This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/3130332e3138362e35382e302f32342d3234203d3e20313439373034.roa File: 3130332e3138362e35382e302f32342d3234203d3e20313439373034.roa (raw, json) Hash identifier: jW8jdRnHuWV/CGzvWek2GgncM27aFTLWkhF7bsF25vc= Subject key identifier: 97:97:97:2D:D7:B2:11:DA:89:6C:DD:88:08:7E:43:11:8D:48:74:88 Certificate issuer: /CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7 Certificate serial: 7E01EACF77425EC579D41B7B3F684F30C22D3A9F Authority key identifier: AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/3130332e3138362e35382e302f32342d3234203d3e20313439373034.roa Signing time: Mon 12 Jan 2026 08:00:00 +0000 ROA not before: Mon 12 Jan 2026 07:55:00 +0000 ROA not after: Mon 11 Jan 2027 08:00:00 +0000 asID: 149704 IP address blocks: 103.186.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 06:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:01:ea:cf:77:42:5e:c5:79:d4:1b:7b:3f:68:4f:30:c2:2d:3a:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7 Validity Not Before: Jan 12 07:55:00 2026 GMT Not After : Jan 11 08:00:00 2027 GMT Subject: CN=9797972DD7B211DA896CDD88087E43118D487488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e0:43:ff:fe:90:14:eb:b1:9f:b9:29:28:29: d5:fa:f9:57:91:5f:10:12:06:69:be:89:58:7c:a0: 7d:98:0a:7c:80:e2:15:49:7d:b0:9e:07:fc:0e:22: 5b:e5:0c:9b:70:34:5f:ef:bd:6d:bb:1e:94:d1:23: de:cc:c7:b3:fd:59:aa:d1:c2:15:00:c3:b6:52:73: 63:f7:d7:54:8d:2e:9b:87:ec:b2:bc:8e:ad:df:08: f2:25:2a:29:ef:db:ea:f8:9e:17:f9:46:f6:a4:d6: 6d:84:f0:50:bb:5d:9e:85:62:1c:cf:71:e2:84:d8: 2e:c3:82:8a:64:80:66:de:95:7a:33:7b:97:c3:6e: 94:35:59:7a:4d:46:ab:d3:fb:48:25:34:c0:ba:b3: 40:00:d0:8b:e2:a9:7d:85:33:82:9c:32:2a:d9:a0: 05:b0:b9:9e:9e:e9:1f:8f:e8:a2:fb:23:8e:d3:6c: 0a:48:34:14:07:57:d1:25:7e:9a:bf:e1:0f:93:b3: 43:b4:78:75:ba:da:5d:b8:18:6c:ba:ff:15:b5:be: 91:9c:bb:fe:ce:f9:37:5f:4f:e7:c7:93:61:1f:e5: 37:aa:ed:d9:81:77:5e:05:e5:8a:a6:29:bd:80:34: cb:3a:7b:6d:ff:dd:63:51:83:7a:e5:eb:c2:bd:c9: 5a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:97:97:2D:D7:B2:11:DA:89:6C:DD:88:08:7E:43:11:8D:48:74:88 X509v3 Authority Key Identifier: keyid:AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/3130332e3138362e35382e302f32342d3234203d3e20313439373034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.58.0/24 Signature Algorithm: sha256WithRSAEncryption 33:ed:c9:de:4e:6a:a1:97:38:3b:65:e8:7f:f2:2b:de:0b:38: 