This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/3130332e36382e3233322e302f32332d3233203d3e20313530353431.roa File: 3130332e36382e3233322e302f32332d3233203d3e20313530353431.roa (raw, json) Hash identifier: JciEcvaTyOu9ULHHbn2cng9qZ9XRi3I/0a9dUnGKqis= Subject key identifier: 1B:CA:B4:1F:4B:97:88:97:3E:CA:A3:D6:A3:FA:95:B0:42:CC:DC:48 Certificate issuer: /CN=021C6F972C8EBDDC3336FE4951F22CE86EDADE6C Certificate serial: 35CF6482B9FD05F72CFAE8DC6159769B264AAABF Authority key identifier: 02:1C:6F:97:2C:8E:BD:DC:33:36:FE:49:51:F2:2C:E8:6E:DA:DE:6C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/3130332e36382e3233322e302f32332d3233203d3e20313530353431.roa Signing time: Thu 08 Jan 2026 22:00:00 +0000 ROA not before: Thu 08 Jan 2026 21:55:00 +0000 ROA not after: Thu 07 Jan 2027 22:00:00 +0000 asID: 150541 IP address blocks: 103.68.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.crl rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 14:07:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:cf:64:82:b9:fd:05:f7:2c:fa:e8:dc:61:59:76:9b:26:4a:aa:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=021C6F972C8EBDDC3336FE4951F22CE86EDADE6C Validity Not Before: Jan 8 21:55:00 2026 GMT Not After : Jan 7 22:00:00 2027 GMT Subject: CN=1BCAB41F4B9788973ECAA3D6A3FA95B042CCDC48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1e:f7:4b:a9:75:60:04:fe:c1:5e:b6:e2:c8: 39:fd:8e:b6:9a:33:69:62:83:d9:08:ce:4b:47:dc: b0:d3:e8:dc:40:05:d7:50:79:22:e8:f9:ba:53:c8: 46:d7:85:ca:f1:68:a4:12:74:51:7b:32:db:47:84: e2:44:3e:0b:8c:fa:b6:86:c1:d2:0d:0e:6a:a3:7b: a2:cb:c8:e9:8c:1d:5e:ba:fb:c3:4b:f0:c8:e5:de: 49:74:42:db:85:62:29:4d:ad:b7:d9:d1:98:d2:91: b0:f0:dd:a2:2b:06:80:41:67:c1:da:68:44:0a:c7: 5d:d4:6b:ff:3c:5f:08:ee:a0:fd:60:92:da:39:85: 93:3e:3e:18:23:60:cf:f6:c4:5b:05:8a:f7:80:35: db:66:64:0a:94:ca:e2:30:e1:45:ba:7c:e6:f1:3e: 9c:6e:3b:a9:67:84:45:7b:c9:8f:09:bd:13:5b:c6: ba:dd:9a:6b:67:7b:3e:49:23:b5:67:15:89:fa:86: 33:c5:41:a7:9b:83:01:ba:af:91:8d:7e:4a:8b:65: 5a:f5:fd:ef:57:d7:33:9f:40:3b:6e:65:eb:d0:90: 82:69:f8:b3:6a:a1:d0:f7:ca:e7:ef:c7:90:46:ee: 2b:84:d0:dc:ad:9c:71:b4:e5:f1:5e:4d:d3:78:e1: 1f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:CA:B4:1F:4B:97:88:97:3E:CA:A3:D6:A3:FA:95:B0:42:CC:DC:48 X509v3 Authority Key Identifier: keyid:02:1C:6F:97:2C:8E:BD:DC:33:36:FE:49:51:F2:2C:E8:6E:DA:DE:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/3130332e36382e3233322e302f32332d3233203d3e20313530353431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.68.232.0/23 Signature Algorithm: sha256WithRSAEncryption 