This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/3130332e39362e35332e302f32342d3234203d3e20313534343130.roa File: 3130332e39362e35332e302f32342d3234203d3e20313534343130.roa (raw, json) Hash identifier: q5hea4w5eW+1JC2efAtWBTto0TQU50ClmJGUcfUe31c= Subject key identifier: 12:BC:36:2B:E3:09:99:06:0D:50:2C:2F:A5:27:B2:A2:CC:42:90:4A Certificate issuer: /CN=0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79 Certificate serial: 5E4EE7F5E4942DCE9511F14ECF23598312904161 Authority key identifier: 03:21:C8:92:A6:AA:C0:A6:EA:4A:30:35:D8:8C:A6:BC:68:67:BF:79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/3130332e39362e35332e302f32342d3234203d3e20313534343130.roa Signing time: Thu 08 Jan 2026 21:27:21 +0000 ROA not before: Thu 08 Jan 2026 21:22:21 +0000 ROA not after: Thu 07 Jan 2027 21:27:21 +0000 asID: 154410 IP address blocks: 103.96.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.crl rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 14:55:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:4e:e7:f5:e4:94:2d:ce:95:11:f1:4e:cf:23:59:83:12:90:41:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79 Validity Not Before: Jan 8 21:22:21 2026 GMT Not After : Jan 7 21:27:21 2027 GMT Subject: CN=12BC362BE30999060D502C2FA527B2A2CC42904A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:04:d9:15:df:0e:19:26:de:1f:23:06:c6:63: b4:99:82:e3:ed:35:ce:54:8a:0f:03:02:70:98:47: 08:9f:88:94:36:65:af:57:6c:cc:11:ff:fe:bf:fb: 08:22:dc:16:ef:97:87:8b:c5:c5:3c:47:0d:28:fb: 35:a3:21:24:2e:c9:7d:10:12:79:19:0c:a0:33:38: 10:11:b9:54:98:11:85:63:16:f2:d6:96:13:49:85: 8e:f1:0b:11:72:a7:25:a9:ff:56:27:90:48:f7:2e: 0e:91:59:aa:56:ce:a5:11:01:bd:fc:86:8a:38:fb: 23:be:db:d6:48:24:df:d8:2e:e9:0a:8a:cf:e1:12: 56:5f:c8:ed:08:b4:06:22:e3:bd:07:77:68:6b:cc: df:4d:81:af:5f:72:21:6e:af:54:a8:1a:27:0b:53: 9a:20:1b:c6:78:3b:14:75:7e:d3:59:cf:e4:c0:d7: 34:c0:d4:18:4f:57:fe:52:48:ad:0c:06:62:0c:2f: bb:18:52:30:94:80:9b:54:38:b8:26:2f:89:ee:c4: 48:f0:06:5f:f6:2b:2d:ca:55:75:70:d0:07:78:67: c4:e7:50:09:76:68:66:ba:6d:5b:de:43:ea:f8:5d: 4f:10:fd:fe:fc:ea:aa:05:98:d4:63:bc:70:1a:61: 3c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:BC:36:2B:E3:09:99:06:0D:50:2C:2F:A5:27:B2:A2:CC:42:90:4A X509v3 Authority Key Identifier: keyid:03:21:C8:92:A6:AA:C0:A6:EA:4A:30:35:D8:8C:A6:BC:68:67:BF:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/3130332e39362e35332e302f32342d3234203d3e20313534343130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.96.53.