This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/3130332e3137332e3136342e302f32342d3234203d3e20313437303831.roa File: 3130332e3137332e3136342e302f32342d3234203d3e20313437303831.roa (raw, json) Hash identifier: G5wKKP5D5NKHHIZXwfrSRRWwdWFA64K8RR4eUb7olLQ= Subject key identifier: B9:13:26:04:3B:D2:F1:BF:DD:93:BC:E2:07:D7:F4:86:5D:F7:FD:4C Certificate issuer: /CN=35AF7B054A8CC95835EC5A2F9275004D39521553 Certificate serial: 4AC898ACC5FE08673012BC35CAA35B451E34C740 Authority key identifier: 35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/3130332e3137332e3136342e302f32342d3234203d3e20313437303831.roa Signing time: Sat 03 Jan 2026 13:01:00 +0000 ROA not before: Sat 03 Jan 2026 12:56:00 +0000 ROA not after: Sat 02 Jan 2027 13:01:00 +0000 asID: 147081 IP address blocks: 103.173.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.crl rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Jan 2026 05:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:c8:98:ac:c5:fe:08:67:30:12:bc:35:ca:a3:5b:45:1e:34:c7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35AF7B054A8CC95835EC5A2F9275004D39521553 Validity Not Before: Jan 3 12:56:00 2026 GMT Not After : Jan 2 13:01:00 2027 GMT Subject: CN=B91326043BD2F1BFDD93BCE207D7F4865DF7FD4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c9:82:53:72:a6:da:68:81:8f:ce:bb:27:b1: a6:2a:e4:d0:c7:68:a8:0d:ce:36:51:4f:30:58:a4: a4:8f:26:9c:5a:fc:32:eb:78:dc:b5:f0:c4:c8:8c: 31:bc:dd:cb:8b:63:e9:a5:d3:e5:7a:40:c2:e8:93: ad:41:61:c6:4e:d3:6c:73:3c:be:1b:35:dd:f7:01: 58:1b:81:26:a2:98:75:1f:7f:de:de:ec:34:58:61: b8:c3:15:d1:42:7d:8b:87:31:c1:ae:9b:c5:c1:63: c1:0f:52:da:3f:86:c0:65:da:6e:8d:42:b3:f0:6e: c7:20:74:50:11:f3:93:b0:ac:a5:bc:ae:e5:af:1b: 82:66:b7:4c:18:f3:66:7e:14:d5:4a:79:14:2b:6d: fe:ed:e7:e7:52:79:f3:a0:d0:2d:d3:56:42:bd:96: a9:44:36:c9:f8:04:5a:a9:65:f0:75:2a:7a:82:37: 7f:fa:ca:6e:b9:42:cd:16:70:ef:0f:2e:da:7b:c4: 87:2e:f9:5c:4e:02:33:48:9d:41:10:a7:c7:e9:fc: a5:60:ac:00:ca:5a:84:06:39:80:24:2a:4f:1e:a6: 58:13:f8:9b:e6:9d:c0:cc:37:b2:5e:0d:1c:7c:b9: 97:3e:37:64:bf:6b:2c:61:18:c3:fb:a6:ae:76:58: 27:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:13:26:04:3B:D2:F1:BF:DD:93:BC:E2:07:D7:F4:86:5D:F7:FD:4C X509v3 Authority Key Identifier: keyid:35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/3130332e3137332e3136342e302f32342d3234203d3e20313437303831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.173.164.0/24 Signature Algorithm: sha256WithRSAEncryption