This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/3130332e3231302e37302e302f32332d3234203d3e20313530393936.roa File: 3130332e3231302e37302e302f32332d3234203d3e20313530393936.roa (raw, json) Hash identifier: auTxlOGyUx1cy5HvSX5DnWx3cFTubm306blClFP2M7g= Subject key identifier: 6B:1D:40:86:F8:BE:37:3E:4A:76:4C:F7:2F:E0:EC:F7:BA:51:75:AB Certificate issuer: /CN=8AE8A9B51BDA923FC8956ACB086F56E776D409C8 Certificate serial: 3EE2A397B4B4F4D1B309FEF5AB1378FA07819F98 Authority key identifier: 8A:E8:A9:B5:1B:DA:92:3F:C8:95:6A:CB:08:6F:56:E7:76:D4:09:C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/3130332e3231302e37302e302f32332d3234203d3e20313530393936.roa Signing time: Tue 20 Jan 2026 08:02:10 +0000 ROA not before: Tue 20 Jan 2026 07:57:10 +0000 ROA not after: Tue 19 Jan 2027 08:02:10 +0000 asID: 150996 IP address blocks: 103.210.70.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.crl rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 02:39:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:e2:a3:97:b4:b4:f4:d1:b3:09:fe:f5:ab:13:78:fa:07:81:9f:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE8A9B51BDA923FC8956ACB086F56E776D409C8 Validity Not Before: Jan 20 07:57:10 2026 GMT Not After : Jan 19 08:02:10 2027 GMT Subject: CN=6B1D4086F8BE373E4A764CF72FE0ECF7BA5175AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6e:f5:f6:68:7c:31:ca:c1:98:95:85:d6:42: 1d:63:17:5f:79:7f:24:e6:ef:e5:0a:0d:1f:ac:12: 2b:42:49:3e:9a:bd:d6:81:48:64:4e:f7:16:32:30: 87:54:75:04:4c:18:e5:00:41:21:4b:98:31:92:77: a9:67:10:84:2b:41:73:15:d0:b3:6f:4f:b2:37:90: c5:69:d2:5d:84:48:b9:f8:4a:70:e6:21:8f:b0:f1: b8:e8:5a:5b:7a:1f:fa:4b:28:13:19:0b:1b:68:b1: 32:10:e8:08:7b:29:3c:7f:3d:e0:ba:be:a5:8b:ab: a8:e1:14:e3:2c:27:69:c6:13:9e:82:8d:93:63:31: a7:20:f7:fc:09:39:a2:03:63:80:ae:f1:ca:ff:13: d6:5e:1c:f9:c9:d5:52:81:62:26:e4:77:ac:e8:6e: 84:b0:d4:78:c6:84:e8:a1:31:f5:bc:93:be:59:2e: 7f:9a:f6:39:18:a7:30:4d:22:05:b6:c5:46:e3:60: 2a:04:ea:60:36:d4:69:fb:40:e4:18:c9:53:af:13: 0e:f5:52:9b:f5:d6:99:54:c3:91:5a:c4:2c:4f:2a: 0c:e9:c0:43:f7:4f:1a:01:95:00:51:0d:8e:25:4a: 91:ef:4e:d0:53:d4:da:81:00:b8:53:b2:86:ec:d2: 43:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:1D:40:86:F8:BE:37:3E:4A:76:4C:F7:2F:E0:EC:F7:BA:51:75:AB X509v3 Authority Key Identifier: keyid:8A:E8:A9:B5:1B:DA:92:3F:C8:95:6A:CB:08:6F:56:E7:76:D4:09:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/3130332e3231302e37302e302f32332d3234203d3e20313530393936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.210.70.