This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/3130332e3136342e36382e302f32332d3233203d3e20313534343130.roa File: 3130332e3136342e36382e302f32332d3233203d3e20313534343130.roa (raw, json) Hash identifier: 35nS32yJTNLhbcgUZmALVqr3JvPHwEeFfQkvwvwc4sA= Subject key identifier: E2:4C:84:71:A7:06:F3:6C:CB:A2:11:6F:F6:69:45:E1:CA:B3:83:B1 Certificate issuer: /CN=157A25D171E1AD2FAB695F49BDC2555755B6ED7D Certificate serial: 3630ED337A478C3A5E98A33CBD4A4E1D19D02BFB Authority key identifier: 15:7A:25:D1:71:E1:AD:2F:AB:69:5F:49:BD:C2:55:57:55:B6:ED:7D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/3130332e3136342e36382e302f32332d3233203d3e20313534343130.roa Signing time: Thu 08 Jan 2026 21:28:43 +0000 ROA not before: Thu 08 Jan 2026 21:23:43 +0000 ROA not after: Thu 07 Jan 2027 21:28:43 +0000 asID: 154410 IP address blocks: 103.164.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 23:40:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:30:ed:33:7a:47:8c:3a:5e:98:a3:3c:bd:4a:4e:1d:19:d0:2b:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=157A25D171E1AD2FAB695F49BDC2555755B6ED7D Validity Not Before: Jan 8 21:23:43 2026 GMT Not After : Jan 7 21:28:43 2027 GMT Subject: CN=E24C8471A706F36CCBA2116FF66945E1CAB383B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3e:9d:36:92:c0:4c:81:35:36:39:f2:1b:96: e3:70:d0:d1:0e:47:e2:d6:5a:64:1b:88:05:48:fb: 0b:b5:84:03:df:1a:6e:ee:59:35:7a:e1:dd:28:75: 74:1a:81:c1:47:cd:b4:95:50:6d:53:c9:61:ec:f9: 76:54:37:d7:76:74:c3:17:3f:55:d4:cd:33:ed:f3: ea:3b:1b:db:12:dc:bc:b9:d3:7e:be:c9:70:4c:62: 5b:d9:06:93:39:7c:c9:fa:f2:56:ec:a7:d9:94:8f: d6:08:29:84:b8:75:73:52:19:aa:99:ae:3f:a7:f5: c2:58:ab:f7:83:e7:1f:76:2a:1b:89:b4:da:fe:d3: 66:5b:bd:cf:c0:8e:6f:f2:3f:88:a2:cc:c6:00:d2: ef:ac:bd:ce:cb:cb:49:38:c3:c9:9a:e8:dc:f7:53: c5:c9:80:3d:4c:06:04:e5:53:8d:6d:f9:9e:cd:9c: 15:38:22:74:a6:ec:4b:f7:c5:61:19:d7:ba:69:d1: 3d:9a:ea:78:53:f3:5e:cd:b2:b7:00:3b:7d:33:4c: ef:e4:86:5d:27:8b:b0:61:0d:fc:2d:d7:ed:07:f7: 54:23:ec:59:9c:86:6e:5f:2e:73:86:6c:27:f4:27: 87:e0:38:a1:b6:d1:b8:0c:e4:51:69:bc:e4:4a:dc: 23:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:4C:84:71:A7:06:F3:6C:CB:A2:11:6F:F6:69:45:E1:CA:B3:83:B1 X509v3 Authority Key Identifier: keyid:15:7A:25:D1:71:E1:AD:2F:AB:69:5F:49:BD:C2:55:57:55:B6:ED:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/3130332e3136342e36382e302f32332d3233203d3e20313534343130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.164.68.