24:a9:2c:bf:16:e7:25:ae:cc:4f:8b:c1:c9:a2:f5:0b:0c:5b: 53:b5:2e:34:31:a6:52:f9:c5:b9:98:23:a5:a8:10:7d:1f:57: d2:e3:31:53:ed:d4:91:c8:56:9b:a5:e0:c2:49:28:c7:53:23: 48:4b:e1:be:04:a7:8b:a9:1d:bc:7d:d8:32:61:11:73:57:f5: 84:e0:7b:dc:79:c3:26:52:b4:1c:9e:c2:ef:30:1a:fb:4a:51: 44:d2:4e:e7:b8:07:3e:3e:bc:9f:01:3a:0e:2c:db:02:f9:5a: 33:8f:9c:1d:fb:16:aa:25:a7:f3:8c:40:73:69:d1:fe:d3:1f: 54:5d:2b:1f:cb:26:9e:be:69:05:28:75:22:bc:b8:16:e2:e3: 96:17:31:7f:16:24:72:e7:6a:ab:ba:42:7c:2f:c2:90:31:5e: d2:9b:6c:29:dc:5f:79:9e:1d:ad:93:3d:a5:bb:6b:42:17:d8: 41:2e:62:5e:f5:90:2b:dc:2a:a4:33:fb:27:4a:8b:23:ef:1d: b6:09:1f:75:72:76:9d:a4:21:de:fb:a8:4b:9a:6d:e1:9a:fd: 7b:5d:25:43:28:18:e5:22:e6:dd:0d:47:58:24:6e:b5:09:f0: 7d:77:fb:9f:d8:52:43:ca:9d:c0:c7:d9:2e:da:d0:5c:d7:60: 58:5a:b1:0f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUNc9kgrn9Bfcs+ujcYVl2myZKqr8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIxQzZGOTcyQzhFQkREQzMzMzZGRTQ5NTFGMjJDRTg2 RURBREU2QzAeFw0yNjAxMDgyMTU1MDBaFw0yNzAxMDcyMjAwMDBaMDMxMTAvBgNV BAMTKDFCQ0FCNDFGNEI5Nzg4OTczRUNBQTNENkEzRkE5NUIwNDJDQ0RDNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOHvdLqXVgBP7BXrbiyDn9jraa M2lig9kIzktH3LDT6NxABddQeSLo+bpTyEbXhcrxaKQSdFF7MttHhOJEPguM+raG wdINDmqje6LLyOmMHV66+8NL8Mjl3kl0QtuFYilNrbfZ0ZjSkbDw3aIrBoBBZ8Ha aEQKx13Ua/88XwjuoP1gkto5hZM+PhgjYM/2xFsFiveANdtmZAqUyuIw4UW6fObx PpxuO6lnhEV7yY8JvRNbxrrdmmtnez5JI7VnFYn6hjPFQaebgwG6r5GNfkqLZVr1 /e9X1zOfQDtuZevQkIJp+LNqodD3yufvx5BG7iuE0NytnHG05fFeTdN44R95AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUG8q0H0uXiJc+yqPWo/qVsELM3EgwHwYDVR0j BBgwFoAUAhxvlyyOvdwzNv5JUfIs6G7a3mwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODE1NTQ1Yy1jOTk2LTQ2MGYtOTJkZC02Mjk0YWVjOTJjNTIvMC8wMjFDNkY5NzJD OEVCRERDMzMzNkZFNDk1MUYyMkNFODZFREFERTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDIxQzZGOTcyQzhFQkREQzMzMzZGRTQ5NTFGMjJDRTg2RURB REU2Qy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE4MTU1NDVjLWM5OTYtNDYwZi05 MmRkLTYyOTRhZWM5MmM1Mi8wLzMxMzAzMzJlMzYzODJlMzIzMzMyMmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNTMwMzUzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ0ToMA0GCSqG SIb3DQEBCwUAA4IBAQAkqSy/FuclrsxPi8HJovULDFtTtS40MaZS+cW5mCOlqBB9 H1fS4zFT7dSRyFabpeDCSSjHUyNIS+G+BKeLqR28fdgyYRFzV/WE4HvcecMmUrQc nsLvMBr7SlFE0k7nuAc+PryfAToOLNsC+Vozj5wd+xaqJafzjEBzadH+0x9UXSsf yyaevmkFKHUivLgW4uOWFzF/FiRy52qrukJ8L8KQMV7Sm2wp3F95nh2tkz2lu2tC F9hBLmJe9ZAr3CqkM/snSosj7x22CR91cnadpCHe+6hLmm3hmv17XSVDKBjlIubd DUdYJG61CfB9d/uf2FJDyp3Ax9ku2tBc12BYWrEP -----END CERTIFICATE-----Generated at Sun Jan 25 22:11:11 2026 by rpki-client