This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/3130332e3135362e3131302e302f32342d3234203d3e20313431303839.roa File: 3130332e3135362e3131302e302f32342d3234203d3e20313431303839.roa (raw, json) Hash identifier: lTXXqDvVb99/4yIHlkQaywB5MQKhKyYSxakzkjkU+yg= Subject key identifier: 9E:DF:85:FD:28:20:A7:C0:9D:3B:0A:0C:71:A3:44:47:C6:1D:77:AF Certificate issuer: /CN=2D517DC024CEFCFAF80CF7FD392246894E94F12F Certificate serial: 477A4459117D6A326ACFFA364E852620231F992F Authority key identifier: 2D:51:7D:C0:24:CE:FC:FA:F8:0C:F7:FD:39:22:46:89:4E:94:F1:2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/3130332e3135362e3131302e302f32342d3234203d3e20313431303839.roa Signing time: Fri 16 Jan 2026 07:00:03 +0000 ROA not before: Fri 16 Jan 2026 06:55:03 +0000 ROA not after: Fri 15 Jan 2027 07:00:03 +0000 asID: 141089 IP address blocks: 103.156.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 18:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:7a:44:59:11:7d:6a:32:6a:cf:fa:36:4e:85:26:20:23:1f:99:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D517DC024CEFCFAF80CF7FD392246894E94F12F Validity Not Before: Jan 16 06:55:03 2026 GMT Not After : Jan 15 07:00:03 2027 GMT Subject: CN=9EDF85FD2820A7C09D3B0A0C71A34447C61D77AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:06:ca:c0:27:da:67:8c:41:8b:30:56:3d:ef: 89:c6:b7:af:d7:32:83:05:f7:b1:f3:eb:50:a8:65: 21:90:7c:c4:09:e0:44:f7:21:4a:57:c1:1a:fd:78: ab:97:ce:a6:66:68:e3:3c:c1:2e:af:a6:1d:97:10: ae:68:76:c2:1a:ed:4a:1d:c0:8a:ab:43:31:01:b6: 43:2e:63:b4:10:11:b1:62:a8:bd:27:41:4a:35:96: 78:cf:e8:f2:1a:6b:f6:d7:04:bf:d0:40:6a:51:a9: e3:53:81:6c:9b:d5:ec:1f:dd:5d:cf:b8:9c:73:16: 8f:50:51:99:5a:20:33:be:ce:b4:9e:d2:df:d1:b8: 97:36:e2:fa:25:dd:e4:3a:80:5a:e0:8d:d8:c5:5b: 7b:b6:6e:d9:f0:9b:d2:0c:8d:e3:58:a9:72:4f:e3: 6a:9f:b1:29:33:a6:28:2f:f6:42:7b:76:5f:63:fa: 6c:a7:37:e2:64:fa:e9:6a:47:69:f3:3d:32:a2:2c: e5:93:43:78:88:72:17:cd:bc:e8:4d:07:d5:3f:11: f9:08:80:a1:e1:ec:36:1f:fd:dc:01:20:7d:10:58: 0f:8f:70:e1:d4:fc:0c:7a:5e:7f:a6:35:e7:ff:e6: a8:83:77:0f:d0:b2:8d:68:a5:88:b8:62:a7:a7:85: f3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:DF:85:FD:28:20:A7:C0:9D:3B:0A:0C:71:A3:44:47:C6:1D:77:AF X509v3 Authority Key Identifier: keyid:2D:51:7D:C0:24:CE:FC:FA:F8:0C:F7:FD:39:22:46:89:4E:94:F1:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/3130332e3135362e3131302e302f32342d3234203d3e20313431303839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.110.0/24 Signature Algorithm: sha256WithRSAEncryption 