This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3130332e3130392e32342e302f32342d3234203d3e20313337333131.roa File: 3130332e3130392e32342e302f32342d3234203d3e20313337333131.roa (raw, json) Hash identifier: JwBkepnpQbBJB71OebvFB7o8bqpYUdblIRtS8UsRdpI= Subject key identifier: F2:CF:70:8D:D3:73:0D:32:2F:CE:02:7F:E8:C9:3D:CA:AB:E1:A6:06 Certificate issuer: /CN=A42F07BEA859C831526717AB1D092E11E7890BDD Certificate serial: 4F9DAD9D0F9AE557A297D90041BF1241279BEFE8 Authority key identifier: A4:2F:07:BE:A8:59:C8:31:52:67:17:AB:1D:09:2E:11:E7:89:0B:DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3130332e3130392e32342e302f32342d3234203d3e20313337333131.roa Signing time: Mon 29 Dec 2025 10:00:04 +0000 ROA not before: Mon 29 Dec 2025 09:55:04 +0000 ROA not after: Mon 28 Dec 2026 10:00:04 +0000 asID: 137311 IP address blocks: 103.109.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.crl rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 08:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:9d:ad:9d:0f:9a:e5:57:a2:97:d9:00:41:bf:12:41:27:9b:ef:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A42F07BEA859C831526717AB1D092E11E7890BDD Validity Not Before: Dec 29 09:55:04 2025 GMT Not After : Dec 28 10:00:04 2026 GMT Subject: CN=F2CF708DD3730D322FCE027FE8C93DCAABE1A606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3c:53:f2:be:72:25:b1:7d:15:98:35:7e:94: 4b:2f:d8:88:d6:f6:ca:7e:f9:0e:a6:46:50:94:a9: 76:17:5c:6c:85:12:ff:35:b2:cf:d7:14:e6:58:80: c9:31:15:fa:6e:18:85:93:3c:72:e3:e3:75:27:d6: b6:7a:f0:2d:ab:67:d3:c4:90:98:39:fc:58:6e:5c: 29:8d:ed:cf:a2:0b:99:a1:fa:b4:de:c0:f2:7d:a4: e0:82:c1:4a:f6:46:5b:01:0e:c7:4d:7a:df:b2:49: a0:b1:f0:0b:27:a7:ee:57:2a:82:ce:67:ec:f1:fd: 6c:83:5d:84:3f:5e:8e:54:75:2d:bb:19:32:c1:e8: bd:ef:7a:ef:8b:76:1a:ae:26:b3:46:2b:97:b0:a4: d7:98:78:b4:47:5c:34:df:6a:bf:09:d4:00:77:1c: e6:2d:eb:e4:26:28:0b:ae:0a:e9:7d:51:fd:6c:c5: 82:33:50:00:a5:70:df:5e:ba:a0:d7:d2:b3:0b:10: 13:fe:30:3a:36:7f:54:15:8c:c3:aa:8c:33:ae:b5: 3d:ad:ec:14:67:4f:ce:83:af:3d:2a:f9:01:e7:c6: 31:df:74:73:45:8d:41:66:34:9a:95:33:6c:ba:c8: de:cf:3b:d2:25:eb:0d:89:18:75:38:82:18:9f:7d: a5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:CF:70:8D:D3:73:0D:32:2F:CE:02:7F:E8:C9:3D:CA:AB:E1:A6:06 X509v3 Authority Key Identifier: keyid:A4:2F:07:BE:A8:59:C8:31:52:67:17:AB:1D:09:2E:11:E7:89:0B:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3130332e3130392e32342e302f32342d3234203d3e20313337333131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.109.24.0/24 Signature