This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/3130332e3135392e3139342e302f32332d3234203d3e20313431313435.roa File: 3130332e3135392e3139342e302f32332d3234203d3e20313431313435.roa (raw, json) Hash identifier: //+o8fHe6E0loKsGSmkgVyIWp7gWm5okCpSCAbrnfh4= Subject key identifier: 76:6B:C8:B9:74:0B:FB:7F:68:67:FE:6B:5D:06:CE:A7:0D:9C:01:72 Certificate issuer: /CN=6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11 Certificate serial: 25A22B1EBBDBCFD5F9E17F5D603D753CF15BA457 Authority key identifier: 6F:C8:57:DF:7F:E5:35:0A:6C:05:A1:F1:13:F3:DC:2E:5F:E0:BE:11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/3130332e3135392e3139342e302f32332d3234203d3e20313431313435.roa Signing time: Wed 21 Jan 2026 14:00:01 +0000 ROA not before: Wed 21 Jan 2026 13:55:01 +0000 ROA not after: Wed 20 Jan 2027 14:00:01 +0000 asID: 141145 IP address blocks: 103.159.194.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 08:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:a2:2b:1e:bb:db:cf:d5:f9:e1:7f:5d:60:3d:75:3c:f1:5b:a4:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11 Validity Not Before: Jan 21 13:55:01 2026 GMT Not After : Jan 20 14:00:01 2027 GMT Subject: CN=766BC8B9740BFB7F6867FE6B5D06CEA70D9C0172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:36:93:89:30:e6:04:2e:13:20:e2:9c:d0:33: 28:cf:85:bf:d6:63:dc:ce:6d:d4:cc:28:aa:d6:6f: 22:e1:29:ef:8e:f4:27:1b:51:1f:36:20:8b:cf:9c: 6f:91:00:dc:04:58:89:98:bb:72:f2:5b:b9:2d:65: 69:d3:8a:05:6c:fa:80:fa:92:9b:67:15:6c:65:75: 6f:07:8b:ab:5b:01:45:8b:99:94:5b:3f:4c:e0:b8: cd:96:13:2f:87:cc:45:3a:a2:fc:11:eb:a2:fc:b1: f1:5c:c6:8f:35:62:ea:15:8f:80:90:b1:6c:b8:30: 1b:56:98:9a:0e:37:cd:03:ee:98:b9:b7:59:0d:fe: 5f:76:8d:2a:4e:9f:46:9c:f2:9e:b1:f2:ce:b3:8f: 85:9c:3b:51:10:ea:e9:1c:c4:e0:81:e6:da:e6:cb: f2:94:1c:5a:68:ea:04:bb:46:39:de:0d:04:a2:05: 70:5b:fb:67:46:d2:e4:fe:84:47:e8:a6:dc:28:05: 43:f2:d1:6e:aa:b7:89:89:b7:e7:33:d0:01:17:20: c4:ce:d0:1d:24:f0:82:e9:87:9b:62:91:ad:dd:54: a4:c4:05:d1:e2:a1:d4:42:4c:20:9d:d5:86:1a:ab: 21:8f:37:87:4f:50:24:73:fc:4a:dd:7a:cd:a2:dd: 95:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:6B:C8:B9:74:0B:FB:7F:68:67:FE:6B:5D:06:CE:A7:0D:9C:01:72 X509v3 Authority Key Identifier: keyid:6F:C8:57:DF:7F:E5:35:0A:6C:05:A1:F1:13:F3:DC:2E:5F:E0:BE:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/3130332e3135392e3139342e302f32332d3234203d3e20313431313435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.159.194.0/23 Signature Algorithm: sha256WithRSAEncryption 08:6d:54:50:43:bf:a3:5b:a7:64:6b:8b:a6:ca:a7:4b:a5:69: 