This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3130332e32392e3136342e302f32322d3234203d3e203338333230.roa File: 3130332e32392e3136342e302f32322d3234203d3e203338333230.roa (raw, json) Hash identifier: b9Rswz6WqKP1CD5vZ2CgK/WpMe7q+ItG8/U5zV32DeE= Subject key identifier: F9:B3:99:57:5B:9E:02:94:24:32:A1:AA:17:13:B5:7A:70:A8:58:AB Certificate issuer: /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Certificate serial: 1C5CA444B9A7895809B25A70509C8D1874FCF954 Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3130332e32392e3136342e302f32322d3234203d3e203338333230.roa Signing time: Mon 29 Dec 2025 05:00:00 +0000 ROA not before: Mon 29 Dec 2025 04:55:00 +0000 ROA not after: Mon 28 Dec 2026 05:00:00 +0000 asID: 38320 IP address blocks: 103.29.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 14:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:5c:a4:44:b9:a7:89:58:09:b2:5a:70:50:9c:8d:18:74:fc:f9:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Validity Not Before: Dec 29 04:55:00 2025 GMT Not After : Dec 28 05:00:00 2026 GMT Subject: CN=F9B399575B9E02942432A1AA1713B57A70A858AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b0:d8:e8:db:f7:e5:09:db:b3:06:34:b9:1f: 35:a9:66:3d:cb:bd:e7:4b:23:ec:74:8e:36:cb:84: bc:8d:a7:13:06:3c:fc:d2:6a:aa:fb:61:e9:89:f2: 45:b4:07:2b:1f:10:d0:71:cc:ca:f9:c0:25:f6:cb: a4:80:c9:4e:01:6d:b5:9b:42:d1:1a:84:30:8c:9a: d5:da:e2:18:52:dc:b6:3f:b5:40:5c:6b:7d:be:eb: a4:a5:5e:de:0e:8f:8c:dc:2c:90:16:de:cc:cc:08: 51:9c:3c:27:c7:29:3b:8a:cf:a3:99:41:43:79:6f: d9:17:be:bd:8e:09:f6:2d:7d:12:f6:92:f8:9a:21: 27:6f:bf:e0:ba:9b:ee:d7:59:a1:fb:ff:cc:e9:8e: dc:09:c9:fa:e3:09:84:fa:41:e0:84:ad:10:b6:74: d4:8b:98:32:ac:af:33:34:5b:df:34:b6:94:7b:80: 19:4f:41:0b:58:31:d2:ea:a2:28:ba:75:b4:d6:85: f1:13:34:2c:83:27:ae:97:5d:15:46:86:d8:8b:45: e6:fb:46:6f:d3:13:de:76:d4:1d:1e:f3:55:fc:d6: 83:25:36:a1:28:a7:32:a1:14:d3:3f:93:a8:d1:98: 29:58:fe:41:1f:70:a8:a2:68:dc:ca:59:e8:2d:b8: fd:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:B3:99:57:5B:9E:02:94:24:32:A1:AA:17:13:B5:7A:70:A8:58:AB X509v3 Authority Key Identifier: keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3130332e32392e3136342e302f32322d3234203d3e203338333230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.29.164.0/22 Signature Algorithm: sha256WithRSAEncryption 4c:18:98:b7:2a:a7:a4:41:b5:7e:8f:2b:88:eb:2c:ca:6a:2d: 27:d3:0a:4b:97:bf:54:bd:59:f3:ec:e0:d3:64:d7:b6:63:aa: 