This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/3130332e39362e35322e302f32332d3233203d3e20313534343130.roa File: 3130332e39362e35322e302f32332d3233203d3e20313534343130.roa (raw, json) Hash identifier: I1xGBGbMoTpFLIbjNVesHP5LRYPwXtpfc+9MFkqpZXg= Subject key identifier: B2:30:FA:2B:F9:69:C9:60:D2:0F:94:FF:CA:73:28:D5:CF:B7:F2:1B Certificate issuer: /CN=0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79 Certificate serial: 4F2E8755EF27E5D45583B330822C64864D91BEFE Authority key identifier: 03:21:C8:92:A6:AA:C0:A6:EA:4A:30:35:D8:8C:A6:BC:68:67:BF:79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/3130332e39362e35322e302f32332d3233203d3e20313534343130.roa Signing time: Thu 08 Jan 2026 21:26:42 +0000 ROA not before: Thu 08 Jan 2026 21:21:42 +0000 ROA not after: Thu 07 Jan 2027 21:26:42 +0000 asID: 154410 IP address blocks: 103.96.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.crl rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 14:55:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:2e:87:55:ef:27:e5:d4:55:83:b3:30:82:2c:64:86:4d:91:be:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79 Validity Not Before: Jan 8 21:21:42 2026 GMT Not After : Jan 7 21:26:42 2027 GMT Subject: CN=B230FA2BF969C960D20F94FFCA7328D5CFB7F21B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1a:1a:2c:6d:73:69:a6:25:30:29:2d:74:53: a7:d2:f3:4b:fd:7e:b5:c7:0b:52:7d:e3:d7:5f:78: 66:1c:27:68:93:77:a1:57:92:fc:9d:e6:61:0e:7d: ec:2f:c0:f0:4d:4d:4c:9d:cd:e3:bd:22:9d:a2:29: dc:f5:28:95:a4:51:90:ed:52:61:11:3c:36:92:09: d6:24:c7:3c:62:b7:e5:a7:87:88:93:7d:f9:55:2c: bd:8f:39:f2:f8:26:62:40:23:c0:f7:db:4d:3b:23: ab:aa:fa:3b:85:b2:21:bd:ed:43:da:66:93:b1:ed: f0:27:75:7d:4e:39:b1:60:6b:36:32:4f:2a:0b:2a: 0f:bd:3a:a3:d8:45:ec:4b:72:68:a8:8a:63:24:39: df:ee:bb:49:02:19:b4:14:ab:43:a2:cc:49:17:8a: 65:ba:f1:f9:57:66:5e:8b:f7:9a:32:99:3f:3c:46: b9:17:70:12:37:d3:d3:9a:bc:e1:21:65:5f:fc:50: e7:6a:93:b5:84:f8:c1:c8:f5:d5:af:51:c8:1e:ba: 7a:c6:bf:e7:b5:37:43:39:37:73:b4:75:ee:20:41: 21:da:2d:fb:c4:79:46:a5:ea:a6:34:2c:4c:c6:33: f1:8b:ee:30:96:2b:6a:c2:f0:17:08:89:0b:68:a7: 9c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:30:FA:2B:F9:69:C9:60:D2:0F:94:FF:CA:73:28:D5:CF:B7:F2:1B X509v3 Authority Key Identifier: keyid:03:21:C8:92:A6:AA:C0:A6:EA:4A:30:35:D8:8C:A6:BC:68:67:BF:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/3130332e39362e35322e302f32332d3233203d3e20313534343130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.96.52.