This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/3130332e3138362e35392e302f32342d3234203d3e20313439373034.roa File: 3130332e3138362e35392e302f32342d3234203d3e20313439373034.roa (raw, json) Hash identifier: T6EE7CbW35s45e0263f+URwYA2lm21nSH0YTz5UoU4o= Subject key identifier: C2:26:3A:BF:C3:9E:D4:F9:7E:60:DB:BE:3E:99:3A:AD:87:05:88:6A Certificate issuer: /CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7 Certificate serial: 38170A04006D088F7B0CAB1F01C8A883BF6C3779 Authority key identifier: AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/3130332e3138362e35392e302f32342d3234203d3e20313439373034.roa Signing time: Mon 12 Jan 2026 07:00:00 +0000 ROA not before: Mon 12 Jan 2026 06:55:00 +0000 ROA not after: Mon 11 Jan 2027 07:00:00 +0000 asID: 149704 IP address blocks: 103.186.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 06:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:17:0a:04:00:6d:08:8f:7b:0c:ab:1f:01:c8:a8:83:bf:6c:37:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7 Validity Not Before: Jan 12 06:55:00 2026 GMT Not After : Jan 11 07:00:00 2027 GMT Subject: CN=C2263ABFC39ED4F97E60DBBE3E993AAD8705886A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c8:07:25:4c:4f:5b:48:63:67:c3:e4:1f:96: d9:dc:db:76:95:1c:28:7b:8d:58:4a:17:36:aa:b0: 74:74:2f:0c:d5:35:41:14:f3:81:e3:97:4e:d9:7a: ca:99:07:6f:56:d3:1d:aa:4a:6b:aa:59:9d:f9:23: 56:f6:10:50:b8:1b:9f:43:2a:d2:0c:32:64:8d:74: f5:d2:4a:6d:e2:62:b9:72:56:63:a7:36:cf:ce:37: e4:2d:d9:33:86:a5:ef:dd:58:dc:d6:57:62:42:da: 9b:49:9a:41:65:d4:cb:81:e2:08:e9:e5:56:6f:d8: 98:3c:6d:77:d4:be:26:0d:ef:58:e5:06:67:9d:7f: 61:f4:2a:bb:2b:17:ae:41:85:af:74:a2:bb:88:6c: fd:2b:ad:7d:79:5d:22:f9:ea:4d:82:eb:91:ed:3f: 5a:a5:4f:f1:67:56:6a:e9:d4:07:ba:f2:d5:de:06: 05:ae:4d:a6:22:5f:4a:00:9e:3c:d7:56:5e:58:13: 98:6f:ec:ef:6b:c5:ba:41:e0:c1:60:ca:27:cb:36: 3d:54:4e:26:50:95:dd:93:71:c2:39:1e:55:8a:be: 1e:65:be:1a:0c:fa:06:83:b9:22:2c:8e:8f:73:1c: 55:b4:ce:10:26:37:d4:88:33:93:73:bd:4b:89:e2: 34:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:26:3A:BF:C3:9E:D4:F9:7E:60:DB:BE:3E:99:3A:AD:87:05:88:6A X509v3 Authority Key Identifier: keyid:AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/3130332e3138362e35392e302f32342d3234203d3e20313439373034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.59.