This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3130332e38342e342e302f32322d3234203d3e20313332363431.roa File: 3130332e38342e342e302f32322d3234203d3e20313332363431.roa (raw, json) Hash identifier: ApcZEcO0CdRpriMpjZ8NMdcvm7zZPBlUASlOFKPUlhU= Subject key identifier: 43:36:2D:BE:55:40:7E:7A:CB:EC:A1:D3:8C:18:71:62:17:8C:33:4E Certificate issuer: /CN=3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836 Certificate serial: 271BAF47BA78C899FEFFCAEA32C836C0F0E31E44 Authority key identifier: 3C:03:CF:95:17:81:97:0C:6D:0A:DB:E8:FA:CF:EC:6A:4C:DD:78:36 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3130332e38342e342e302f32322d3234203d3e20313332363431.roa Signing time: Wed 21 Jan 2026 10:00:01 +0000 ROA not before: Wed 21 Jan 2026 09:55:01 +0000 ROA not after: Wed 20 Jan 2027 10:00:01 +0000 asID: 132641 IP address blocks: 103.84.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:1b:af:47:ba:78:c8:99:fe:ff:ca:ea:32:c8:36:c0:f0:e3:1e:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836 Validity Not Before: Jan 21 09:55:01 2026 GMT Not After : Jan 20 10:00:01 2027 GMT Subject: CN=43362DBE55407E7ACBECA1D38C187162178C334E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7e:8b:52:cc:3a:e5:78:21:b4:44:03:0e:a3: b2:6a:f8:94:00:93:cc:04:0a:e0:bb:f5:c2:c9:22: e0:02:7c:d6:d1:d4:8c:a7:05:c6:35:fc:e7:22:2b: d4:35:2b:97:e3:5e:43:b8:54:99:6e:5c:f5:fa:0e: f0:9c:d9:38:9b:be:fb:0e:ef:90:b1:bc:d7:a9:c9: 09:83:4f:24:92:f1:1c:75:0f:9c:f3:17:62:32:31: f4:4e:d3:f1:7c:1e:58:a0:69:a3:42:8a:19:d4:87: 75:e2:13:75:0d:41:32:05:88:a2:44:c3:25:c1:b2: 87:93:bf:d3:6b:d2:42:61:74:8f:34:bb:ac:40:20: cc:43:87:1f:3c:f6:0f:62:3b:95:9f:30:9a:45:83: e6:f8:ca:9a:04:80:f1:4f:76:04:2d:d1:89:4a:46: 8f:75:38:2c:6a:8e:c1:a5:f3:7a:b2:b7:d7:9a:fb: e5:77:05:60:45:f1:ea:ea:3d:f0:32:26:3a:51:8c: 1f:1e:5c:9a:98:24:95:6c:0b:99:53:71:0a:84:d1: 89:3d:05:fc:3d:1d:76:ca:84:2a:30:0b:2f:ac:e4: 12:7d:d6:b9:75:52:2b:24:67:a8:2d:11:29:63:db: e3:c1:0b:e4:11:78:34:ce:74:cf:4f:8c:78:1b:96: 41:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:36:2D:BE:55:40:7E:7A:CB:EC:A1:D3:8C:18:71:62:17:8C:33:4E X509v3 Authority Key Identifier: keyid:3C:03:CF:95:17:81:97:0C:6D:0A:DB:E8:FA:CF:EC:6A:4C:DD:78:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3130332e38342e342e302f32322d3234203d3e20313332363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.84.4.0/22 Signature Algorithm: sha256WithRSAEncryption cd:95:76:a4:3e:11:c3:18:b3:44:aa:06:fe:a2:bd:0f:cb:af: 