This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3130332e32382e38332e302f32342d3234203d3e203435373233.roa File: 3130332e32382e38332e302f32342d3234203d3e203435373233.roa (raw, json) Hash identifier: O+nmvl+UTnkLZegrbIISQHYGfoEA7BPCfhSW9p3DWUc= Subject key identifier: 98:6E:CA:8E:C0:94:67:04:0C:B9:13:EB:31:02:AF:D7:8C:DC:01:AA Certificate issuer: /CN=3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25 Certificate serial: 58A35E4FCB824E3EB8F6D09AEE87985BA825F909 Authority key identifier: 3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3130332e32382e38332e302f32342d3234203d3e203435373233.roa Signing time: Tue 30 Dec 2025 05:00:00 +0000 ROA not before: Tue 30 Dec 2025 04:55:00 +0000 ROA not after: Tue 29 Dec 2026 05:00:00 +0000 asID: 45723 IP address blocks: 103.28.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 13:35:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:a3:5e:4f:cb:82:4e:3e:b8:f6:d0:9a:ee:87:98:5b:a8:25:f9:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25 Validity Not Before: Dec 30 04:55:00 2025 GMT Not After : Dec 29 05:00:00 2026 GMT Subject: CN=986ECA8EC09467040CB913EB3102AFD78CDC01AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f7:10:f8:53:ed:4f:71:3f:8f:65:7d:75:5e: 75:6e:38:99:d1:55:b4:d1:f6:fa:d1:d1:c1:65:8e: dc:96:6c:bc:07:e8:f5:ea:55:38:2c:f3:00:aa:2c: 48:0b:13:8b:d5:79:ef:d6:ca:73:97:b5:e8:a5:ce: 0f:0e:e7:70:65:e8:95:b2:2a:bf:f1:a8:76:84:2b: 01:1c:99:7f:0f:6d:5e:be:29:e6:13:25:98:23:7d: 61:fb:ca:5b:a0:4f:e0:02:08:a9:17:b9:a1:77:b7: 8a:b9:a3:4f:32:be:f1:3b:de:4a:44:67:35:4e:e5: a0:39:4f:ba:31:19:6c:b4:59:99:7c:2d:3a:af:4f: 41:5c:fc:8b:98:01:9a:f1:cd:75:f6:f4:6f:10:88: d4:a3:b8:4a:c9:23:39:7d:e8:b2:b6:ea:57:53:00: 5d:a8:9b:d7:8b:46:11:9d:cb:a6:9d:63:af:8f:39: 35:d0:97:ca:ff:63:a5:9d:71:5c:f6:0b:58:d2:7e: c6:51:ba:dd:12:f3:e2:d9:04:8a:11:20:88:12:ab: ce:4d:ee:7c:f7:ba:7f:16:fb:71:6a:7a:26:c0:65: 9d:7e:ed:09:bd:87:ae:01:eb:65:46:5b:19:7a:33: 03:6c:d3:50:2a:c9:75:35:0b:70:20:58:5e:d9:67: e8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:6E:CA:8E:C0:94:67:04:0C:B9:13:EB:31:02:AF:D7:8C:DC:01:AA X509v3 Authority Key Identifier: keyid:3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3130332e32382e38332e302f32342d3234203d3e203435373233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.28.83.