This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/3130332e3133312e32382e302f32342d3234203d3e20313534343130.roa File: 3130332e3133312e32382e302f32342d3234203d3e20313534343130.roa (raw, json) Hash identifier: BT2Xm6NvivpZW/A7KKYoT5JmNwNHRn5+Zp/CE2/KpUE= Subject key identifier: EF:DE:AC:A4:B1:C1:66:04:E4:D3:8F:D2:15:3A:52:C1:18:B0:95:41 Certificate issuer: /CN=70CC719DF5876DBD92D41F5AF0359E3A698BDDD4 Certificate serial: 1BC03091DBBC2F90209E731F49F086AED723C530 Authority key identifier: 70:CC:71:9D:F5:87:6D:BD:92:D4:1F:5A:F0:35:9E:3A:69:8B:DD:D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/3130332e3133312e32382e302f32342d3234203d3e20313534343130.roa Signing time: Thu 08 Jan 2026 21:33:55 +0000 ROA not before: Thu 08 Jan 2026 21:28:55 +0000 ROA not after: Thu 07 Jan 2027 21:33:55 +0000 asID: 154410 IP address blocks: 103.131.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.crl rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 05:05:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:c0:30:91:db:bc:2f:90:20:9e:73:1f:49:f0:86:ae:d7:23:c5:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70CC719DF5876DBD92D41F5AF0359E3A698BDDD4 Validity Not Before: Jan 8 21:28:55 2026 GMT Not After : Jan 7 21:33:55 2027 GMT Subject: CN=EFDEACA4B1C16604E4D38FD2153A52C118B09541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5f:d0:07:31:ab:7e:56:5f:ef:7d:5e:7f:94: bd:1a:a0:1f:d1:b0:e1:d1:99:af:1e:35:a4:d5:b3: c5:c5:23:9b:a5:9a:a0:71:13:70:79:85:93:4c:be: c3:59:a6:2b:b8:af:66:2e:58:c0:83:f4:05:2a:8e: 8a:ae:01:19:8f:88:4f:81:d3:a7:c1:28:4d:68:46: 22:0e:93:38:57:67:61:b5:a5:34:98:27:f5:e9:2c: c8:b4:7d:ce:9a:07:38:e8:46:93:fc:a3:d7:c0:5c: 60:ed:52:5b:d6:99:db:24:d5:6a:b8:0c:ed:9f:32: 2c:69:58:47:20:c4:e1:a6:38:30:3b:f4:b3:5f:fb: 51:4f:fb:4c:b5:72:cb:31:e1:18:32:e1:2e:db:50: 91:6d:c0:c6:a2:40:43:b5:1e:9b:61:94:69:f3:57: e7:26:f8:19:91:d8:a1:de:93:a5:ad:eb:ca:d1:dd: 6e:14:bc:2f:20:9e:54:0f:b1:88:44:6f:1b:66:ed: e8:2d:80:c5:94:bc:f5:14:8d:a1:2f:2f:fd:f4:73: 9c:8f:6f:a6:9b:48:73:14:ad:6e:ad:5d:84:c6:14: 7a:ce:84:99:1d:0f:88:ea:bb:5e:37:4c:22:90:99: e9:76:28:9b:58:7d:92:48:8d:c3:dd:d6:56:bc:7e: b2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:DE:AC:A4:B1:C1:66:04:E4:D3:8F:D2:15:3A:52:C1:18:B0:95:41 X509v3 Authority Key Identifier: keyid:70:CC:71:9D:F5:87:6D:BD:92:D4:1F:5A:F0:35:9E:3A:69:8B:DD:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/3130332e3133312e32382e302f32342d3234203d3e20313534343130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.131.28.