87:d7:1b:c8:c7:1a:96:9f:9f:a5:75:ab:a5:79:a8:96:56:8b: ed:39:da:1d:2c:53:c1:a5:36:e3:e2:9a:76:c5:e8:0b:38:10: c7:59:c0:af:24:f4:8e:fb:7a:3e:66:4e:df:9a:a2:f0:cc:c2: 7d:b7:0e:b4:cb:80:f1:24:a4:0f:1b:f7:5b:fa:51:26:28:ef: 34:09:dd:f3:7b:76:41:cb:b4:d0:dc:9e:81:9f:24:48:e5:b9: dd:de:a4:5a:5f:61:84:27:a7:f3:55:89:f8:b2:90:93:53:91: 78:8e:5e:cd:56:88:2a:64:01:21:0c:8c:f0:50:b9:89:a9:09: 83:51:0f:17:a6:1a:22:a2:e8:bf:22:aa:a9:e9:83:ef:f9:fd: 4d:8e:1e:74:6a:9c:92:88:48:67:27:0f:23:9f:b2:18:75:78: 9d:18:93:c2:10:2d:aa:45:1f:88:9e:9c:e7:1f:85:b0:aa:36: d3:57:9b:0f:4f:a1:f0:06:a5:6b:e5:85:1a:f8:7c:fb:a5:3c: 1f:6c:de:3c:69:93:6c:e0:13:27:75:6c:48:0b:31:c8:39:ec: 9a:b7:39:69:5e:f9:10:46:32:94:23:53:75:57:4e:a3:3a:e9: 81:a8:6f:5f -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUJxuvR7p4yJn+/8rqMsg2wPDjHkQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MwM0NGOTUxNzgxOTcwQzZEMEFEQkU4RkFDRkVDNkE0 Q0RENzgzNjAeFw0yNjAxMjEwOTU1MDFaFw0yNzAxMjAxMDAwMDFaMDMxMTAvBgNV BAMTKDQzMzYyREJFNTU0MDdFN0FDQkVDQTFEMzhDMTg3MTYyMTc4QzMzNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9fotSzDrleCG0RAMOo7Jq+JQA k8wECuC79cLJIuACfNbR1IynBcY1/OciK9Q1K5fjXkO4VJluXPX6DvCc2TibvvsO 75CxvNepyQmDTySS8Rx1D5zzF2IyMfRO0/F8HligaaNCihnUh3XiE3UNQTIFiKJE wyXBsoeTv9Nr0kJhdI80u6xAIMxDhx889g9iO5WfMJpFg+b4ypoEgPFPdgQt0YlK Ro91OCxqjsGl83qyt9ea++V3BWBF8erqPfAyJjpRjB8eXJqYJJVsC5lTcQqE0Yk9 Bfw9HXbKhCowCy+s5BJ91rl1UiskZ6gtESlj2+PBC+QReDTOdM9PjHgblkE5AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUQzYtvlVAfnrL7KHTjBhxYheMM04wHwYDVR0j BBgwFoAUPAPPlReBlwxtCtvo+s/sakzdeDYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NjE0Y2VlMC01ZGY2LTRiMmItYmIzZC1mNjgzMjEzZTdjMzMvMC8zQzAzQ0Y5NTE3 ODE5NzBDNkQwQURCRThGQUNGRUM2QTRDREQ3ODM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0MwM0NGOTUxNzgxOTcwQzZEMEFEQkU4RkFDRkVDNkE0Q0RE NzgzNi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y2MTRjZWUwLTVkZjYtNGIyYi1i YjNkLWY2ODMyMTNlN2MzMy8wLzMxMzAzMzJlMzgzNDJlMzQyZTMwMmYzMjMyMmQz MjM0MjAzZDNlMjAzMTMzMzIzNjM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnVAQwDQYJKoZIhvcN AQELBQADggEBAM2VdqQ+EcMYs0SqBv6ivQ/Lr4fXG8jHGpafn6V1q6V5qJZWi+05 2h0sU8GlNuPimnbF6As4EMdZwK8k9I77ej5mTt+aovDMwn23DrTLgPEkpA8b91v6 USYo7zQJ3fN7dkHLtNDcnoGfJEjlud3epFpfYYQnp/NVifiykJNTkXiOXs1WiCpk ASEMjPBQuYmpCYNRDxemGiKi6L8iqqnpg+/5/U2OHnRqnJKISGcnDyOfshh1eJ0Y k8IQLapFH4ienOcfhbCqNtNXmw9PofAGpWvlhRr4fPulPB9s3jxpk2zgEyd1bEgL Mcg57Jq3OWle+RBGMpQjU3VXTqM66YGob18= -----END CERTIFICATE-----Generated at Sun Jan 25 22:06:49 2026 by rpki-client