This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/3130332e3133342e36362e302f32342d3234203d3e203435333132.roa File: 3130332e3133342e36362e302f32342d3234203d3e203435333132.roa (raw, json) Hash identifier: WRfY/rBH6p7PK9emmqpsCXbVvrKz6VH5x4tTkw/6VAg= Subject key identifier: 84:BE:89:C6:C9:2F:9E:39:BD:99:F3:60:EE:11:FF:64:8B:D4:5C:AC Certificate issuer: /CN=7F9ECE743A3074E61F56CD11161AA58A6BB4092C Certificate serial: 4E82A380071ADCE5B22542674005B0C226C2B9D4 Authority key identifier: 7F:9E:CE:74:3A:30:74:E6:1F:56:CD:11:16:1A:A5:8A:6B:B4:09:2C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/3130332e3133342e36362e302f32342d3234203d3e203435333132.roa Signing time: Mon 29 Dec 2025 06:16:16 +0000 ROA not before: Mon 29 Dec 2025 06:11:16 +0000 ROA not after: Mon 28 Dec 2026 06:16:16 +0000 asID: 45312 IP address blocks: 103.134.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.crl rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Jan 2026 03:18:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:82:a3:80:07:1a:dc:e5:b2:25:42:67:40:05:b0:c2:26:c2:b9:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F9ECE743A3074E61F56CD11161AA58A6BB4092C Validity Not Before: Dec 29 06:11:16 2025 GMT Not After : Dec 28 06:16:16 2026 GMT Subject: CN=84BE89C6C92F9E39BD99F360EE11FF648BD45CAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0b:68:72:a3:8d:c0:12:5e:bc:1e:ec:38:87: 41:d8:76:fd:cc:43:ff:12:25:a0:fc:37:fa:25:2c: a4:6b:fa:d8:fb:08:32:bc:f6:62:29:59:b1:9a:07: f2:da:d7:22:a5:8a:45:9e:3a:98:6d:65:74:7b:79: fe:41:ca:e1:83:69:e4:8f:a7:f0:73:5c:5c:8b:90: b3:f9:b5:48:7a:6c:61:9c:95:e8:a4:ee:02:44:7d: bf:39:d5:6c:d5:a1:f8:c7:9f:b2:cc:eb:01:b2:4d: eb:a8:6c:0f:98:e5:91:63:f7:88:0c:d6:32:1c:77: 68:cd:fb:17:02:ef:d6:84:76:bf:57:b0:93:e5:c1: 43:66:d5:ba:0d:6c:9f:ac:16:27:0d:e9:46:71:99: 96:7a:04:da:f3:dc:eb:df:de:b3:d0:67:a1:6c:df: 08:ca:c8:44:86:2c:d1:2a:be:1f:c7:4d:13:f3:78: 07:cf:58:d8:a7:9e:00:76:c2:ee:af:51:7a:09:c8: a7:ad:da:0e:3a:e6:5d:70:df:5e:60:0a:40:f8:dd: b5:f3:f9:e0:df:4d:97:1e:b7:b1:aa:31:fc:30:65: b1:92:49:34:8f:85:12:e0:62:ab:eb:76:14:72:bf: ad:dc:00:67:ab:b4:78:07:60:8c:52:6a:ca:f1:d4: b7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BE:89:C6:C9:2F:9E:39:BD:99:F3:60:EE:11:FF:64:8B:D4:5C:AC X509v3 Authority Key Identifier: keyid:7F:9E:CE:74:3A:30:74:E6:1F:56:CD:11:16:1A:A5:8A:6B:B4:09:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/3130332e3133342e36362e302f32342d3234203d3e203435333132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.134.66.0/24 Signature Algorithm: sha256WithRSAEncryption 