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:2f:2c:15:3c:e4:e6:47:8f:c0:a9:a9:e6:91:75:f3:8e:90: 5e:c9:81:1a:45:56:2b:2e:dd:07:de:e6:8b:78:7c:4a:29:e2: 70:e7:74:91:53:49:73:34:b8:3b:58:26:65:da:28:70:29:05: 19:f1:d5:bf:f7:22:61:89:e9:f6:ef:1f:39:30:0e:db:70:68: b4:85:f4:b3:ed:28:48:f1:1e:0b:0b:5b:77:7b:ad:74:ae:93: 1c:3a:a2:a1:31:ea:2a:b9:19:39:82:e3:e5:42:74:c6:f5:8b: ae:24:50:00:e7:91:c8:ae:87:82:96:07:7c:dd:f5:45:e4:01: a3:f6:93:e6:9d:f7:b6:5f:b6:b1:8a:6e:e2:04:bb:d0:2f:25: a4:5f:e2:47:6e:21:e3:02:e6:a6:51:97:dc:17:01:fc:52:98: 7e:8c:b6:c9:b2:34:a4:bf:76:ce:d7:ed:d3:62:e0:6f:8a:46: 50:46:d2:51:03:7b:49:6b:03:27:d4:a4:2f:71:73:b0:0a:4a: 29:5d:94:26:68:bb:50:1e:95:2b:1e:ba:61:57:3d:59:b6:3b: 2e:07:fb:58:74:58:d0:19:56:ab:b7:91:33:cc:f4:41:20:54: be:4b:29:86:63:b7:f9:05:35:82:95:30:dd:59:44:5c:16:12: 26:e7:c1:b5 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUG8Awkdu8L5AgnnMfSfCGrtcjxTAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBDQzcxOURGNTg3NkRCRDkyRDQxRjVBRjAzNTlFM0E2 OThCRERENDAeFw0yNjAxMDgyMTI4NTVaFw0yNzAxMDcyMTMzNTVaMDMxMTAvBgNV BAMTKEVGREVBQ0E0QjFDMTY2MDRFNEQzOEZEMjE1M0E1MkMxMThCMDk1NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9X9AHMat+Vl/vfV5/lL0aoB/R sOHRma8eNaTVs8XFI5ulmqBxE3B5hZNMvsNZpiu4r2YuWMCD9AUqjoquARmPiE+B 06fBKE1oRiIOkzhXZ2G1pTSYJ/XpLMi0fc6aBzjoRpP8o9fAXGDtUlvWmdsk1Wq4 DO2fMixpWEcgxOGmODA79LNf+1FP+0y1cssx4Rgy4S7bUJFtwMaiQEO1HpthlGnz V+cm+BmR2KHek6Wt68rR3W4UvC8gnlQPsYhEbxtm7egtgMWUvPUUjaEvL/30c5yP b6abSHMUrW6tXYTGFHrOhJkdD4jqu143TCKQmel2KJtYfZJIjcPd1la8frLRAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU796spLHBZgTk04/SFTpSwRiwlUEwHwYDVR0j BBgwFoAUcMxxnfWHbb2S1B9a8DWeOmmL3dQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2NkMWQyZC03MzY0LTQ4MWItOTc4ZS0wYTg1NGE5Y2ZmNGYvMC83MENDNzE5REY1 ODc2REJEOTJENDFGNUFGMDM1OUUzQTY5OEJEREQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzBDQzcxOURGNTg3NkRCRDkyRDQxRjVBRjAzNTlFM0E2OThC RERENC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU3Y2QxZDJkLTczNjQtNDgxYi05 NzhlLTBhODU0YTljZmY0Zi8wLzMxMzAzMzJlMzEzMzMxMmUzMjM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTM0MzQzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4McMA0GCSqG SIb3DQEBCwUAA4IBAQB8LywVPOTmR4/AqanmkXXzjpBeyYEaRVYrLt0H3uaLeHxK KeJw53SRU0lzNLg7WCZl2ihwKQUZ8dW/9yJhien27x85MA7bcGi0hfSz7ShI8R4L C1t3e610rpMcOqKhMeoquRk5guPlQnTG9YuuJFAA55HIroeClgd83fVF5AGj9pPm nfe2X7axim7iBLvQLyWkX+JHbiHjAuamUZfcFwH8Uph+jLbJsjSkv3bO1+3TYuBv ikZQRtJRA3tJawMn1KQvcXOwCkopXZQmaLtQHpUrHrphVz1ZtjsuB/tYdFjQGVar t5EzzPRBIFS+SymGY7f5BTWClTDdWURcFhIm58G1 -----END CERTIFICATE-----Generated at Mon Jan 19 21:58:01 2026 by rpki-client