This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3130332e35342e3137302e302f32342d3234203d3e20313336303532.roa File: 3130332e35342e3137302e302f32342d3234203d3e20313336303532.roa (raw, json) Hash identifier: 4d1ijz/rU+DejuJXb/c4cK45ZvNx5vBw0rsE3pI0Nk8= Subject key identifier: DB:9D:3A:D8:8E:90:07:A9:E6:A3:A4:81:CC:29:31:5A:0A:A0:9A:77 Certificate issuer: /CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B Certificate serial: 70DB5BF7C0FF6AA388023C095E78019831945FDA Authority key identifier: 3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3130332e35342e3137302e302f32342d3234203d3e20313336303532.roa Signing time: Fri 16 Jan 2026 06:00:02 +0000 ROA not before: Fri 16 Jan 2026 05:55:02 +0000 ROA not after: Fri 15 Jan 2027 06:00:02 +0000 asID: 136052 IP address blocks: 103.54.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:db:5b:f7:c0:ff:6a:a3:88:02:3c:09:5e:78:01:98:31:94:5f:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B Validity Not Before: Jan 16 05:55:02 2026 GMT Not After : Jan 15 06:00:02 2027 GMT Subject: CN=DB9D3AD88E9007A9E6A3A481CC29315A0AA09A77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ea:73:5b:5b:e4:f8:53:4b:ef:c8:4a:2a:cf: fe:87:ff:26:3a:69:12:7c:02:bb:9c:f0:a2:f9:86: 61:af:df:c8:84:2b:e9:94:27:e5:1e:14:9a:a0:2f: 4a:27:a8:6a:aa:d8:6a:f1:19:48:92:60:0a:77:d2: e6:7b:6a:b7:3b:5a:f3:45:cc:de:54:92:04:bd:6c: dd:9a:61:56:57:db:f5:73:bd:b8:79:b1:44:7e:c7: e6:b0:95:b5:17:85:ad:33:c3:3d:c7:68:cc:15:b2: 1b:67:b4:a4:dc:10:6b:80:f6:a3:94:13:4a:96:bc: 6d:5a:50:53:58:09:a9:a5:eb:c2:5c:de:b1:d0:ed: d6:ed:76:41:db:f6:72:de:b7:45:36:51:bc:ab:88: b2:fe:86:8f:73:56:f9:77:a0:95:05:fc:9c:cd:0e: 74:19:aa:e4:96:aa:75:bd:19:19:ce:76:d7:a5:b9: 92:24:a0:98:b8:4e:35:41:3d:5e:5a:87:a6:d1:bf: 29:9f:99:dc:c6:62:5f:fb:df:a9:74:6a:c4:31:d8: 89:f3:91:27:ff:49:2f:af:d7:64:98:98:30:bf:3e: db:00:6d:44:1f:d2:26:d1:19:35:7e:fd:32:7c:fb: 06:ac:2e:76:d3:ed:9f:9f:16:57:0b:4e:75:4c:f6: e8:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:9D:3A:D8:8E:90:07:A9:E6:A3:A4:81:CC:29:31:5A:0A:A0:9A:77 X509v3 Authority Key Identifier: keyid:3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3130332e35342e3137302e302f32342d3234203d3e20313336303532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.54.170.0/24 Signature Algorithm: sha256WithRSAEncryption 75:ea:eb:a1:a0:0b:bb:91:ed:47:31:0f:e3:34:03:7b:26:bf: 71:97:2b:b1:65:05:be:b1:b5:99:42:90:8d:e7:dc:28:85:c7: 