This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/3130332e3137332e3136342e302f32332d3233203d3e20313437303831.roa
File: 3130332e3137332e3136342e302f32332d3233203d3e20313437303831.roa (raw, json)
Hash identifier: Sa1fK6pgYDElHHofY035RXNXkmiq5pXQ+mZ92ple4FU=
Subject key identifier: B2:D8:DF:6B:0C:D7:0B:45:3E:F6:49:32:85:B6:69:8D:01:47:95:15
Certificate issuer: /CN=35AF7B054A8CC95835EC5A2F9275004D39521553
Certificate serial: 5B91D69718175E2F6F4D3D0C77907F4911811CB2
Authority key identifier: 35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/3130332e3137332e3136342e302f32332d3233203d3e20313437303831.roa
Signing time: Sat 03 Jan 2026 13:00:59 +0000
ROA not before: Sat 03 Jan 2026 12:55:59 +0000
ROA not after: Sat 02 Jan 2027 13:00:59 +0000
asID: 147081
IP address blocks: 103.173.164.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.crl
rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:91:d6:97:18:17:5e:2f:6f:4d:3d:0c:77:90:7f:49:11:81:1c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35AF7B054A8CC95835EC5A2F9275004D39521553
Validity
Not Before: Jan 3 12:55:59 2026 GMT
Not After : Jan 2 13:00:59 2027 GMT
Subject: CN=B2D8DF6B0CD70B453EF6493285B6698D01479515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3e:4b:fd:72:5e:fb:da:a5:15:da:dd:c7:fd:
f1:b2:e6:86:96:a7:39:ba:33:90:da:e9:94:22:82:
fa:ee:ac:a4:9a:6f:e3:f5:6a:e0:25:76:1d:1f:05:
83:a1:dd:54:32:d2:32:a6:a2:80:68:96:2e:e2:82:
cb:df:be:1a:09:98:d5:60:b9:d4:36:23:3e:dd:23:
b0:86:0f:90:81:48:40:c3:bb:1f:99:b0:5e:a1:29:
dd:54:4c:ae:e2:60:84:c0:9e:2b:e3:86:f1:ae:8f:
b9:ec:d8:7c:8d:60:e3:79:7f:cf:18:f4:aa:67:3c:
f8:27:ec:0b:be:0e:69:19:c8:bb:ac:e6:be:d0:47:
bb:7b:fe:17:07:6a:2a:b9:33:00:3f:16:ab:fc:0c:
70:b3:4e:23:88:4c:82:b9:83:86:83:78:72:ef:b4:
69:49:a0:cd:2e:7c:b3:28:39:8b:80:23:64:74:cc:
ed:0f:ca:86:9c:3b:5f:87:da:3f:a0:c1:f4:e2:e2:
d7:ce:90:d1:67:df:bf:f8:a2:b0:db:72:87:bd:14:
a7:56:42:b4:09:99:39:20:e1:28:45:a1:2c:11:19:
d6:b0:56:6c:22:61:f4:ad:56:42:b7:dc:32:15:28:
00:fc:df:81:cf:2f:6f:47:d7:be:44:4b:a8:87:88:
83:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D8:DF:6B:0C:D7:0B:45:3E:F6:49:32:85:B6:69:8D:01:47:95:15
X509v3 Authority Key Identifier:
keyid:35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/3130332e3137332e3136342e302f32332d3233203d3e20313437303831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.173.164.0/23
Signature Algorithm: sha256WithRSAEncryption
55:11:01:31:6f:bd:57:cb:88:16:4e:e9:04:ee:47:49:4b:80:
27:22:fa:59:45:77:92:af:35:14:68:06:e2:1f:d7:72:39:c0:
d6:2e:bc:c0:20:bb:9d:89:0e:58:a5:21:22:7c:24:c0:50:5c:
2d:70:ee:c3:e6:9d:2c:b7:aa:9d:f8:1a:22:40:de:ef:50:78:
05:b8:90:30:5c:d4:75:e3:c4:59:03:e2:a5:c1:94:7c:fe:1d:
fe:33:bc:df:f8:07:ba:b3:87:7b:80:79:43:7b:a2:e9:2d:c2:
4f:56:27:2a:d0:58:30:df:fb:ca:e6:df:49:b9:f1:e0:ea:bc:
a9:e6:38:33:25:b9:59:00:ee:60:db:81:e7:94:93:00:f5:1b:
5c:79:70:87:fb:86:cd:ff:97:b0:9a:13:fc:2d:ec:30:fe:e3:
76:c6:3f:c8:27:92:cb:46:d0:ff:79:1b:a8:c2:9a:61:47:89:
4b:dd:d1:56:c8:b2:b1:39:ab:8d:72:3f:71:36:e1:ec:7d:dd:
c4:8a:50:1f:f1:60:5d:fd:5c:e8:e1:2a:45:2e:82:18:8c:da:
65:33:87:d0:cb:4a:60:6b:13:c9:22:8a:02:2d:be:35:ba:bc:
85:b6:e7:a5:74:6d:de:c8:1f:ef:47:90:01:15:7e:23:38:f7:
7b:a6:f0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:53:43 2026 by rpki-client