This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3130332e3130392e32352e302f32342d3234203d3e20313337333131.roa File: 3130332e3130392e32352e302f32342d3234203d3e20313337333131.roa (raw, json) Hash identifier: 8vz8EiP54cEwQfLbkw39aE70XAXWioBBsBb0DcsdEz8= Subject key identifier: 41:AB:77:EB:15:3A:E3:14:E8:DD:C6:AF:26:A4:8F:03:9D:08:63:E2 Certificate issuer: /CN=A42F07BEA859C831526717AB1D092E11E7890BDD Certificate serial: 215FC86A7C67439A130CA4B875C89845BF0AE903 Authority key identifier: A4:2F:07:BE:A8:59:C8:31:52:67:17:AB:1D:09:2E:11:E7:89:0B:DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3130332e3130392e32352e302f32342d3234203d3e20313337333131.roa Signing time: Mon 29 Dec 2025 10:00:04 +0000 ROA not before: Mon 29 Dec 2025 09:55:04 +0000 ROA not after: Mon 28 Dec 2026 10:00:04 +0000 asID: 137311 IP address blocks: 103.109.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.crl rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 08:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:5f:c8:6a:7c:67:43:9a:13:0c:a4:b8:75:c8:98:45:bf:0a:e9:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A42F07BEA859C831526717AB1D092E11E7890BDD Validity Not Before: Dec 29 09:55:04 2025 GMT Not After : Dec 28 10:00:04 2026 GMT Subject: CN=41AB77EB153AE314E8DDC6AF26A48F039D0863E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:33:ab:4d:b2:48:c2:ef:89:66:05:d3:7f:4b: fd:46:51:aa:37:ee:85:cb:1c:74:b7:0f:70:d4:ff: 62:80:4e:0b:f2:bf:c2:86:41:cb:e9:67:8d:d0:d6: df:84:54:a2:be:bd:56:c5:a3:1f:a5:de:59:31:ff: 3e:7f:2b:9f:58:8c:a3:13:4f:7f:87:cf:80:a3:7e: 26:16:6f:43:df:27:83:2f:d5:05:a8:66:19:46:e4: 3b:ff:d6:3e:69:bb:50:39:d9:bd:ed:22:87:fd:c7: 26:ff:a9:0c:16:84:06:2b:6a:c0:18:0b:9d:e1:02: 0b:ed:a7:d4:46:0a:e6:ae:1e:c3:42:02:86:80:0d: c0:c6:ae:b6:0e:81:86:e5:73:81:c0:48:50:ff:53: 73:91:1a:b3:82:ff:b8:b9:5d:a5:3f:13:07:ff:16: 99:e6:22:f9:62:1b:e9:86:94:4b:92:41:02:11:7d: 59:6b:c6:57:f6:9b:ef:96:21:8a:19:40:a1:16:7d: e2:28:e1:86:e9:0e:20:98:ba:8a:f4:b3:76:33:97: 21:27:b8:3e:29:9a:30:95:aa:9d:c5:ca:e4:bd:4e: b0:6a:03:e6:21:8f:43:24:ca:3d:80:fc:16:98:36: eb:e0:b0:9b:bc:e3:35:7d:7b:ac:17:c1:b8:f4:13: 9c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:AB:77:EB:15:3A:E3:14:E8:DD:C6:AF:26:A4:8F:03:9D:08:63:E2 X509v3 Authority Key Identifier: keyid:A4:2F:07:BE:A8:59:C8:31:52:67:17:AB:1D:09:2E:11:E7:89:0B:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3130332e3130392e32352e302f32342d3234203d3e20313337333131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.109.25.0/24 Signature