This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/3130332e31302e3137312e302f32342d3234203d3e203536323535.roa File: 3130332e31302e3137312e302f32342d3234203d3e203536323535.roa (raw, json) Hash identifier: qVOs5fg6/pJ4qMK43Sua93AGLLp0Y1L5pAbuR4z7+e8= Subject key identifier: A9:B8:CA:F7:0C:62:C5:B9:F1:DB:4A:16:DC:6A:13:7E:9D:93:AF:1A Certificate issuer: /CN=B3032084B1211BBB522E01AB56EC94BFBD1C91BB Certificate serial: 3A9CC6ED3E79AC4D34927B1F38318E832271D7D6 Authority key identifier: B3:03:20:84:B1:21:1B:BB:52:2E:01:AB:56:EC:94:BF:BD:1C:91:BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/3130332e31302e3137312e302f32342d3234203d3e203536323535.roa Signing time: Tue 30 Dec 2025 11:02:33 +0000 ROA not before: Tue 30 Dec 2025 10:57:33 +0000 ROA not after: Tue 29 Dec 2026 11:02:33 +0000 asID: 56255 IP address blocks: 103.10.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 16:25:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:9c:c6:ed:3e:79:ac:4d:34:92:7b:1f:38:31:8e:83:22:71:d7:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3032084B1211BBB522E01AB56EC94BFBD1C91BB Validity Not Before: Dec 30 10:57:33 2025 GMT Not After : Dec 29 11:02:33 2026 GMT Subject: CN=A9B8CAF70C62C5B9F1DB4A16DC6A137E9D93AF1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:1c:1a:ea:ba:75:22:a9:fe:cc:8e:b7:da:00: de:6b:5d:73:32:6c:16:97:43:69:a1:70:e5:03:db: a7:b0:a5:ee:93:cb:f7:4d:72:fc:82:2d:61:ae:9b: e9:ea:f8:fc:95:80:65:1b:5f:bb:d3:5d:70:51:b8: d9:0d:44:a7:4e:8e:0a:bf:b5:47:0b:4b:e2:f4:a3: d2:e8:71:c9:95:02:a7:f6:ff:44:64:5d:e2:07:d7: c6:b3:54:c5:35:bd:06:68:2c:c5:ed:65:d0:d0:ac: 71:45:3d:ef:64:d9:3b:eb:c2:7b:35:d5:a1:2e:05: 08:fd:bb:db:0f:7f:e0:23:a8:0a:b3:ae:bf:f1:71: ee:22:51:b4:fe:03:9d:ab:16:68:97:84:00:61:14: e3:03:2c:f1:cb:49:e3:1a:4a:87:3e:b9:3a:44:af: 33:7a:c6:4d:f9:49:88:10:35:20:30:48:4b:3a:79: b2:94:9d:d3:ce:e2:d2:a4:df:4a:11:91:91:92:b3: 59:08:28:bc:6b:c5:c4:ae:c2:3b:89:ea:f7:d0:c6: 99:56:7d:be:a9:6a:e6:42:f9:1b:ac:c4:ac:55:69: 4c:4b:d0:56:f2:46:a9:a1:77:12:8d:89:ae:a1:32: bf:7e:79:d8:04:43:41:7a:67:64:48:26:af:cf:d3: 48:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B8:CA:F7:0C:62:C5:B9:F1:DB:4A:16:DC:6A:13:7E:9D:93:AF:1A X509v3 Authority Key Identifier: keyid:B3:03:20:84:B1:21:1B:BB:52:2E:01:AB:56:EC:94:BF:BD:1C:91:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/3130332e31302e3137312e302f32342d3234203d3e203536323535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.10.171.