This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/3130332e3138362e302e302f32332d3234203d3e20313336303532.roa
File: 3130332e3138362e302e302f32332d3234203d3e20313336303532.roa (raw, json)
Hash identifier: C86D7uEekeGvTmXVujqb0bxFjg5sWER8alGR0xcQrmY=
Subject key identifier: 5E:63:A4:41:40:92:59:F8:4A:EB:DB:B8:62:AB:CD:14:96:2C:E6:AA
Certificate issuer: /CN=E0967549EF32D89E9FF1638FCF18347A1ADA5D70
Certificate serial: 2AD27A075FE60D0D038B561C49FC310A5966F3F0
Authority key identifier: E0:96:75:49:EF:32:D8:9E:9F:F1:63:8F:CF:18:34:7A:1A:DA:5D:70
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/3130332e3138362e302e302f32332d3234203d3e20313336303532.roa
Signing time: Mon 29 Dec 2025 09:02:35 +0000
ROA not before: Mon 29 Dec 2025 08:57:35 +0000
ROA not after: Mon 28 Dec 2026 09:02:35 +0000
asID: 136052
IP address blocks: 103.186.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl
rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 04:46:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:d2:7a:07:5f:e6:0d:0d:03:8b:56:1c:49:fc:31:0a:59:66:f3:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E0967549EF32D89E9FF1638FCF18347A1ADA5D70
Validity
Not Before: Dec 29 08:57:35 2025 GMT
Not After : Dec 28 09:02:35 2026 GMT
Subject: CN=5E63A441409259F84AEBDBB862ABCD14962CE6AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:64:54:eb:dd:4d:7e:1d:c8:89:92:fc:0b:5c:
15:e1:ee:44:a5:5c:1d:6b:1e:ed:bd:d6:19:66:94:
a3:48:95:a0:71:1c:af:68:0c:c4:f5:b2:e8:1a:cc:
cf:cf:d2:c9:53:fc:cf:87:f1:91:7c:1f:1f:cc:ad:
e3:cd:e7:65:47:fa:4a:23:5a:ca:5a:6f:6d:e5:c3:
99:6c:28:82:c4:15:e9:56:4e:93:57:82:b0:e9:4e:
cf:a0:45:4c:06:d8:3b:4f:4a:49:f1:03:d2:e3:14:
3a:0b:2a:5a:24:65:ca:9f:ab:c4:d6:4b:74:94:65:
a7:e0:bd:30:6e:09:72:7a:ed:f6:29:dc:af:34:69:
a6:e1:b9:d1:f1:e5:af:4d:2b:0e:c3:2b:0a:0d:f9:
82:1f:30:5a:3e:ea:96:89:2d:2e:1c:10:e4:4d:2b:
21:16:aa:4b:ad:91:17:f2:97:e1:6c:2a:05:00:ba:
13:8b:2a:59:8f:c7:d7:84:bc:ad:a8:d0:dc:c8:3a:
56:b8:f8:06:85:6b:ab:d0:94:08:99:d9:f9:af:67:
74:29:ad:c4:e8:a5:21:dd:0f:19:09:9c:e5:3e:0d:
62:70:92:9b:83:6b:81:f8:89:cf:35:dc:bc:cf:e9:
30:3a:50:76:23:a9:e5:0c:7d:46:46:c1:a3:c5:1b:
72:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:63:A4:41:40:92:59:F8:4A:EB:DB:B8:62:AB:CD:14:96:2C:E6:AA
X509v3 Authority Key Identifier:
keyid:E0:96:75:49:EF:32:D8:9E:9F:F1:63:8F:CF:18:34:7A:1A:DA:5D:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/3130332e3138362e302e302f32332d3234203d3e20313336303532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.186.0.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:4c:2e:6a:8b:60:ee:da:f0:18:9e:85:4c:b4:21:80:80:a6:
