This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3130332e32382e38302e302f32342d3234203d3e203435373233.roa File: 3130332e32382e38302e302f32342d3234203d3e203435373233.roa (raw, json) Hash identifier: sVFI8Cp5vLICzsv5e4/4WyRHUaJ0f+3GFM/qswBcdHg= Subject key identifier: DA:B8:67:77:F2:CF:4D:51:6E:A9:FC:AB:7B:77:32:03:F1:31:3F:89 Certificate issuer: /CN=3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25 Certificate serial: 26329C188041138827D9EBD9EFE2F729F4EA9321 Authority key identifier: 3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3130332e32382e38302e302f32342d3234203d3e203435373233.roa Signing time: Tue 30 Dec 2025 05:00:00 +0000 ROA not before: Tue 30 Dec 2025 04:55:00 +0000 ROA not after: Tue 29 Dec 2026 05:00:00 +0000 asID: 45723 IP address blocks: 103.28.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 13:35:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:32:9c:18:80:41:13:88:27:d9:eb:d9:ef:e2:f7:29:f4:ea:93:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25 Validity Not Before: Dec 30 04:55:00 2025 GMT Not After : Dec 29 05:00:00 2026 GMT Subject: CN=DAB86777F2CF4D516EA9FCAB7B773203F1313F89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d9:a6:bc:f3:7e:eb:d3:5b:ef:62:ce:7d:89: 13:27:c7:a1:3b:a9:f5:50:b4:3b:48:ef:ae:6f:30: 1b:eb:c6:4a:45:32:25:d3:12:e3:d0:0b:df:c8:67: 04:16:bd:9a:89:af:bc:88:80:e8:f6:4c:b2:1e:ae: 15:ff:8e:3b:cd:e6:97:c6:dc:73:cd:07:2a:b2:54: 77:ad:49:52:d9:a8:53:f7:81:fc:96:fe:b2:96:b1: e7:01:48:20:86:7a:b2:82:4e:7b:54:37:09:b1:01: 41:ea:2c:b9:92:54:e2:63:5a:ee:18:dd:12:45:37: ec:1a:fd:80:f5:cc:05:96:98:dc:f9:49:58:88:b4: c9:82:45:72:01:d3:d8:e4:58:0b:6f:c3:14:e5:61: 0b:93:18:5b:b4:ea:e4:96:6b:24:93:de:a5:d6:f2: 37:90:0f:8e:3b:bc:5c:71:36:7c:a0:d7:42:78:17: 96:78:a5:f1:38:08:08:3b:3f:a7:37:d7:64:2b:a0: 5f:11:1c:26:5c:53:85:70:44:75:5f:c0:24:d7:fd: ae:b4:f1:4e:7b:34:7e:8a:b2:4a:97:4e:66:eb:50: 32:d3:e3:a2:ba:99:ec:32:36:4a:94:30:62:93:57: 68:bc:49:ef:73:3f:ef:68:a4:95:d6:25:b6:14:7c: d7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B8:67:77:F2:CF:4D:51:6E:A9:FC:AB:7B:77:32:03:F1:31:3F:89 X509v3 Authority Key Identifier: keyid:3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3130332e32382e38302e302f32342d3234203d3e203435373233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.28.80.0/24 Signature Algorithm: sha256WithRSAEncryption a4:bf:2c:e2:a9:09:e6:84:28:47:d8:cb:e0:d8:70:56:63:a3: 7b:09:8f:c7:09:a2:c5:13:bd:44:16:a1:a1:fe:78:df:bf:7a: 