This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/3130332e38372e36382e302f32342d3234203d3e20313530323439.roa File: 3130332e38372e36382e302f32342d3234203d3e20313530323439.roa (raw, json) Hash identifier: 8lJPUsKlUGR1W/uo827D06TJO+cPwjSi9R8wQT4VPpg= Subject key identifier: BF:BA:89:D9:D0:48:81:C3:53:D1:A8:72:1C:25:2F:52:3A:B1:8C:6E Certificate issuer: /CN=968A6FAD637E47068D2FBC547FBF2C1C12F8C588 Certificate serial: 0B50D127006B9D1042AE8DDA4AB5C4BA715BBE9E Authority key identifier: 96:8A:6F:AD:63:7E:47:06:8D:2F:BC:54:7F:BF:2C:1C:12:F8:C5:88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/3130332e38372e36382e302f32342d3234203d3e20313530323439.roa Signing time: Fri 09 Jan 2026 09:00:00 +0000 ROA not before: Fri 09 Jan 2026 08:55:00 +0000 ROA not after: Fri 08 Jan 2027 09:00:00 +0000 asID: 150249 IP address blocks: 103.87.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 23:48:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:50:d1:27:00:6b:9d:10:42:ae:8d:da:4a:b5:c4:ba:71:5b:be:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=968A6FAD637E47068D2FBC547FBF2C1C12F8C588 Validity Not Before: Jan 9 08:55:00 2026 GMT Not After : Jan 8 09:00:00 2027 GMT Subject: CN=BFBA89D9D04881C353D1A8721C252F523AB18C6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a5:01:4c:ef:f8:9d:b1:cc:09:a9:59:b6:a1: 67:66:d7:5c:6d:07:80:1f:fd:7f:62:79:fb:0a:a4: 0d:17:19:1c:6d:cf:bb:f9:3f:e5:6e:b1:78:83:ea: e6:ce:af:ea:d9:e7:0b:98:ca:4e:55:30:30:27:ed: d9:db:14:aa:c4:8e:50:9a:3d:b1:ae:57:1d:ed:cb: 15:b4:9f:1c:78:7f:b3:e2:24:3c:44:ba:25:65:24: ac:4d:66:b5:6f:dd:87:09:c3:00:08:32:9a:a0:9d: bd:cb:35:fb:9f:c2:50:78:6b:52:ec:50:9c:bc:42: c1:79:20:c1:44:17:71:a3:57:54:a4:c8:1a:d8:e0: 7c:83:f5:b0:c1:cf:2d:16:5e:95:c0:38:8e:bf:c1: c6:03:5e:7a:1d:7a:22:db:5a:9a:82:67:ac:e6:f2: 68:30:5f:9a:ad:56:9d:1a:fc:bf:89:12:70:ac:07: f0:95:2e:fa:00:3d:22:ba:a8:7d:06:3d:11:80:ce: 7c:09:af:5b:20:84:4d:f2:d4:75:de:4b:50:10:90: ef:9d:13:c1:5f:89:3a:ee:64:08:7d:a3:81:8f:d0: 60:7d:e8:a8:aa:bc:d5:1c:f1:c8:5a:ba:9f:a7:a0: b0:24:4f:cb:d7:2f:e1:65:3f:ef:f0:60:49:49:fe: 75:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:BA:89:D9:D0:48:81:C3:53:D1:A8:72:1C:25:2F:52:3A:B1:8C:6E X509v3 Authority Key Identifier: keyid:96:8A:6F:AD:63:7E:47:06:8D:2F:BC:54:7F:BF:2C:1C:12:F8:C5:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/3130332e38372e36382e302f32342d3234203d3e20313530323439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.87.68.