This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/3130332e38362e3131362e302f32332d3233203d3e20313530353532.roa
File: 3130332e38362e3131362e302f32332d3233203d3e20313530353532.roa (raw, json)
Hash identifier: gK1xwa1IRVWzH9jnWujpMkoyIuM1Zd6H+mqdxxClcIU=
Subject key identifier: 85:F6:6B:FE:9D:55:1E:77:DC:2D:A6:B0:57:74:78:E4:F0:32:B4:A7
Certificate issuer: /CN=1160709118182E564A6D9E250FF5000EFA5166A5
Certificate serial: 1EDED16119E2CE3260D72B915E4C62FAA5DD5B38
Authority key identifier: 11:60:70:91:18:18:2E:56:4A:6D:9E:25:0F:F5:00:0E:FA:51:66:A5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/3130332e38362e3131362e302f32332d3233203d3e20313530353532.roa
Signing time: Tue 30 Dec 2025 03:00:02 +0000
ROA not before: Tue 30 Dec 2025 02:55:02 +0000
ROA not after: Tue 29 Dec 2026 03:00:02 +0000
asID: 150552
IP address blocks: 103.86.116.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.crl
rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 03:33:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:de:d1:61:19:e2:ce:32:60:d7:2b:91:5e:4c:62:fa:a5:dd:5b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1160709118182E564A6D9E250FF5000EFA5166A5
Validity
Not Before: Dec 30 02:55:02 2025 GMT
Not After : Dec 29 03:00:02 2026 GMT
Subject: CN=85F66BFE9D551E77DC2DA6B0577478E4F032B4A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d1:de:a1:8f:60:56:ac:31:d9:af:b9:88:a7:
75:f4:52:17:42:a6:99:de:58:2c:eb:6c:26:02:2b:
57:1a:09:31:9e:a6:89:b9:6f:76:fb:82:fa:89:91:
de:80:66:be:c5:2d:7f:92:d2:c6:bc:4f:22:96:3b:
e1:d2:6d:4d:87:2b:5b:7a:37:6e:b2:d5:f9:89:43:
6d:ef:f8:51:5f:5c:68:a7:ce:5e:99:38:73:db:29:
d0:7a:58:10:45:52:0c:f9:45:ff:b1:e4:48:dc:ac:
51:b1:02:57:51:a2:b7:8e:ce:c1:1d:68:ef:51:93:
ab:b3:b0:fb:c1:91:b2:f5:85:93:15:57:b6:32:46:
16:79:c1:79:cb:c8:bb:f2:c2:48:ac:25:45:b5:db:
4f:47:7a:b8:8f:04:ec:43:f9:3b:5f:0e:d5:4c:ad:
3e:dd:cb:b8:2f:9d:35:9c:2c:bb:81:1d:82:e8:a1:
6f:9b:43:84:f1:03:2a:99:ad:24:b9:5d:b8:e8:9c:
dc:40:0f:e5:6c:03:66:07:6d:e6:0a:43:02:13:44:
56:bb:40:84:6e:b9:d8:58:04:5b:1e:7c:ea:b3:27:
60:6e:05:a0:5e:b6:21:15:9e:73:f9:08:17:ec:2f:
6e:f9:c0:ab:47:7f:c6:99:66:f9:84:ec:df:09:ee:
ec:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F6:6B:FE:9D:55:1E:77:DC:2D:A6:B0:57:74:78:E4:F0:32:B4:A7
X509v3 Authority Key Identifier:
keyid:11:60:70:91:18:18:2E:56:4A:6D:9E:25:0F:F5:00:0E:FA:51:66:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/3130332e38362e3131362e302f32332d3233203d3e20313530353532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.86.116.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:81:61:2c:f8:66:42:3e:bf:22:fd:9a:e2:76:f3:59:f5:ed:
c6:87:f3:89:d5:1d:15:b3:6c:3a:45:ec:f0:2f:76:02:3e:d3:
7a:de:dc:4b:78:51:18:2b:e6:78:73:72:92:82:c5:d4:d1:28:
e5:8d:22:d1:39:2f:16:4b:a7:61:35:ef:b9:e9:b7:43:ed:e5:
96:9b:69:9d:4b:cf:72:91:7d:f7:60:ff:01:61:04:15:36:80:
a4:fe:3d:4f:c8:a5:11:d5:66:31:cf:7c:a6:4c:5d:9a:10:24:
32:c1:ed:e4:fe:61:10:68:73:77:c0:e5:1b:3b:9c:ed:7b:c0:
07:a4:58:52:a1:30:03:9e:f0:0b:8a:ed:e6:5c:74:be:11:5b:
cc:0c:09:a2:51:80:95:ba:3b:0f:b7:c9:71:81:87:22:55:87:
85:a1:9e:2e:ae:c6:b6:a5:96:e2:57:f0:ff:a5:95:45:ed:a7:
bc:b1:41:6e:e5:71:33:c2:29:9c:51:b8:00:37:19:55:c1:83:
6c:ba:60:de:e2:6b:8b:25:c7:e8:a3:f9:f5:0c:c3:a6:de:1b:
50:ed:f5:db:45:10:1c:c7:71:2b:a6:5c:56:02:c6:18:1d:20:
f9:ce:81:cf:66:9b:bf:81:c7:37:97:66:7d:7b:e9:e4:1d:58:
91:da:85:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 13:15:46 2026 by rpki-client