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:bf:6f:d3:bb:21:38:b5:e2:81:1f:2f:da:eb:29:ca:8e:cd: 85:d1:ba:c5:50:cd:8c:d4:82:1c:a4:c9:50:0f:df:30:97:e5: 9e:83:77:07:e8:ab:00:75:a9:81:a0:fe:79:68:62:9b:41:af: 96:c6:57:fd:c7:f3:f0:4d:f9:dc:8e:f7:4e:e1:e3:f6:d6:47: e9:ca:aa:b4:00:c9:c5:0b:76:da:60:db:d1:78:71:ed:30:36: 0d:f0:a6:42:9c:ae:cc:23:1e:9c:49:7a:7d:fd:a4:c1:78:89: 85:61:d5:97:4c:89:c0:db:ee:60:be:a9:b5:40:c0:cf:d7:46: 8e:e4:63:fe:e7:08:5b:4c:6f:ac:2e:ea:2a:9a:96:97:41:9e: 00:c8:fa:fc:e8:a5:5c:40:2e:71:53:46:d5:82:27:c1:51:5f: 56:a8:ed:80:da:98:7d:d3:53:c7:6f:fa:87:66:29:a7:9d:06: 5f:45:2a:3b:0f:6e:e0:cb:e0:fb:2e:49:30:1c:de:95:0d:4a: 2b:de:0e:73:65:81:f6:fe:62:ff:90:47:8b:03:c8:c8:c2:96: e4:85:af:6c:29:bb:99:1f:cf:c6:5d:11:94:19:0d:61:13:19: 54:1f:32:fc:18:db:70:bc:78:bf:72:2e:22:25:61:da:0c:4d: 5b:2a:bb:db -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUTy6HVe8n5dRVg7Mwgixkhk2Rvv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMyMUM4OTJBNkFBQzBBNkVBNEEzMDM1RDg4Q0E2QkM2 ODY3QkY3OTAeFw0yNjAxMDgyMTIxNDJaFw0yNzAxMDcyMTI2NDJaMDMxMTAvBgNV BAMTKEIyMzBGQTJCRjk2OUM5NjBEMjBGOTRGRkNBNzMyOEQ1Q0ZCN0YyMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxGhosbXNppiUwKS10U6fS80v9 frXHC1J949dfeGYcJ2iTd6FXkvyd5mEOfewvwPBNTUydzeO9Ip2iKdz1KJWkUZDt UmERPDaSCdYkxzxit+Wnh4iTfflVLL2POfL4JmJAI8D32007I6uq+juFsiG97UPa ZpOx7fAndX1OObFgazYyTyoLKg+9OqPYRexLcmioimMkOd/uu0kCGbQUq0OizEkX imW68flXZl6L95oymT88RrkXcBI309OavOEhZV/8UOdqk7WE+MHI9dWvUcgeunrG v+e1N0M5N3O0de4gQSHaLfvEeUal6qY0LEzGM/GL7jCWK2rC8BcIiQtop5y3AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUsjD6K/lpyWDSD5T/ynMo1c+38hswHwYDVR0j BBgwFoAUAyHIkqaqwKbqSjA12IymvGhnv3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTFjNGMxZi03MTQxLTQ3ZDYtYTdmOC1lMzVmZmUxMTc0MDQvMC8wMzIxQzg5MkE2 QUFDMEE2RUE0QTMwMzVEODhDQTZCQzY4NjdCRjc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMyMUM4OTJBNkFBQzBBNkVBNEEzMDM1RDg4Q0E2QkM2ODY3 QkY3OS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdhMWM0YzFmLTcxNDEtNDdkNi1h N2Y4LWUzNWZmZTExNzQwNC8wLzMxMzAzMzJlMzkzNjJlMzUzMjJlMzAyZjMyMzMy ZDMyMzMyMDNkM2UyMDMxMzUzNDM0MzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWdgNDANBgkqhkiG 9w0BAQsFAAOCAQEAf79v07shOLXigR8v2uspyo7NhdG6xVDNjNSCHKTJUA/fMJfl noN3B+irAHWpgaD+eWhim0GvlsZX/cfz8E353I73TuHj9tZH6cqqtADJxQt22mDb 0Xhx7TA2DfCmQpyuzCMenEl6ff2kwXiJhWHVl0yJwNvuYL6ptUDAz9dGjuRj/ucI W0xvrC7qKpqWl0GeAMj6/OilXEAucVNG1YInwVFfVqjtgNqYfdNTx2/6h2Ypp50G X0UqOw9u4Mvg+y5JMBzelQ1KK94Oc2WB9v5i/5BHiwPIyMKW5IWvbCm7mR/Pxl0R lBkNYRMZVB8y/BjbcLx4v3IuIiVh2gxNWyq72w== -----END CERTIFICATE-----Generated at Mon Jan 19 21:57:24 2026 by rpki-client