This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/3130332e3233352e37352e302f32342d3234203d3e20313335343434.roa File: 3130332e3233352e37352e302f32342d3234203d3e20313335343434.roa (raw, json) Hash identifier: rMaF7Q5MH66fB43sjFU7KFf+jSsxMN2DLHihs4pTcNE= Subject key identifier: 86:D6:1E:74:03:8D:AB:BA:3F:49:1D:C2:8B:C6:F0:5F:D2:36:64:D0 Certificate issuer: /CN=D9CD40474BDD0C0707766CEDBAF0B6A186CF582F Certificate serial: 24EB0C553021D29FB6ACE51A0FCC20AEF5922802 Authority key identifier: D9:CD:40:47:4B:DD:0C:07:07:76:6C:ED:BA:F0:B6:A1:86:CF:58:2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/3130332e3233352e37352e302f32342d3234203d3e20313335343434.roa Signing time: Thu 01 Jan 2026 03:00:00 +0000 ROA not before: Thu 01 Jan 2026 02:55:00 +0000 ROA not after: Thu 31 Dec 2026 03:00:00 +0000 asID: 135444 IP address blocks: 103.235.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.crl rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:eb:0c:55:30:21:d2:9f:b6:ac:e5:1a:0f:cc:20:ae:f5:92:28:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9CD40474BDD0C0707766CEDBAF0B6A186CF582F Validity Not Before: Jan 1 02:55:00 2026 GMT Not After : Dec 31 03:00:00 2026 GMT Subject: CN=86D61E74038DABBA3F491DC28BC6F05FD23664D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3b:5d:2b:9c:73:16:91:98:bb:a8:49:9e:d8: 31:31:b1:cb:c4:c3:0a:de:60:95:79:64:36:dd:bb: eb:0f:7f:ac:ae:52:92:9d:c8:f7:4b:71:20:64:5b: 00:a6:55:6c:89:a8:12:67:c7:55:82:f5:fa:e5:c3: de:55:c8:b6:3f:87:29:f2:a1:4f:82:80:9b:aa:e0: 43:29:aa:ba:b5:65:88:74:20:04:be:2d:08:be:66: ac:8b:ad:3a:9f:be:27:41:30:27:64:dc:9b:3c:e0: a5:d4:c4:af:c1:f4:b2:cd:be:2f:9a:b4:c3:f8:4d: c9:3f:06:80:f9:a1:b4:04:ab:a7:43:6c:f5:40:4b: 0b:43:e1:39:8b:6b:00:5d:06:41:ba:08:d6:77:19: 47:64:53:57:3c:65:6a:67:e8:22:37:82:4c:82:35: 72:e3:00:f0:2c:04:f7:9e:68:17:5b:f3:8f:90:1c: 13:19:51:b4:da:9e:77:0c:0b:90:e3:5e:61:63:05: 22:f7:c1:2b:35:8f:8f:a1:76:2f:97:d5:0f:69:dc: 8c:8b:72:bb:a7:4d:17:53:93:70:0f:a0:74:12:2e: 6b:c2:8b:d5:bf:9a:2e:30:f8:11:fd:bc:b4:b4:eb: 07:58:ae:ea:d0:d8:c1:f3:0b:88:aa:7e:0e:84:7a: e9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D6:1E:74:03:8D:AB:BA:3F:49:1D:C2:8B:C6:F0:5F:D2:36:64:D0 X509v3 Authority Key Identifier: keyid:D9:CD:40:47:4B:DD:0C:07:07:76:6C:ED:BA:F0:B6:A1:86:CF:58:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/3130332e3233352e37352e302f32342d3234203d3e20313335343434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.235.75.0/24 Signature Algorithm: sha256WithRSAEncryption 14:7e:89:64:27:e8:67:d1:64:4b:df:d4:d0:82:bb:46:51:ed: c6:7e:0e:4d:e9:85:10:59:9a:95:58:34:07:a1:5c:e9:94:70: 76:92:cb:78:4d:a3:90:41:5e:76:f2:c4:53:bf:89:ab:73:ba: 4e:52:7a:7b:32:84:ad:87:d9:3c:7a:92:6d:96:88:96:85:5b: 2a:df:5d:2c:0c:d6:70:e7:f0:cd:87:88:2e:db:7b:f9:1a:1d: 54:1d:10:8b:f0:e4:70:1b:99:42:2f:3b:74:ee:82:ab:ed:89: a6:eb:fa:ec:08:47:72:e2:c0:7e:ef:79:74:06:d7:e7:73:b4: dc:9f:fe:f1:ea:f6:3e:ff:a8:9a:93:11:3c:3c:00:82:4a:8f: 31:cb:49:5a:89:4c:d0:cc:f2:e6:b2:48:57:1e:1a:3a:e1:5f: 38:14:47:cf:7c:36:7f:27:34:c1:77:4b:74:be:4c:a0:6b:ed: 1f:77:ff:c9:89:56:36:6e:29:9e:78:cf:39:e5:dd:49:37:63: d5:e2:c8:e4:3d:da:00:47:d0:2b:b4:4e:51:07:61:5c:e9:07: 3b:4c:3a:29:36:42:21:37:61:f5:b6:e7:92:e9:29:43:36:d2: 7f:f2:09:d4:44:52:08:1c:7a:2c:94:8f:f4:ca:1b:81:e6:18: b9:d7:c6:79 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUJOsMVTAh0p+2rOUaD8wgrvWSKAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlDRDQwNDc0QkREMEMwNzA3NzY2Q0VEQkFGMEI2QTE4 NkNGNTgyRjAeFw0yNjAxMDEwMjU1MDBaFw0yNjEyMzEwMzAwMDBaMDMxMTAvBgNV BAMTKDg2RDYxRTc0MDM4REFCQkEzRjQ5MURDMjhCQzZGMDVGRDIzNjY0RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoO10rnHMWkZi7qEme2DExscvE wwreYJV5ZDbdu+sPf6yuUpKdyPdLcSBkWwCmVWyJqBJnx1WC9frlw95VyLY/hyny oU+CgJuq4EMpqrq1ZYh0IAS+LQi+ZqyLrTqfvidBMCdk3Js84KXUxK/B9LLNvi+a tMP4Tck/BoD5obQEq6dDbPVASwtD4TmLawBdBkG6CNZ3GUdkU1c8ZWpn6CI3gkyC NXLjAPAsBPeeaBdb84+QHBMZUbTanncMC5DjXmFjBSL3wSs1j4+hdi+X1Q9p3IyL crunTRdTk3APoHQSLmvCi9W/mi4w+BH9vLS06wdYrurQ2MHzC4iqfg6EeumfAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUhtYedAONq7o/SR3Ci8bwX9I2ZNAwHwYDVR0j BBgwFoAU2c1AR0vdDAcHdmztuvC2oYbPWC8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MWE3N2FkZC1hNDlhLTRjOGYtYTczNS1lZjk2YzMzYWIyOWYvMC9EOUNENDA0NzRC REQwQzA3MDc3NjZDRURCQUYwQjZBMTg2Q0Y1ODJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDlDRDQwNDc0QkREMEMwNzA3NzY2Q0VEQkFGMEI2QTE4NkNG NTgyRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IxYTc3YWRkLWE0OWEtNGM4Zi1h NzM1LWVmOTZjMzNhYjI5Zi8wLzMxMzAzMzJlMzIzMzM1MmUzNzM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM1MzQzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+tLMA0GCSqG SIb3DQEBCwUAA4IBAQAUfolkJ+hn0WRL39TQgrtGUe3Gfg5N6YUQWZqVWDQHoVzp lHB2kst4TaOQQV528sRTv4mrc7pOUnp7MoSth9k8epJtloiWhVsq310sDNZw5/DN h4gu23v5Gh1UHRCL8ORwG5lCLzt07oKr7Ymm6/rsCEdy4sB+73l0Btfnc7Tcn/7x 6vY+/6iakxE8PACCSo8xy0laiUzQzPLmskhXHho64V84FEfPfDZ/JzTBd0t0vkyg a+0fd//JiVY2bimeeM855d1JN2PV4sjkPdoAR9ArtE5RB2Fc6Qc7TDopNkIhN2H1 tueS6SlDNtJ/8gnURFIIHHoslI/0yhuB5hi518Z5 -----END CERTIFICATE-----Generated at Sun Jan 25 22:04:28 2026 by rpki-client