Algorithm: sha256WithRSAEncryption 93:e5:f2:64:c7:20:d2:be:01:63:a2:12:08:70:2b:5e:f5:63: e9:63:46:23:57:22:ec:e0:34:d5:5c:d7:db:e0:04:84:b7:88: db:a9:b2:ca:e1:dc:8d:d8:75:32:c1:18:2b:a9:cc:fb:d9:27: d8:36:81:12:44:d4:44:d0:84:25:f0:5f:f6:21:ef:82:90:8c: fb:ce:2c:44:8d:18:d0:94:91:2f:72:e8:25:a8:3c:52:f6:27: 9b:98:33:ea:9b:1e:98:d6:19:3e:f8:66:b0:d1:65:41:1a:d0: 72:0e:6f:60:5d:90:36:2a:54:5a:cc:78:ef:58:f4:f1:68:60: 2b:e0:56:b5:0b:f5:86:5f:fe:4c:ea:05:36:cc:8b:7a:23:e9: 8f:9e:c1:93:e3:4f:43:63:4a:32:73:f7:7f:a3:c1:21:0f:3d: 18:53:3c:e3:04:83:81:bb:94:7c:d6:a0:4f:c7:2c:f1:df:46: 26:c7:0a:0a:a5:88:a5:4e:b0:65:bb:e9:86:d2:88:c5:cf:a6: c7:f1:17:d2:78:0b:10:d6:fd:64:0e:20:f7:2d:ae:d6:80:83: 48:f0:a7:b7:c4:6c:49:38:e5:a4:47:06:43:d2:2b:4f:65:1d: de:3a:df:61:4e:17:a0:69:b8:aa:3d:08:6f:d9:c9:24:27:03: 5b:39:70:d6 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUIV/IanxnQ5oTDKS4dciYRb8K6QMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJFMTFF Nzg5MEJERDAeFw0yNTEyMjkwOTU1MDRaFw0yNjEyMjgxMDAwMDRaMDMxMTAvBgNV BAMTKDQxQUI3N0VCMTUzQUUzMTRFOEREQzZBRjI2QTQ4RjAzOUQwODYzRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+M6tNskjC74lmBdN/S/1GUao3 7oXLHHS3D3DU/2KATgvyv8KGQcvpZ43Q1t+EVKK+vVbFox+l3lkx/z5/K59YjKMT T3+Hz4CjfiYWb0PfJ4Mv1QWoZhlG5Dv/1j5pu1A52b3tIof9xyb/qQwWhAYrasAY C53hAgvtp9RGCuauHsNCAoaADcDGrrYOgYblc4HASFD/U3ORGrOC/7i5XaU/Ewf/ FpnmIvliG+mGlEuSQQIRfVlrxlf2m++WIYoZQKEWfeIo4YbpDiCYuor0s3YzlyEn uD4pmjCVqp3FyuS9TrBqA+Yhj0Mkyj2A/BaYNuvgsJu84zV9e6wXwbj0E5w3AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUQat36xU64xTo3cavJqSPA50IY+IwHwYDVR0j BBgwFoAUpC8HvqhZyDFSZxerHQkuEeeJC90wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODM1Y2I0YS0yZmI5LTQwZDctYjE1NS1kY2NlN2NiMDAyOTMvMC9BNDJGMDdCRUE4 NTlDODMxNTI2NzE3QUIxRDA5MkUxMUU3ODkwQkRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJFMTFFNzg5 MEJERC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q4MzVjYjRhLTJmYjktNDBkNy1i MTU1LWRjY2U3Y2IwMDI5My8wLzMxMzAzMzJlMzEzMDM5MmUzMjM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM3MzMzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ20ZMA0GCSqG SIb3DQEBCwUAA4IBAQCT5fJkxyDSvgFjohIIcCte9WPpY0YjVyLs4DTVXNfb4ASE t4jbqbLK4dyN2HUywRgrqcz72SfYNoESRNRE0IQl8F/2Ie+CkIz7zixEjRjQlJEv cuglqDxS9iebmDPqmx6Y1hk++Gaw0WVBGtByDm9gXZA2KlRazHjvWPTxaGAr4Fa1 C/WGX/5M6gU2zIt6I+mPnsGT409DY0oyc/d/o8EhDz0YUzzjBIOBu5R81qBPxyzx 30YmxwoKpYilTrBlu+mG0ojFz6bH8RfSeAsQ1v1kDiD3La7WgINI8Ke3xGxJOOWk RwZD0itPZR3eOt9hThegabiqPQhv2ckkJwNbOXDW -----END CERTIFICATE-----Generated at Sun Jan 25 23:40:30 2026 by rpki-client