This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e38372e36362e302f32332d3233203d3e20313333383030.roa File: 3130332e38372e36362e302f32332d3233203d3e20313333383030.roa (raw, json) Hash identifier: YXx5Bw2zDfhA+7upHzk0fggnqS7avx0UyQWlGd+c6ho= Subject key identifier: 5D:2D:02:BD:66:D9:DE:02:69:8C:07:58:61:56:02:D5:AC:BB:7C:A6 Certificate issuer: /CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642 Certificate serial: 3C4EE5AA7F68E7BE78CC1318875A3E84B9DF6290 Authority key identifier: 5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e38372e36362e302f32332d3233203d3e20313333383030.roa Signing time: Mon 19 Jan 2026 04:00:03 +0000 ROA not before: Mon 19 Jan 2026 03:55:03 +0000 ROA not after: Mon 18 Jan 2027 04:00:03 +0000 asID: 133800 IP address blocks: 103.87.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 06:10:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:4e:e5:aa:7f:68:e7:be:78:cc:13:18:87:5a:3e:84:b9:df:62:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642 Validity Not Before: Jan 19 03:55:03 2026 GMT Not After : Jan 18 04:00:03 2027 GMT Subject: CN=5D2D02BD66D9DE02698C0758615602D5ACBB7CA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:87:8c:c1:f5:6f:0d:67:58:71:34:b7:2c:df: 55:4e:70:80:33:12:0c:71:70:91:d8:45:37:ea:af: 53:e5:62:5d:5e:19:21:ce:31:b8:d9:c6:3a:b3:06: b6:17:b9:d8:9f:0b:4c:bc:28:32:e9:4f:da:4a:1b: fa:13:ad:52:44:88:d2:1c:8a:45:77:de:14:0a:9a: 1e:af:fc:03:86:69:5d:f0:61:e2:a8:2e:14:c1:97: 80:4b:74:f8:0b:ed:4c:55:e4:1e:4a:1f:ea:5f:3e: e4:a3:00:83:fa:13:93:15:6a:4b:78:0d:fd:f5:c6: cf:b9:fe:dd:d7:69:11:7d:b2:1b:b7:df:50:56:82: cc:0c:06:0a:1d:e6:d0:95:cd:96:e1:6a:6d:6b:5d: d8:d1:fb:1d:99:d3:5c:13:2d:03:f8:c2:73:99:a4: da:99:c0:ec:34:6c:8b:64:6f:83:63:5d:e7:d0:5a: f4:d4:c1:d5:b4:c6:7c:d3:a6:13:89:8e:42:48:5d: d4:d5:a3:bf:74:c8:b7:00:a2:3f:17:a3:0e:ba:fe: 3d:43:3a:c1:70:b4:8b:a3:54:ee:9e:4c:d3:ef:cb: 98:28:1f:59:76:e5:c0:1e:10:df:b3:85:36:b0:30: a6:5b:6b:dd:22:b5:b8:ef:ff:ce:1c:5d:8b:ba:a9: ff:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:2D:02:BD:66:D9:DE:02:69:8C:07:58:61:56:02:D5:AC:BB:7C:A6 X509v3 Authority Key Identifier: keyid:5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e38372e36362e302f32332d3233203d3e20313333383030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.87.66.0/23 Signature Algorithm: sha256WithRSAEncryption 39:d3:e6:91:a1:52:e5:62:f8:fe:8d:a3:72:eb:dc:cc:93:38: 7e:1f:d5:d4:00:ac:72:a1:eb:87:82:3b:19:d0:51:cd:ff:ba: aa:ad:7a:77:16:03:7e:61:8d:67:37:c7:e0:68:e0:fa:a5:68: 77:08:ca:4f:b1:f9:29:6c:8d:a9:74:f9:bb:f3:a6:eb:54:e8: ca:e4:19:7b:3e:93:ab:0d:a4:ad:a4:c5:04:94:26:6e:2a:2f: 68:b0:77:6a:ee:8b:9d:57:46:39:c2:33:ab:34:3a:ee:7a:aa: b2:63:69:ec:8c:a2:81:32:2a:11:d5:da:a9:20:8f:92:43:d3: e8:e4:5d:fb:26:62:20:00:dc:8a:8f:c1:98:9f:43:aa:08:95: 70:59:bf:4c:7b:17:21:a9:f9:69:d7:0e:da:49:fa:55:f4:56: 22:88:49:1d:18:1b:09:2a:b3:c7:06:7a:25:9a:4c:fb:99:35: 97:d6:04:58:7a:8a:08:4f:9f:7b:c2:8c:51:77:32:4e:1a:01: b7:0f:f4:c7:4f:46:47:88:fd:bb:4f:62:99:05:bd:f1:ba:f8: 11:d6:dc:cb:3c:a2:25:35:c5:a4:52:f2:c2:61:c4:4d:7f:33: be:bd:7a:5f:62:9e:ab:60:be:3a:c7:ec:ac:2e:0e:75:99:01: c5:af:ea:4c -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUPE7lqn9o5754zBMYh1o+hLnfYpAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNEQTEyMDIwMEQyOEU0RkM2NkZFQ0Q2MEY1QUZDQzU3 RTc5RTY0MjAeFw0yNjAxMTkwMzU1MDNaFw0yNzAxMTgwNDAwMDNaMDMxMTAvBgNV BAMTKDVEMkQwMkJENjZEOURFMDI2OThDMDc1ODYxNTYwMkQ1QUNCQjdDQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbh4zB9W8NZ1hxNLcs31VOcIAz EgxxcJHYRTfqr1PlYl1eGSHOMbjZxjqzBrYXudifC0y8KDLpT9pKG/oTrVJEiNIc ikV33hQKmh6v/AOGaV3wYeKoLhTBl4BLdPgL7UxV5B5KH+pfPuSjAIP6E5MVakt4 Df31xs+5/t3XaRF9shu331BWgswMBgod5tCVzZbham1rXdjR+x2Z01wTLQP4wnOZ pNqZwOw0bItkb4NjXefQWvTUwdW0xnzTphOJjkJIXdTVo790yLcAoj8Xow66/j1D OsFwtIujVO6eTNPvy5goH1l25cAeEN+zhTawMKZba90itbjv/84cXYu6qf+rAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUXS0CvWbZ3gJpjAdYYVYC1ay7fKYwHwYDVR0j BBgwFoAUXNoSAgDSjk/Gb+zWD1r8xX555kIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmFmODM1Mi1jZDY1LTRkYjctYjBjYi0wNDhiNDVlN2E0YmYvMC81Q0RBMTIwMjAw RDI4RTRGQzY2RkVDRDYwRjVBRkNDNTdFNzlFNjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUNEQTEyMDIwMEQyOEU0RkM2NkZFQ0Q2MEY1QUZDQzU3RTc5 RTY0Mi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYyYWY4MzUyLWNkNjUtNGRiNy1i MGNiLTA0OGI0NWU3YTRiZi8wLzMxMzAzMzJlMzgzNzJlMzYzNjJlMzAyZjMyMzMy ZDMyMzMyMDNkM2UyMDMxMzMzMzM4MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWdXQjANBgkqhkiG 9w0BAQsFAAOCAQEAOdPmkaFS5WL4/o2jcuvczJM4fh/V1ACscqHrh4I7GdBRzf+6 qq16dxYDfmGNZzfH4Gjg+qVodwjKT7H5KWyNqXT5u/Om61ToyuQZez6Tqw2kraTF BJQmbiovaLB3au6LnVdGOcIzqzQ67nqqsmNp7IyigTIqEdXaqSCPkkPT6ORd+yZi IADcio/BmJ9DqgiVcFm/THsXIan5adcO2kn6VfRWIohJHRgbCSqzxwZ6JZpM+5k1 l9YEWHqKCE+fe8KMUXcyThoBtw/0x09GR4j9u09imQW98br4EdbcyzyiJTXFpFLy wmHETX8zvr16X2Keq2C+OsfsrC4OdZkBxa/qTA== -----END CERTIFICATE-----Generated at Mon Jan 26 02:25:49 2026 by rpki-client