This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/3130332e3134382e37392e302f32342d3234203d3e20313339393830.roa File: 3130332e3134382e37392e302f32342d3234203d3e20313339393830.roa (raw, json) Hash identifier: prunEGeOFiQXN1Qgy35XW66Os/Zb7gkIG+vEYQIhWTQ= Subject key identifier: AC:80:FA:53:FD:41:C2:40:5F:EA:56:7E:3D:A9:20:3C:1A:01:ED:71 Certificate issuer: /CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A Certificate serial: 38322A1DE4BB9B8ED6979FF04314933E9CD62FD6 Authority key identifier: 7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/3130332e3134382e37392e302f32342d3234203d3e20313339393830.roa Signing time: Tue 30 Dec 2025 15:31:05 +0000 ROA not before: Tue 30 Dec 2025 15:26:05 +0000 ROA not after: Tue 29 Dec 2026 15:31:05 +0000 asID: 139980 IP address blocks: 103.148.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 07:04:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:32:2a:1d:e4:bb:9b:8e:d6:97:9f:f0:43:14:93:3e:9c:d6:2f:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A Validity Not Before: Dec 30 15:26:05 2025 GMT Not After : Dec 29 15:31:05 2026 GMT Subject: CN=AC80FA53FD41C2405FEA567E3DA9203C1A01ED71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:42:01:21:4e:e1:77:53:77:4e:39:b0:fd:d3: cd:b6:fc:cc:90:98:ac:aa:8c:7d:20:60:6f:86:90: 70:70:8c:02:96:40:02:6d:c6:5a:3b:69:7e:f9:e8: 30:03:5b:0f:9c:34:d4:af:87:96:c7:1a:af:e9:d0: 6d:a0:ec:d9:02:57:09:73:85:f7:89:36:ff:23:9b: 56:14:22:5e:b0:59:d7:89:3a:b0:d6:9f:15:8a:e6: e4:60:a5:62:c1:51:2f:6f:51:00:6b:76:78:09:e3: 1b:70:8d:d1:7f:ce:f0:a3:4a:4a:83:15:f6:77:45: cc:96:db:ea:6e:13:dc:2f:96:53:0c:4d:48:94:3f: 9e:18:dc:5c:f7:f3:a9:4a:b8:b6:48:a1:cb:b4:4b: 2a:a3:69:36:5e:9c:84:64:8c:86:fd:32:7b:70:cc: ff:6a:5e:44:3f:c8:06:a4:eb:20:be:60:c4:c5:e7: e7:23:25:93:20:cb:1e:df:16:89:6e:e9:39:98:ec: c5:76:97:0b:ad:4e:ac:b8:b8:0f:54:8b:58:a2:ea: 75:91:5e:99:05:e2:44:86:3c:76:22:6b:7e:39:d5: e1:44:33:c9:67:18:07:a0:94:f3:f9:9f:71:3e:f6: 6f:c3:1a:b5:21:09:da:fc:09:ee:5b:50:dc:33:2e: a7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:80:FA:53:FD:41:C2:40:5F:EA:56:7E:3D:A9:20:3C:1A:01:ED:71 X509v3 Authority Key Identifier: keyid:7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/3130332e3134382e37392e302f32342d3234203d3e20313339393830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.79.0/24 Signature Algorithm: sha256WithRSAEncryption 25:56:95:b7:dd:8c:47:08:63:41:f6:63:ff:bb:f8:5b:c7:64: 