This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/3130332e35322e36302e302f32342d3234203d3e20313339343237.roa
File: 3130332e35322e36302e302f32342d3234203d3e20313339343237.roa (raw, json)
Hash identifier: 0aTtvK24bNcmqnpepTgUdZw0ocIUT1z+NlDz+JkEtYE=
Subject key identifier: CE:C0:4D:6B:B1:E6:D1:6F:15:72:ED:42:50:08:FA:51:5C:17:8E:41
Certificate issuer: /CN=A17DC55845B70106CEB3A498496454BE640F44AB
Certificate serial: 6C689555A59DDAFEE7020EA5DBF152A4D34D5028
Authority key identifier: A1:7D:C5:58:45:B7:01:06:CE:B3:A4:98:49:64:54:BE:64:0F:44:AB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/3130332e35322e36302e302f32342d3234203d3e20313339343237.roa
Signing time: Fri 30 Jan 2026 08:27:26 +0000
ROA not before: Fri 30 Jan 2026 08:22:26 +0000
ROA not after: Fri 29 Jan 2027 08:27:26 +0000
asID: 139427
IP address blocks: 103.52.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.crl
rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 19:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:68:95:55:a5:9d:da:fe:e7:02:0e:a5:db:f1:52:a4:d3:4d:50:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A17DC55845B70106CEB3A498496454BE640F44AB
Validity
Not Before: Jan 30 08:22:26 2026 GMT
Not After : Jan 29 08:27:26 2027 GMT
Subject: CN=CEC04D6BB1E6D16F1572ED425008FA515C178E41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e2:09:66:49:ee:63:5e:d2:ae:db:3e:98:56:
99:f0:1e:7e:c2:8e:da:85:66:aa:74:a9:9f:59:f0:
0c:90:9e:c9:12:2b:1c:93:19:2b:0d:c8:25:a6:4f:
b2:83:35:4e:db:1d:dd:c8:c1:99:a8:0e:60:37:ed:
68:5b:78:37:da:00:00:21:7b:a3:84:73:1c:d3:78:
f3:a6:2f:f8:7d:c4:c9:c7:ee:10:c9:2f:30:88:ec:
0f:9d:25:e0:aa:30:d2:4f:bc:eb:4a:06:91:6d:28:
f7:64:39:01:b3:01:c3:a0:5c:a8:4e:5b:9f:4f:d1:
40:d8:2d:51:31:09:a2:4f:d5:68:a7:48:76:eb:63:
22:d6:c1:b2:80:c4:35:e2:ae:b3:c9:e0:fd:ec:41:
5a:89:28:24:bb:59:45:1d:c0:7e:bb:bc:ba:59:5a:
43:d1:dc:be:4b:e1:d1:e2:2e:72:e3:5c:87:fd:a6:
e1:0d:29:e9:21:76:12:0b:45:f4:c6:9c:05:b8:46:
42:2e:e1:30:a5:97:07:2d:35:79:b0:0b:3f:0a:c8:
4d:eb:4a:d3:aa:1c:09:4f:1c:82:bb:55:79:35:51:
bd:45:23:e0:2a:03:2e:26:8a:99:5d:56:11:30:fd:
d5:4d:76:91:08:10:2e:8e:44:17:f2:04:88:d1:c8:
32:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C0:4D:6B:B1:E6:D1:6F:15:72:ED:42:50:08:FA:51:5C:17:8E:41
X509v3 Authority Key Identifier:
keyid:A1:7D:C5:58:45:B7:01:06:CE:B3:A4:98:49:64:54:BE:64:0F:44:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/3130332e35322e36302e302f32342d3234203d3e20313339343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.52.60.0/24
Signature Algorithm: sha256WithRSAEncryption
20:d2:35:56:7d:93:ec:3b:b3:a1:5b:6e:80:3c:bf:91:60:d7:
a0:c8:25:8a:34:35:cd:97:a0:ab:b2:a2:5f:7f:fc:3c:d4:d9:
72:11:e5:19:44:01:5c:26:24:ed:09:ef:c7:b8:20:a2:91:9e:
b4:b3:a0:49:3f:4b:17:ea:f3:2d:bd:70:c0:e0:d8:e3:72:d3:
93:36:9c:4e:c9:ff:2d:0a:eb:0e:3a:3c:0d:61:88:f2:4b:f3:
74:74:0d:d0:05:08:e2:37:0e:d4:31:6c:d8:37:c1:c2:be:47:
bf:0b:23:36:d6:63:3b:52:98:97:03:67:b9:30:74:d5:94:af:
7f:eb:66:2e:1b:df:28:59:91:88:a8:c8:52:d7:02:19:4c:6f:
ec:ca:31:d6:e7:5b:38:4d:db:bd:15:31:59:09:13:c2:12:0a:
f0:6c:10:01:85:fe:90:e0:aa:6b:0a:d0:25:af:02:8f:aa:a0:
74:b0:05:0e:d9:cd:01:ea:4e:2f:1d:e5:3a:58:04:10:1c:ef:
05:dc:f2:a8:f2:f9:3f:10:20:d1:40:14:11:62:1f:2d:7e:0c:
8e:c9:b7:0e:1d:ae:10:9d:76:62:cd:67:05:4e:12:f4:0a:99:
b6:b8:99:61:20:88:69:cf:5d:18:2d:4e:ae:43:06:0e:5c:ac:
ae:63:8a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 16:00:45 2026 by rpki-client