This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/3130332e3133302e3131372e302f32342d3234203d3e203435333035.roa File: 3130332e3133302e3131372e302f32342d3234203d3e203435333035.roa (raw, json) Hash identifier: hOjIzzaF41h+bbc91vBslhua7MJ7/Ep9kVdxucTN/i0= Subject key identifier: 83:59:F4:0E:76:9B:3B:6C:CF:99:AE:3A:3F:DF:30:62:22:A2:3A:14 Certificate issuer: /CN=D947E8BEAE01A6710E324CD416D3282ADDFBBFE9 Certificate serial: 4482611C28AAD52BF5B4F6B2BEB83A77990AE3D3 Authority key identifier: D9:47:E8:BE:AE:01:A6:71:0E:32:4C:D4:16:D3:28:2A:DD:FB:BF:E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/3130332e3133302e3131372e302f32342d3234203d3e203435333035.roa Signing time: Mon 19 Jan 2026 09:00:02 +0000 ROA not before: Mon 19 Jan 2026 08:55:02 +0000 ROA not after: Mon 18 Jan 2027 09:00:02 +0000 asID: 45305 IP address blocks: 103.130.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:82:61:1c:28:aa:d5:2b:f5:b4:f6:b2:be:b8:3a:77:99:0a:e3:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D947E8BEAE01A6710E324CD416D3282ADDFBBFE9 Validity Not Before: Jan 19 08:55:02 2026 GMT Not After : Jan 18 09:00:02 2027 GMT Subject: CN=8359F40E769B3B6CCF99AE3A3FDF306222A23A14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f1:eb:a6:f8:a0:02:0b:bd:d6:d6:a2:af:7e: df:d9:06:31:9b:d9:12:c2:29:f3:97:05:9d:09:e2: 04:6a:a7:11:98:8a:3c:ec:5e:fa:99:37:85:0e:a2: 58:8c:d9:d5:c2:67:f7:7f:39:ab:bd:9f:a9:c6:62: e2:df:66:fa:b7:a9:b2:c4:d1:d0:f0:7c:f4:85:bd: 4e:95:96:4d:2a:fc:1b:41:5c:7a:f4:3a:f5:63:3e: 15:6a:2e:72:f9:f6:e1:55:87:3e:19:31:1c:b1:28: 9f:66:4d:00:dc:2d:39:a2:14:95:b2:e6:8b:40:65: 80:b4:ec:aa:8e:7f:5e:92:33:41:68:4c:c6:ad:8c: bc:60:43:d3:2e:c0:b4:02:ac:da:3e:a8:60:b5:3e: 00:f3:ac:24:bf:a5:da:15:7e:af:5c:53:8b:e1:9f: dc:21:d1:33:47:7d:d6:e4:4f:23:ba:2c:8b:03:ff: 59:2c:97:f7:15:cb:c1:f5:cf:5c:0b:87:71:68:3a: 56:91:87:2d:ab:6f:28:f7:c2:55:92:69:ab:80:f1: b1:58:aa:1e:f6:c6:b6:4d:c0:4b:c3:18:a5:c2:e6: 0d:b3:95:42:45:a2:92:f0:8d:aa:c3:ad:df:50:d6: 90:ca:bb:87:c1:bd:99:b6:58:6c:8c:5e:d8:53:52: 9d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:59:F4:0E:76:9B:3B:6C:CF:99:AE:3A:3F:DF:30:62:22:A2:3A:14 X509v3 Authority Key Identifier: keyid:D9:47:E8:BE:AE:01:A6:71:0E:32:4C:D4:16:D3:28:2A:DD:FB:BF:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/3130332e3133302e3131372e302f32342d3234203d3e203435333035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.130.117.0/24 Signature Algorithm: sha256WithRSAEncryption 42:db:45:66:fe:9a:42:a9:ed:aa:a4:2e:29:e9:a5:48:61:f6: 