This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/3130332e37302e31392e302f32342d3234203d3e20313335343632.roa
File: 3130332e37302e31392e302f32342d3234203d3e20313335343632.roa (raw, json)
Hash identifier: AXguxGCyMmqijzUfDJ6sW4bhnWRijiQgcsQ13oNgZs4=
Subject key identifier: 17:8D:7E:D7:0A:EC:16:9C:37:8F:BD:D0:8E:4F:2B:72:B3:13:41:51
Certificate issuer: /CN=27B773A173E0400FBC0D7FEDFCFF7809B53695FC
Certificate serial: 63AA7F14AED2A590935B78615D0F4CBF4476E2EB
Authority key identifier: 27:B7:73:A1:73:E0:40:0F:BC:0D:7F:ED:FC:FF:78:09:B5:36:95:FC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/3130332e37302e31392e302f32342d3234203d3e20313335343632.roa
Signing time: Sat 31 Jan 2026 05:01:41 +0000
ROA not before: Sat 31 Jan 2026 04:56:41 +0000
ROA not after: Sat 30 Jan 2027 05:01:41 +0000
asID: 135462
IP address blocks: 103.70.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl
rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 11:38:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:aa:7f:14:ae:d2:a5:90:93:5b:78:61:5d:0f:4c:bf:44:76:e2:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27B773A173E0400FBC0D7FEDFCFF7809B53695FC
Validity
Not Before: Jan 31 04:56:41 2026 GMT
Not After : Jan 30 05:01:41 2027 GMT
Subject: CN=178D7ED70AEC169C378FBDD08E4F2B72B3134151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a6:c0:31:43:b6:46:e0:ea:f8:f0:63:a7:01:
8e:7b:75:30:22:28:34:e6:5d:1e:64:ae:7a:51:a9:
4a:8d:b2:d6:aa:0b:92:fe:c5:1e:ee:0a:e9:8c:a6:
12:90:09:79:f2:af:25:59:ea:fe:ff:cc:91:fb:bc:
1a:70:cc:ce:5f:d9:ed:58:91:47:96:92:4e:a3:bb:
e1:20:f3:d7:45:4a:6c:b9:cf:6e:80:f1:31:5e:13:
25:74:7b:24:97:c1:75:13:fe:6e:e3:5d:f8:85:b5:
b1:40:2d:9f:ad:da:5c:13:37:ef:c1:d9:79:c8:97:
06:e9:3d:85:5c:c5:f4:1f:be:bc:7c:e5:05:81:73:
15:9d:96:8f:2f:d1:76:9a:50:53:40:b6:ef:3a:3d:
c2:67:39:0f:e0:6b:4b:37:df:b9:17:88:49:05:9c:
6b:0f:e7:99:17:2d:c3:6c:75:41:a8:99:e1:80:10:
fa:c2:46:8b:ec:e3:64:5c:68:c5:b4:19:c1:e1:32:
ae:37:e2:df:3b:41:02:0b:78:44:ca:68:b6:8f:ab:
5e:3e:8e:6f:03:04:d9:8f:4d:4a:a6:74:11:2d:bc:
44:17:f2:49:29:cc:17:83:9c:f7:7a:b2:6c:f2:f0:
05:69:a8:ae:3b:64:22:a5:0d:09:54:98:70:28:d9:
43:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8D:7E:D7:0A:EC:16:9C:37:8F:BD:D0:8E:4F:2B:72:B3:13:41:51
X509v3 Authority Key Identifier:
keyid:27:B7:73:A1:73:E0:40:0F:BC:0D:7F:ED:FC:FF:78:09:B5:36:95:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/3130332e37302e31392e302f32342d3234203d3e20313335343632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.70.19.0/24
Signature Algorithm: sha256WithRSAEncryption
50:f4:e1:52:f6:d5:82:76:8e:2f:1d:f0:ab:af:0e:92:e6:4e:
c7:63:8d:59:9c:bf:67:84:6d:f9:15:7c:3e:f8:62:fd:70:7e:
e5:a0:0e:0c:cb:09:50:24:e6:f2:af:6a:7e:39:58:bb:bd:51:
7a:c7:75:43:3a:0a:32:71:38:64:0f:95:50:8f:4a:3d:a4:22:
4f:61:62:9c:aa:53:90:f8:95:8b:d0:21:85:f9:60:54:36:75:
6e:52:58:24:b9:ab:a6:fb:0e:93:a7:86:6c:48:6c:f0:be:95:
e8:ed:1a:02:4a:95:a8:3a:1e:2b:db:8a:99:be:77:4d:6c:03:
d3:4c:99:19:b6:83:24:dd:5c:f0:d0:31:c7:d8:02:c0:a2:df:
f7:8e:11:41:33:ad:00:3f:4b:32:37:df:fb:ff:7c:7f:a2:58:
44:87:8b:59:e0:00:b4:b8:6d:eb:7f:0c:34:05:b2:eb:1a:d7:
c0:0a:a1:b6:d7:ed:c5:39:bc:e0:b4:ba:ff:ca:45:f6:67:bb:
9e:73:07:53:e0:41:46:5b:da:b0:f1:08:90:a3:78:df:94:e2:
06:bf:0d:fc:b5:81:1e:b0:93:03:58:61:21:eb:58:2b:d5:ef:
6e:13:47:38:77:bd:99:d6:d1:bc:52:10:bf:3d:e1:33:a7:09:
40:2f:63:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:48:40 2026 by rpki-client