z15OsRW8ClrAN4
+Vg92m6e+OA9Fj0BvfkCFAq6u6c6qQoq6KYvaZ5wx0w=
-----END CERTIFICATE-----
Generated at Wed Dec 3 15:26:56 2025 by rpki-client