This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/3130332e3138342e3132302e302f32332d3233203d3e20313439363633.roa File: 3130332e3138342e3132302e302f32332d3233203d3e20313439363633.roa (raw, json) Hash identifier: crc7GhKn9AnYAlLeRPgUvImKVvVRpJeq2KkcRuzsk7I= Subject key identifier: 86:FE:03:C2:1F:F2:FB:91:19:54:56:EF:7D:7E:8E:63:5A:88:3A:53 Certificate issuer: /CN=C70A343932991281F91796DB87B011987603BBF4 Certificate serial: 08B71D0BA4C41B1E91D6585650B3221D3D888B60 Authority key identifier: C7:0A:34:39:32:99:12:81:F9:17:96:DB:87:B0:11:98:76:03:BB:F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/3130332e3138342e3132302e302f32332d3233203d3e20313439363633.roa Signing time: Tue 23 Dec 2025 03:03:07 +0000 ROA not before: Tue 23 Dec 2025 02:58:07 +0000 ROA not after: Tue 22 Dec 2026 03:03:07 +0000 asID: 149663 IP address blocks: 103.184.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.crl rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 05:41:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:b7:1d:0b:a4:c4:1b:1e:91:d6:58:56:50:b3:22:1d:3d:88:8b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C70A343932991281F91796DB87B011987603BBF4 Validity Not Before: Dec 23 02:58:07 2025 GMT Not After : Dec 22 03:03:07 2026 GMT Subject: CN=86FE03C21FF2FB91195456EF7D7E8E635A883A53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:06:2c:61:be:a1:f7:e6:ef:b0:50:4d:a2:6c: 7b:e9:45:9e:49:1a:dd:17:0b:8e:9a:0a:a8:10:91: 21:43:14:57:b9:b3:6c:1e:29:64:95:74:16:b0:83: 81:0d:a3:92:54:47:d6:6b:08:ad:88:f2:cc:d1:bf: 43:67:77:0d:14:c8:0c:20:9d:ea:a6:68:f8:a8:c0: 9e:4d:85:23:af:72:2f:98:67:7b:5a:bd:cb:35:4a: a4:96:1b:c4:4a:ac:d5:a1:95:d8:2d:c9:b1:d5:74: 4d:53:cf:05:a9:c5:6d:9a:ba:89:0b:94:96:ac:2e: fc:43:03:36:a9:ad:ed:b9:60:73:c0:91:5e:5b:50: 10:15:6e:7e:8a:1a:ee:40:f2:61:2e:77:9a:ce:1f: 85:41:99:1b:e5:1d:d9:b8:e9:0a:75:1c:27:af:05: d8:fa:02:61:73:91:8c:9b:1b:f6:0d:d3:d8:34:42: bc:af:ee:59:47:26:bb:95:81:4d:14:4c:07:ea:96: fd:d2:89:eb:0a:69:75:ce:fc:77:ca:4b:5d:84:9e: e9:0e:b6:79:cc:d5:fe:ce:06:43:a4:cd:e4:6a:c8: f8:88:7c:88:30:24:2e:04:44:92:4c:62:3b:81:d6: b7:10:38:74:f7:bc:63:cc:fd:e8:d2:eb:b4:f5:c2: c6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:FE:03:C2:1F:F2:FB:91:19:54:56:EF:7D:7E:8E:63:5A:88:3A:53 X509v3 Authority Key Identifier: keyid:C7:0A:34:39:32:99:12:81:F9:17:96:DB:87:B0:11:98:76:03:BB:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/3130332e3138342e3132302e302f32332d3233203d3e20313439363633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.184.120.0/23 Signature Algorithm: sha256WithRSAEncryption 