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:87:4b:4b:93:ba:a6:c5:89:5a:09:cc:3f:6c:94:12:c9:ab: a0:3f:cd:de:59:9b:e1:28:26:b6:37:b9:39:f5:2b:61:4d:3f: 0e:82:f2:3a:71:6c:d2:88:bb:ef:0c:fa:9e:ff:2d:4a:ea:ca: a1:db:74:f0:b9:0a:40:b7:8f:79:ed:ac:9f:15:03:86:f1:2e: 19:f5:7c:ab:ed:90:98:38:35:1c:9d:73:73:3f:20:3b:92:38: 13:2e:fa:11:e4:27:97:c4:92:73:21:ff:66:56:36:67:07:b1: 30:d7:ef:1f:6e:22:66:66:78:96:04:81:1d:63:0a:83:c6:79: 65:1c:b7:b7:0c:c5:cb:2c:34:7c:fd:9a:ef:6e:9b:55:22:1e: d8:05:6a:63:50:98:f6:06:26:7f:0e:1b:2f:d9:d6:1b:1e:6b: 8e:7d:4a:3b:4c:86:ef:3f:c8:f2:7d:48:86:3b:63:27:0d:7b: 88:d5:88:17:c0:78:ac:cf:f5:98:dd:f5:08:0e:5c:4c:f4:7d: 30:da:69:f1:7d:35:ce:76:eb:9c:71:f2:b4:c1:d4:24:87:01: 53:b7:e3:5a:d2:c4:9a:48:df:91:d1:70:23:46:9b:ad:73:5a: 63:ad:1a:24:52:ff:d5:cc:5f:67:bc:e8:fe:b8:77:ea:1f:c1: f7:25:37:bc -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUWKNeT8uCTj649tCa7oeYW6gl+QkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y2RTlCQzVGMTZGMUMzQUI1RkQ2MzZFN0RFMDZGREQ2 NDg5MkMyNTAeFw0yNTEyMzAwNDU1MDBaFw0yNjEyMjkwNTAwMDBaMDMxMTAvBgNV BAMTKDk4NkVDQThFQzA5NDY3MDQwQ0I5MTNFQjMxMDJBRkQ3OENEQzAxQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp9xD4U+1PcT+PZX11XnVuOJnR VbTR9vrR0cFljtyWbLwH6PXqVTgs8wCqLEgLE4vVee/WynOXteilzg8O53Bl6JWy Kr/xqHaEKwEcmX8PbV6+KeYTJZgjfWH7ylugT+ACCKkXuaF3t4q5o08yvvE73kpE ZzVO5aA5T7oxGWy0WZl8LTqvT0Fc/IuYAZrxzXX29G8QiNSjuErJIzl96LK26ldT AF2om9eLRhGdy6adY6+POTXQl8r/Y6WdcVz2C1jSfsZRut0S8+LZBIoRIIgSq85N 7nz3un8W+3FqeibAZZ1+7Qm9h64B62VGWxl6MwNs01AqyXU1C3AgWF7ZZ+jXAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUmG7KjsCUZwQMuRPrMQKv14zcAaowHwYDVR0j BBgwFoAUP26bxfFvHDq1/WNufeBv3WSJLCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MWRiMzczMC1mNDk5LTQ0OWYtYjZmMi03YTVkZWI1MzJiMGMvMC8zRjZFOUJDNUYx NkYxQzNBQjVGRDYzNkU3REUwNkZERDY0ODkyQzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Y2RTlCQzVGMTZGMUMzQUI1RkQ2MzZFN0RFMDZGREQ2NDg5 MkMyNS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQxZGIzNzMwLWY0OTktNDQ5Zi1i NmYyLTdhNWRlYjUzMmIwYy8wLzMxMzAzMzJlMzIzODJlMzgzMzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM0MzUzNzMyMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnHFMwDQYJKoZIhvcN AQELBQADggEBAIuHS0uTuqbFiVoJzD9slBLJq6A/zd5Zm+EoJrY3uTn1K2FNPw6C 8jpxbNKIu+8M+p7/LUrqyqHbdPC5CkC3j3ntrJ8VA4bxLhn1fKvtkJg4NRydc3M/ IDuSOBMu+hHkJ5fEknMh/2ZWNmcHsTDX7x9uImZmeJYEgR1jCoPGeWUct7cMxcss NHz9mu9um1UiHtgFamNQmPYGJn8OGy/Z1hsea459SjtMhu8/yPJ9SIY7YycNe4jV iBfAeKzP9Zjd9QgOXEz0fTDaafF9Nc5265xx8rTB1CSHAVO341rSxJpI35HRcCNG m61zWmOtGiRS/9XMX2e86P64d+ofwfclN7w= -----END CERTIFICATE-----Generated at Sun Jan 25 23:56:30 2026 by rpki-client