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:b3:2a:d6:69:a9:95:c4:e6:40:4a:02:7d:30:a4:36:ec:a6: 4e:44:c8:d2:50:ce:d6:68:80:98:09:70:33:18:00:b3:eb:29: 86:c4:33:a0:24:33:f2:b9:c5:5c:d5:cd:5b:83:6d:31:f1:da: 8f:2c:5a:0e:85:a6:18:54:dc:39:61:ab:f6:38:a1:c1:a0:47: 1f:57:be:f0:f7:57:3f:a5:16:21:c4:e9:d2:81:fc:2c:f6:82: d0:e8:64:d5:88:9d:59:bd:79:23:c5:6f:f3:ea:2b:06:ca:e9: 45:5f:5e:9d:60:1f:9e:35:91:df:d1:94:b1:fe:f2:0b:e4:a6: dd:8b:d9:04:f0:98:6a:a4:6c:66:a3:c4:55:10:96:6d:43:9e: c1:66:34:c5:b5:1d:6a:ce:2a:c7:b6:5d:ba:54:b6:35:ec:b3: 12:3c:cb:91:0c:87:f8:ca:ee:d9:fe:f1:59:3a:ef:27:db:32: 78:36:74:76:81:53:ed:bd:69:9f:05:f9:38:1f:06:b4:ff:6f: 7c:4c:cf:ba:3b:a2:fd:e3:33:23:7d:fe:bd:9c:d5:b9:03:e6: 3f:97:de:fc:ac:76:38:f0:ef:d9:dc:2a:7d:3f:31:a1:dc:75: 7e:7b:66:95:cc:a3:26:8e:14:bc:14:c5:de:9e:f1:a3:a9:69: dd:8e:a2:cc -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUOBcKBABtCI97DKsfAciog79sN3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjExRkQ0 QjE0QzlCNzAeFw0yNjAxMTIwNjU1MDBaFw0yNzAxMTEwNzAwMDBaMDMxMTAvBgNV BAMTKEMyMjYzQUJGQzM5RUQ0Rjk3RTYwREJCRTNFOTkzQUFEODcwNTg4NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnyAclTE9bSGNnw+Qfltnc23aV HCh7jVhKFzaqsHR0LwzVNUEU84Hjl07ZesqZB29W0x2qSmuqWZ35I1b2EFC4G59D KtIMMmSNdPXSSm3iYrlyVmOnNs/ON+Qt2TOGpe/dWNzWV2JC2ptJmkFl1MuB4gjp 5VZv2Jg8bXfUviYN71jlBmedf2H0KrsrF65Bha90oruIbP0rrX15XSL56k2C65Ht P1qlT/FnVmrp1Ae68tXeBgWuTaYiX0oAnjzXVl5YE5hv7O9rxbpB4MFgyifLNj1U TiZQld2TccI5HlWKvh5lvhoM+gaDuSIsjo9zHFW0zhAmN9SIM5NzvUuJ4jRTAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUwiY6v8Oe1Pl+YNu+Ppk6rYcFiGowHwYDVR0j BBgwFoAUr3uTjgZE5V/gIOecU78R/UsUybcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTBlZGRjZC03ZDM4LTQ3NjUtYWEyNi03ZTQ1NzY3MDQyM2MvMC9BRjdCOTM4RTA2 NDRFNTVGRTAyMEU3OUM1M0JGMTFGRDRCMTRDOUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjExRkQ0QjE0 QzlCNy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxMGVkZGNkLTdkMzgtNDc2NS1h YTI2LTdlNDU3NjcwNDIzYy8wLzMxMzAzMzJlMzEzODM2MmUzNTM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzczMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7o7MA0GCSqG SIb3DQEBCwUAA4IBAQAdsyrWaamVxOZASgJ9MKQ27KZORMjSUM7WaICYCXAzGACz 6ymGxDOgJDPyucVc1c1bg20x8dqPLFoOhaYYVNw5Yav2OKHBoEcfV77w91c/pRYh xOnSgfws9oLQ6GTViJ1ZvXkjxW/z6isGyulFX16dYB+eNZHf0ZSx/vIL5Kbdi9kE 8JhqpGxmo8RVEJZtQ57BZjTFtR1qzirHtl26VLY17LMSPMuRDIf4yu7Z/vFZOu8n 2zJ4NnR2gVPtvWmfBfk4Hwa0/298TM+6O6L94zMjff69nNW5A+Y/l978rHY48O/Z 3Cp9PzGh3HV+e2aVzKMmjhS8FMXenvGjqWndjqLM -----END CERTIFICATE-----Generated at Mon Jan 26 02:48:37 2026 by rpki-client