39:69:e5:3c:68:c2:6f:dc:e7:e7:5f:d2:df:17:fd:11:eb:a2: c3:e9:3e:ab:19:f6:6a:c6:f0:f9:46:2a:11:7f:04:5a:b1:71: 94:c1:33:cd:d8:c9:e5:f5:54:ae:07:3a:3f:29:2a:4b:31:81: 3c:52:b8:87:98:9c:3a:17:7d:f8:07:53:c8:8b:0e:0d:20:cb: 00:6f:f0:d4:b5:d8:98:95:5e:f7:2f:93:2f:8e:68:58:7b:90: d1:f1:a7:98:18:bc:6b:1b:52:eb:97:c3:81:a7:63:09:4f:55: 4c:c9:99:b8:20:74:9e:ad:e6:d9:3a:17:13:b7:17:cc:9c:e4: d0:f1:8c:c3:fe:46:c5:92:33:ce:36:d7:62:5c:49:cc:86:2f: d5:f5:13:33:93:fc:9b:05:0f:86:74:d5:f0:ed:2d:3d:d2:7f: b6:92:67:a9:69:2b:c9:db:d0:48:6a:04:ab:da:29:de:2e:7f: df:c2:c7:37:7e:3a:8f:45:75:80:4f:ee:16:05:81:94:e5:dc: 4e:01:59:c5:91:9c:3a:83:c0:08:3c:6c:39:61:81:74:31:9a: 43:c0:94:b4:4f:a0:a3:d7:c2:d6:e4:58:e2:8a:6d:98:d7:3b: 88:97:8b:03 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUODIqHeS7m47Wl5/wQxSTPpzWL9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5MjNG NUU0OUUxQTAeFw0yNTEyMzAxNTI2MDVaFw0yNjEyMjkxNTMxMDVaMDMxMTAvBgNV BAMTKEFDODBGQTUzRkQ0MUMyNDA1RkVBNTY3RTNEQTkyMDNDMUEwMUVENzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXQgEhTuF3U3dOObD90822/MyQ mKyqjH0gYG+GkHBwjAKWQAJtxlo7aX756DADWw+cNNSvh5bHGq/p0G2g7NkCVwlz hfeJNv8jm1YUIl6wWdeJOrDWnxWK5uRgpWLBUS9vUQBrdngJ4xtwjdF/zvCjSkqD FfZ3RcyW2+puE9wvllMMTUiUP54Y3Fz386lKuLZIocu0SyqjaTZenIRkjIb9Mntw zP9qXkQ/yAak6yC+YMTF5+cjJZMgyx7fFolu6TmY7MV2lwutTqy4uA9Ui1ii6nWR XpkF4kSGPHYia3451eFEM8lnGAeglPP5n3E+9m/DGrUhCdr8Ce5bUNwzLqdpAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUrID6U/1BwkBf6lZ+PakgPBoB7XEwHwYDVR0j BBgwFoAUfDOSGykyLrqsZkX8S5IJI/XknhowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWU0Y2Q5Ni1jZmMxLTQ1NzctYWQzZi03OTgzYzA1MjNjMTAvMC83QzMzOTIxQjI5 MzIyRUJBQUM2NjQ1RkM0QjkyMDkyM0Y1RTQ5RTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5MjNGNUU0 OUUxQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZhZTRjZDk2LWNmYzEtNDU3Ny1h ZDNmLTc5ODNjMDUyM2MxMC8wLzMxMzAzMzJlMzEzNDM4MmUzNzM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzODMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5RPMA0GCSqG SIb3DQEBCwUAA4IBAQAlVpW33YxHCGNB9mP/u/hbx2Q5aeU8aMJv3OfnX9LfF/0R 66LD6T6rGfZqxvD5RioRfwRasXGUwTPN2Mnl9VSuBzo/KSpLMYE8UriHmJw6F334 B1PIiw4NIMsAb/DUtdiYlV73L5MvjmhYe5DR8aeYGLxrG1Lrl8OBp2MJT1VMyZm4 IHSerebZOhcTtxfMnOTQ8YzD/kbFkjPONtdiXEnMhi/V9RMzk/ybBQ+GdNXw7S09 0n+2kmepaSvJ29BIagSr2ineLn/fwsc3fjqPRXWAT+4WBYGU5dxOAVnFkZw6g8AI PGw5YYF0MZpDwJS0T6Cj18LW5Fjiim2Y1zuIl4sD -----END CERTIFICATE-----Generated at Mon Jan 26 02:49:09 2026 by rpki-client