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:b6:9e:f4:da:70:be:b5:15:6d:03:5c:a6:9c:14:86:36:20: dc:d2:da:0c:a3:39:8e:1b:79:da:f9:5f:c3:f9:49:cf:30:b1: d1:46:51:6d:2f:82:66:70:c7:84:0c:d2:88:f3:3c:c7:27:0c: 42:d0:5a:f2:7e:9c:20:95:06:2d:2b:ff:4c:e1:af:a4:e3:5d: 83:fe:7c:2c:dd:51:86:e3:d2:a6:88:56:17:d5:c3:79:7b:cd: 9d:4b:e8:86:09:73:49:5d:13:7d:73:d6:72:bc:75:2f:b6:d4: 4f:e0:64:82:5c:33:4b:a0:cc:fc:7e:7a:8e:13:18:27:47:24: 64:80:27:d3:03:6b:17:1b:7e:b8:4d:07:55:b8:2d:4b:61:1e: 45:7d:2d:01:00:e1:03:bf:34:d2:36:fe:66:28:b4:72:00:79: a7:85:f3:9c:cd:eb:63:fe:38:9b:91:8f:d3:2c:30:0e:27:fb: 46:dc:42:bc:4a:82:17:45:50:6c:7c:60:4f:0d:13:42:39:86: 12:6e:16:a9:ae:ed:f7:09:5b:4f:ce:5a:46:f1:6b:09:89:f1: 75:2a:d3:ad:74:6f:4c:35:33:5f:0e:7b:ff:9e:b6:e7:ce:41: 00:c2:0e:bf:24:a9:e0:a1:a0:75:80:21:42:62:1e:30:da:cd: 42:3c:a1:99 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUNjDtM3pHjDpemKM8vUpOHRnQK/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1NTc1 NUI2RUQ3RDAeFw0yNjAxMDgyMTIzNDNaFw0yNzAxMDcyMTI4NDNaMDMxMTAvBgNV BAMTKEUyNEM4NDcxQTcwNkYzNkNDQkEyMTE2RkY2Njk0NUUxQ0FCMzgzQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXPp02ksBMgTU2OfIbluNw0NEO R+LWWmQbiAVI+wu1hAPfGm7uWTV64d0odXQagcFHzbSVUG1TyWHs+XZUN9d2dMMX P1XUzTPt8+o7G9sS3Ly5036+yXBMYlvZBpM5fMn68lbsp9mUj9YIKYS4dXNSGaqZ rj+n9cJYq/eD5x92KhuJtNr+02Zbvc/Ajm/yP4iizMYA0u+svc7Ly0k4w8ma6Nz3 U8XJgD1MBgTlU41t+Z7NnBU4InSm7Ev3xWEZ17pp0T2a6nhT817NsrcAO30zTO/k hl0ni7BhDfwt1+0H91Qj7Fmchm5fLnOGbCf0J4fgOKG20bgM5FFpvORK3CMLAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU4kyEcacG82zLohFv9mlF4cqzg7EwHwYDVR0j BBgwFoAUFXol0XHhrS+raV9JvcJVV1W27X0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZGI2YjNiYy1mYTY1LTQ5ZjMtYWY2MS0wZDVkYzM5MzM0YTEvMC8xNTdBMjVEMTcx RTFBRDJGQUI2OTVGNDlCREMyNTU1NzU1QjZFRDdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1NTc1NUI2 RUQ3RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNkYjZiM2JjLWZhNjUtNDlmMy1h ZjYxLTBkNWRjMzkzMzRhMS8wLzMxMzAzMzJlMzEzNjM0MmUzNjM4MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNTM0MzQzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6REMA0GCSqG SIb3DQEBCwUAA4IBAQA+tp702nC+tRVtA1ymnBSGNiDc0toMozmOG3na+V/D+UnP MLHRRlFtL4JmcMeEDNKI8zzHJwxC0FryfpwglQYtK/9M4a+k412D/nws3VGG49Km iFYX1cN5e82dS+iGCXNJXRN9c9ZyvHUvttRP4GSCXDNLoMz8fnqOExgnRyRkgCfT A2sXG364TQdVuC1LYR5FfS0BAOEDvzTSNv5mKLRyAHmnhfOczetj/jibkY/TLDAO J/tG3EK8SoIXRVBsfGBPDRNCOYYSbhapru33CVtPzlpG8WsJifF1KtOtdG9MNTNf Dnv/nrbnzkEAwg6/JKngoaB1gCFCYh4w2s1CPKGZ -----END CERTIFICATE-----Generated at Sun Jan 25 17:18:56 2026 by rpki-client