39:fe:ab:26:ba:9d:df:84:06:83:ec:42:2d:60:0a:1d:af:a2: 0c:e5:48:8a:1b:99:a6:1f:44:40:d7:3c:21:bc:f4:ee:5b:8f: 4f:37:dd:25:bb:32:21:50:c9:70:fc:17:91:94:2a:51:8a:76: 06:12:9d:5c:13:6b:ed:4d:da:77:f7:68:ac:d8:eb:f4:7d:65: 75:b2:cb:91:93:9d:6e:86:96:b3:1a:eb:e0:9f:69:68:9c:db: 10:e3:0b:75:8c:e0:97:80:8c:cf:c3:5e:cf:95:4f:44:d7:8d: 59:7d:48:cc:9a:a3:9d:b4:eb:92:89:df:93:0a:ac:67:8f:52: cc:fc:3d:64:2f:4e:70:06:a2:c8:a8:4d:89:0e:27:16:7b:f1: 0a:3e:db:a8:26:0e:3e:d9:e7:03:14:81:73:9c:8a:0f:73:eb: 1b:26:97:e2:de:41:ea:93:61:c8:2f:cd:c6:05:a5:0c:e7:3b: 9d:95:af:60:8b:65:13:50:9a:cc:02:0a:0f:42:2c:41:e0:49: 03:c8:bc:05:b7:3d:57:50:a0:66:ee:1f:91:ac:9b:62:12:07: 6b:a6:75:fe:6e:33:4c:8f:8c:3e:8b:a8:23:00:5a:48:e1:6d: c2:5a:7f:74:f4:8b:9b:0a:6a:17:8c:b9:22:88:f1:03:5d:c9: a9:e7:55:c9 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUToKjgAca3OWyJUJnQAWwwibCudQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y5RUNFNzQzQTMwNzRFNjFGNTZDRDExMTYxQUE1OEE2 QkI0MDkyQzAeFw0yNTEyMjkwNjExMTZaFw0yNjEyMjgwNjE2MTZaMDMxMTAvBgNV BAMTKDg0QkU4OUM2QzkyRjlFMzlCRDk5RjM2MEVFMTFGRjY0OEJENDVDQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtC2hyo43AEl68Huw4h0HYdv3M Q/8SJaD8N/olLKRr+tj7CDK89mIpWbGaB/La1yKlikWeOphtZXR7ef5ByuGDaeSP p/BzXFyLkLP5tUh6bGGcleik7gJEfb851WzVofjHn7LM6wGyTeuobA+Y5ZFj94gM 1jIcd2jN+xcC79aEdr9XsJPlwUNm1boNbJ+sFicN6UZxmZZ6BNrz3Ovf3rPQZ6Fs 3wjKyESGLNEqvh/HTRPzeAfPWNinngB2wu6vUXoJyKet2g465l1w315gCkD43bXz +eDfTZcet7GqMfwwZbGSSTSPhRLgYqvrdhRyv63cAGertHgHYIxSasrx1LdfAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUhL6Jxskvnjm9mfNg7hH/ZIvUXKwwHwYDVR0j BBgwFoAUf57OdDowdOYfVs0RFhqlimu0CSwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjY2YmZhNi1kYzRjLTQxMDgtOTMyYy0yMDRiNjJlODYyNzIvMC83RjlFQ0U3NDNB MzA3NEU2MUY1NkNEMTExNjFBQTU4QTZCQjQwOTJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Y5RUNFNzQzQTMwNzRFNjFGNTZDRDExMTYxQUE1OEE2QkI0 MDkyQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JmNjZiZmE2LWRjNGMtNDEwOC05 MzJjLTIwNGI2MmU4NjI3Mi8wLzMxMzAzMzJlMzEzMzM0MmUzNjM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNTMzMzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeGQjANBgkqhkiG 9w0BAQsFAAOCAQEAOf6rJrqd34QGg+xCLWAKHa+iDOVIihuZph9EQNc8Ibz07luP TzfdJbsyIVDJcPwXkZQqUYp2BhKdXBNr7U3ad/dorNjr9H1ldbLLkZOdboaWsxrr 4J9paJzbEOMLdYzgl4CMz8Nez5VPRNeNWX1IzJqjnbTrkonfkwqsZ49SzPw9ZC9O cAaiyKhNiQ4nFnvxCj7bqCYOPtnnAxSBc5yKD3PrGyaX4t5B6pNhyC/NxgWlDOc7 nZWvYItlE1CazAIKD0IsQeBJA8i8Bbc9V1CgZu4fkaybYhIHa6Z1/m4zTI+MPouo IwBaSOFtwlp/dPSLmwpqF4y5IojxA13JqedVyQ== -----END CERTIFICATE-----Generated at Thu Jan 8 11:04:15 2026 by rpki-client