This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133382e302f32342d3234203d3e20313338303737.roa File: 3230332e38342e3133382e302f32342d3234203d3e20313338303737.roa (raw, json) Hash identifier: yCnISErH8Sna1COh5a/JsnVWUa2WsXkM6lcVpwgWaI8= Subject key identifier: 6A:2A:D3:C5:B1:B8:FA:9D:F6:D9:21:66:B1:95:B1:C2:44:D0:0C:6E Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Certificate serial: 596DA2832A349DFC40DDFD9FFF6082EE270E73A2 Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133382e302f32342d3234203d3e20313338303737.roa Signing time: Sun 18 Jan 2026 08:34:25 +0000 ROA not before: Sun 18 Jan 2026 08:29:25 +0000 ROA not after: Sun 17 Jan 2027 08:34:25 +0000 asID: 138077 IP address blocks: 203.84.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 07:17:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:6d:a2:83:2a:34:9d:fc:40:dd:fd:9f:ff:60:82:ee:27:0e:73:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Validity Not Before: Jan 18 08:29:25 2026 GMT Not After : Jan 17 08:34:25 2027 GMT Subject: CN=6A2AD3C5B1B8FA9DF6D92166B195B1C244D00C6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:50:d5:c1:cf:15:05:df:c2:ff:cc:f0:37:a1: c9:2c:ab:6d:f1:54:fd:2d:34:e8:62:79:32:7e:1c: 1b:5b:5b:a4:2e:86:4c:e7:02:50:64:b8:30:a9:7c: 9d:0d:b3:89:c9:b1:ca:5f:6f:9f:a4:76:8e:72:23: e9:87:b1:e8:13:f7:9f:9b:f5:15:d2:4b:84:a7:ec: 02:a5:d4:c3:13:31:70:c2:a3:75:f1:61:d4:23:b3: 1b:c0:09:1e:71:ff:5a:67:98:ec:db:50:a5:86:62: 12:74:f6:e0:00:fc:64:23:24:d9:d9:2c:4c:c5:d0: e2:b4:df:8e:cf:69:e3:d2:1c:df:bf:4c:9c:8f:2d: 58:74:98:a6:12:f1:8d:47:db:e7:f2:fc:8e:cf:2a: 99:68:d9:78:80:7c:8d:4f:03:47:26:fa:1f:89:eb: 11:c3:83:7b:e0:57:b3:f6:29:b6:17:9f:6f:7c:92: 50:26:70:b1:58:f4:2c:3f:7e:aa:ac:fc:66:e8:23: 67:df:94:9c:3d:22:fd:d1:80:e9:be:59:e0:11:b7: ca:40:bc:6f:cd:8d:4c:66:00:5a:1d:79:3f:3a:6a: bd:bb:a4:79:06:3c:a4:74:e7:d6:87:54:96:12:90: 59:70:0a:2f:78:f3:d8:ce:0c:a8:db:ff:c9:04:48: e3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:2A:D3:C5:B1:B8:FA:9D:F6:D9:21:66:B1:95:B1:C2:44:D0:0C:6E X509v3 Authority Key Identifier: keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133382e302f32342d3234203d3e20313338303737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.84.138.0/24 Signature Algorithm: sha256WithRSAEncryption a9:8d:37:42:c8:11:8a:46:37:83:b9:fc:40:f4:b6:bc:8e:04: 0d:6b:7d:e7:f8:cb:40:26:87:6f:9e:75:63:69:a2:91:20:20: 