This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/3130332e3137362e3132312e302f32342d3234203d3e20313437313330.roa
File: 3130332e3137362e3132312e302f32342d3234203d3e20313437313330.roa (raw, json)
Hash identifier: xqL8JOMJ906yAgKnHwC0yl7wsLpMrGYzubu/LzCqKtY=
Subject key identifier: DD:9E:CE:66:BA:1B:FF:4A:AC:8E:55:ED:9D:49:B9:4C:98:43:92:71
Certificate issuer: /CN=E0B1DDE4FA587276778B8ED650B682C82290CC74
Certificate serial: 2BFEEDE3F8F2D80822990769119E0724538B2AE3
Authority key identifier: E0:B1:DD:E4:FA:58:72:76:77:8B:8E:D6:50:B6:82:C8:22:90:CC:74
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B1DDE4FA587276778B8ED650B682C82290CC74.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/3130332e3137362e3132312e302f32342d3234203d3e20313437313330.roa
Signing time: Mon 02 Feb 2026 09:00:00 +0000
ROA not before: Mon 02 Feb 2026 08:55:00 +0000
ROA not after: Mon 01 Feb 2027 09:00:00 +0000
asID: 147130
IP address blocks: 103.176.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/E0B1DDE4FA587276778B8ED650B682C82290CC74.crl
rsync://repo-rpki.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/E0B1DDE4FA587276778B8ED650B682C82290CC74.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B1DDE4FA587276778B8ED650B682C82290CC74.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:fe:ed:e3:f8:f2:d8:08:22:99:07:69:11:9e:07:24:53:8b:2a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E0B1DDE4FA587276778B8ED650B682C82290CC74
Validity
Not Before: Feb 2 08:55:00 2026 GMT
Not After : Feb 1 09:00:00 2027 GMT
Subject: CN=DD9ECE66BA1BFF4AAC8E55ED9D49B94C98439271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:8f:68:19:f6:8e:72:7a:98:18:d8:7b:48:6d:
ab:81:a7:d5:8b:e2:98:9e:75:45:07:17:07:ec:95:
05:2c:e9:21:c4:d1:48:74:03:96:e4:a2:65:b8:ab:
e9:cf:6f:b1:9b:a7:2f:a9:c9:38:ea:36:67:73:97:
64:e4:ab:04:bb:57:42:05:a4:ec:a4:08:90:6e:bc:
f0:9f:6a:88:90:de:a4:35:60:6a:fa:9f:2a:6d:7d:
f0:75:29:75:67:b8:be:ad:2e:fd:59:3b:6f:b2:e7:
17:ad:b4:a2:ce:bf:fe:1c:76:c4:75:0d:83:35:ab:
8c:dc:33:27:e3:e3:96:ae:10:ee:3e:fe:cd:a9:be:
11:5e:ca:cf:a5:77:fb:3e:6b:8b:c5:50:6f:cc:f5:
9f:86:ec:8f:f1:29:6e:80:d2:51:3c:ef:c3:2e:67:
e6:a0:90:ca:e8:32:1d:6c:04:4a:e2:e5:3c:d3:89:
24:88:6b:7f:b0:81:76:33:3a:5f:b8:2a:ef:19:6b:
15:ee:17:f7:30:45:f7:e4:10:d4:0a:00:c5:b8:a7:
7e:0e:34:40:40:a8:81:b6:20:1f:09:85:ed:91:a0:
1c:4b:e9:55:12:1c:44:d0:e1:3f:bb:63:08:df:1f:
45:fe:fa:24:6b:48:6e:48:83:24:bf:ae:ad:36:11:
c8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9E:CE:66:BA:1B:FF:4A:AC:8E:55:ED:9D:49:B9:4C:98:43:92:71
X509v3 Authority Key Identifier:
keyid:E0:B1:DD:E4:FA:58:72:76:77:8B:8E:D6:50:B6:82:C8:22:90:CC:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/E0B1DDE4FA587276778B8ED650B682C82290CC74.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B1DDE4FA587276778B8ED650B682C82290CC74.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/3130332e3137362e3132312e302f32342d3234203d3e20313437313330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.176.121.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:32:69:04:12:af:1c:95:5e:33:f7:06:d1:91:44:f2:e1:24:
ec:99:6e:c2:85:4e:93:18:81:cc:34:42:99:f4:cf:d8:ab:ff:
7f:1f:6b:31:da:f8:d6:57:c8:6a:d2:d5:4f:fe:b1:37:57:8f:
8d:50:c7:38:1c:a5:b6:86:75:8f:9a:9e:bf:15:4a:55:6a:c3:
8d:d6:6b:c1:b5:85:42:03:02:7b:e7:35:07:86:94:72:57:b5:
f7:5c:70:ed:68:5e:51:c6:a1:84:9b:15:4f:4f:69:69:89:a8:
c9:74:ef:26:9f:ce:f4:d7:42:9f:7e:c7:75:f3:be:00:14:a2:
5f:a4:c5:a5:4b:be:2c:a9:af:0b:b8:5c:1e:03:a5:1b:2c:e8:
27:68:98:86:48:8e:e1:26:5f:3d:6c:ac:a1:f0:f7:b9:c0:b2:
20:4d:e1:71:3e:5d:a6:e8:2c:55:f1:1a:5c:26:14:92:90:de:
c9:e2:48:5d:d0:e5:ba:1e:e0:6c:11:7d:4b:8e:b3:f3:8f:6b:
e1:1a:70:d6:57:15:5a:f3:8f:29:cc:aa:f8:36:c4:3a:38:b0:
5d:b4:1f:f1:ae:be:41:23:c9:31:2e:3c:32:e7:73:dc:a0:07:
f9:7a:32:7a:df:3e:6a:fc:3a:98:12:20:18:36:1f:2a:1d:94:
12:36:60:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 13:04:45 2026 by rpki-client