This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3130332e32382e38322e302f32342d3234203d3e203435373233.roa File: 3130332e32382e38322e302f32342d3234203d3e203435373233.roa (raw, json) Hash identifier: JiNSNBx/NJVCb9CW8exTEdCGa2EMUTZlCI+5UgveOhE= Subject key identifier: 87:B4:00:C8:CA:72:C9:DC:D2:7A:84:28:94:3D:90:E9:A6:C5:F0:E5 Certificate issuer: /CN=3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25 Certificate serial: 36809E4F9E1269D7BBFF2EC9E4068F53D1F23478 Authority key identifier: 3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3130332e32382e38322e302f32342d3234203d3e203435373233.roa Signing time: Tue 30 Dec 2025 05:00:01 +0000 ROA not before: Tue 30 Dec 2025 04:55:01 +0000 ROA not after: Tue 29 Dec 2026 05:00:01 +0000 asID: 45723 IP address blocks: 103.28.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 13:35:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:80:9e:4f:9e:12:69:d7:bb:ff:2e:c9:e4:06:8f:53:d1:f2:34:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25 Validity Not Before: Dec 30 04:55:01 2025 GMT Not After : Dec 29 05:00:01 2026 GMT Subject: CN=87B400C8CA72C9DCD27A8428943D90E9A6C5F0E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b9:96:ae:fe:f6:aa:24:2b:58:6f:af:56:0f: cb:32:d7:e4:94:fc:cc:49:56:66:12:43:ad:4a:06: cc:3b:f2:8e:77:50:3d:19:be:63:2a:e8:b2:92:c9: 8e:47:40:9b:2e:1f:aa:65:67:a2:0b:23:97:40:f3: 06:13:f4:6e:26:04:9e:c9:d4:4a:e0:2d:a1:30:79: 6a:ae:26:9f:5d:17:ee:a0:b6:c3:80:fe:62:e9:64: f9:be:bd:ee:51:77:49:73:75:46:8b:52:34:5e:05: e9:d8:d3:94:1c:0c:44:28:50:7e:3b:c2:3f:2f:df: ee:2c:63:8a:c5:08:16:ee:96:87:45:ee:25:4b:a1: f8:71:85:87:68:1a:38:ec:17:0a:7d:57:7a:d0:77: a9:32:07:01:44:da:44:bc:91:b4:22:16:d0:a2:d8: a6:d2:a2:aa:9e:d6:b0:45:3e:4c:4d:cb:c5:e9:8c: 81:a7:25:5d:23:00:86:16:85:4e:cd:e4:a2:d5:7e: 74:0d:3a:1a:df:88:cc:a6:6d:40:06:07:19:8f:a4: 3c:98:f5:bf:26:84:02:81:5b:01:f1:59:5d:be:1e: 28:df:c3:00:31:04:81:33:21:1d:76:56:40:5b:dc: 58:ee:eb:cd:da:bf:3c:14:53:9f:2c:bb:e8:77:62: 26:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:B4:00:C8:CA:72:C9:DC:D2:7A:84:28:94:3D:90:E9:A6:C5:F0:E5 X509v3 Authority Key Identifier: keyid:3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3130332e32382e38322e302f32342d3234203d3e203435373233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.28.82.