This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/3130332e34332e32372e302f32342d3234203d3e20313530323832.roa
File: 3130332e34332e32372e302f32342d3234203d3e20313530323832.roa (raw, json)
Hash identifier: lAY4AFx6j4ENTtX/5Sic1TWQTEW1WElYGoOsg0fzrX4=
Subject key identifier: EE:20:0C:C8:E0:BB:05:80:96:B6:12:D4:49:C6:40:6B:BA:93:0C:C9
Certificate issuer: /CN=BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F
Certificate serial: 68C13340A0DE6F22D933858ADD23DD6F2B3E0592
Authority key identifier: BE:E3:6A:B8:35:1A:FE:80:F1:B0:CE:8F:12:AA:40:08:98:29:BB:6F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/3130332e34332e32372e302f32342d3234203d3e20313530323832.roa
Signing time: Sat 27 Dec 2025 04:00:02 +0000
ROA not before: Sat 27 Dec 2025 03:55:02 +0000
ROA not after: Sat 26 Dec 2026 04:00:02 +0000
asID: 150282
IP address blocks: 103.43.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl
rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 21:34:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:c1:33:40:a0:de:6f:22:d9:33:85:8a:dd:23:dd:6f:2b:3e:05:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F
Validity
Not Before: Dec 27 03:55:02 2025 GMT
Not After : Dec 26 04:00:02 2026 GMT
Subject: CN=EE200CC8E0BB058096B612D449C6406BBA930CC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b3:fc:27:4d:36:94:11:6e:59:85:61:46:2d:
1a:8b:80:99:d2:eb:a8:05:7a:1d:e6:49:77:ca:81:
0d:40:67:70:ca:35:8a:25:22:dd:47:a6:0a:1b:61:
dc:ae:e4:03:ac:ce:d0:a7:33:94:04:ff:9a:d3:c0:
b1:be:c5:3e:f3:5b:db:73:64:84:e8:f7:42:56:0b:
22:94:50:9f:12:15:eb:8a:15:52:53:f7:6c:b3:c9:
f5:39:51:05:6f:66:d8:ec:58:36:e2:44:79:cf:ae:
6c:54:44:bf:39:73:4b:0b:5a:0f:92:39:d8:2f:d5:
0a:47:8c:62:16:25:d2:e8:6e:01:ec:f5:07:32:6d:
33:08:fb:68:b6:3d:6b:0e:3b:cc:07:52:bf:f4:99:
32:a2:47:da:77:30:90:80:4e:3b:79:e8:9f:22:db:
41:c6:c4:af:60:51:e6:3e:80:91:db:33:1a:40:49:
20:ef:21:e5:a3:05:20:57:57:63:5b:15:52:52:24:
ee:66:ca:ba:a0:91:3d:94:29:34:1b:ac:62:ef:a3:
81:3a:23:19:ff:a3:a7:40:3b:18:db:5d:33:78:ed:
a0:53:71:33:2c:f1:23:f6:0f:52:3b:9e:32:95:4a:
16:f6:42:fa:c2:a2:52:dd:eb:81:20:b3:3a:34:1a:
9f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:20:0C:C8:E0:BB:05:80:96:B6:12:D4:49:C6:40:6B:BA:93:0C:C9
X509v3 Authority Key Identifier:
keyid:BE:E3:6A:B8:35:1A:FE:80:F1:B0:CE:8F:12:AA:40:08:98:29:BB:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/3130332e34332e32372e302f32342d3234203d3e20313530323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.43.27.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:6c:e4:79:9f:9d:69:bc:de:80:8d:8f:d5:68:c5:c9:fa:e4:
b0:82:d1:6f:11:02:d8:38:30:0d:82:2b:1a:04:92:78:13:52:
1c:47:65:98:3b:ce:82:23:0d:e6:57:cc:c3:43:d6:85:08:ab:
37:7b:31:37:64:93:0c:b9:3d:b3:be:c8:09:5f:4e:95:1d:86:
42:8d:54:70:ad:41:d2:15:4a:9f:d0:6f:06:17:13:2d:dc:b0:
a2:7b:95:d6:e5:ad:43:b6:47:4c:d3:b6:cb:ae:dd:24:0a:3a:
e5:50:a1:6e:c9:3f:0e:f8:40:cf:ef:eb:73:ee:32:fc:66:2b:
0e:bf:c1:7e:14:9a:4c:7f:77:e3:81:2a:26:cf:90:58:3f:fa:
6a:eb:90:11:1f:d1:6b:eb:1d:e6:b2:53:28:8d:e0:14:ef:73:
ab:ff:07:8a:5f:7f:ff:b7:39:1e:cc:3e:41:f3:8d:07:61:3d:
2d:db:f1:39:0b:36:4b:16:50:ad:08:38:22:0f:ad:35:61:68:
a4:c1:05:29:38:8e:c4:ac:f5:b2:c0:60:3f:e3:a2:c9:22:48:
cf:93:0f:a5:e6:4f:32:4b:a6:6a:1d:64:99:2f:09:27:bf:00:
2f:6a:f0:ed:1e:87:02:67:97:4e:c8:84:bd:02:51:23:e3:b1:
63:d6:44:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 17:24:21 2026 by rpki-client