1d:cd:cc:47:d5:53:8e:c2:c9:80:4b:88:ed:fa:52:bf:9c:ab: aa:9f:a4:e3:73:c1:36:c4:47:26:f9:fb:a5:fd:4b:6f:da:84: 3c:b4:c0:02:6b:8b:11:a5:33:d4:9f:29:c1:bd:66:80:93:c5: be:b2:0e:53:a8:1c:eb:51:cb:ef:05:41:44:88:85:e9:99:58: 91:58:ee:e1:a2:a0:fe:f9:8b:7d:3e:71:c3:0d:59:51:49:a8: 0c:d7:70:ac:3d:71:0f:60:82:92:78:ea:f9:93:5e:f9:19:61: 16:9f:bc:4a:44:35:08:e1:b5:97:55:1d:cf:42:21:75:58:1b: 91:65:4e:25:79:58:09:a0:1c:c7:e3:4c:35:ff:6c:f6:45:df: 72:78:f0:1f:46:b4:83:5b:ef:8a:9b:ae:c7:03:b5:99:37:33: f1:81:15:be:e9:8c:c3:d8:c6:fd:0b:c6:44:52:63:37:01:10: 03:09:f0:a2:27:95:56:ce:ba:d7:d9:83:2b:1b:e3:39:ae:d8: da:e5:2e:5d:6c:77:7d:56:90:75:83:e0:f7:dc:15:83:c1:eb: 27:ab:3c:fe:85:04:6c:d0:90:93:b4:b5:e3:88:44:15:85:c6: ca:cd:7f:20 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIURIJhHCiq1Sv1tPayvrg6d5kK49MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk0N0U4QkVBRTAxQTY3MTBFMzI0Q0Q0MTZEMzI4MkFE REZCQkZFOTAeFw0yNjAxMTkwODU1MDJaFw0yNzAxMTgwOTAwMDJaMDMxMTAvBgNV BAMTKDgzNTlGNDBFNzY5QjNCNkNDRjk5QUUzQTNGREYzMDYyMjJBMjNBMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd8eum+KACC73W1qKvft/ZBjGb 2RLCKfOXBZ0J4gRqpxGYijzsXvqZN4UOoliM2dXCZ/d/Oau9n6nGYuLfZvq3qbLE 0dDwfPSFvU6Vlk0q/BtBXHr0OvVjPhVqLnL59uFVhz4ZMRyxKJ9mTQDcLTmiFJWy 5otAZYC07KqOf16SM0FoTMatjLxgQ9MuwLQCrNo+qGC1PgDzrCS/pdoVfq9cU4vh n9wh0TNHfdbkTyO6LIsD/1ksl/cVy8H1z1wLh3FoOlaRhy2rbyj3wlWSaauA8bFY qh72xrZNwEvDGKXC5g2zlUJFopLwjarDrd9Q1pDKu4fBvZm2WGyMXthTUp0ZAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUg1n0DnabO2zPma46P98wYiKiOhQwHwYDVR0j BBgwFoAU2Ufovq4BpnEOMkzUFtMoKt37v+kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZmZkYzJiNy1mMzA1LTRlMDctYWFjNS00NjllOTExM2IwYjQvMC9EOTQ3RThCRUFF MDFBNjcxMEUzMjRDRDQxNkQzMjgyQURERkJCRkU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDk0N0U4QkVBRTAxQTY3MTBFMzI0Q0Q0MTZEMzI4MkFEREZC QkZFOS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NmZmRjMmI3LWYzMDUtNGUwNy1h YWM1LTQ2OWU5MTEzYjBiNC8wLzMxMzAzMzJlMzEzMzMwMmUzMTMxMzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM1MzMzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4J1MA0GCSqG SIb3DQEBCwUAA4IBAQBC20Vm/ppCqe2qpC4p6aVIYfYdzcxH1VOOwsmAS4jt+lK/ nKuqn6Tjc8E2xEcm+ful/Utv2oQ8tMACa4sRpTPUnynBvWaAk8W+sg5TqBzrUcvv BUFEiIXpmViRWO7hoqD++Yt9PnHDDVlRSagM13CsPXEPYIKSeOr5k175GWEWn7xK RDUI4bWXVR3PQiF1WBuRZU4leVgJoBzH40w1/2z2Rd9yePAfRrSDW++Km67HA7WZ NzPxgRW+6YzD2Mb9C8ZEUmM3ARADCfCiJ5VWzrrX2YMrG+M5rtja5S5dbHd9VpB1 g+D33BWDwesnqzz+hQRs0JCTtLXjiEQVhcbKzX8g -----END CERTIFICATE-----Generated at Mon Jan 26 02:42:16 2026 by rpki-client