This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e39342e3233382e302f32332d3234203d3e20313333383030.roa File: 3130332e39342e3233382e302f32332d3234203d3e20313333383030.roa (raw, json) Hash identifier: Pde8ZRn/YR1eEQs9jhqkBqeOttjCZYFFF+oLWp4txyM= Subject key identifier: 41:DA:78:A4:E9:AA:16:08:D5:A0:12:8D:49:4E:2E:E5:58:E6:51:53 Certificate issuer: /CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642 Certificate serial: 35244421221045C78C588414CE4F96430A946888 Authority key identifier: 5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e39342e3233382e302f32332d3234203d3e20313333383030.roa Signing time: Tue 20 Jan 2026 08:02:34 +0000 ROA not before: Tue 20 Jan 2026 07:57:34 +0000 ROA not after: Tue 19 Jan 2027 08:02:34 +0000 asID: 133800 IP address blocks: 103.94.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 06:10:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:24:44:21:22:10:45:c7:8c:58:84:14:ce:4f:96:43:0a:94:68:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642 Validity Not Before: Jan 20 07:57:34 2026 GMT Not After : Jan 19 08:02:34 2027 GMT Subject: CN=41DA78A4E9AA1608D5A0128D494E2EE558E65153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c3:3f:e0:2e:cc:f2:8f:07:2c:10:26:ba:b4: 92:55:57:39:56:f6:43:1b:35:ab:fd:49:fd:d8:36: 86:de:ee:2c:ab:d3:57:a5:d8:8a:bc:26:4a:50:bb: d4:44:f4:8c:4f:76:9d:e4:87:87:30:74:a7:f0:c5: 31:84:ed:bd:15:78:e6:9f:8d:ec:86:d8:c5:cd:5d: 5a:a8:a1:ed:18:42:3e:c6:c1:e4:1c:21:44:2a:c6: 1e:bb:30:75:f7:ba:31:58:22:b5:49:10:52:15:d9: 81:d3:d5:42:4f:20:e1:ee:17:22:a4:d7:cf:5b:e2: 6b:e1:bf:0f:10:16:ab:56:82:6c:03:84:33:0a:69: 51:19:99:4f:f4:97:36:4b:4c:b1:77:99:e2:e7:9d: 5c:9a:90:a2:7f:34:3c:d6:b4:df:b9:9a:98:89:71: 25:07:6c:d8:50:aa:46:11:ba:b5:96:f3:77:64:78: d5:33:b5:67:db:50:b5:1b:cb:68:79:de:4a:4e:43: 07:87:29:bb:9c:13:e8:0b:21:d5:70:0f:6a:60:38: 05:1a:75:60:0e:19:21:ad:aa:7d:d0:92:48:ec:ca: 28:ad:13:a3:4b:58:12:cb:a2:6d:5d:3c:ca:ad:40: 40:47:8e:76:bc:2e:c7:69:28:a6:73:97:dc:21:34: de:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:DA:78:A4:E9:AA:16:08:D5:A0:12:8D:49:4E:2E:E5:58:E6:51:53 X509v3 Authority Key Identifier: keyid:5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e39342e3233382e302f32332d3234203d3e20313333383030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.94.238.0/23 Signature Algorithm: sha256WithRSAEncryption 42:3c:24:d8:61:3a:a6:64:fc:2e:dc:3a:4f:3a:c1:25:d9:80: e4:6d:ea:7b:ef:05:61:4f:e7:21:fd:9a:08:c3:29:f0:8c:ce: 