This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3130332e3132302e3230342e302f32342d3234203d3e20313937353337.roa File: 3130332e3132302e3230342e302f32342d3234203d3e20313937353337.roa (raw, json) Hash identifier: xUdwfWhj/DTW37oHxA2M7SzJ+NkmDLXU1C60QSD07Pk= Subject key identifier: 23:FE:3E:6A:2A:B1:CB:D1:4F:39:AC:9F:25:80:72:C5:83:17:0E:A1 Certificate issuer: /CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Certificate serial: 4E2F762FD35C7D2178957E17D691BBE515C3C321 Authority key identifier: 60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3130332e3132302e3230342e302f32342d3234203d3e20313937353337.roa Signing time: Thu 22 Jan 2026 03:44:04 +0000 ROA not before: Thu 22 Jan 2026 03:39:04 +0000 ROA not after: Thu 21 Jan 2027 03:44:04 +0000 asID: 197537 IP address blocks: 103.120.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 16:56:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:2f:76:2f:d3:5c:7d:21:78:95:7e:17:d6:91:bb:e5:15:c3:c3:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Validity Not Before: Jan 22 03:39:04 2026 GMT Not After : Jan 21 03:44:04 2027 GMT Subject: CN=23FE3E6A2AB1CBD14F39AC9F258072C583170EA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b5:e9:23:d9:dc:ea:f8:d2:e6:0f:ed:fa:76: ba:bc:c4:c8:11:61:23:15:7d:d9:24:20:d3:e3:56: 19:32:a8:20:fd:4a:20:0d:2e:f5:0f:79:d9:8a:f3: 59:bd:37:ec:ed:c9:36:3f:fb:76:7b:4a:0d:af:7c: 1c:be:af:6b:8b:61:0c:a8:6d:5e:64:d8:8a:73:da: 3f:d3:1c:ff:a9:47:52:2e:6d:fc:8a:2d:f0:22:15: 34:78:d0:5d:81:3b:96:ab:30:6d:a1:56:2f:a0:33: bc:17:ac:6d:fa:bf:ae:56:d7:c1:3b:e1:bb:ae:b0: f7:b9:c1:b9:28:de:25:f2:6a:cf:0a:52:a4:26:1a: 04:f4:76:bb:df:2f:80:ee:49:6a:75:af:de:e8:56: e2:3a:2f:81:96:d9:06:0b:00:99:00:84:a6:7b:5f: 62:f3:3a:c9:da:a7:77:a9:64:6e:aa:25:b6:3b:ef: 76:fb:f0:52:82:17:94:37:d6:e3:4a:17:9e:de:86: da:be:2f:83:66:46:e7:98:86:13:1e:e3:6e:03:82: 31:90:21:1c:5a:df:18:56:bd:28:7f:8e:4f:8e:3b: 27:c8:b8:71:8c:78:9b:ec:e1:2d:8e:ee:c1:9f:df: e0:a9:e4:97:c0:ea:cf:fb:5d:2b:c7:25:57:12:b8: da:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:FE:3E:6A:2A:B1:CB:D1:4F:39:AC:9F:25:80:72:C5:83:17:0E:A1 X509v3 Authority Key Identifier: keyid:60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3130332e3132302e3230342e302f32342d3234203d3e20313937353337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.120.204.0/24 Signature Algorithm: sha256WithRSAEncryption 79:fc:85:84:a5:dd:d8:23:f7:5b:95:2a:38:97:9d:0c:68:6d: 