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:b8:49:f7:6d:d7:43:c6:26:3f:ed:0f:52:87:1d:aa:72:7e: 3d:18:a7:d7:32:19:d4:27:7c:fb:d0:6e:ad:62:88:db:db:d7: 18:64:38:d1:26:f7:8e:a0:de:d9:7f:3a:8b:c8:24:00:75:67: c0:ec:93:89:b6:8f:98:42:42:7c:05:b5:03:31:25:95:5a:27: db:17:a1:9c:c1:97:f3:ff:8c:c2:57:4f:03:cc:57:62:a1:9f: 49:21:4c:33:f6:cf:fe:40:bf:de:6c:17:41:8d:b9:fc:7b:5f: d4:37:17:e5:49:32:03:cf:bc:bc:88:74:50:7f:45:2d:c6:47: 94:d8:86:20:35:47:c1:8b:ce:b4:76:87:a6:5b:82:2a:21:89: 14:01:06:e4:c8:a2:fe:f7:54:7f:51:27:9f:61:0c:66:91:03: c7:34:8a:d1:6c:2b:4b:a8:a1:db:78:95:6f:e3:19:7c:75:a4: 62:41:37:cb:2b:3f:46:38:94:8f:19:92:d0:b6:9a:3a:43:cd: 7c:99:17:22:ce:3f:2f:82:1d:d8:bc:c8:d3:80:c7:bf:71:ac: c8:31:8e:f0:f4:b9:ae:0d:6a:5a:c6:3a:a7:15:36:0f:ae:67: be:07:10:00:b3:b9:c5:e6:9d:9d:00:61:a8:e8:19:ab:ee:28: ae:14:4a:6c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUPuKjl7S09NGzCf71qxN4+geBn5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFFOEE5QjUxQkRBOTIzRkM4OTU2QUNCMDg2RjU2RTc3 NkQ0MDlDODAeFw0yNjAxMjAwNzU3MTBaFw0yNzAxMTkwODAyMTBaMDMxMTAvBgNV BAMTKDZCMUQ0MDg2RjhCRTM3M0U0QTc2NENGNzJGRTBFQ0Y3QkE1MTc1QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsbvX2aHwxysGYlYXWQh1jF195 fyTm7+UKDR+sEitCST6avdaBSGRO9xYyMIdUdQRMGOUAQSFLmDGSd6lnEIQrQXMV 0LNvT7I3kMVp0l2ESLn4SnDmIY+w8bjoWlt6H/pLKBMZCxtosTIQ6Ah7KTx/PeC6 vqWLq6jhFOMsJ2nGE56CjZNjMacg9/wJOaIDY4Cu8cr/E9ZeHPnJ1VKBYibkd6zo boSw1HjGhOihMfW8k75ZLn+a9jkYpzBNIgW2xUbjYCoE6mA21Gn7QOQYyVOvEw71 Upv11plUw5FaxCxPKgzpwEP3TxoBlQBRDY4lSpHvTtBT1NqBALhTsobs0kO7AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUax1Ahvi+Nz5Kdkz3L+Ds97pRdaswHwYDVR0j BBgwFoAUiuiptRvakj/IlWrLCG9W53bUCcgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzZmMDcwMC05MTE2LTRhMDUtOGY2Yi1kOGVkYWZkYjcyZWMvMC84QUU4QTlCNTFC REE5MjNGQzg5NTZBQ0IwODZGNTZFNzc2RDQwOUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFFOEE5QjUxQkRBOTIzRkM4OTU2QUNCMDg2RjU2RTc3NkQ0 MDlDOC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZjNmYwNzAwLTkxMTYtNGEwNS04 ZjZiLWQ4ZWRhZmRiNzJlYy8wLzMxMzAzMzJlMzIzMTMwMmUzNzMwMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNTMwMzkzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ9JGMA0GCSqG SIb3DQEBCwUAA4IBAQBtuEn3bddDxiY/7Q9Shx2qcn49GKfXMhnUJ3z70G6tYojb 29cYZDjRJveOoN7ZfzqLyCQAdWfA7JOJto+YQkJ8BbUDMSWVWifbF6GcwZfz/4zC V08DzFdioZ9JIUwz9s/+QL/ebBdBjbn8e1/UNxflSTIDz7y8iHRQf0UtxkeU2IYg NUfBi860doemW4IqIYkUAQbkyKL+91R/USefYQxmkQPHNIrRbCtLqKHbeJVv4xl8 daRiQTfLKz9GOJSPGZLQtpo6Q818mRcizj8vgh3YvMjTgMe/cazIMY7w9LmuDWpa xjqnFTYPrme+BxAAs7nF5p2dAGGo6Bmr7iiuFEps -----END CERTIFICATE-----Generated at Mon Jan 26 02:16:31 2026 by rpki-client