93:96:4a:44:9f:7c:52:ff:29:19:c8:1c:3b:c2:f4:8d:b0:37: 68:fa:97:c9:94:ef:cb:39:7e:bf:9b:a8:44:83:8a:1b:00:3a: 37:42:34:a4:7d:97:5f:46:5b:8b:ee:42:88:19:47:c8:98:88: 2e:f6:91:9d:64:be:e7:b4:fa:b2:54:7d:1a:e5:3d:0b:8d:09: a5:54:83:d8:a3:59:32:d6:55:1c:ec:30:94:08:a8:e7:cd:9a: f7:2f:12:19:ef:fe:fe:12:f9:32:24:ab:bc:25:39:80:c7:88: cd:36:a7:f1:66:84:b0:b2:82:6f:cb:91:6e:78:28:e7:20:87: 8a:c5:0a:03:d0:5c:14:b0:67:5c:97:6a:f8:5a:02:82:2e:e5: e7:61:74:75:2d:39:c7:5a:b8:14:25:71:fc:a3:75:72:09:a4: 06:88:f7:25:af:a2:48:3e:49:29:57:2e:dd:98:32:da:0c:04: 0d:33:78:c9:e5:fc:87:97:97:5a:d9:ca:b3:d3:66:43:90:8a: f1:35:63:e5:8e:1b:ff:1e:6f:1c:4a:9d:86:42:75:72:df:04: 00:34:05:f9 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUWW2igyo0nfxA3f2f/2CC7icOc6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NC MEMxMDhBOTAeFw0yNjAxMTgwODI5MjVaFw0yNzAxMTcwODM0MjVaMDMxMTAvBgNV BAMTKDZBMkFEM0M1QjFCOEZBOURGNkQ5MjE2NkIxOTVCMUMyNDREMDBDNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4UNXBzxUF38L/zPA3ocksq23x VP0tNOhieTJ+HBtbW6QuhkznAlBkuDCpfJ0Ns4nJscpfb5+kdo5yI+mHsegT95+b 9RXSS4Sn7AKl1MMTMXDCo3XxYdQjsxvACR5x/1pnmOzbUKWGYhJ09uAA/GQjJNnZ LEzF0OK0347PaePSHN+/TJyPLVh0mKYS8Y1H2+fy/I7PKplo2XiAfI1PA0cm+h+J 6xHDg3vgV7P2KbYXn298klAmcLFY9Cw/fqqs/GboI2fflJw9Iv3RgOm+WeARt8pA vG/NjUxmAFodeT86ar27pHkGPKR059aHVJYSkFlwCi9489jODKjb/8kESOOXAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUairTxbG4+p322SFmsZWxwkTQDG4wHwYDVR0j BBgwFoAUmB5Wd6xgKVCr4aRCwneefLDBCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzkyMmY4OS0zZTliLTRiMjEtOTE4Ni1hNjQ4YzJkYTNmN2IvMC85ODFFNTY3N0FD NjAyOTUwQUJFMUE0NDJDMjc3OUU3Q0IwQzEwOEE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NCMEMx MDhBOS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E3OTIyZjg5LTNlOWItNGIyMS05 MTg2LWE2NDhjMmRhM2Y3Yi8wLzMyMzAzMzJlMzgzNDJlMzEzMzM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzAzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy1SKMA0GCSqG SIb3DQEBCwUAA4IBAQCpjTdCyBGKRjeDufxA9La8jgQNa33n+MtAJodvnnVjaaKR ICCTlkpEn3xS/ykZyBw7wvSNsDdo+pfJlO/LOX6/m6hEg4obADo3QjSkfZdfRluL 7kKIGUfImIgu9pGdZL7ntPqyVH0a5T0LjQmlVIPYo1ky1lUc7DCUCKjnzZr3LxIZ 7/7+EvkyJKu8JTmAx4jNNqfxZoSwsoJvy5FueCjnIIeKxQoD0FwUsGdcl2r4WgKC LuXnYXR1LTnHWrgUJXH8o3VyCaQGiPclr6JIPkkpVy7dmDLaDAQNM3jJ5fyHl5da 2cqz02ZDkIrxNWPljhv/Hm8cSp2GQnVy3wQANAX5 -----END CERTIFICATE-----Generated at Sun Jan 25 17:56:14 2026 by rpki-client