This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/3130332e31392e35362e302f32322d3232203d3e20313332363337.roa File: 3130332e31392e35362e302f32322d3232203d3e20313332363337.roa (raw, json) Hash identifier: nNWu0/8/Y5E5+PXCyMclVWwSb+pcTn695z1dKn4epRk= Subject key identifier: F1:F2:D0:6A:73:97:66:50:D3:AF:37:BB:2F:3E:CB:B1:E8:5F:57:F6 Certificate issuer: /CN=7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD Certificate serial: 379670C959D38997D66C296A3A5FDF531CFC6577 Authority key identifier: 7E:FA:64:C1:15:73:C2:92:E1:92:C2:CD:EA:C4:D5:F8:B8:C2:1D:BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/3130332e31392e35362e302f32322d3232203d3e20313332363337.roa Signing time: Sat 31 Jan 2026 09:53:13 +0000 ROA not before: Sat 31 Jan 2026 09:48:13 +0000 ROA not after: Sat 30 Jan 2027 09:53:13 +0000 asID: 132637 IP address blocks: 103.19.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 20:12:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:96:70:c9:59:d3:89:97:d6:6c:29:6a:3a:5f:df:53:1c:fc:65:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD Validity Not Before: Jan 31 09:48:13 2026 GMT Not After : Jan 30 09:53:13 2027 GMT Subject: CN=F1F2D06A73976650D3AF37BB2F3ECBB1E85F57F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:53:ac:c1:b0:33:a6:2a:02:9f:b4:35:2b:a5: 42:ea:48:d3:22:01:8a:ac:22:40:69:bc:c1:15:88: b0:24:f0:90:e7:62:3a:9b:b6:6f:ef:77:5f:ba:11: 7b:b6:3b:6c:fa:67:4e:ad:49:50:57:28:60:81:18: 7f:fa:8d:85:c7:1c:d7:ce:b0:fb:19:a7:df:c0:3a: 97:a5:05:44:9b:3c:0d:b2:2d:6a:0c:49:4c:64:d2: 7b:ad:4b:af:43:0d:fd:ff:c4:4f:63:9b:11:83:94: 15:86:d4:2e:ce:57:fd:9d:2a:e8:3d:fb:93:6c:8c: 14:06:10:c2:5d:8d:ea:ce:78:e3:4b:cd:c5:92:9d: a2:15:11:02:60:25:dc:40:88:aa:b2:75:6d:5d:81: 5a:58:85:fc:28:68:1e:59:fc:10:ce:00:94:c6:5a: 8e:5d:83:66:a8:79:1e:2e:57:ea:81:e8:1a:a7:c2: ed:af:b5:2d:4b:5d:9d:40:08:da:2b:c3:37:31:b8: ef:cb:53:a4:b3:0e:43:2e:11:19:62:ea:77:00:ad: 95:af:24:a4:91:90:c7:16:ef:07:80:bd:42:43:b0: bb:63:cd:3a:f6:86:d5:29:9b:10:d7:60:d5:8f:a5: 7f:bf:bd:ff:4d:1f:51:42:a1:72:cf:d9:bc:de:1e: 8b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F2:D0:6A:73:97:66:50:D3:AF:37:BB:2F:3E:CB:B1:E8:5F:57:F6 X509v3 Authority Key Identifier: keyid:7E:FA:64:C1:15:73:C2:92:E1:92:C2:CD:EA:C4:D5:F8:B8:C2:1D:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/3130332e31392e35362e302f32322d3232203d3e20313332363337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.19.56.0/22 Signature Algorithm: sha256WithRSAEncryption