This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3130332e32382e38302e302f32322d3232203d3e203435373233.roa File: 3130332e32382e38302e302f32322d3232203d3e203435373233.roa (raw, json) Hash identifier: iXcg9I4Oyy6EsqPXrnC6OWS/dn/agjkU6nPGqXChu7c= Subject key identifier: 72:8C:92:25:9E:08:1D:A9:D7:D8:F5:0D:93:32:13:08:55:07:3E:7D Certificate issuer: /CN=3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25 Certificate serial: 3333A3B1407770350D430BBC27C9649774653423 Authority key identifier: 3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3130332e32382e38302e302f32322d3232203d3e203435373233.roa Signing time: Tue 30 Dec 2025 04:00:00 +0000 ROA not before: Tue 30 Dec 2025 03:55:00 +0000 ROA not after: Tue 29 Dec 2026 04:00:00 +0000 asID: 45723 IP address blocks: 103.28.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 13:35:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:33:a3:b1:40:77:70:35:0d:43:0b:bc:27:c9:64:97:74:65:34:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25 Validity Not Before: Dec 30 03:55:00 2025 GMT Not After : Dec 29 04:00:00 2026 GMT Subject: CN=728C92259E081DA9D7D8F50D9332130855073E7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5a:9b:b8:43:59:c2:cc:67:b4:2a:15:5a:e2: db:31:9d:28:30:a5:81:b9:39:53:40:f4:7d:36:0f: d4:bf:55:c6:87:a5:38:48:36:31:a3:af:a2:ff:64: c2:5e:de:42:3c:75:13:e3:20:4f:55:b6:f3:69:63: aa:ba:3e:f3:10:b5:a8:6c:d6:88:cc:cb:e8:fc:07: de:98:12:97:70:75:97:22:ea:8e:5b:0f:d6:6a:fe: 05:b8:7b:da:9a:ec:ad:3c:dd:62:ab:50:41:0e:6a: 59:45:26:77:fe:dd:d2:70:20:65:37:58:50:4a:45: ce:d8:06:78:8c:e6:f7:63:4f:a3:2b:2d:13:86:5a: 02:2e:d0:d2:be:53:19:cf:13:0b:6b:3f:fa:37:1c: ca:c6:a5:a8:8d:b8:d0:66:5c:9b:ce:58:fe:d6:20: bd:c2:d5:92:3e:7e:2c:05:89:4e:c3:7c:aa:75:d5: a0:03:42:6f:7c:97:e4:40:28:9b:f3:ef:c8:09:41: bf:44:ef:90:58:df:4d:37:e4:cf:ad:02:5e:d7:1f: 33:57:7e:ee:d3:47:3d:80:02:2d:ba:fd:d3:fa:06: 12:e2:02:91:b6:68:60:39:2d:bc:f0:38:1d:2a:d4: 05:7b:15:30:05:28:2b:21:f0:c1:8f:18:6a:24:21: b4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:8C:92:25:9E:08:1D:A9:D7:D8:F5:0D:93:32:13:08:55:07:3E:7D X509v3 Authority Key Identifier: keyid:3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3130332e32382e38302e302f32322d3232203d3e203435373233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.28.80.0/22 Signature Algorithm: sha256WithRSAEncryption 7e:19:65:f5:05:79:95:6b:db:a3:08:1f:fe:13:02:45:b4:99: 9b:16:88:46:8c:c1:e0:a9:9b:71:a2:7e:55:7c:c9:e2:3e:50: 