6d:6a:4b:c2:31:84:da:e5:ba:c4:bc:dd:f6:58:85:73:37:b0: 5a:10:e7:54:6a:53:1d:47:03:15:6c:68:11:24:ad:23:32:f2: 66:86:cb:71:f0:37:5d:b1:11:4e:4e:75:91:98:81:ff:6e:dd: 6d:11:13:16:09:dc:22:81:0b:bc:c7:1a:61:b3:da:49:75:05: b6:c5:19:f8:13:31:84:c1:9e:40:5f:ae:13:d2:38:55:6f:b4: 6a:f4:a4:de:f6:66:49:30:4e:39:c3:f5:74:8a:4a:bb:14:05: d7:77:de:85:59:6f:3e:99:2a:3b:5b:0c:18:41:e6:1e:76:69: 11:64:f4:e8:3c:21:6d:5e:21:fd:5d:8c:4f:77:3f:f2:1d:96: ab:c7:d6:e1:8d:b6:99:fb:8d:a2:ce:d8:be:62:0f:0b:3a:0d: 06:2f:ee:0f:80:5f:85:f4:da:39:97:0a:97:46:6c:b6:c3:f1: 7c:68:58:cc:33:f5:d5:55:14:97:25:44:74:01:87:23:42:fd: 25:99:61:be:52:be:46:7e:e5:fc:7c:4d:fc:b3:8c:7b:fa:8b: c4:c3:77:58 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUJjKcGIBBE4gn2evZ7+L3KfTqkyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y2RTlCQzVGMTZGMUMzQUI1RkQ2MzZFN0RFMDZGREQ2 NDg5MkMyNTAeFw0yNTEyMzAwNDU1MDBaFw0yNjEyMjkwNTAwMDBaMDMxMTAvBgNV BAMTKERBQjg2Nzc3RjJDRjRENTE2RUE5RkNBQjdCNzczMjAzRjEzMTNGODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp2aa8837r01vvYs59iRMnx6E7 qfVQtDtI765vMBvrxkpFMiXTEuPQC9/IZwQWvZqJr7yIgOj2TLIerhX/jjvN5pfG 3HPNByqyVHetSVLZqFP3gfyW/rKWsecBSCCGerKCTntUNwmxAUHqLLmSVOJjWu4Y 3RJFN+wa/YD1zAWWmNz5SViItMmCRXIB09jkWAtvwxTlYQuTGFu06uSWayST3qXW 8jeQD447vFxxNnyg10J4F5Z4pfE4CAg7P6c312QroF8RHCZcU4VwRHVfwCTX/a60 8U57NH6KskqXTmbrUDLT46K6mewyNkqUMGKTV2i8Se9zP+9opJXWJbYUfNcdAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU2rhnd/LPTVFuqfyre3cyA/ExP4kwHwYDVR0j BBgwFoAUP26bxfFvHDq1/WNufeBv3WSJLCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MWRiMzczMC1mNDk5LTQ0OWYtYjZmMi03YTVkZWI1MzJiMGMvMC8zRjZFOUJDNUYx NkYxQzNBQjVGRDYzNkU3REUwNkZERDY0ODkyQzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Y2RTlCQzVGMTZGMUMzQUI1RkQ2MzZFN0RFMDZGREQ2NDg5 MkMyNS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQxZGIzNzMwLWY0OTktNDQ5Zi1i NmYyLTdhNWRlYjUzMmIwYy8wLzMxMzAzMzJlMzIzODJlMzgzMDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM0MzUzNzMyMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnHFAwDQYJKoZIhvcN AQELBQADggEBAKS/LOKpCeaEKEfYy+DYcFZjo3sJj8cJosUTvUQWoaH+eN+/em1q S8IxhNrlusS83fZYhXM3sFoQ51RqUx1HAxVsaBEkrSMy8maGy3HwN12xEU5OdZGY gf9u3W0RExYJ3CKBC7zHGmGz2kl1BbbFGfgTMYTBnkBfrhPSOFVvtGr0pN72Zkkw TjnD9XSKSrsUBdd33oVZbz6ZKjtbDBhB5h52aRFk9Og8IW1eIf1djE93P/IdlqvH 1uGNtpn7jaLO2L5iDws6DQYv7g+AX4X02jmXCpdGbLbD8XxoWMwz9dVVFJclRHQB hyNC/SWZYb5SvkZ+5fx8TfyzjHv6i8TDd1g= -----END CERTIFICATE-----Generated at Sun Jan 25 23:56:45 2026 by rpki-client