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:df:cf:fd:b5:33:43:1e:10:02:12:16:d0:f0:6a:b2:5b:ef: 27:c8:1e:17:a7:94:23:b5:85:5e:f8:86:90:6a:5e:44:94:91: 47:4d:03:6d:53:b1:e7:87:b4:f9:00:9c:a9:9d:16:80:eb:43: a9:31:61:31:db:f3:08:d5:8c:09:30:ba:68:0c:78:0a:7d:57: 36:6e:c6:05:4b:21:20:47:4c:f5:07:31:cc:3c:61:8a:c8:18: d6:2e:21:20:22:53:a6:ba:a0:b7:8b:01:0f:4c:03:4b:ba:c0: a2:d0:54:3c:dd:17:0a:6e:f3:2c:38:b0:a7:fd:47:f1:db:b3: ed:ea:a5:85:d0:f6:32:1c:bf:b9:bb:26:05:71:ec:b1:4f:1d: fa:a2:d0:76:c7:b7:7c:bd:82:1a:7d:a3:72:60:9c:13:5b:b0: 0b:f3:71:39:12:ed:37:ca:8c:ae:dc:11:58:b6:11:6f:94:a8: 6d:56:50:60:27:63:a0:a4:eb:29:fc:c5:85:11:6f:d4:85:14: 39:8a:de:a7:ee:2c:7b:99:4e:b0:92:ff:14:38:fa:e8:d2:a8: ed:44:e6:df:22:d0:65:58:5c:4b:57:41:3a:9e:63:bc:c4:b1: 44:a1:d7:12:1e:a0:e2:0d:96:f0:fd:b9:12:18:68:8c:5d:2c: 57:88:c0:65 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUOpzG7T55rE00knsfODGOgyJx19YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMwMzIwODRCMTIxMUJCQjUyMkUwMUFCNTZFQzk0QkZC RDFDOTFCQjAeFw0yNTEyMzAxMDU3MzNaFw0yNjEyMjkxMTAyMzNaMDMxMTAvBgNV BAMTKEE5QjhDQUY3MEM2MkM1QjlGMURCNEExNkRDNkExMzdFOUQ5M0FGMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3HBrqunUiqf7MjrfaAN5rXXMy bBaXQ2mhcOUD26ewpe6Ty/dNcvyCLWGum+nq+PyVgGUbX7vTXXBRuNkNRKdOjgq/ tUcLS+L0o9LoccmVAqf2/0RkXeIH18azVMU1vQZoLMXtZdDQrHFFPe9k2Tvrwns1 1aEuBQj9u9sPf+AjqAqzrr/xce4iUbT+A52rFmiXhABhFOMDLPHLSeMaSoc+uTpE rzN6xk35SYgQNSAwSEs6ebKUndPO4tKk30oRkZGSs1kIKLxrxcSuwjuJ6vfQxplW fb6pauZC+RusxKxVaUxL0FbyRqmhdxKNia6hMr9+edgEQ0F6Z2RIJq/P00i1AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUqbjK9wxixbnx20oW3GoTfp2TrxowHwYDVR0j BBgwFoAUswMghLEhG7tSLgGrVuyUv70ckbswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTYzMWQ3Ny1mODA1LTQzOWMtOThmNC1iMGRhNjBmZThkZDEvMC9CMzAzMjA4NEIx MjExQkJCNTIyRTAxQUI1NkVDOTRCRkJEMUM5MUJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMwMzIwODRCMTIxMUJCQjUyMkUwMUFCNTZFQzk0QkZCRDFD OTFCQi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NhNjMxZDc3LWY4MDUtNDM5Yy05 OGY0LWIwZGE2MGZlOGRkMS8wLzMxMzAzMzJlMzEzMDJlMzEzNzMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzNjMyMzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcKqzANBgkqhkiG 9w0BAQsFAAOCAQEAL9/P/bUzQx4QAhIW0PBqslvvJ8geF6eUI7WFXviGkGpeRJSR R00DbVOx54e0+QCcqZ0WgOtDqTFhMdvzCNWMCTC6aAx4Cn1XNm7GBUshIEdM9Qcx zDxhisgY1i4hICJTprqgt4sBD0wDS7rAotBUPN0XCm7zLDiwp/1H8duz7eqlhdD2 Mhy/ubsmBXHssU8d+qLQdse3fL2CGn2jcmCcE1uwC/NxORLtN8qMrtwRWLYRb5So bVZQYCdjoKTrKfzFhRFv1IUUOYrep+4se5lOsJL/FDj66NKo7UTm3yLQZVhcS1dB Op5jvMSxRKHXEh6g4g2W8P25EhhojF0sV4jAZQ== -----END CERTIFICATE-----Generated at Mon Jan 26 02:38:12 2026 by rpki-client