This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/3130332e3135362e39362e302f32342d3234203d3e20313431303837.roa File: 3130332e3135362e39362e302f32342d3234203d3e20313431303837.roa (raw, json) Hash identifier: cE5GTYNlB3yeu6BJgWNNyA2V1Ddxooz4i3udaZzgT3w= Subject key identifier: CE:EC:F3:44:C0:27:E8:41:AF:96:69:11:C9:5D:30:A2:3E:65:7B:2D Certificate issuer: /CN=878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE Certificate serial: 0DF132CADA36916094C629E3322AE71D43F63DD6 Authority key identifier: 87:8D:F4:B7:E3:C7:76:B2:ED:C1:75:2F:CC:BC:5E:28:9C:45:3B:EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/3130332e3135362e39362e302f32342d3234203d3e20313431303837.roa Signing time: Wed 21 Jan 2026 08:01:08 +0000 ROA not before: Wed 21 Jan 2026 07:56:08 +0000 ROA not after: Wed 20 Jan 2027 08:01:08 +0000 asID: 141087 IP address blocks: 103.156.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:f1:32:ca:da:36:91:60:94:c6:29:e3:32:2a:e7:1d:43:f6:3d:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE Validity Not Before: Jan 21 07:56:08 2026 GMT Not After : Jan 20 08:01:08 2027 GMT Subject: CN=CEECF344C027E841AF966911C95D30A23E657B2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8a:d0:36:d1:df:e7:8b:11:80:0a:d0:06:a5: c3:48:85:b4:cd:54:a6:4a:a7:d7:9b:be:2a:c4:71: 6f:0b:d2:06:98:a7:fa:4d:ca:04:35:81:58:95:ed: f9:f5:e5:31:d9:5f:6d:0b:e7:7c:e9:3c:ca:ea:cf: 5a:ed:05:0e:e7:ca:09:8b:62:46:fb:eb:66:a6:12: ca:6c:af:48:63:b0:52:6e:d5:80:d9:90:64:53:cd: 22:fd:81:75:2c:95:cf:3c:12:7c:3a:e7:47:35:82: 57:04:cb:6a:f9:bd:9a:44:15:08:1c:31:fc:e5:84: 45:be:a2:7c:f3:14:75:5e:5f:75:b0:d2:b8:44:d8: 3f:d8:cf:37:21:c6:e6:1d:7b:de:9d:7c:e8:bf:76: fa:73:fd:55:ac:30:ab:a9:a3:e2:f6:8c:a2:72:e7: 23:55:8e:64:4f:60:c0:67:ff:96:62:43:76:84:c4: ef:86:e0:0a:84:99:76:e9:db:de:dc:aa:b5:c3:c5: 90:63:db:c1:f6:c4:d1:36:ac:96:3c:9f:3d:a9:36: d8:24:11:3a:d1:78:68:bc:77:9c:b0:98:54:ab:64: 96:ab:36:35:41:06:12:46:fa:c2:b7:31:c6:c4:d3: 51:10:f3:f4:33:1a:40:9f:4b:e3:17:34:40:c6:56: ac:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:EC:F3:44:C0:27:E8:41:AF:96:69:11:C9:5D:30:A2:3E:65:7B:2D X509v3 Authority Key Identifier: keyid:87:8D:F4:B7:E3:C7:76:B2:ED:C1:75:2F:CC:BC:5E:28:9C:45:3B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/3130332e3135362e39362e302f32342d3234203d3e20313431303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.96.