b4:57:04:7c:8d:a8:9e:1b:40:ce:65:d0:df:2e:45:14:7d:a3: 84:2f:86:50:74:48:38:59:8c:75:c9:f4:4c:10:eb:65:9b:d6: db:4b:bd:bf:60:94:60:a8:f1:3b:ee:ed:f2:6a:cc:96:fc:88: 37:59:4e:a1:fd:15:1a:e5:f4:70:d8:cf:33:ab:03:46:42:48: 9b:50:c3:10:3c:29:cb:f5:ce:39:f3:9a:18:26:40:3b:58:8b: dc:a1:82:cb:a1:de:1a:d0:28:0c:02:d7:4a:36:1d:4a:3b:a6: 8b:c0:fe:4b:23:56:93:d0:29:c9:55:67:64:be:49:e3:22:47: 31:f0:52:b1:c5:f5:12:a6:d3:47:d1:13:49:b6:83:69:2e:25: 1f:f4:54:bc:5c:45:11:30:da:0d:5d:87:2e:70:a4:86:a5:bb: 66:d7:b4:b3:31:d5:40:92:c0:75:83:fa:19:89:04:26:3e:18: b2:f2:a0:92:d3:62:f8:ba:58:4d:a2:19:5a:22:c4:92:44:fb: b5:a8:0b:2c:40:25:5a:67:1a:f4:fd:a0:63:1b:fa:25:9f:1a: 48:e7:24:a3:37:1c:72:dd:11:55:3e:eb:74:e7:ba:2c:3e:11: d3:70:f6:a7:8c:34:bc:e0:1f:36:9a:b6:8c:2b:d8:3b:be:6f: 3e:3f:18:36 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUSsiYrMX+CGcwErw1yqNbRR40x0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAwNEQz OTUyMTU1MzAeFw0yNjAxMDMxMjU2MDBaFw0yNzAxMDIxMzAxMDBaMDMxMTAvBgNV BAMTKEI5MTMyNjA0M0JEMkYxQkZERDkzQkNFMjA3RDdGNDg2NURGN0ZENEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNyYJTcqbaaIGPzrsnsaYq5NDH aKgNzjZRTzBYpKSPJpxa/DLreNy18MTIjDG83cuLY+ml0+V6QMLok61BYcZO02xz PL4bNd33AVgbgSaimHUff97e7DRYYbjDFdFCfYuHMcGum8XBY8EPUto/hsBl2m6N QrPwbscgdFAR85OwrKW8ruWvG4Jmt0wY82Z+FNVKeRQrbf7t5+dSefOg0C3TVkK9 lqlENsn4BFqpZfB1KnqCN3/6ym65Qs0WcO8PLtp7xIcu+VxOAjNInUEQp8fp/KVg rADKWoQGOYAkKk8eplgT+JvmncDMN7JeDRx8uZc+N2S/ayxhGMP7pq52WCdVAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUuRMmBDvS8b/dk7ziB9f0hl33/UwwHwYDVR0j BBgwFoAUNa97BUqMyVg17FovknUATTlSFVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDQ2YTljYS0xMDk2LTRmZTQtODk5My1kMGJlOTdiNTRhNzYvMC8zNUFGN0IwNTRB OENDOTU4MzVFQzVBMkY5Mjc1MDA0RDM5NTIxNTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAwNEQzOTUy MTU1My5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkNDZhOWNhLTEwOTYtNGZlNC04 OTkzLWQwYmU5N2I1NGE3Ni8wLzMxMzAzMzJlMzEzNzMzMmUzMTM2MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzczMDM4MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnraQwDQYJ KoZIhvcNAQELBQADggEBALRXBHyNqJ4bQM5l0N8uRRR9o4QvhlB0SDhZjHXJ9EwQ 62Wb1ttLvb9glGCo8Tvu7fJqzJb8iDdZTqH9FRrl9HDYzzOrA0ZCSJtQwxA8Kcv1 zjnzmhgmQDtYi9yhgsuh3hrQKAwC10o2HUo7povA/ksjVpPQKclVZ2S+SeMiRzHw UrHF9RKm00fRE0m2g2kuJR/0VLxcRREw2g1dhy5wpIalu2bXtLMx1UCSwHWD+hmJ BCY+GLLyoJLTYvi6WE2iGVoixJJE+7WoCyxAJVpnGvT9oGMb+iWfGkjnJKM3HHLd EVU+63Tnuiw+EdNw9qeMNLzgHzaatowr2Du+bz4/GDY= -----END CERTIFICATE-----Generated at Mon Jan 26 08:42:47 2026 by rpki-client