This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e36342e302f31392d3139203d3e203233363935.roa
File: 3230322e3137332e36342e302f31392d3139203d3e203233363935.roa (raw, json)
Hash identifier: 3zAwn0LWduUa/pmYsLoRj2cHE8oZcWbcaPjPRgNxwJg=
Subject key identifier: E7:C0:BC:56:C9:D4:56:A4:9F:B1:09:DC:D3:FE:B8:7C:FC:32:49:60
Certificate issuer: /CN=41E09326F68CE0113635EACAF4E37394AE4E2D8C
Certificate serial: 6BE6BEF41BD304D1459FDE6145D4B74BD117229C
Authority key identifier: 41:E0:93:26:F6:8C:E0:11:36:35:EA:CA:F4:E3:73:94:AE:4E:2D:8C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e36342e302f31392d3139203d3e203233363935.roa
Signing time: Wed 28 Jan 2026 07:00:01 +0000
ROA not before: Wed 28 Jan 2026 06:55:01 +0000
ROA not after: Wed 27 Jan 2027 07:00:01 +0000
asID: 23695
IP address blocks: 202.173.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl
rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 07:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:e6:be:f4:1b:d3:04:d1:45:9f:de:61:45:d4:b7:4b:d1:17:22:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41E09326F68CE0113635EACAF4E37394AE4E2D8C
Validity
Not Before: Jan 28 06:55:01 2026 GMT
Not After : Jan 27 07:00:01 2027 GMT
Subject: CN=E7C0BC56C9D456A49FB109DCD3FEB87CFC324960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6a:75:78:df:71:90:5b:47:13:47:b3:1f:2f:
82:9f:b9:14:18:88:3b:c5:43:b2:96:26:7f:3f:c0:
03:2c:e7:d5:b1:56:7c:57:ae:c7:7a:16:39:88:58:
93:34:2b:6e:87:e5:20:59:db:6f:4e:22:cf:e2:d2:
c7:dd:2c:3b:4a:49:3c:b5:0a:67:64:08:87:fa:d0:
dd:ae:19:c6:7b:bc:6c:fc:fa:b3:0a:ff:a1:48:3c:
3e:15:1c:35:c1:c6:ec:c3:f9:5e:85:eb:3d:66:08:
85:70:97:86:45:ff:57:52:7e:e6:a7:9c:9c:52:91:
fa:d6:b5:5a:3e:4a:64:ec:9e:56:b2:05:52:2e:3d:
25:a8:f5:d3:50:4b:ac:1c:f5:bf:cb:2b:6a:eb:cf:
90:e7:f9:a4:8b:05:49:12:f2:04:97:e8:a1:39:96:
45:f3:f3:5d:9c:84:77:1a:63:28:a5:58:94:69:74:
ad:f5:e3:03:22:66:c6:b1:7b:dc:98:9e:1b:b7:4a:
a5:01:16:23:c5:7a:8a:ec:03:b0:7c:21:b9:46:93:
2c:e7:20:05:04:27:19:bb:a1:b3:b2:39:1f:d2:e9:
b2:b3:c2:4c:3c:52:a9:45:0f:ca:f0:17:09:f7:ee:
71:c3:a4:7c:1a:ba:45:a2:75:4e:1a:c8:d0:46:f2:
bc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C0:BC:56:C9:D4:56:A4:9F:B1:09:DC:D3:FE:B8:7C:FC:32:49:60
X509v3 Authority Key Identifier:
keyid:41:E0:93:26:F6:8C:E0:11:36:35:EA:CA:F4:E3:73:94:AE:4E:2D:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e36342e302f31392d3139203d3e203233363935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.173.64.0/19
Signature Algorithm: sha256WithRSAEncryption
c3:3d:00:41:e2:55:0d:46:ca:04:0f:94:97:78:6a:b8:17:5b:
82:11:2a:92:69:96:e9:a5:e0:25:d0:e1:3c:6e:0d:6a:24:0a:
8b:2f:b1:a1:2e:e2:31:88:7b:b7:e5:43:e4:eb:95:d8:0f:fc:
98:b7:a6:5c:db:06:50:63:75:ad:57:79:51:76:e5:39:58:c7:
f1:08:85:41:ac:6f:42:dd:1a:15:0c:dd:34:bc:69:ef:05:c0:
a9:a1:58:25:0d:3d:91:ec:97:5a:87:69:24:0a:8a:3a:89:3f:
07:2b:29:5c:11:9c:77:13:d3:93:7f:23:d7:59:3d:55:c0:e3:
b5:f1:4c:ba:bb:b9:95:66:f6:bb:d3:01:8e:75:70:4c:48:f4:
14:0c:a3:7f:cf:2a:6b:6b:cc:c5:30:16:d6:90:7f:44:e8:eb:
b8:b9:37:3f:7d:5b:11:53:6c:ad:2e:80:80:ff:26:64:64:20:
4b:c8:7d:2c:7d:0a:e6:00:1c:4b:f9:4b:c9:d3:64:6a:4a:a8:
8f:52:22:91:22:ab:e8:2d:2e:34:2f:dd:4f:8f:a6:a4:b6:10:
96:63:d4:4b:8b:89:b5:04:fe:5e:4d:fb:01:58:c2:5a:e5:87:
5e:db:22:77:07:90:59:a5:42:f6:66:40:71:70:20:19:4e:73:
29:78:4e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 16:00:17 2026 by rpki-client