af:cf:32:56:af:02:d3:1a:08:70:ad:b5:03:aa:70:77:e1:5e: 8c:f1:67:d3:aa:0d:23:fb:af:3a:8b:09:8c:93:2f:d1:c6:b0: 1f:0d:6e:3f:d7:25:54:0a:74:0c:d6:1f:48:92:b1:d0:de:6d: f4:3b:16:21:92:55:66:64:93:2b:93:aa:b1:80:b5:b8:3b:ab: 6b:5a:8c:9d:4a:2d:50:89:e5:5a:e8:4d:a5:6b:0d:90:31:1f: d9:1f:82:b5:16:d3:4a:43:8f:49:a6:a2:f6:46:94:f4:27:8c: a4:1c:d4:8d:72:c0:ee:16:96:43:10:66:85:21:a5:a8:36:3e: 9f:94:fd:82:0d:dd:da:d1:fd:3f:79:76:b0:77:1a:a9:ef:b7: 52:61:09:57:3e:64:bc:bd:7c:60:12:22:ae:97:8e:a6:0c:b2: be:af:3a:ab:87:1c:21:55:82:9b:01:12:27:08:90:71:8c:68: 31:aa:42:28:a6:9b:c2:10:0a:91:0d:58:7d:84:17:3b:7b:38: 8d:d4:06:e3:bd:df:3a:1b:93:5d:6b:d3:9a:e9:10:1d:ed:e8: 57:9e:55:17:b5:8c:6b:1d:40:cf:69:60:2f:70:67:9e:15:5c: 61:fc:f8:b5:ca:df:7d:11:f6:73:43:9e:c3:19:1b:bf:13:5f: be:8a:4a:37 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUN5ZwyVnTiZfWbClqOl/fUxz8ZXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1RjhC OEMyMURCRDAeFw0yNjAxMzEwOTQ4MTNaFw0yNzAxMzAwOTUzMTNaMDMxMTAvBgNV BAMTKEYxRjJEMDZBNzM5NzY2NTBEM0FGMzdCQjJGM0VDQkIxRTg1RjU3RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwU6zBsDOmKgKftDUrpULqSNMi AYqsIkBpvMEViLAk8JDnYjqbtm/vd1+6EXu2O2z6Z06tSVBXKGCBGH/6jYXHHNfO sPsZp9/AOpelBUSbPA2yLWoMSUxk0nutS69DDf3/xE9jmxGDlBWG1C7OV/2dKug9 +5NsjBQGEMJdjerOeONLzcWSnaIVEQJgJdxAiKqydW1dgVpYhfwoaB5Z/BDOAJTG Wo5dg2aoeR4uV+qB6Bqnwu2vtS1LXZ1ACNorwzcxuO/LU6SzDkMuERli6ncArZWv JKSRkMcW7weAvUJDsLtjzTr2htUpmxDXYNWPpX+/vf9NH1FCoXLP2bzeHotpAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU8fLQanOXZlDTrze7Lz7LsehfV/YwHwYDVR0j BBgwFoAUfvpkwRVzwpLhksLN6sTV+LjCHb0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDA5MjdlNi04YTBhLTRmYTctODk2OS05ZmI5ZDY5NDM5N2MvMC83RUZBNjRDMTE1 NzNDMjkyRTE5MkMyQ0RFQUM0RDVGOEI4QzIxREJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1RjhCOEMy MURCRC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkMDkyN2U2LThhMGEtNGZhNy04 OTY5LTlmYjlkNjk0Mzk3Yy8wLzMxMzAzMzJlMzEzOTJlMzUzNjJlMzAyZjMyMzIy ZDMyMzIyMDNkM2UyMDMxMzMzMjM2MzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmcTODANBgkqhkiG 9w0BAQsFAAOCAQEAr88yVq8C0xoIcK21A6pwd+FejPFn06oNI/uvOosJjJMv0caw Hw1uP9clVAp0DNYfSJKx0N5t9DsWIZJVZmSTK5OqsYC1uDura1qMnUotUInlWuhN pWsNkDEf2R+CtRbTSkOPSaai9kaU9CeMpBzUjXLA7haWQxBmhSGlqDY+n5T9gg3d 2tH9P3l2sHcaqe+3UmEJVz5kvL18YBIirpeOpgyyvq86q4ccIVWCmwESJwiQcYxo MapCKKabwhAKkQ1YfYQXO3s4jdQG473fOhuTXWvTmukQHe3oV55VF7WMax1Az2lg L3BnnhVcYfz4tcrffRH2c0OewxkbvxNfvopKNw== -----END CERTIFICATE-----Generated at Mon Feb 2 15:55:17 2026 by rpki-client