This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3130332e32382e38312e302f32342d3234203d3e203435373233.roa File: 3130332e32382e38312e302f32342d3234203d3e203435373233.roa (raw, json) Hash identifier: ugWQkuQ0uRRyYTj1KpvBULv0Xx0kJB9LyC15wGfuroA= Subject key identifier: B7:F8:32:93:0B:EF:19:1A:95:43:98:06:01:76:F3:B3:34:5B:43:53 Certificate issuer: /CN=3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25 Certificate serial: 4EC81FB089B8BDD0C749D5913F50601FBABF2E46 Authority key identifier: 3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3130332e32382e38312e302f32342d3234203d3e203435373233.roa Signing time: Tue 30 Dec 2025 04:00:00 +0000 ROA not before: Tue 30 Dec 2025 03:55:00 +0000 ROA not after: Tue 29 Dec 2026 04:00:00 +0000 asID: 45723 IP address blocks: 103.28.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 13:35:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:c8:1f:b0:89:b8:bd:d0:c7:49:d5:91:3f:50:60:1f:ba:bf:2e:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25 Validity Not Before: Dec 30 03:55:00 2025 GMT Not After : Dec 29 04:00:00 2026 GMT Subject: CN=B7F832930BEF191A954398060176F3B3345B4353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f2:08:28:ba:b5:88:f9:47:14:e0:41:ca:0b: b5:c1:f2:bb:91:77:8a:66:f8:66:cc:9c:6c:0e:c7: 83:f9:0c:99:6d:84:6d:ca:4b:76:b8:66:48:f5:34: 64:88:a3:b1:33:28:5b:c9:e7:94:3d:4a:e5:a8:e6: b9:9f:8a:0b:43:04:64:eb:36:66:28:ec:42:c4:3b: 20:01:c5:2d:90:1a:89:48:61:41:54:64:c0:76:4b: 5c:19:ff:af:44:fd:a4:94:ea:da:50:da:e5:7a:b1: 73:72:78:70:e7:57:da:d1:8d:e1:7b:02:6f:8a:a3: 4d:31:6c:19:9b:0f:99:07:7b:e9:ce:f1:a0:b9:ce: b7:d8:fd:0d:48:e7:ca:08:e0:2f:8a:1a:e1:37:07: 98:89:55:e7:f1:6b:4d:09:26:ed:7c:8e:a9:19:c9: ea:7c:9a:3f:42:39:3d:f5:3e:64:0f:44:91:54:8d: a4:c6:fc:45:3c:d1:b3:a1:f4:23:6e:dd:c6:bb:11: eb:56:fa:ea:ad:8a:cd:3e:b0:6f:ab:3c:36:90:6a: 62:ea:5c:46:d6:11:ca:3d:c6:bd:94:28:0e:de:70: 8c:66:d4:07:67:92:e8:74:26:87:3d:3d:ee:28:d2: 22:ae:19:d6:8e:84:c6:c4:63:91:fa:a2:37:9f:77: e9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F8:32:93:0B:EF:19:1A:95:43:98:06:01:76:F3:B3:34:5B:43:53 X509v3 Authority Key Identifier: keyid:3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3130332e32382e38312e302f32342d3234203d3e203435373233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.28.81.0/24 Signature Algorithm: sha256WithRSAEncryption 14:dd:fa:bc:ab:11:7d:34:29:b8:42:8c:83:ba:9f:6d:18:cd: 7f:6d:6d:4e:da:f4:61:62:a7:8f:54:2f:22:be:e7:1e:16:49: 