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:6d:2d:ae:af:d5:0a:c0:8b:26:d6:93:c7:fb:01:e8:93:63: ab:55:0e:e8:85:f8:93:10:96:a5:fd:2e:a1:ea:6d:4d:ab:06: c4:70:73:54:70:1a:05:1c:df:80:c7:37:6f:42:6a:26:a2:0d: 32:bc:eb:3d:72:20:77:01:e8:2a:64:a2:72:f9:c6:31:b5:e6: 61:7e:d2:3d:e7:0d:b0:02:6b:97:f2:9f:c7:5b:02:94:59:4e: 63:0e:5b:13:6c:87:55:be:ce:f9:5c:48:1a:c1:95:87:a7:8b: 93:d8:a1:7b:7d:78:d8:2c:6b:17:5b:b4:73:f3:6f:36:45:23: 04:d6:d0:f0:7a:80:62:54:3b:1b:6d:72:d9:d9:a7:49:8c:ba: c3:fa:72:06:39:a7:22:81:99:9b:62:ca:85:f8:07:3b:e7:e3: 20:4b:ef:4f:c0:ed:39:d8:b5:ea:aa:fe:b3:60:84:a7:a2:41: 50:7e:97:82:27:ab:d5:8f:35:86:2a:9d:ab:05:97:c3:ef:f0: 4b:6e:ee:77:70:cd:70:d6:98:21:d3:f2:99:48:1d:8a:39:27: 8c:0e:97:91:73:fd:5c:23:bc:8a:03:c5:e3:29:0f:17:e7:74: 95:a1:46:7a:bb:7a:35:90:b0:a7:79:fb:35:80:81:14:d5:14: 02:b5:62:a5 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUDfEyyto2kWCUxinjMirnHUP2PdYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVFMjg5 QzQ1M0JFRTAeFw0yNjAxMjEwNzU2MDhaFw0yNzAxMjAwODAxMDhaMDMxMTAvBgNV BAMTKENFRUNGMzQ0QzAyN0U4NDFBRjk2NjkxMUM5NUQzMEEyM0U2NTdCMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVitA20d/nixGACtAGpcNIhbTN VKZKp9ebvirEcW8L0gaYp/pNygQ1gViV7fn15THZX20L53zpPMrqz1rtBQ7nygmL Ykb762amEspsr0hjsFJu1YDZkGRTzSL9gXUslc88Enw650c1glcEy2r5vZpEFQgc MfzlhEW+onzzFHVeX3Ww0rhE2D/YzzchxuYde96dfOi/dvpz/VWsMKupo+L2jKJy 5yNVjmRPYMBn/5ZiQ3aExO+G4AqEmXbp297cqrXDxZBj28H2xNE2rJY8nz2pNtgk ETrReGi8d5ywmFSrZJarNjVBBhJG+sK3McbE01EQ8/QzGkCfS+MXNEDGVqwPAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUzuzzRMAn6EGvlmkRyV0woj5ley0wHwYDVR0j BBgwFoAUh430t+PHdrLtwXUvzLxeKJxFO+4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Yzg5N2M0YS1lMGZmLTQ2NTItYTU5MS1mZjJkNDhlNzJjOTEvMC84NzhERjRCN0Uz Qzc3NkIyRURDMTc1MkZDQ0JDNUUyODlDNDUzQkVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVFMjg5QzQ1 M0JFRS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVjODk3YzRhLWUwZmYtNDY1Mi1h NTkxLWZmMmQ0OGU3MmM5MS8wLzMxMzAzMzJlMzEzNTM2MmUzOTM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzAzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5xgMA0GCSqG SIb3DQEBCwUAA4IBAQCabS2ur9UKwIsm1pPH+wHok2OrVQ7ohfiTEJal/S6h6m1N qwbEcHNUcBoFHN+AxzdvQmomog0yvOs9ciB3AegqZKJy+cYxteZhftI95w2wAmuX 8p/HWwKUWU5jDlsTbIdVvs75XEgawZWHp4uT2KF7fXjYLGsXW7Rz8282RSME1tDw eoBiVDsbbXLZ2adJjLrD+nIGOacigZmbYsqF+Ac75+MgS+9PwO052LXqqv6zYISn okFQfpeCJ6vVjzWGKp2rBZfD7/BLbu53cM1w1pgh0/KZSB2KOSeMDpeRc/1cI7yK A8XjKQ8X53SVoUZ6u3o1kLCnefs1gIEU1RQCtWKl -----END CERTIFICATE-----Generated at Sun Jan 25 23:20:30 2026 by rpki-client