This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/3130332e3233352e37342e302f32342d3234203d3e20313431313230.roa File: 3130332e3233352e37342e302f32342d3234203d3e20313431313230.roa (raw, json) Hash identifier: ZZmhtd+kvnB+qiIIirmPZ+PBFZw13KvG2RKerxPSCqA= Subject key identifier: 44:04:6D:DE:D7:0D:E3:5E:74:09:7B:62:FE:09:04:62:E3:58:6C:B0 Certificate issuer: /CN=D9CD40474BDD0C0707766CEDBAF0B6A186CF582F Certificate serial: 6CEB12FFDAC3364E7AD903AFF984C65D188DD9E0 Authority key identifier: D9:CD:40:47:4B:DD:0C:07:07:76:6C:ED:BA:F0:B6:A1:86:CF:58:2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/3130332e3233352e37342e302f32342d3234203d3e20313431313230.roa Signing time: Fri 09 Jan 2026 12:00:00 +0000 ROA not before: Fri 09 Jan 2026 11:55:00 +0000 ROA not after: Fri 08 Jan 2027 12:00:00 +0000 asID: 141120 IP address blocks: 103.235.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.crl rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:eb:12:ff:da:c3:36:4e:7a:d9:03:af:f9:84:c6:5d:18:8d:d9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9CD40474BDD0C0707766CEDBAF0B6A186CF582F Validity Not Before: Jan 9 11:55:00 2026 GMT Not After : Jan 8 12:00:00 2027 GMT Subject: CN=44046DDED70DE35E74097B62FE090462E3586CB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c6:c6:0e:78:c0:00:1e:30:f9:b8:0c:b7:bf: 30:fe:fe:87:b6:42:1a:b8:90:b7:fa:14:ee:f8:b2: ff:29:a9:a2:c5:fe:22:02:12:80:38:13:bb:7a:bc: 8e:4d:1f:f6:0b:e0:3f:0e:a7:e5:15:9f:70:74:d3: 48:ea:6d:dd:7d:c0:96:cb:f3:11:99:63:c2:56:53: b0:92:91:70:4a:e3:3d:76:66:66:1a:03:f8:2f:5f: 23:8d:c3:3e:00:04:73:98:98:e0:bd:6f:3e:ba:3c: 76:c9:48:33:e9:7e:f8:ac:39:d3:5e:24:7b:19:ca: f7:8b:94:05:84:ec:09:45:01:7f:a1:ea:6a:25:8f: e2:94:fb:0e:56:38:19:8b:2f:4e:88:e8:1c:5f:4a: 21:99:61:3b:08:53:a3:38:9a:67:ba:eb:15:86:72: 3f:e2:bc:9f:ca:e6:89:e2:fd:6a:cb:b5:dc:e4:e6: 1b:2f:96:1b:38:ee:ee:60:79:8d:a6:cc:0c:1a:89: 03:b2:dd:9b:c5:fa:55:93:11:a1:b9:ff:10:18:b3: 41:68:6d:5a:59:2a:59:a9:db:5c:79:fc:01:4f:09: 4f:94:4d:a5:0f:46:d7:1d:f0:27:f4:ec:9d:27:db: 9c:7b:bd:a9:ed:1d:4a:35:7c:10:9b:dc:43:ed:48: 64:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:04:6D:DE:D7:0D:E3:5E:74:09:7B:62:FE:09:04:62:E3:58:6C:B0 X509v3 Authority Key Identifier: keyid:D9:CD:40:47:4B:DD:0C:07:07:76:6C:ED:BA:F0:B6:A1:86:CF:58:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/3130332e3233352e37342e302f32342d3234203d3e20313431313230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.235.74.0/24 Signature Algorithm: sha256WithRSAEncryption 54:ad:4e:1e:39:a2:6c:bb:99:18:cd:f2:9e:96:cc:eb:9d:2d: c5:be:ad:02:1c:ac:df:65:d0:12:61:1d:39:01:65:a6:a0:a2: 1d:e8:67:23:b2:01:0d:60:43:97:d8:39:38:72:83:d5:42:3e: 01:57:99:11:2e:43:8b:16:51:7b:c9:bd:c3:16:2a:62:57:20: e6:3b:34:31:34:95:02:18:39:4f:82:e4:e0:df:da:75:dd:1a: 74:04:31:39:64:fb:9e:06:ba:a2:65:21:bc:66:93:a7:ac:90: 70:85:d3:8f:ae:d0:30:57:ee:63:e7:d7:43:d0:00:36:e6:56: cc:83:5b:64:3b:f9:c5:20:45:10:0c:da:01:56:99:f6:e6:14: 2a:6b:ee:5a:06:6e:d0:77:34:2e:e2:96:74:43:4c:3d:b7:75: 31:0b:f0:d7:36:6c:4e:cd:df:0b:7c:76:5f:e6:6d:8e:44:6e: 55:10:cb:33:4d:8a:a0:88:6d:38:ba:1f:72:dc:a3:89:87:73: 5a:4c:2d:47:7a:25:83:5e:7e:05:a6:1e:67:a8:91:62:93:d6: 5f:c3:bd:a3:0c:41:a7:4a:24:58:92:b6:65:12:56:3b:6c:13: 7f:56:c8:1c:16:5e:73:00:ea:d2:43:69:19:2a:7f:91:8d:4b: 9e:22:c6:0c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUbOsS/9rDNk562QOv+YTGXRiN2eAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlDRDQwNDc0QkREMEMwNzA3NzY2Q0VEQkFGMEI2QTE4 NkNGNTgyRjAeFw0yNjAxMDkxMTU1MDBaFw0yNzAxMDgxMjAwMDBaMDMxMTAvBgNV BAMTKDQ0MDQ2RERFRDcwREUzNUU3NDA5N0I2MkZFMDkwNDYyRTM1ODZDQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWxsYOeMAAHjD5uAy3vzD+/oe2 Qhq4kLf6FO74sv8pqaLF/iICEoA4E7t6vI5NH/YL4D8Op+UVn3B000jqbd19wJbL 8xGZY8JWU7CSkXBK4z12ZmYaA/gvXyONwz4ABHOYmOC9bz66PHbJSDPpfvisOdNe JHsZyveLlAWE7AlFAX+h6molj+KU+w5WOBmLL06I6BxfSiGZYTsIU6M4mme66xWG cj/ivJ/K5oni/WrLtdzk5hsvlhs47u5geY2mzAwaiQOy3ZvF+lWTEaG5/xAYs0Fo bVpZKlmp21x5/AFPCU+UTaUPRtcd8Cf07J0n25x7vantHUo1fBCb3EPtSGRJAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQURARt3tcN4150CXti/gkEYuNYbLAwHwYDVR0j BBgwFoAU2c1AR0vdDAcHdmztuvC2oYbPWC8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MWE3N2FkZC1hNDlhLTRjOGYtYTczNS1lZjk2YzMzYWIyOWYvMC9EOUNENDA0NzRC REQwQzA3MDc3NjZDRURCQUYwQjZBMTg2Q0Y1ODJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDlDRDQwNDc0QkREMEMwNzA3NzY2Q0VEQkFGMEI2QTE4NkNG NTgyRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IxYTc3YWRkLWE0OWEtNGM4Zi1h NzM1LWVmOTZjMzNhYjI5Zi8wLzMxMzAzMzJlMzIzMzM1MmUzNzM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzEzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+tKMA0GCSqG SIb3DQEBCwUAA4IBAQBUrU4eOaJsu5kYzfKelszrnS3Fvq0CHKzfZdASYR05AWWm oKId6GcjsgENYEOX2Dk4coPVQj4BV5kRLkOLFlF7yb3DFipiVyDmOzQxNJUCGDlP guTg39p13Rp0BDE5ZPueBrqiZSG8ZpOnrJBwhdOPrtAwV+5j59dD0AA25lbMg1tk O/nFIEUQDNoBVpn25hQqa+5aBm7QdzQu4pZ0Q0w9t3UxC/DXNmxOzd8LfHZf5m2O RG5VEMszTYqgiG04uh9y3KOJh3NaTC1HeiWDXn4Fph5nqJFik9Zfw72jDEGnSiRY krZlElY7bBN/VsgcFl5zAOrSQ2kZKn+RjUueIsYM -----END CERTIFICATE-----Generated at Sun Jan 25 22:09:49 2026 by rpki-client