24:24:e4:51:56:0f:fb:09:40:bd:82:5c:87:90:e1:8a:14:3e: 55:fd:5e:2b:8f:d6:d9:fa:63:78:94:1f:3a:98:da:5e:57:a8: da:66:51:15:3c:45:3e:60:8d:89:5a:82:1c:ff:7e:10:d0:56: 47:22:63:19:91:3d:68:d8:95:0a:a3:37:23:e3:0d:8d:d3:97: 8b:a4:18:ef:9e:55:a5:fd:1e:5a:a4:22:7e:35:eb:b2:bf:14: c5:ab:c6:a5:bb:aa:21:93:16:90:e8:55:52:7d:ab:b2:cd:37: a9:23:57:3d:23:ff:bc:e4:45:a5:65:01:75:1c:d6:24:5e:18: 97:a7:25:94:7d:a8:04:14:a1:9a:af:87:51:d6:a5:4f:df:c5: 5b:1f:79:dc:5e:ca:98:88:66:34:88:36:69:f4:13:dc:5d:9d: 94:00:88:ec:c7:63:87:e0:7b:34:14:1a:36:bc:f3:28:79:8a: 46:06:41:0e:1b:28:8b:5a:67:06:a8:0e:05:b5:14:2c:44:b5: b5:43:66:b7:e4:89:7c:6d:73:dd:5a:60:db:e1:6a:64:9f:5c: e9:21:54:46:16:32:08:d5:8b:8d:ef:8e:26:72:a7:0d:6f:40: 4d:56:56:31 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUJaIrHrvbz9X54X9dYD11PPFbpFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZDODU3REY3RkU1MzUwQTZDMDVBMUYxMTNGM0RDMkU1 RkUwQkUxMTAeFw0yNjAxMjExMzU1MDFaFw0yNzAxMjAxNDAwMDFaMDMxMTAvBgNV BAMTKDc2NkJDOEI5NzQwQkZCN0Y2ODY3RkU2QjVEMDZDRUE3MEQ5QzAxNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaNpOJMOYELhMg4pzQMyjPhb/W Y9zObdTMKKrWbyLhKe+O9CcbUR82IIvPnG+RANwEWImYu3LyW7ktZWnTigVs+oD6 kptnFWxldW8Hi6tbAUWLmZRbP0zguM2WEy+HzEU6ovwR66L8sfFcxo81YuoVj4CQ sWy4MBtWmJoON80D7pi5t1kN/l92jSpOn0ac8p6x8s6zj4WcO1EQ6ukcxOCB5trm y/KUHFpo6gS7RjneDQSiBXBb+2dG0uT+hEfoptwoBUPy0W6qt4mJt+cz0AEXIMTO 0B0k8ILph5tika3dVKTEBdHiodRCTCCd1YYaqyGPN4dPUCRz/Erdes2i3ZWFAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUdmvIuXQL+39oZ/5rXQbOpw2cAXIwHwYDVR0j BBgwFoAUb8hX33/lNQpsBaHxE/PcLl/gvhEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YTIzOGE2Mi02YTk2LTQzYmMtODdhZi0wMmRiNjQxZjcxMDkvMC82RkM4NTdERjdG RTUzNTBBNkMwNUExRjExM0YzREMyRTVGRTBCRTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZDODU3REY3RkU1MzUwQTZDMDVBMUYxMTNGM0RDMkU1RkUw QkUxMS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRhMjM4YTYyLTZhOTYtNDNiYy04 N2FmLTAyZGI2NDFmNzEwOS8wLzMxMzAzMzJlMzEzNTM5MmUzMTM5MzQyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzEzMTM0MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnn8IwDQYJ KoZIhvcNAQELBQADggEBAAhtVFBDv6Nbp2Rri6bKp0ulaSQk5FFWD/sJQL2CXIeQ 4YoUPlX9XiuP1tn6Y3iUHzqY2l5XqNpmURU8RT5gjYlaghz/fhDQVkciYxmRPWjY lQqjNyPjDY3Tl4ukGO+eVaX9HlqkIn4167K/FMWrxqW7qiGTFpDoVVJ9q7LNN6kj Vz0j/7zkRaVlAXUc1iReGJenJZR9qAQUoZqvh1HWpU/fxVsfedxeypiIZjSINmn0 E9xdnZQAiOzHY4fgezQUGja88yh5ikYGQQ4bKItaZwaoDgW1FCxEtbVDZrfkiXxt c91aYNvhamSfXOkhVEYWMgjVi43vjiZypw1vQE1WVjE= -----END CERTIFICATE-----Generated at Sun Jan 25 23:58:38 2026 by rpki-client