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:58:20:23:21:00:e4:e3:4a:b5:6e:83:fc:9b:61:a1:41:ee: 6f:ae:a3:2e:83:a2:a4:fb:6a:fc:cb:78:45:91:64:1f:51:22: ed:16:26:12:9f:aa:18:fb:c3:21:49:4c:3e:bf:c0:5a:da:92: 99:ab:4d:aa:f2:0d:d1:a1:d8:29:93:ef:36:51:0f:0a:4a:32: 74:ee:4f:78:ff:a0:12:da:6f:a1:4a:fe:f0:68:75:bd:e0:8c: 76:6b:23:0a:b6:e6:00:2e:94:f8:5d:79:0c:1b:c2:8d:46:d6: 02:3b:de:f9:18:55:e3:54:1f:5b:e4:f9:d3:1c:82:9c:78:dd: 9a:37:4b:d6:c6:e3:aa:1d:2c:6b:7c:f0:1b:f3:dc:e7:8e:c7: 5b:14:fa:69:dc:84:e9:90:07:5b:63:ab:70:b8:28:b4:21:19: 6a:93:69:32:35:2a:63:5a:7b:cd:3d:4c:0f:3d:14:4a:fb:1a: f9:5c:39:07:5f:7d:1c:07:af:35:ed:e6:d6:fd:fc:b2:f8:c7: d4:14:0d:db:25:4b:94:b7:f2:82:e6:97:db:bf:38:43:a3:ef: d3:f4:f7:31:42:c0:c8:c0:94:8d:e8:97:57:e5:1e:c0:35:d3: 33:44:16:21:25:86:49:cd:bc:43:9f:be:8a:7f:25:e5:d2:aa: 8c:28:4b:fd -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUXk7n9eSULc6VEfFOzyNZgxKQQWEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMyMUM4OTJBNkFBQzBBNkVBNEEzMDM1RDg4Q0E2QkM2 ODY3QkY3OTAeFw0yNjAxMDgyMTIyMjFaFw0yNzAxMDcyMTI3MjFaMDMxMTAvBgNV BAMTKDEyQkMzNjJCRTMwOTk5MDYwRDUwMkMyRkE1MjdCMkEyQ0M0MjkwNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjBNkV3w4ZJt4fIwbGY7SZguPt Nc5Uig8DAnCYRwifiJQ2Za9XbMwR//6/+wgi3Bbvl4eLxcU8Rw0o+zWjISQuyX0Q EnkZDKAzOBARuVSYEYVjFvLWlhNJhY7xCxFypyWp/1YnkEj3Lg6RWapWzqURAb38 hoo4+yO+29ZIJN/YLukKis/hElZfyO0ItAYi470Hd2hrzN9Nga9fciFur1SoGicL U5ogG8Z4OxR1ftNZz+TA1zTA1BhPV/5SSK0MBmIML7sYUjCUgJtUOLgmL4nuxEjw Bl/2Ky3KVXVw0Ad4Z8TnUAl2aGa6bVveQ+r4XU8Q/f786qoFmNRjvHAaYTwbAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUErw2K+MJmQYNUCwvpSeyosxCkEowHwYDVR0j BBgwFoAUAyHIkqaqwKbqSjA12IymvGhnv3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTFjNGMxZi03MTQxLTQ3ZDYtYTdmOC1lMzVmZmUxMTc0MDQvMC8wMzIxQzg5MkE2 QUFDMEE2RUE0QTMwMzVEODhDQTZCQzY4NjdCRjc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMyMUM4OTJBNkFBQzBBNkVBNEEzMDM1RDg4Q0E2QkM2ODY3 QkY3OS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdhMWM0YzFmLTcxNDEtNDdkNi1h N2Y4LWUzNWZmZTExNzQwNC8wLzMxMzAzMzJlMzkzNjJlMzUzMzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzNDM0MzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdgNTANBgkqhkiG 9w0BAQsFAAOCAQEAj1ggIyEA5ONKtW6D/JthoUHub66jLoOipPtq/Mt4RZFkH1Ei 7RYmEp+qGPvDIUlMPr/AWtqSmatNqvIN0aHYKZPvNlEPCkoydO5PeP+gEtpvoUr+ 8Gh1veCMdmsjCrbmAC6U+F15DBvCjUbWAjve+RhV41QfW+T50xyCnHjdmjdL1sbj qh0sa3zwG/Pc547HWxT6adyE6ZAHW2OrcLgotCEZapNpMjUqY1p7zT1MDz0USvsa +Vw5B199HAevNe3m1v38svjH1BQN2yVLlLfyguaX2784Q6Pv0/T3MULAyMCUjeiX V+UewDXTM0QWISWGSc28Q5++in8l5dKqjChL/Q== -----END CERTIFICATE-----Generated at Mon Jan 19 21:58:01 2026 by rpki-client