17:da:ab:82:d3:18:30:2f:c1:c4:75:53:7e:5b:2a:f9:25:67: 56:d0:5b:19:24:91:c1:85:eb:18:aa:87:8c:b6:be:fd:a2:d7: 74:bd:96:09:bf:58:40:0d:29:56:6e:00:dd:67:2f:e5:04:d2: 99:3a:f3:6f:98:14:74:26:68:57:e4:b8:53:36:d7:ec:c9:e9: 99:5d:67:8a:9b:0e:af:a1:97:79:52:2b:6e:1b:f4:d6:57:4a: f3:a0:81:b4:e4:dd:a3:7d:c3:b7:d9:fc:3f:f8:fd:d9:29:e7: bc:18:c6:84:f1:66:07:5a:33:bd:41:62:99:d0:73:da:c7:5a: 62:19:e4:51:18:41:2d:ae:84:1e:ef:ac:3f:eb:f9:14:c1:9e: 17:41:78:af:af:a8:98:f8:a0:ca:59:3f:23:1c:82:e5:8d:b7: d7:d6:20:3c:ba:ef:60:31:28:d3:7f:6f:32:df:e4:47:b7:4d: 60:9b:6a:5f:d7:25:d6:60:45:0b:f1:f4:3c:5d:8b:87:3d:40: fa:35:66:15:ac:f5:22:d5:b0:83:b0:c5:18:2d:50:27:e2:82: 7c:5f:d5:e6:c7:73:a7:35:8e:c1:a0:72:95:d7:ae:78:52:06: 3b:d5:4c:ed:ff:10:e9:86:eb:ce:d8:d7:a9:e8:06:ee:f5:65: ea:26:57:86 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUR3pEWRF9ajJqz/o2ToUmICMfmS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2ODk0 RTk0RjEyRjAeFw0yNjAxMTYwNjU1MDNaFw0yNzAxMTUwNzAwMDNaMDMxMTAvBgNV BAMTKDlFREY4NUZEMjgyMEE3QzA5RDNCMEEwQzcxQTM0NDQ3QzYxRDc3QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiBsrAJ9pnjEGLMFY974nGt6/X MoMF97Hz61CoZSGQfMQJ4ET3IUpXwRr9eKuXzqZmaOM8wS6vph2XEK5odsIa7Uod wIqrQzEBtkMuY7QQEbFiqL0nQUo1lnjP6PIaa/bXBL/QQGpRqeNTgWyb1ewf3V3P uJxzFo9QUZlaIDO+zrSe0t/RuJc24vol3eQ6gFrgjdjFW3u2btnwm9IMjeNYqXJP 42qfsSkzpigv9kJ7dl9j+mynN+Jk+ulqR2nzPTKiLOWTQ3iIchfNvOhNB9U/EfkI gKHh7DYf/dwBIH0QWA+PcOHU/Ax6Xn+mNef/5qiDdw/Qso1opYi4YqenhfPbAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUnt+F/Sggp8CdOwoMcaNER8Ydd68wHwYDVR0j BBgwFoAULVF9wCTO/Pr4DPf9OSJGiU6U8S8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDMzYTFjNi0wZjcwLTRjOTgtOTZiMC1jYWI1ODEyNmFiOTQvMC8yRDUxN0RDMDI0 Q0VGQ0ZBRjgwQ0Y3RkQzOTIyNDY4OTRFOTRGMTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2ODk0RTk0 RjEyRi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE0MzNhMWM2LTBmNzAtNGM5OC05 NmIwLWNhYjU4MTI2YWI5NC8wLzMxMzAzMzJlMzEzNTM2MmUzMTMxMzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzMDM4Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnnG4wDQYJ KoZIhvcNAQELBQADggEBABfaq4LTGDAvwcR1U35bKvklZ1bQWxkkkcGF6xiqh4y2 vv2i13S9lgm/WEANKVZuAN1nL+UE0pk682+YFHQmaFfkuFM21+zJ6ZldZ4qbDq+h l3lSK24b9NZXSvOggbTk3aN9w7fZ/D/4/dkp57wYxoTxZgdaM71BYpnQc9rHWmIZ 5FEYQS2uhB7vrD/r+RTBnhdBeK+vqJj4oMpZPyMcguWNt9fWIDy672AxKNN/bzLf 5Ee3TWCbal/XJdZgRQvx9Dxdi4c9QPo1ZhWs9SLVsIOwxRgtUCfignxf1ebHc6c1 jsGgcpXXrnhSBjvVTO3/EOmG687Y16noBu71ZeomV4Y= -----END CERTIFICATE-----Generated at Mon Jan 26 07:45:41 2026 by rpki-client