5c:8c:e4:f3:a4:ff:be:bd:5a:e6:3d:1c:38:6f:ab:09:13:4b: 99:a6:5e:63:9f:56:80:db:e6:7f:29:57:c1:95:ce:f2:f9:f1: de:15:71:43:9d:ba:01:8c:1b:36:55:2d:7e:bb:d5:d9:60:e7: 18:08:b0:1c:b1:c2:51:c5:9b:e2:45:23:9a:93:82:f7:8e:0f: f7:0e:47:a5:15:23:bf:91:02:41:a2:77:9e:ef:e2:77:1b:83: 52:1b:78:46:67:d4:d5:94:33:98:61:75:47:f3:da:56:73:ee: 67:fb:81:33:8d:9a:9a:16:06:76:28:fe:9b:56:61:7f:5c:79: 10:07:88:72:88:b0:e1:9c:24:f3:37:7b:cc:7c:61:37:d5:83: 3a:a5:b2:a1:61:35:52:db:0a:42:4f:36:fd:fc:ef:24:39:8b: ba:c6:6b:67:23:5c:ca:e7:eb:96:60:0f:d8:16:fa:21:09:b6: a6:ff:76:69:e8:31:2b:43:d4:01:4d:16:b6:45:98:63:fe:48: ac:5e:0a:e6:19:6d:7d:55:93:a1:59:f9:df:7e:28:6a:56:df: 94:7d:d8:94:9f:18:a1:af:eb:20:ba:6e:81:2f:fb:c8:cc:83: 80:5f:f1:c7:c6:4c:d5:fb:5c:0a:4d:46:af:d6:d7:91:0e:49: 29:f5:85:2e -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUCLcdC6TEGx6R1lhWULMiHT2Ii2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcwQTM0MzkzMjk5MTI4MUY5MTc5NkRCODdCMDExOTg3 NjAzQkJGNDAeFw0yNTEyMjMwMjU4MDdaFw0yNjEyMjIwMzAzMDdaMDMxMTAvBgNV BAMTKDg2RkUwM0MyMUZGMkZCOTExOTU0NTZFRjdEN0U4RTYzNUE4ODNBNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvBixhvqH35u+wUE2ibHvpRZ5J Gt0XC46aCqgQkSFDFFe5s2weKWSVdBawg4ENo5JUR9ZrCK2I8szRv0Nndw0UyAwg neqmaPiowJ5NhSOvci+YZ3tavcs1SqSWG8RKrNWhldgtybHVdE1TzwWpxW2auokL lJasLvxDAzapre25YHPAkV5bUBAVbn6KGu5A8mEud5rOH4VBmRvlHdm46Qp1HCev Bdj6AmFzkYybG/YN09g0Qryv7llHJruVgU0UTAfqlv3SiesKaXXO/HfKS12EnukO tnnM1f7OBkOkzeRqyPiIfIgwJC4ERJJMYjuB1rcQOHT3vGPM/ejS67T1wsZPAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUhv4Dwh/y+5EZVFbvfX6OY1qIOlMwHwYDVR0j BBgwFoAUxwo0OTKZEoH5F5bbh7ARmHYDu/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZmMxN2NjMi1mNGEyLTQxNWUtOGVhMi1mOWM0N2Y3NWM0Y2EvMC9DNzBBMzQzOTMy OTkxMjgxRjkxNzk2REI4N0IwMTE5ODc2MDNCQkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzcwQTM0MzkzMjk5MTI4MUY5MTc5NkRCODdCMDExOTg3NjAz QkJGNC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JmYzE3Y2MyLWY0YTItNDE1ZS04 ZWEyLWY5YzQ3Zjc1YzRjYS8wLzMxMzAzMzJlMzEzODM0MmUzMTMyMzAyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzkzNjM2MzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnuHgwDQYJ KoZIhvcNAQELBQADggEBAFyM5POk/769WuY9HDhvqwkTS5mmXmOfVoDb5n8pV8GV zvL58d4VcUOdugGMGzZVLX671dlg5xgIsByxwlHFm+JFI5qTgveOD/cOR6UVI7+R AkGid57v4ncbg1IbeEZn1NWUM5hhdUfz2lZz7mf7gTONmpoWBnYo/ptWYX9ceRAH iHKIsOGcJPM3e8x8YTfVgzqlsqFhNVLbCkJPNv387yQ5i7rGa2cjXMrn65ZgD9gW +iEJtqb/dmnoMStD1AFNFrZFmGP+SKxeCuYZbX1Vk6FZ+d9+KGpW35R92JSfGKGv 6yC6boEv+8jMg4Bf8cfGTNX7XApNRq/W15EOSSn1hS4= -----END CERTIFICATE-----Generated at Mon Jan 26 10:58:03 2026 by rpki-client