This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/3130332e3135362e37342e302f32332d3234203d3e20313431303832.roa
File: 3130332e3135362e37342e302f32332d3234203d3e20313431303832.roa (raw, json)
Hash identifier: MC4A5+D6SNqarshQJZ1rQAWQNgzbfnlg0wjJs81Ja6E=
Subject key identifier: C7:A0:5E:DD:DA:6C:0A:00:96:84:FD:9F:2E:67:1B:2D:FA:7F:87:6D
Certificate issuer: /CN=E003E850B77C76F0E024F1DA6EFBD8767B411A81
Certificate serial: 7CB09CD7E90207DF43D4762727C47D21E8F9CC0D
Authority key identifier: E0:03:E8:50:B7:7C:76:F0:E0:24:F1:DA:6E:FB:D8:76:7B:41:1A:81
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E003E850B77C76F0E024F1DA6EFBD8767B411A81.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/3130332e3135362e37342e302f32332d3234203d3e20313431303832.roa
Signing time: Tue 06 Jan 2026 01:00:02 +0000
ROA not before: Tue 06 Jan 2026 00:55:02 +0000
ROA not after: Tue 05 Jan 2027 01:00:02 +0000
asID: 141082
IP address blocks: 103.156.74.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.crl
rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E003E850B77C76F0E024F1DA6EFBD8767B411A81.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 16:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:b0:9c:d7:e9:02:07:df:43:d4:76:27:27:c4:7d:21:e8:f9:cc:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E003E850B77C76F0E024F1DA6EFBD8767B411A81
Validity
Not Before: Jan 6 00:55:02 2026 GMT
Not After : Jan 5 01:00:02 2027 GMT
Subject: CN=C7A05EDDDA6C0A009684FD9F2E671B2DFA7F876D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:75:f2:a3:3f:99:93:41:72:c2:4f:6b:e7:ed:
e2:a6:92:da:9d:6a:07:b1:b5:46:07:89:b5:d5:94:
34:b5:8a:d1:e2:08:a5:df:66:27:27:86:ed:7c:df:
a7:f4:7c:9b:40:87:b4:d2:49:d8:39:9c:c2:e9:c9:
4d:4b:e7:1b:73:c8:d5:b3:09:56:bd:ed:5b:95:d4:
b9:71:87:ad:6a:e2:cc:e5:68:7a:84:ba:0e:af:24:
96:26:64:9d:71:78:0d:7f:e9:b1:2e:6f:7d:72:37:
35:36:e6:72:bb:d5:d0:4d:ab:48:20:ee:39:ad:f5:
b0:92:60:58:a9:e4:e7:30:c3:6d:11:e8:04:1c:ac:
2d:42:a4:c5:d4:5a:c6:26:26:f0:48:13:2b:52:10:
d4:4b:09:a1:63:cf:d5:19:dd:92:9d:90:8e:24:05:
6f:34:16:d0:75:4c:b5:01:48:e2:0c:83:ac:63:3e:
7e:ae:ff:77:ac:b4:99:9f:bf:75:99:90:f6:f9:a4:
56:8b:56:52:0d:e5:12:40:80:eb:9d:f1:4a:c3:ab:
ad:96:24:a5:58:79:68:d4:2d:41:36:a1:c6:08:45:
e2:56:aa:7f:d1:7e:bf:23:59:d9:19:30:3c:0d:58:
ff:d0:ed:8d:04:7c:c3:18:9e:b1:89:9f:1e:a7:87:
b0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A0:5E:DD:DA:6C:0A:00:96:84:FD:9F:2E:67:1B:2D:FA:7F:87:6D
X509v3 Authority Key Identifier:
keyid:E0:03:E8:50:B7:7C:76:F0:E0:24:F1:DA:6E:FB:D8:76:7B:41:1A:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E003E850B77C76F0E024F1DA6EFBD8767B411A81.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/3130332e3135362e37342e302f32332d3234203d3e20313431303832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.156.74.0/23
Signature Algorithm: sha256WithRSAEncryption
cf:8a:2d:f1:60:2b:a1:2e:64:3d:22:e8:24:60:89:b3:7c:94:
4d:39:87:80:77:c0:89:6b:84:13:b6:a2:10:fc:57:78:39:52:
51:6e:94:f0:d5:84:d5:d2:bb:52:e9:27:a3:a3:3c:59:9f:5d:
f9:c3:2b:a8:b0:3b:95:ec:f0:be:2d:90:3c:fb:fe:82:26:16:
d9:74:de:f9:fe:70:56:8a:59:eb:10:40:ad:46:c4:cd:1f:b9:
69:5f:cf:e9:c5:f8:2e:a7:12:8b:2e:d3:8d:6d:d4:cd:d9:34:
9d:70:7e:ad:09:c9:37:60:aa:d1:23:30:6c:d0:8c:ef:27:89:
fa:9f:ab:f1:fd:08:af:8f:fe:2a:3e:1e:05:3a:9b:5b:48:d2:
02:96:de:78:e4:71:2b:95:eb:46:01:b9:46:a5:b9:41:db:ad:
a9:64:84:d0:67:73:b9:6b:21:c7:0d:8c:ca:d1:ba:c4:f9:38:
8e:45:f9:e8:ff:4f:df:be:ff:c4:b5:03:04:6e:48:fb:f4:6f:
40:a3:39:a1:ec:6b:66:a2:81:a9:0f:05:6a:d9:45:a8:77:26:
90:88:69:9b:9d:f7:fd:89:ec:15:3e:bd:5b:8b:6f:0d:44:9d:
b5:eb:3d:62:9a:0a:15:4d:1b:ae:5d:72:4f:7e:67:8f:7f:0c:
80:64:13:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:50:55 2026 by rpki-client