This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/3130332e3231372e37362e302f32342d3234203d3e20313431393035.roa
File: 3130332e3231372e37362e302f32342d3234203d3e20313431393035.roa (raw, json)
Hash identifier: wuNIHLORz4Vdmg8tO/nySnMFBaLuy8MnBl+qb8R+V1Q=
Subject key identifier: FC:57:AF:09:42:0B:E3:B6:63:95:44:D4:B3:FD:15:E1:A8:FB:C7:FB
Certificate issuer: /CN=4AAA6F5B5D0E6858FC56A304655C7BB397518DCC
Certificate serial: 6220ED9FA3FA5609FA8020901F14F5877B1CE1A4
Authority key identifier: 4A:AA:6F:5B:5D:0E:68:58:FC:56:A3:04:65:5C:7B:B3:97:51:8D:CC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/3130332e3231372e37362e302f32342d3234203d3e20313431393035.roa
Signing time: Tue 30 Dec 2025 04:02:35 +0000
ROA not before: Tue 30 Dec 2025 03:57:35 +0000
ROA not after: Tue 29 Dec 2026 04:02:35 +0000
asID: 141905
IP address blocks: 103.217.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl
rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 15:15:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:20:ed:9f:a3:fa:56:09:fa:80:20:90:1f:14:f5:87:7b:1c:e1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4AAA6F5B5D0E6858FC56A304655C7BB397518DCC
Validity
Not Before: Dec 30 03:57:35 2025 GMT
Not After : Dec 29 04:02:35 2026 GMT
Subject: CN=FC57AF09420BE3B6639544D4B3FD15E1A8FBC7FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c4:8d:2e:4b:f4:02:cb:6a:66:30:64:f0:b8:
8f:ef:20:34:00:9a:a4:99:2a:70:e7:b0:92:2d:28:
03:9c:50:e3:05:32:60:a0:1c:92:81:1c:da:13:20:
61:6d:65:24:94:33:0b:c5:fe:3c:ca:f8:04:b9:02:
e0:c8:81:42:63:65:7b:05:6f:24:f0:ff:d3:c8:87:
59:bd:3f:32:00:d9:8b:a7:96:40:32:ed:7d:ac:c4:
3b:8b:27:85:cf:18:de:6b:70:c6:42:67:aa:3f:e9:
4e:7b:0d:f5:7e:37:e0:fe:79:01:35:2f:b5:3b:56:
3f:22:c6:71:1c:4a:e0:fe:45:b4:bf:7c:7f:71:54:
ca:09:a5:c9:eb:c5:40:cb:45:1a:a6:d7:ee:7d:3b:
49:94:c9:bc:ff:fd:61:91:b9:3b:d5:0e:e8:5c:23:
ea:a5:c3:ba:46:40:09:87:1a:10:53:5b:94:4c:9d:
38:cd:fb:16:8a:72:de:ac:2e:9e:db:0c:d5:10:b5:
95:56:71:2b:e3:e9:b4:70:50:f0:71:f3:28:7a:98:
f7:06:1c:80:8c:e4:a7:ca:b1:a4:59:ad:02:a6:c1:
96:50:58:96:b5:c6:44:15:72:f2:46:a1:20:61:9a:
35:4c:9c:d4:d3:37:ed:14:ed:5c:6f:6e:8f:ce:0b:
27:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:57:AF:09:42:0B:E3:B6:63:95:44:D4:B3:FD:15:E1:A8:FB:C7:FB
X509v3 Authority Key Identifier:
keyid:4A:AA:6F:5B:5D:0E:68:58:FC:56:A3:04:65:5C:7B:B3:97:51:8D:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/3130332e3231372e37362e302f32342d3234203d3e20313431393035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.217.76.0/24
Signature Algorithm: sha256WithRSAEncryption
26:52:36:a9:20:18:99:f2:0b:8b:12:a0:2a:56:3e:1c:78:70:
2f:d1:b4:f0:7b:04:4b:24:9a:57:0c:51:19:b7:6b:5c:0e:30:
63:75:5d:9f:ba:71:7b:db:5b:05:69:20:e2:b4:04:67:7c:9e:
81:47:84:0d:66:9e:4e:6d:59:53:59:de:21:5c:ee:4f:bd:45:
3e:b5:62:96:e8:06:d0:1a:36:62:5c:9d:c4:1e:27:34:20:3a:
12:33:64:8c:65:f6:9e:6c:9f:3c:4e:83:7b:bd:4f:12:cf:14:
85:7f:06:ba:46:f6:64:69:f7:dc:c8:ba:98:ac:45:5d:d0:d2:
c8:d5:8a:7a:48:69:42:c7:49:8d:08:dd:de:ee:97:bc:e3:da:
83:0d:1e:46:3f:75:33:9a:82:c0:fe:db:0e:39:1b:51:b6:8f:
b3:4f:5d:dd:d0:3b:83:af:4d:35:cf:60:f2:13:5b:36:96:11:
ae:43:7e:33:43:0a:4c:86:a6:c4:32:a9:49:76:32:85:7c:b7:
31:c2:ad:08:7a:79:61:41:df:8e:68:4f:50:05:59:0c:81:95:
f6:81:be:8d:62:9b:4f:6e:b4:7a:74:3a:7f:99:19:27:98:64:
a8:db:fd:04:66:a4:4d:79:a6:c8:c7:e6:62:49:a7:74:fd:37:
e4:0b:fc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 14:29:39 2026 by rpki-client