This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/3130332e3132322e352e302f32342d3234203d3e20313338303530.roa File: 3130332e3132322e352e302f32342d3234203d3e20313338303530.roa (raw, json) Hash identifier: FoxdZHJrEp7+nFUQtWkPulj2p2oThQSviqn5PbYR67E= Subject key identifier: 8F:24:8D:27:D4:70:48:51:D1:97:F7:53:A2:57:90:D7:CB:C8:61:26 Certificate issuer: /CN=B59504F478A4226C16D97004A6F98153CD19D2E0 Certificate serial: 1055012BF847ABD48EBDFA21A9B67A76DE58DC3D Authority key identifier: B5:95:04:F4:78:A4:22:6C:16:D9:70:04:A6:F9:81:53:CD:19:D2:E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/3130332e3132322e352e302f32342d3234203d3e20313338303530.roa Signing time: Thu 29 Jan 2026 09:02:33 +0000 ROA not before: Thu 29 Jan 2026 08:57:33 +0000 ROA not after: Thu 28 Jan 2027 09:02:33 +0000 asID: 138050 IP address blocks: 103.122.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.crl rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 22:04:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:55:01:2b:f8:47:ab:d4:8e:bd:fa:21:a9:b6:7a:76:de:58:dc:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B59504F478A4226C16D97004A6F98153CD19D2E0 Validity Not Before: Jan 29 08:57:33 2026 GMT Not After : Jan 28 09:02:33 2027 GMT Subject: CN=8F248D27D4704851D197F753A25790D7CBC86126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4d:7a:98:65:20:87:0c:c2:3a:c4:12:1f:3e: 6c:e2:8b:95:46:f6:7c:bd:6c:8a:16:89:ac:a3:d2: 1c:37:60:d3:44:84:29:98:80:8b:37:72:cf:61:05: 8d:86:e7:d4:45:19:f0:93:98:75:cb:48:83:69:ef: f1:dc:45:7e:8c:fa:67:12:e9:01:ba:cf:05:ca:2d: 26:31:44:69:56:ad:e6:76:7e:e9:6b:57:e6:2c:5e: e1:f3:c8:8f:b2:10:46:f9:45:d2:7e:7c:d6:45:69: 67:7d:53:fa:b2:0c:7b:0f:c2:c2:ff:de:0c:41:0e: 21:b3:18:8d:bc:f2:0f:9d:f5:13:00:6f:4d:ca:19: ff:83:69:6a:d7:1d:c9:9f:ba:03:de:4a:68:73:48: 5c:79:20:51:37:ff:a4:11:8a:c0:ff:22:f2:9e:00: a7:c5:16:06:cf:49:de:fc:71:8b:6d:69:0a:d2:a5: 41:f5:d1:b8:80:28:ec:c6:c0:7e:8d:a7:ee:e3:f9: ac:ae:c3:23:1b:ca:ec:c9:04:68:a0:8e:0c:e9:b6: 36:db:7b:dd:c4:56:53:58:bd:7e:a3:7b:74:bd:77: 7b:b7:ef:0b:63:9a:15:1e:20:93:fe:13:a3:eb:ca: 95:0f:09:82:74:d8:79:8b:9c:13:7f:e2:f6:1c:b1: f3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:24:8D:27:D4:70:48:51:D1:97:F7:53:A2:57:90:D7:CB:C8:61:26 X509v3 Authority Key Identifier: keyid:B5:95:04:F4:78:A4:22:6C:16:D9:70:04:A6:F9:81:53:CD:19:D2:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/3130332e3132322e352e302f32342d3234203d3e20313338303530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.122.5.0/24 Signature Algorithm: sha256WithRSAEncryption b6:c2:36:c6:b9:9a:12:09:62:15:59:4c:51:50:b0:ca:7d:93: a6:fd:37:51:c9:19:d8:19:b5:6e:6b:fc:c4:f0:06:59:95:e7: 5b:24:a4:16:f4:ca:b6:5e:3c:c8:8f:ee:1d:4a:62:bd:be:e0: 51:33:2e:5a:9d:f8:bc:67:a4:08:3f:18:cf:46:26:c9:8b:37: 46:ec:ba:d3:31:69:af:f9:8f:ad:07:b1:e6:31:c0:17:94:64: f0:5f:b4:23:ad:c1:e2:83:5a:d5:3d:62:84:83:6b:6e:dd:58: c9:04:c8:b1:e4:79:75:88:04:d2:68:ae:51:97:88:29:55:f3: 5e:d7:04:d7:33:5c:02:7e:42:6c:32:5e:91:52:41:ae:fe:2b: 1b:bb:37:c0:46:8d:b7:10:48:a0:e5:07:d7:f8:60:ae:cb:01: 27:e0:fb:69:cc:bb:3c:43:42:ef:1e:5e:1a:38:ac:b2:19:90: 0a:1d:e3:2c:df:8b:1c:88:e5:d6:0b:a8:03:95:9f:88:98:0c: 33:41:de:f1:78:3f:cb:2e:cd:de:f3:0b:01:44:e1:42:95:1f: 85:57:17:8c:0a:23:4a:9a:e7:00:93:1c:01:32:ec:48:5a:e7: 09:1e:6f:c8:c5:c7:16:8f:5d:7d:19:f0:a0:38:65:d8:c0:9a: 3c:f8:b2:da -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUEFUBK/hHq9SOvfohqbZ6dt5Y3D0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgxNTND RDE5RDJFMDAeFw0yNjAxMjkwODU3MzNaFw0yNzAxMjgwOTAyMzNaMDMxMTAvBgNV BAMTKDhGMjQ4RDI3RDQ3MDQ4NTFEMTk3Rjc1M0EyNTc5MEQ3Q0JDODYxMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4TXqYZSCHDMI6xBIfPmzii5VG 9ny9bIoWiayj0hw3YNNEhCmYgIs3cs9hBY2G59RFGfCTmHXLSINp7/HcRX6M+mcS 6QG6zwXKLSYxRGlWreZ2fulrV+YsXuHzyI+yEEb5RdJ+fNZFaWd9U/qyDHsPwsL/ 3gxBDiGzGI288g+d9RMAb03KGf+DaWrXHcmfugPeSmhzSFx5IFE3/6QRisD/IvKe AKfFFgbPSd78cYttaQrSpUH10biAKOzGwH6Np+7j+ayuwyMbyuzJBGigjgzptjbb e93EVlNYvX6je3S9d3u37wtjmhUeIJP+E6PrypUPCYJ02HmLnBN/4vYcsfPdAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUjySNJ9RwSFHRl/dToleQ18vIYSYwHwYDVR0j BBgwFoAUtZUE9HikImwW2XAEpvmBU80Z0uAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDRmYmZiMC05M2VlLTRlYTYtYjRjZi0wN2Q3NjliODhhMjIvMC9CNTk1MDRGNDc4 QTQyMjZDMTZEOTcwMDRBNkY5ODE1M0NEMTlEMkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgxNTNDRDE5 RDJFMC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZkNGZiZmIwLTkzZWUtNGVhNi1i NGNmLTA3ZDc2OWI4OGEyMi8wLzMxMzAzMzJlMzEzMjMyMmUzNTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzMzODMwMzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGd6BTANBgkqhkiG 9w0BAQsFAAOCAQEAtsI2xrmaEgliFVlMUVCwyn2Tpv03UckZ2Bm1bmv8xPAGWZXn WySkFvTKtl48yI/uHUpivb7gUTMuWp34vGekCD8Yz0YmyYs3Ruy60zFpr/mPrQex 5jHAF5Rk8F+0I63B4oNa1T1ihINrbt1YyQTIseR5dYgE0miuUZeIKVXzXtcE1zNc An5CbDJekVJBrv4rG7s3wEaNtxBIoOUH1/hgrssBJ+D7acy7PENC7x5eGjisshmQ Ch3jLN+LHIjl1guoA5WfiJgMM0He8Xg/yy7N3vMLAUThQpUfhVcXjAojSprnAJMc ATLsSFrnCR5vyMXHFo9dfRnwoDhl2MCaPPiy2g== -----END CERTIFICATE-----Generated at Mon Feb 2 12:48:48 2026 by rpki-client