87:e0:a7:21:80:a5:4f:a7:41:a2:d5:a1:68:4e:a9:33:e8:c2: 8a:d9:0e:01:51:41:7c:af:2a:da:02:71:ae:89:43:94:23:b7: d4:e9:7a:2f:9e:13:da:08:7b:72:90:dd:b2:6b:5f:d5:72:93: 97:0f:ff:58:d4:a6:72:f4:5b:ce:f8:79:da:ff:61:ac:79:d9: 59:c5:e8:e3:c9:d5:e1:6d:4e:1b:e0:7b:1c:84:6e:7e:f8:81: 32:4e:1b:d2:60:0a:de:5a:7c:23:a1:20:e2:34:80:aa:b4:6e: 28:87:67:56:f5:a9:35:83:8c:1e:79:de:b3:2f:bb:b7:f0:00: 47:93:ae:19:e7:54:7a:b5:f2:41:51:b8:1f:f8:f0:91:ab:1d: 8a:97:b5:1f:c1:0c:e5:42:e1:57:4f:59:91:23:a9:18:59:4a: 56:93:45:59:a5:4b:88:22:2a:56:eb:c5:4e:6d:48:72:6f:40: a5:00:ba:e4:fc:e7:2b:56:45:6a:db:b3:d0:3a:4d:21:f9:01: 0b:d2:72:62:cf:6f:38:09:d7:38:97:cb:b4:0f:9f:55:97:61: c5:dc:20:29 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUHFykRLmniVgJslpwUJyNGHT8+VQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMz MUY4MDJFMTAeFw0yNTEyMjkwNDU1MDBaFw0yNjEyMjgwNTAwMDBaMDMxMTAvBgNV BAMTKEY5QjM5OTU3NUI5RTAyOTQyNDMyQTFBQTE3MTNCNTdBNzBBODU4QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLsNjo2/flCduzBjS5HzWpZj3L vedLI+x0jjbLhLyNpxMGPPzSaqr7YemJ8kW0BysfENBxzMr5wCX2y6SAyU4BbbWb QtEahDCMmtXa4hhS3LY/tUBca32+66SlXt4Oj4zcLJAW3szMCFGcPCfHKTuKz6OZ QUN5b9kXvr2OCfYtfRL2kviaISdvv+C6m+7XWaH7/8zpjtwJyfrjCYT6QeCErRC2 dNSLmDKsrzM0W980tpR7gBlPQQtYMdLqoii6dbTWhfETNCyDJ66XXRVGhtiLReb7 Rm/TE9521B0e81X81oMlNqEopzKhFNM/k6jRmClY/kEfcKiiaNzKWegtuP2LAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU+bOZV1ueApQkMqGqFxO1enCoWKswHwYDVR0j BBgwFoAUyN1dhPr6v36vYrOw9ORaIzH4AuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTQ1Yjg2ZS0wODk1LTQ3NTktYTc3Yy1hMDZjZTE0ZTI0M2MvMC9DOERENUQ4NEZB RkFCRjdFQUY2MkIzQjBGNEU0NUEyMzMxRjgwMkUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMzMUY4 MDJFMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E5NDViODZlLTA4OTUtNDc1OS1h NzdjLWEwNmNlMTRlMjQzYy8wLzMxMzAzMzJlMzIzOTJlMzEzNjM0MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzMzODMzMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmcdpDANBgkqhkiG 9w0BAQsFAAOCAQEATBiYtyqnpEG1fo8riOssymotJ9MKS5e/VL1Z8+zg02TXtmOq h+CnIYClT6dBotWhaE6pM+jCitkOAVFBfK8q2gJxrolDlCO31Ol6L54T2gh7cpDd smtf1XKTlw//WNSmcvRbzvh52v9hrHnZWcXo48nV4W1OG+B7HIRufviBMk4b0mAK 3lp8I6Eg4jSAqrRuKIdnVvWpNYOMHnnesy+7t/AAR5OuGedUerXyQVG4H/jwkasd ipe1H8EM5ULhV09ZkSOpGFlKVpNFWaVLiCIqVuvFTm1Icm9ApQC65PznK1ZFatuz 0DpNIfkBC9JyYs9vOAnXOJfLtA+fVZdhxdwgKQ== -----END CERTIFICATE-----Generated at Mon Jan 26 00:22:01 2026 by rpki-client