58:29:dc:e1:d2:d0:e8:26:a0:be:76:e5:f6:9d:68:50:2d:d6: da:e5:b4:2d:12:4e:5a:40:62:74:be:4d:ce:56:00:ea:88:a4: 4c:14:44:75:d9:08:12:c5:3d:88:89:07:2a:c8:c5:7f:b1:85: 71:80:2f:07:7c:84:f5:da:9d:cd:99:e1:bb:b7:55:27:7b:e9: c3:71:1b:5d:06:c2:66:f7:0b:97:09:59:3e:c7:07:79:e0:f1: 85:7b:39:76:5d:c4:9d:2e:9e:25:08:18:d5:7c:b9:a8:91:6e: d2:8f:f8:15:cb:9b:e8:9d:e4:10:14:37:fd:c3:f2:a9:e4:a1: 49:a8:43:46:f5:fb:ef:6b:82:34:c8:91:88:e3:6f:f8:46:b5: 8d:77:c5:dd:25:7c:9f:b5:c4:43:43:d2:c1:92:59:d5:c8:a5: 83:d1:f3:c3:b3:2b:c2:48:55:b5:d5:98:cb:85:74:9f:ca:ca: a4:32:3b:24:81:fc:f7:ca:93:7d:44:09:28:82:28:b1:06:a3: 11:7e:b9:11:30:73:e4:58:d1:ad:4c:0b:80:49:9d:21:7e:2a: 6c:1f:5b:d4 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUcNtb98D/aqOIAjwJXngBmDGUX9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M1MkQ0QTg2QUJEREQwRDZEQTYzMTczN0Y3OERDMjA1 RUVDMjM5QjAeFw0yNjAxMTYwNTU1MDJaFw0yNzAxMTUwNjAwMDJaMDMxMTAvBgNV BAMTKERCOUQzQUQ4OEU5MDA3QTlFNkEzQTQ4MUNDMjkzMTVBMEFBMDlBNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK6nNbW+T4U0vvyEoqz/6H/yY6 aRJ8Aruc8KL5hmGv38iEK+mUJ+UeFJqgL0onqGqq2GrxGUiSYAp30uZ7arc7WvNF zN5UkgS9bN2aYVZX2/Vzvbh5sUR+x+awlbUXha0zwz3HaMwVshtntKTcEGuA9qOU E0qWvG1aUFNYCaml68Jc3rHQ7dbtdkHb9nLet0U2UbyriLL+ho9zVvl3oJUF/JzN DnQZquSWqnW9GRnOdteluZIkoJi4TjVBPV5ah6bRvymfmdzGYl/736l0asQx2Inz kSf/SS+v12SYmDC/PtsAbUQf0ibRGTV+/TJ8+wasLnbT7Z+fFlcLTnVM9uhxAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU25062I6QB6nmo6SBzCkxWgqgmncwHwYDVR0j BBgwFoAUPFLUqGq93Q1tpjFzf3jcIF7sI5swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Mzc2OTRiNy0zMjU2LTQ2NjYtYTNmZS02ZTgyZTc4M2IxZTEvMC8zQzUyRDRBODZB QkRERDBENkRBNjMxNzM3Rjc4REMyMDVFRUMyMzlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M1MkQ0QTg2QUJEREQwRDZEQTYzMTczN0Y3OERDMjA1RUVD MjM5Qi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgzNzY5NGI3LTMyNTYtNDY2Ni1h M2ZlLTZlODJlNzgzYjFlMS8wLzMxMzAzMzJlMzUzNDJlMzEzNzMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzAzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZzaqMA0GCSqG SIb3DQEBCwUAA4IBAQB16uuhoAu7ke1HMQ/jNAN7Jr9xlyuxZQW+sbWZQpCN59wo hcdYKdzh0tDoJqC+duX2nWhQLdba5bQtEk5aQGJ0vk3OVgDqiKRMFER12QgSxT2I iQcqyMV/sYVxgC8HfIT12p3NmeG7t1Une+nDcRtdBsJm9wuXCVk+xwd54PGFezl2 XcSdLp4lCBjVfLmokW7Sj/gVy5voneQQFDf9w/Kp5KFJqENG9fvva4I0yJGI42/4 RrWNd8XdJXyftcRDQ9LBklnVyKWD0fPDsyvCSFW11ZjLhXSfysqkMjskgfz3ypN9 RAkogiixBqMRfrkRMHPkWNGtTAuASZ0hfipsH1vU -----END CERTIFICATE-----Generated at Sun Jan 25 23:22:19 2026 by rpki-client