5c:09:d3:4f:2b:d9:85:93:47:b0:31:a0:b8:18:64:4e:55:cf: f8:70:c7:e1:de:1d:80:48:c7:53:45:ec:96:38:9d:96:c7:69: 0b:b0:eb:e3:f2:0c:22:42:8b:bc:1f:f6:32:6e:b9:5e:24:96: 62:14:35:4e:f7:1f:b4:98:53:a1:28:e6:41:fc:0a:e8:29:36: 93:d9:3e:5b:20:55:82:19:56:44:02:f7:02:c0:12:d2:55:ac: 74:95:8f:85:b7:5a:cb:1c:d4:29:d6:95:c1:78:a8:3d:66:af: 8a:68:fa:62:8b:0d:14:d7:77:9e:f3:ab:2f:8e:88:7a:80:10: e8:ed:e6:b3:f8:d7:30:30:39:21:1b:41:ce:5e:e1:ef:48:b3: ac:2c:79:78:63:2c:ec:45:80:82:fb:67:b6:46:87:e4:48:8c: ad:7a:fd:6d:38:8d:1b:44:76:29:2c:c0:be:8c:84:2b:1d:c6: 6a:cf:ee:7a:10:86:13:6f:a9:09:fc:2e:e6:e8:4a:ba:97:50: 2d:8b:36:9e:85:b7:d0:a0:6d:d1:ac:70:aa:e9:16:3a:04:05: 6a:d6:9b:7d -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUMzOjsUB3cDUNQwu8J8lkl3RlNCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y2RTlCQzVGMTZGMUMzQUI1RkQ2MzZFN0RFMDZGREQ2 NDg5MkMyNTAeFw0yNTEyMzAwMzU1MDBaFw0yNjEyMjkwNDAwMDBaMDMxMTAvBgNV BAMTKDcyOEM5MjI1OUUwODFEQTlEN0Q4RjUwRDkzMzIxMzA4NTUwNzNFN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWWpu4Q1nCzGe0KhVa4tsxnSgw pYG5OVNA9H02D9S/VcaHpThINjGjr6L/ZMJe3kI8dRPjIE9VtvNpY6q6PvMQtahs 1ojMy+j8B96YEpdwdZci6o5bD9Zq/gW4e9qa7K083WKrUEEOallFJnf+3dJwIGU3 WFBKRc7YBniM5vdjT6MrLROGWgIu0NK+UxnPEwtrP/o3HMrGpaiNuNBmXJvOWP7W IL3C1ZI+fiwFiU7DfKp11aADQm98l+RAKJvz78gJQb9E75BY30035M+tAl7XHzNX fu7TRz2AAi26/dP6BhLiApG2aGA5LbzwOB0q1AV7FTAFKCsh8MGPGGokIbTXAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUcoySJZ4IHanX2PUNkzITCFUHPn0wHwYDVR0j BBgwFoAUP26bxfFvHDq1/WNufeBv3WSJLCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MWRiMzczMC1mNDk5LTQ0OWYtYjZmMi03YTVkZWI1MzJiMGMvMC8zRjZFOUJDNUYx NkYxQzNBQjVGRDYzNkU3REUwNkZERDY0ODkyQzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Y2RTlCQzVGMTZGMUMzQUI1RkQ2MzZFN0RFMDZGREQ2NDg5 MkMyNS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQxZGIzNzMwLWY0OTktNDQ5Zi1i NmYyLTdhNWRlYjUzMmIwYy8wLzMxMzAzMzJlMzIzODJlMzgzMDJlMzAyZjMyMzIy ZDMyMzIyMDNkM2UyMDM0MzUzNzMyMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnHFAwDQYJKoZIhvcN AQELBQADggEBAH4ZZfUFeZVr26MIH/4TAkW0mZsWiEaMweCpm3GiflV8yeI+UFwJ 008r2YWTR7AxoLgYZE5Vz/hwx+HeHYBIx1NF7JY4nZbHaQuw6+PyDCJCi7wf9jJu uV4klmIUNU73H7SYU6Eo5kH8CugpNpPZPlsgVYIZVkQC9wLAEtJVrHSVj4W3Wssc 1CnWlcF4qD1mr4po+mKLDRTXd57zqy+OiHqAEOjt5rP41zAwOSEbQc5e4e9Is6ws eXhjLOxFgIL7Z7ZGh+RIjK16/W04jRtEdikswL6MhCsdxmrP7noQhhNvqQn8Lubo SrqXUC2LNp6Ft9CgbdGscKrpFjoEBWrWm30= -----END CERTIFICATE-----Generated at Sun Jan 25 23:56:53 2026 by rpki-client