Algorithm: sha256WithRSAEncryption 88:96:f0:92:24:52:ab:96:89:8d:5c:d2:63:82:72:0f:e2:9e: 68:63:e7:13:59:f0:a5:5b:3b:a6:89:8c:9a:d9:af:3f:22:cf: 01:d0:c1:14:72:2d:ea:45:15:0b:f1:59:a4:eb:68:83:c8:8e: 3f:6f:69:1c:a7:92:57:f2:ae:4f:d3:7c:aa:d5:17:4a:3b:7b: d4:5d:01:3d:0b:2e:0f:6a:36:10:39:5c:38:1f:c3:a1:af:ab: cb:b2:20:49:ba:d1:9d:83:51:25:d2:7c:e7:07:20:76:9d:0d: 41:ee:4d:8d:b9:dc:7b:33:d2:86:f0:bd:26:fe:db:17:22:b0: 50:27:f8:cd:4f:49:dd:6b:3a:d3:ee:f0:2a:b6:f5:86:ab:bc: f0:af:ee:f9:fe:69:3b:64:fc:6d:20:16:0e:df:a4:32:73:93: b9:b3:08:e4:ea:92:c0:ef:69:2e:12:87:87:52:81:01:19:b8: b0:0e:02:32:ad:dc:2e:bb:95:c3:9d:c3:6b:f9:af:c0:ad:9a: 56:e2:d0:b4:5e:86:27:75:09:3a:9e:50:67:59:1a:17:b8:1d: a5:7b:a5:f9:eb:5f:5b:8b:e4:76:68:b9:c1:48:03:29:05:ac: c5:87:ff:7c:90:0c:9a:a2:d7:39:54:2b:1e:c4:4e:55:8e:d5: 86:b0:04:36 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUT52tnQ+a5Veil9kAQb8SQSeb7+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJFMTFF Nzg5MEJERDAeFw0yNTEyMjkwOTU1MDRaFw0yNjEyMjgxMDAwMDRaMDMxMTAvBgNV BAMTKEYyQ0Y3MDhERDM3MzBEMzIyRkNFMDI3RkU4QzkzRENBQUJFMUE2MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNPFPyvnIlsX0VmDV+lEsv2IjW 9sp++Q6mRlCUqXYXXGyFEv81ss/XFOZYgMkxFfpuGIWTPHLj43Un1rZ68C2rZ9PE kJg5/FhuXCmN7c+iC5mh+rTewPJ9pOCCwUr2RlsBDsdNet+ySaCx8Asnp+5XKoLO Z+zx/WyDXYQ/Xo5UdS27GTLB6L3veu+LdhquJrNGK5ewpNeYeLRHXDTfar8J1AB3 HOYt6+QmKAuuCul9Uf1sxYIzUAClcN9euqDX0rMLEBP+MDo2f1QVjMOqjDOutT2t 7BRnT86Drz0q+QHnxjHfdHNFjUFmNJqVM2y6yN7PO9Il6w2JGHU4ghiffaUhAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU8s9wjdNzDTIvzgJ/6Mk9yqvhpgYwHwYDVR0j BBgwFoAUpC8HvqhZyDFSZxerHQkuEeeJC90wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODM1Y2I0YS0yZmI5LTQwZDctYjE1NS1kY2NlN2NiMDAyOTMvMC9BNDJGMDdCRUE4 NTlDODMxNTI2NzE3QUIxRDA5MkUxMUU3ODkwQkRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJFMTFFNzg5 MEJERC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q4MzVjYjRhLTJmYjktNDBkNy1i MTU1LWRjY2U3Y2IwMDI5My8wLzMxMzAzMzJlMzEzMDM5MmUzMjM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM3MzMzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ20YMA0GCSqG SIb3DQEBCwUAA4IBAQCIlvCSJFKrlomNXNJjgnIP4p5oY+cTWfClWzumiYya2a8/ Is8B0MEUci3qRRUL8Vmk62iDyI4/b2kcp5JX8q5P03yq1RdKO3vUXQE9Cy4PajYQ OVw4H8Ohr6vLsiBJutGdg1El0nznByB2nQ1B7k2Nudx7M9KG8L0m/tsXIrBQJ/jN T0ndazrT7vAqtvWGq7zwr+75/mk7ZPxtIBYO36Qyc5O5swjk6pLA72kuEoeHUoEB GbiwDgIyrdwuu5XDncNr+a/ArZpW4tC0XoYndQk6nlBnWRoXuB2le6X5619bi+R2 aLnBSAMpBazFh/98kAyaotc5VCsexE5VjtWGsAQ2 -----END CERTIFICATE-----Generated at Mon Jan 26 01:19:54 2026 by rpki-client