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:e0:8f:ef:36:d0:60:c3:99:23:fc:ae:01:e7:60:51:33:af: 21:24:cc:d6:5d:85:60:d6:2d:47:54:79:80:5c:ba:3e:57:ec: 9a:d2:94:5e:4d:c9:37:d5:3d:2f:c8:85:20:52:9b:55:b0:03: 09:e8:a5:3a:a1:80:ae:a6:b8:d0:75:87:2f:7c:5f:57:8c:a6: d6:67:c4:3f:86:63:11:8f:73:71:c1:6d:23:d3:4f:57:19:9f: 2c:d5:21:40:cf:ca:a4:2c:3e:41:08:33:64:2c:fb:03:b6:8f: 23:f4:3a:b1:21:e9:95:d9:9e:6a:d6:ef:91:1f:57:df:7b:26: 9a:52:8c:90:09:86:6d:47:45:f5:69:20:35:6b:04:75:61:a2: 3b:81:28:37:77:c4:7d:72:bd:e1:55:37:71:3a:6a:1d:a9:91: 54:c8:67:37:51:47:b9:bc:aa:b5:89:15:65:89:66:74:c1:c0: f4:a6:84:b0:5d:f5:5a:cc:bd:b9:8e:ab:4c:ee:1a:2a:00:61: e0:cb:a8:f0:bf:d7:a5:64:24:4f:f4:36:8a:92:19:93:dc:d7: c7:a9:62:22:d7:6a:7d:48:64:d6:2a:7f:34:32:82:ab:6a:2b: d5:f6:30:15:23:e1:0b:4a:7e:a4:88:38:72:c4:84:a2:fc:62: ba:b2:41:b5 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUC1DRJwBrnRBCro3aSrXEunFbvp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJDMUMx MkY4QzU4ODAeFw0yNjAxMDkwODU1MDBaFw0yNzAxMDgwOTAwMDBaMDMxMTAvBgNV BAMTKEJGQkE4OUQ5RDA0ODgxQzM1M0QxQTg3MjFDMjUyRjUyM0FCMThDNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkpQFM7/idscwJqVm2oWdm11xt B4Af/X9iefsKpA0XGRxtz7v5P+VusXiD6ubOr+rZ5wuYyk5VMDAn7dnbFKrEjlCa PbGuVx3tyxW0nxx4f7PiJDxEuiVlJKxNZrVv3YcJwwAIMpqgnb3LNfufwlB4a1Ls UJy8QsF5IMFEF3GjV1SkyBrY4HyD9bDBzy0WXpXAOI6/wcYDXnodeiLbWpqCZ6zm 8mgwX5qtVp0a/L+JEnCsB/CVLvoAPSK6qH0GPRGAznwJr1sghE3y1HXeS1AQkO+d E8FfiTruZAh9o4GP0GB96KiqvNUc8chaup+noLAkT8vXL+FlP+/wYElJ/nWLAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUv7qJ2dBIgcNT0ahyHCUvUjqxjG4wHwYDVR0j BBgwFoAUlopvrWN+RwaNL7xUf78sHBL4xYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzljNTQ4NC0yZTM3LTQ4ZjktOGViYS0wYWY0ZWY2Mjk0N2QvMC85NjhBNkZBRDYz N0U0NzA2OEQyRkJDNTQ3RkJGMkMxQzEyRjhDNTg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJDMUMxMkY4 QzU4OC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EzOWM1NDg0LTJlMzctNDhmOS04 ZWJhLTBhZjRlZjYyOTQ3ZC8wLzMxMzAzMzJlMzgzNzJlMzYzODJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMDMyMzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdXRDANBgkqhkiG 9w0BAQsFAAOCAQEADeCP7zbQYMOZI/yuAedgUTOvISTM1l2FYNYtR1R5gFy6Plfs mtKUXk3JN9U9L8iFIFKbVbADCeilOqGArqa40HWHL3xfV4ym1mfEP4ZjEY9zccFt I9NPVxmfLNUhQM/KpCw+QQgzZCz7A7aPI/Q6sSHpldmeatbvkR9X33smmlKMkAmG bUdF9WkgNWsEdWGiO4EoN3fEfXK94VU3cTpqHamRVMhnN1FHubyqtYkVZYlmdMHA 9KaEsF31Wsy9uY6rTO4aKgBh4Muo8L/XpWQkT/Q2ipIZk9zXx6liItdqfUhk1ip/ NDKCq2or1fYwFSPhC0p+pIg4csSEovxiurJBtQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:54:12 2026 by rpki-client