da:5c:1b:a3:79:e3:08:9f:fe:3b:b4:58:fd:3e:0c:02:05:f6:
4a:e4:e3:1b:75:56:3c:e9:95:c5:4b:cd:c5:00:d8:a0:85:f4:
07:70:58:04:1a:1f:9e:25:0f:d4:f8:6f:1c:4c:cd:e3:9d:91:
dd:ab:c6:2e:79:c3:ad:f8:eb:8a:1e:ac:d7:f3:56:66:3c:a3:
f1:89:ed:04:b3:c9:59:e3:3d:85:b5:fd:cb:b3:bf:88:4c:b5:
f3:2c:dd:3d:eb:b7:71:0d:39:66:ef:98:66:18:81:0d:65:50:
03:30:f0:6b:80:da:89:1e:3b:d3:2b:39:1b:ca:31:1a:d1:f6:
b8:34:61:40:f3:21:90:ef:db:db:db:ce:12:2f:4a:f7:23:15:
84:2e:2e:de:55:3b:99:a7:90:8c:24:aa:a6:45:84:52:52:54:
f0:27:eb:12:e1:97:1a:f1:11:c4:31:31:a5:12:20:33:91:45:
1c:dd:96:2c:4f:6a:c2:b4:c1:73:8a:14:3f:a9:78:8b:6a:96:
38:6d:47:01:59:be:68:6b:69:f9:76:19:94:ab:90:b1:25:82:
69:9b:cd:12:eb:47:ef:61:98:98:63:cb:09:c7:8a:6f:2f:24:
74:27:8a:4a
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUKtJ6B1/mDQ0Di1YcSfwxCllm8/AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTA5Njc1NDlFRjMyRDg5RTlGRjE2MzhGQ0YxODM0N0Ex
QURBNUQ3MDAeFw0yNTEyMjkwODU3MzVaFw0yNjEyMjgwOTAyMzVaMDMxMTAvBgNV
BAMTKDVFNjNBNDQxNDA5MjU5Rjg0QUVCREJCODYyQUJDRDE0OTYyQ0U2QUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkZFTr3U1+HciJkvwLXBXh7kSl
XB1rHu291hlmlKNIlaBxHK9oDMT1sugazM/P0slT/M+H8ZF8Hx/MrePN52VH+koj
Wspab23lw5lsKILEFelWTpNXgrDpTs+gRUwG2DtPSknxA9LjFDoLKlokZcqfq8TW
S3SUZafgvTBuCXJ67fYp3K80aabhudHx5a9NKw7DKwoN+YIfMFo+6paJLS4cEORN
KyEWqkutkRfyl+FsKgUAuhOLKlmPx9eEvK2o0NzIOla4+AaFa6vQlAiZ2fmvZ3Qp
rcTopSHdDxkJnOU+DWJwkpuDa4H4ic813LzP6TA6UHYjqeUMfUZGwaPFG3LRAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUXmOkQUCSWfhK69u4YqvNFJYs5qowHwYDVR0j
BBgwFoAU4JZ1Se8y2J6f8WOPzxg0ehraXXAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
MzdhNmRkOC1hODQzLTQ2OTgtYTVmMy0zZWVjNDY4ZDE0YTQvMC9FMDk2NzU0OUVG
MzJEODlFOUZGMTYzOEZDRjE4MzQ3QTFBREE1RDcwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTA5Njc1NDlFRjMyRDg5RTlGRjE2MzhGQ0YxODM0N0ExQURB
NUQ3MC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgzN2E2ZGQ4LWE4NDMtNDY5OC1h
NWYzLTNlZWM0NjhkMTRhNC8wLzMxMzAzMzJlMzEzODM2MmUzMDJlMzAyZjMyMzMy
ZDMyMzQyMDNkM2UyMDMxMzMzNjMwMzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWe6ADANBgkqhkiG
9w0BAQsFAAOCAQEAoEwuaotg7trwGJ6FTLQhgICm2lwbo3njCJ/+O7RY/T4MAgX2
SuTjG3VWPOmVxUvNxQDYoIX0B3BYBBofniUP1PhvHEzN452R3avGLnnDrfjrih6s
1/NWZjyj8YntBLPJWeM9hbX9y7O/iEy18yzdPeu3cQ05Zu+YZhiBDWVQAzDwa4Da
iR470ys5G8oxGtH2uDRhQPMhkO/b29vOEi9K9yMVhC4u3lU7maeQjCSqpkWEUlJU
8CfrEuGXGvERxDExpRIgM5FFHN2WLE9qwrTBc4oUP6l4i2qWOG1HAVm+aGtp+XYZ
lKuQsSWCaZvNEutH72GYmGPLCceKby8kdCeKSg==
-----END CERTIFICATE-----
Generated at Mon Feb 2 12:52:44 2026 by rpki-client