3f:cb:39:78:71:a5:c0:9d:81:17:d9:8d:73:a3:dd:2b:8d:50: 14:5a:42:ec:f0:e2:cb:8d:62:25:28:d5:09:be:ed:18:43:a0: e1:98:05:e8:b5:71:ca:86:83:00:63:f6:e6:f8:4d:7d:fa:6a: 5f:2d:a9:47:34:a3:98:18:8f:4e:c1:bf:c0:db:97:04:4d:43: f9:af:ad:fb:bb:68:60:70:43:20:4c:a1:43:d8:35:74:eb:79: e0:3b:c6:96:3f:1b:c0:86:7b:1b:cc:1f:4b:a7:ed:27:2a:6f: 65:30:e9:15:c4:4a:74:29:fa:b0:ab:79:36:9b:b6:34:b2:10: d4:61:e3:af:8d:2d:79:51:cd:f1:fc:66:2d:c4:d2:4b:f1:d7: 57:25:2d:6f:52:c6:18:1f:c5:3a:88:dc:d2:e6:1a:31:80:c4: bb:c4:6e:a5:6a:08:af:26:33:7a:13:0a:49:62:91:cc:b0:d8: 52:40:d0:d0:ee:ce:a1:8a:89:a4:87:85:73:5c:54:61:16:de: e9:17:f7:69:9a:b2:9b:ec:5e:c3:9d:9c:67:80:dc:c7:eb:d5: 1f:af:c2:d3 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUTsgfsIm4vdDHSdWRP1BgH7q/LkYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y2RTlCQzVGMTZGMUMzQUI1RkQ2MzZFN0RFMDZGREQ2 NDg5MkMyNTAeFw0yNTEyMzAwMzU1MDBaFw0yNjEyMjkwNDAwMDBaMDMxMTAvBgNV BAMTKEI3RjgzMjkzMEJFRjE5MUE5NTQzOTgwNjAxNzZGM0IzMzQ1QjQzNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC28ggourWI+UcU4EHKC7XB8ruR d4pm+GbMnGwOx4P5DJlthG3KS3a4Zkj1NGSIo7EzKFvJ55Q9SuWo5rmfigtDBGTr NmYo7ELEOyABxS2QGolIYUFUZMB2S1wZ/69E/aSU6tpQ2uV6sXNyeHDnV9rRjeF7 Am+Ko00xbBmbD5kHe+nO8aC5zrfY/Q1I58oI4C+KGuE3B5iJVefxa00JJu18jqkZ yep8mj9COT31PmQPRJFUjaTG/EU80bOh9CNu3ca7EetW+uqtis0+sG+rPDaQamLq XEbWEco9xr2UKA7ecIxm1Adnkuh0Joc9Pe4o0iKuGdaOhMbEY5H6ojefd+kjAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUt/gykwvvGRqVQ5gGAXbzszRbQ1MwHwYDVR0j BBgwFoAUP26bxfFvHDq1/WNufeBv3WSJLCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MWRiMzczMC1mNDk5LTQ0OWYtYjZmMi03YTVkZWI1MzJiMGMvMC8zRjZFOUJDNUYx NkYxQzNBQjVGRDYzNkU3REUwNkZERDY0ODkyQzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Y2RTlCQzVGMTZGMUMzQUI1RkQ2MzZFN0RFMDZGREQ2NDg5 MkMyNS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQxZGIzNzMwLWY0OTktNDQ5Zi1i NmYyLTdhNWRlYjUzMmIwYy8wLzMxMzAzMzJlMzIzODJlMzgzMTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM0MzUzNzMyMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnHFEwDQYJKoZIhvcN AQELBQADggEBABTd+ryrEX00KbhCjIO6n20YzX9tbU7a9GFip49ULyK+5x4WST/L OXhxpcCdgRfZjXOj3SuNUBRaQuzw4suNYiUo1Qm+7RhDoOGYBei1ccqGgwBj9ub4 TX36al8tqUc0o5gYj07Bv8DblwRNQ/mvrfu7aGBwQyBMoUPYNXTreeA7xpY/G8CG exvMH0un7Scqb2Uw6RXESnQp+rCreTabtjSyENRh46+NLXlRzfH8Zi3E0kvx11cl LW9SxhgfxTqI3NLmGjGAxLvEbqVqCK8mM3oTCklikcyw2FJA0NDuzqGKiaSHhXNc VGEW3ukX92maspvsXsOdnGeA3Mfr1R+vwtM= -----END CERTIFICATE-----Generated at Sun Jan 25 23:57:56 2026 by rpki-client