27:85:8b:07:90:31:c8:67:59:90:82:53:8a:99:ae:d7:a1:4d: b1:3b:d6:3f:cb:84:b1:ba:64:85:63:a2:a4:e0:6d:f1:2c:fe: e9:b5:53:80:bb:98:89:41:6f:e3:84:67:01:82:19:ae:bc:d4: 07:dd:b4:74:63:a9:d8:ec:fc:73:40:18:67:7d:5f:ba:5a:eb: 46:e3:90:65:ec:e0:f7:d3:af:bc:ac:b8:f3:e3:24:36:f1:0a: b1:3b:1d:0a:04:ab:54:74:07:ce:65:b8:51:67:39:37:2c:88: 4d:3f:2b:ec:df:76:e6:fe:34:7d:d9:76:d6:28:3f:1b:87:03: 0d:7d:b6:e3:fd:a4:7a:8e:47:58:f8:65:0f:ba:ba:c6:0e:81: de:01:b2:26:86:cd:3e:99:3d:06:78:9b:d9:38:52:d7:09:e7: 4d:ca:53:88:e6:a4:e7:5e:25:18:3e:34:be:3b:3a:83:59:32: 12:4b:30:2d:d9:ee:03:98:95:60:7b:20:65:68:76:ec:61:ef: 12:39:26:1d:18:57:c3:23:ae:db:ba:0d:fa:cc:6c:d1:c2:ee: 41:3f:02:f4 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUNSREISIQRceMWIQUzk+WQwqUaIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNEQTEyMDIwMEQyOEU0RkM2NkZFQ0Q2MEY1QUZDQzU3 RTc5RTY0MjAeFw0yNjAxMjAwNzU3MzRaFw0yNzAxMTkwODAyMzRaMDMxMTAvBgNV BAMTKDQxREE3OEE0RTlBQTE2MDhENUEwMTI4RDQ5NEUyRUU1NThFNjUxNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0wz/gLszyjwcsECa6tJJVVzlW 9kMbNav9Sf3YNobe7iyr01el2Iq8JkpQu9RE9IxPdp3kh4cwdKfwxTGE7b0VeOaf jeyG2MXNXVqooe0YQj7GweQcIUQqxh67MHX3ujFYIrVJEFIV2YHT1UJPIOHuFyKk 189b4mvhvw8QFqtWgmwDhDMKaVEZmU/0lzZLTLF3meLnnVyakKJ/NDzWtN+5mpiJ cSUHbNhQqkYRurWW83dkeNUztWfbULUby2h53kpOQweHKbucE+gLIdVwD2pgOAUa dWAOGSGtqn3QkkjsyiitE6NLWBLLom1dPMqtQEBHjna8LsdpKKZzl9whNN6ZAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUQdp4pOmqFgjVoBKNSU4u5VjmUVMwHwYDVR0j BBgwFoAUXNoSAgDSjk/Gb+zWD1r8xX555kIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmFmODM1Mi1jZDY1LTRkYjctYjBjYi0wNDhiNDVlN2E0YmYvMC81Q0RBMTIwMjAw RDI4RTRGQzY2RkVDRDYwRjVBRkNDNTdFNzlFNjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUNEQTEyMDIwMEQyOEU0RkM2NkZFQ0Q2MEY1QUZDQzU3RTc5 RTY0Mi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYyYWY4MzUyLWNkNjUtNGRiNy1i MGNiLTA0OGI0NWU3YTRiZi8wLzMxMzAzMzJlMzkzNDJlMzIzMzM4MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzMzMzgzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ17uMA0GCSqG SIb3DQEBCwUAA4IBAQBCPCTYYTqmZPwu3DpPOsEl2YDkbep77wVhT+ch/ZoIwynw jM4nhYsHkDHIZ1mQglOKma7XoU2xO9Y/y4SxumSFY6Kk4G3xLP7ptVOAu5iJQW/j hGcBghmuvNQH3bR0Y6nY7PxzQBhnfV+6WutG45Bl7OD306+8rLjz4yQ28QqxOx0K BKtUdAfOZbhRZzk3LIhNPyvs33bm/jR92XbWKD8bhwMNfbbj/aR6jkdY+GUPurrG DoHeAbImhs0+mT0GeJvZOFLXCedNylOI5qTnXiUYPjS+OzqDWTISSzAt2e4DmJVg eyBlaHbsYe8SOSYdGFfDI67bug36zGzRwu5BPwL0 -----END CERTIFICATE-----Generated at Mon Jan 26 02:30:36 2026 by rpki-client