1c:59:0d:7a:62:dc:6b:da:71:65:c5:48:ae:9b:9f:08:9b:4a: 28:26:99:c3:24:9c:39:e4:3a:40:6f:ff:3e:c9:fc:31:1f:92: ec:11:ed:a1:52:b0:c5:49:d8:7f:6e:11:6c:87:04:49:2a:a2: ee:a5:46:2e:60:0c:bc:49:11:aa:b8:a6:e0:d1:04:1d:42:d8: c9:96:69:60:89:c9:e0:28:b9:1d:4e:48:ae:31:67:e2:7b:41: 0a:ed:e6:42:00:b3:87:9e:7e:6d:ee:89:62:cb:14:ec:37:96: d0:c7:46:52:b4:ae:7d:7b:43:0d:f4:b3:9d:16:a0:1a:0c:4d: 04:92:bd:81:d3:a0:36:8b:d2:40:be:c4:b9:98:c1:63:d9:2e: 32:9e:33:bd:35:6c:0e:80:49:06:a1:cc:ed:31:61:28:95:3b: 4b:dc:7c:1d:33:46:31:d5:be:00:24:5f:45:55:91:d1:23:33: 0d:4f:08:e0:1a:a0:5b:ce:98:e4:34:b6:5d:a2:c5:1b:81:46: 3b:f4:70:ba:e0:55:84:17:bf:97:1b:61:d4:a9:87:47:39:59: 46:2d:0e:01:eb:1c:21:96:28:bb:e9:5d:31:d7:75:dc:58:54: 32:69:86:11 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUTi92L9NcfSF4lX4X1pG75RXDwyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIy ODk2RTZERTAeFw0yNjAxMjIwMzM5MDRaFw0yNzAxMjEwMzQ0MDRaMDMxMTAvBgNV BAMTKDIzRkUzRTZBMkFCMUNCRDE0RjM5QUM5RjI1ODA3MkM1ODMxNzBFQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXtekj2dzq+NLmD+36drq8xMgR YSMVfdkkINPjVhkyqCD9SiANLvUPedmK81m9N+ztyTY/+3Z7Sg2vfBy+r2uLYQyo bV5k2Ipz2j/THP+pR1IubfyKLfAiFTR40F2BO5arMG2hVi+gM7wXrG36v65W18E7 4buusPe5wbko3iXyas8KUqQmGgT0drvfL4DuSWp1r97oVuI6L4GW2QYLAJkAhKZ7 X2LzOsnap3epZG6qJbY773b78FKCF5Q31uNKF57ehtq+L4NmRueYhhMe424DgjGQ IRxa3xhWvSh/jk+OOyfIuHGMeJvs4S2O7sGf3+Cp5JfA6s/7XSvHJVcSuNoTAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUI/4+aiqxy9FPOayfJYByxYMXDqEwHwYDVR0j BBgwFoAUYOvHa2eraOWphSh94evb2yiW5t4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDBmMzdjMC0zODBjLTQwNTMtYjNiYS1iMzJlZjAzNWMyOGYvMC82MEVCQzc2QjY3 QUI2OEU1QTk4NTI4N0RFMUVCREJEQjI4OTZFNkRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIyODk2 RTZERS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE0MGYzN2MwLTM4MGMtNDA1My1i M2JhLWIzMmVmMDM1YzI4Zi8wLzMxMzAzMzJlMzEzMjMwMmUzMjMwMzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM5MzczNTMzMzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABneMwwDQYJ KoZIhvcNAQELBQADggEBAHn8hYSl3dgj91uVKjiXnQxobRxZDXpi3GvacWXFSK6b nwibSigmmcMknDnkOkBv/z7J/DEfkuwR7aFSsMVJ2H9uEWyHBEkqou6lRi5gDLxJ Eaq4puDRBB1C2MmWaWCJyeAouR1OSK4xZ+J7QQrt5kIAs4eefm3uiWLLFOw3ltDH RlK0rn17Qw30s50WoBoMTQSSvYHToDaL0kC+xLmYwWPZLjKeM701bA6ASQahzO0x YSiVO0vcfB0zRjHVvgAkX0VVkdEjMw1PCOAaoFvOmOQ0tl2ixRuBRjv0cLrgVYQX v5cbYdSph0c5WUYtDgHrHCGWKLvpXTHXddxYVDJphhE= -----END CERTIFICATE-----Generated at Sun Jan 25 17:16:13 2026 by rpki-client