16:84:9d:e4:09:84:4d:ad:33:51:b6:b6:59:bd:e1:c4:7e:2b: 3b:44:8e:d7:4e:69:49:dd:a2:04:04:8c:7d:08:77:5c:38:7b: d3:36:7f:d4:d6:53:b7:99:9e:6e:4d:85:0a:aa:47:0d:b2:7b: c1:e7:02:c8:41:6e:f5:df:2b:2f:3e:0e:ff:20:44:a7:4d:e5: cb:dd:6f:29:50:d2:2e:32:c6:87:9d:7f:d3:60:64:f4:a3:7a: e9:fc:1c:b7:d5:fc:72:ed:b1:df:c6:eb:36:e3:ee:e6:96:bb: 5b:95:f2:de:30:df:9f:13:9c:2b:96:bb:c6:5f:86:13:3c:b3: 56:a7:f1:bf:fb:23:67:8a:1f:32:4a:89:74:99:d1:96:3f:13: b3:c3:fc:64:ca:8d:65:f1:7e:97:1a:51:19:fa:e8:93:91:0e: 8f:75:29:ba:c3:63:cb:a9:d3:01:9d:fe:02:54:03:9d:53:da: 4f:b6:90:ab:07:d3:1c:9c:87:95:12:37:e1:1c:c1:ba:bf:69: 69:94:80:8c:16:00:b8:12:d9:0d:dc:8f:da:4a:f8:85:b2:bd: 47:ea:73:e6:7a:17:34:d0:b3:11:e4:c9:04:c4:29:8b:fe:59: 34:04:12:51 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUfgHqz3dCXsV51Bt7P2hPMMItOp8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjExRkQ0 QjE0QzlCNzAeFw0yNjAxMTIwNzU1MDBaFw0yNzAxMTEwODAwMDBaMDMxMTAvBgNV BAMTKDk3OTc5NzJERDdCMjExREE4OTZDREQ4ODA4N0U0MzExOEQ0ODc0ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC04EP//pAU67GfuSkoKdX6+VeR XxASBmm+iVh8oH2YCnyA4hVJfbCeB/wOIlvlDJtwNF/vvW27HpTRI97Mx7P9WarR whUAw7ZSc2P311SNLpuH7LK8jq3fCPIlKinv2+r4nhf5Rvak1m2E8FC7XZ6FYhzP ceKE2C7DgopkgGbelXoze5fDbpQ1WXpNRqvT+0glNMC6s0AA0IviqX2FM4KcMirZ oAWwuZ6e6R+P6KL7I47TbApINBQHV9Elfpq/4Q+Ts0O0eHW62l24GGy6/xW1vpGc u/7O+TdfT+fHk2Ef5Teq7dmBd14F5YqmKb2ANMs6e23/3WNRg3rl68K9yVppAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUl5eXLdeyEdqJbN2ICH5DEY1IdIgwHwYDVR0j BBgwFoAUr3uTjgZE5V/gIOecU78R/UsUybcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTBlZGRjZC03ZDM4LTQ3NjUtYWEyNi03ZTQ1NzY3MDQyM2MvMC9BRjdCOTM4RTA2 NDRFNTVGRTAyMEU3OUM1M0JGMTFGRDRCMTRDOUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjExRkQ0QjE0 QzlCNy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxMGVkZGNkLTdkMzgtNDc2NS1h YTI2LTdlNDU3NjcwNDIzYy8wLzMxMzAzMzJlMzEzODM2MmUzNTM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzczMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7o6MA0GCSqG SIb3DQEBCwUAA4IBAQAz7cneTmqhlzg7Zeh/8iveCzgWhJ3kCYRNrTNRtrZZveHE fis7RI7XTmlJ3aIEBIx9CHdcOHvTNn/U1lO3mZ5uTYUKqkcNsnvB5wLIQW713ysv Pg7/IESnTeXL3W8pUNIuMsaHnX/TYGT0o3rp/By31fxy7bHfxus24+7mlrtblfLe MN+fE5wrlrvGX4YTPLNWp/G/+yNnih8ySol0mdGWPxOzw/xkyo1l8X6XGlEZ+uiT kQ6PdSm6w2PLqdMBnf4CVAOdU9pPtpCrB9McnIeVEjfhHMG6v2lplICMFgC4EtkN 3I/aSviFsr1H6nPmehc00LMR5MkExCmL/lk0BBJR -----END CERTIFICATE-----Generated at Mon Jan 26 02:48:41 2026 by rpki-client