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:2e:c3:e8:ec:75:2b:48:6f:d7:33:db:ce:cb:af:44:93:5d: 36:0e:28:5f:25:ce:9a:20:2c:cd:4b:8b:12:2d:b6:2e:e2:1c: 36:12:81:24:58:9d:d3:64:36:3b:c8:6e:6d:08:09:1a:d2:00: 59:97:35:ab:40:06:35:4c:b0:68:6a:2d:49:5c:a2:d9:63:a6: 03:12:98:c7:97:66:78:4b:ee:cb:a9:21:55:b3:ea:d1:34:f2: d4:3d:eb:fc:60:d5:0d:57:8a:3a:19:82:82:a8:79:67:fb:c6: c9:7b:ee:b2:53:1f:cf:c7:64:25:a9:23:db:5e:5a:8e:16:45: 0e:38:17:29:31:3a:e9:2e:bb:3d:27:ea:2e:33:8f:47:47:9e: 17:d5:59:c6:0b:6c:73:8d:cd:69:88:9e:5c:07:f3:00:1a:42: 0b:e0:d0:28:e5:75:37:bf:d1:a5:92:e3:51:1a:5b:12:c3:89: 70:34:92:3f:eb:2a:95:c3:4c:8e:db:9a:84:11:bc:d5:e8:ab: 5c:52:88:d4:61:7b:f3:80:cb:08:ba:e9:57:f2:01:5b:4d:a6: 5c:24:3b:c0:6d:9e:97:90:7e:a4:e1:c7:98:dc:85:fa:d1:5d: af:04:b9:a8:b8:0d:df:34:06:7c:d7:65:ab:ca:a3:41:74:0b: 40:f3:4c:53 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUNoCeT54Sade7/y7J5AaPU9HyNHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y2RTlCQzVGMTZGMUMzQUI1RkQ2MzZFN0RFMDZGREQ2 NDg5MkMyNTAeFw0yNTEyMzAwNDU1MDFaFw0yNjEyMjkwNTAwMDFaMDMxMTAvBgNV BAMTKDg3QjQwMEM4Q0E3MkM5RENEMjdBODQyODk0M0Q5MEU5QTZDNUYwRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCluZau/vaqJCtYb69WD8sy1+SU /MxJVmYSQ61KBsw78o53UD0ZvmMq6LKSyY5HQJsuH6plZ6ILI5dA8wYT9G4mBJ7J 1ErgLaEweWquJp9dF+6gtsOA/mLpZPm+ve5Rd0lzdUaLUjReBenY05QcDEQoUH47 wj8v3+4sY4rFCBbulodF7iVLofhxhYdoGjjsFwp9V3rQd6kyBwFE2kS8kbQiFtCi 2KbSoqqe1rBFPkxNy8XpjIGnJV0jAIYWhU7N5KLVfnQNOhrfiMymbUAGBxmPpDyY 9b8mhAKBWwHxWV2+HijfwwAxBIEzIR12VkBb3Fju683avzwUU58su+h3YiZxAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUh7QAyMpyydzSeoQolD2Q6abF8OUwHwYDVR0j BBgwFoAUP26bxfFvHDq1/WNufeBv3WSJLCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MWRiMzczMC1mNDk5LTQ0OWYtYjZmMi03YTVkZWI1MzJiMGMvMC8zRjZFOUJDNUYx NkYxQzNBQjVGRDYzNkU3REUwNkZERDY0ODkyQzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Y2RTlCQzVGMTZGMUMzQUI1RkQ2MzZFN0RFMDZGREQ2NDg5 MkMyNS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQxZGIzNzMwLWY0OTktNDQ5Zi1i NmYyLTdhNWRlYjUzMmIwYy8wLzMxMzAzMzJlMzIzODJlMzgzMjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM0MzUzNzMyMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnHFIwDQYJKoZIhvcN AQELBQADggEBAEwuw+jsdStIb9cz287Lr0STXTYOKF8lzpogLM1LixItti7iHDYS gSRYndNkNjvIbm0ICRrSAFmXNatABjVMsGhqLUlcotljpgMSmMeXZnhL7supIVWz 6tE08tQ96/xg1Q1XijoZgoKoeWf7xsl77rJTH8/HZCWpI9teWo4WRQ44FykxOuku uz0n6i4zj0dHnhfVWcYLbHONzWmInlwH8wAaQgvg0CjldTe/0aWS41EaWxLDiXA0 kj/rKpXDTI7bmoQRvNXoq1xSiNRhe/OAywi66VfyAVtNplwkO8BtnpeQfqThx5jc hfrRXa8Euai4Dd80BnzXZavKo0F0C0DzTFM= -----END CERTIFICATE-----Generated at Sun Jan 25 23:57:27 2026 by rpki-client