This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/3130332e37302e31362e302f32322d3232203d3e20313335343632.roa
File: 3130332e37302e31362e302f32322d3232203d3e20313335343632.roa (raw, json)
Hash identifier: 1OEa/bsOORulkyfivOT1LWE6Ar5F7pwDFWbnAlkWMec=
Subject key identifier: 73:0F:99:46:43:A0:1F:76:41:7D:43:B3:11:E7:B7:8E:50:1C:55:8D
Certificate issuer: /CN=27B773A173E0400FBC0D7FEDFCFF7809B53695FC
Certificate serial: 66325536F3A4757E42009E41822C85DFDD308BF6
Authority key identifier: 27:B7:73:A1:73:E0:40:0F:BC:0D:7F:ED:FC:FF:78:09:B5:36:95:FC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/3130332e37302e31362e302f32322d3232203d3e20313335343632.roa
Signing time: Sat 31 Jan 2026 05:01:41 +0000
ROA not before: Sat 31 Jan 2026 04:56:41 +0000
ROA not after: Sat 30 Jan 2027 05:01:41 +0000
asID: 135462
IP address blocks: 103.70.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl
rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 11:38:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:32:55:36:f3:a4:75:7e:42:00:9e:41:82:2c:85:df:dd:30:8b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27B773A173E0400FBC0D7FEDFCFF7809B53695FC
Validity
Not Before: Jan 31 04:56:41 2026 GMT
Not After : Jan 30 05:01:41 2027 GMT
Subject: CN=730F994643A01F76417D43B311E7B78E501C558D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0c:40:ae:83:39:20:78:7b:49:5d:9a:77:98:
73:f9:ee:96:d2:fd:ec:24:de:2f:96:3c:21:fa:10:
3c:95:c3:f0:e4:58:8b:f0:85:d2:9f:e7:0e:0c:b1:
88:3a:fa:78:8e:30:5a:3b:34:ca:f5:0d:c8:d1:12:
1f:10:05:f7:90:67:03:10:ce:a9:23:65:17:eb:8d:
d4:b3:2b:f8:72:76:43:47:3a:d2:c8:51:b1:85:77:
07:b4:12:a3:5e:c6:e3:39:6b:c6:56:70:36:22:fb:
9f:4f:a1:a2:96:57:81:00:6a:92:c9:73:b2:fd:6c:
b4:e7:0c:0f:d3:9a:61:36:d2:14:5e:27:c5:dd:b0:
86:ab:56:2f:45:94:73:07:2d:b1:fd:2a:56:6c:44:
ad:e8:96:ce:fc:07:03:4e:67:a9:75:49:43:dd:4a:
71:bc:5a:8e:d2:9b:4a:b4:8e:7a:9a:ff:de:33:7f:
97:2d:6e:95:22:30:da:d4:ed:d3:c5:27:8a:67:e9:
e3:e5:97:1c:d0:b2:6a:28:85:a0:1b:0c:8f:18:a6:
87:5b:e9:71:38:5f:f1:69:ce:fb:17:27:06:22:ad:
b1:31:6a:ec:62:a9:9e:2d:f9:8a:c9:35:42:b2:66:
f5:53:08:d2:98:ea:39:12:1a:65:9c:a5:a5:a9:49:
fb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:0F:99:46:43:A0:1F:76:41:7D:43:B3:11:E7:B7:8E:50:1C:55:8D
X509v3 Authority Key Identifier:
keyid:27:B7:73:A1:73:E0:40:0F:BC:0D:7F:ED:FC:FF:78:09:B5:36:95:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/3130332e37302e31362e302f32322d3232203d3e20313335343632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.70.16.0/22
Signature Algorithm: sha256WithRSAEncryption
22:79:3a:cb:92:38:37:8b:22:f2:9c:7a:4d:fe:a0:5b:19:6d:
96:13:04:f2:ac:0a:21:57:96:78:a1:92:95:c8:88:7d:71:bb:
46:55:a9:8b:40:eb:ea:28:8c:22:7c:31:a4:59:2f:bc:8c:e5:
d0:62:a8:6a:8c:9d:bc:a9:c5:fc:02:ad:f1:39:56:3d:ca:12:
7b:36:85:93:36:89:7a:a6:a1:f7:fd:f2:d0:eb:b9:55:96:b2:
b2:ac:98:02:15:c3:43:97:0f:5d:ba:af:a1:4d:60:6c:72:d6:
48:09:d6:35:12:08:5b:09:3e:5c:33:24:89:70:2d:6c:55:45:
7d:0e:18:2b:9d:24:5f:66:c0:4b:86:44:56:e1:08:d8:2a:68:
59:c9:5b:ea:6c:03:5c:af:c4:61:45:40:f6:45:11:5f:e2:ed:
9d:a1:b0:0f:1f:89:b6:a1:d4:05:93:89:52:90:b9:f1:af:02:
84:3a:0d:f9:f0:e2:61:58:15:a1:31:6d:ba:45:cb:3a:65:ba:
c6:63:cc:c1:f5:62:61:04:2a:c1:e0:40:cc:dc:7f:4b:16:78:
0d:ee:94:02:1f:a5:58:7f:71:0e:40:4d:be:50:69:24:d2:63:
01:db:15:d8:ce:99:de:31:9a:0c:84:cd:d0:d5:0f:ca:aa:d5:
28:ed:9a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:48:43 2026 by rpki-client