This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/3130332e3133382e36322e302f32332d3234203d3e20313338383433.roa File: 3130332e3133382e36322e302f32332d3234203d3e20313338383433.roa (raw, json) Hash identifier: XKkzY9bFjLgyHEKLIOgvs6VAzjvL/cf6BwGfRjG65P4= Subject key identifier: EC:53:92:5B:BC:ED:89:79:93:04:75:48:D6:16:CA:A2:DE:31:5F:A4 Certificate issuer: /CN=E0D54A271CD04583E0304613C7075C15FA03E497 Certificate serial: 3F95A797C64DBBF2272D4FE6D2F6EA2BBA6A9781 Authority key identifier: E0:D5:4A:27:1C:D0:45:83:E0:30:46:13:C7:07:5C:15:FA:03:E4:97 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/3130332e3133382e36322e302f32332d3234203d3e20313338383433.roa Signing time: Wed 31 Dec 2025 11:02:38 +0000 ROA not before: Wed 31 Dec 2025 10:57:38 +0000 ROA not after: Wed 30 Dec 2026 11:02:38 +0000 asID: 138843 IP address blocks: 103.138.62.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.crl rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Jan 2026 00:21:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:95:a7:97:c6:4d:bb:f2:27:2d:4f:e6:d2:f6:ea:2b:ba:6a:97:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0D54A271CD04583E0304613C7075C15FA03E497 Validity Not Before: Dec 31 10:57:38 2025 GMT Not After : Dec 30 11:02:38 2026 GMT Subject: CN=EC53925BBCED897993047548D616CAA2DE315FA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a1:14:59:4a:50:69:bd:ec:43:44:e9:6f:e6: 97:ab:1a:89:a2:7f:f0:51:1d:4b:ca:9f:93:c6:43: 44:06:6f:de:f1:97:ae:93:5a:a2:3f:6a:33:52:14: 64:9a:36:b3:5b:77:28:16:e7:45:0c:7d:a7:9d:f7: 3e:57:9b:5d:f0:af:b4:c6:1c:6c:19:19:05:eb:5f: 9f:3c:86:80:c3:6d:f3:b9:bd:50:76:68:70:7a:7a: 62:02:ba:20:c6:8b:e7:4e:15:bf:f1:66:1b:5b:67: 27:e2:8e:fb:ed:e5:4b:67:fc:74:29:d9:71:5f:08: 65:f1:d3:16:11:6a:8b:05:42:46:8f:2d:4b:72:58: b6:ee:30:8f:48:e5:04:13:f2:a0:5a:c6:dc:bf:b5: 6d:3b:eb:df:11:6b:1d:1e:86:00:29:64:e2:b8:1d: 8e:ac:ea:17:ee:db:47:e4:c9:c8:ea:ac:f7:ff:c3: 7b:e5:05:b6:3d:40:d3:10:9a:68:f9:6e:74:72:ef: e3:93:50:1a:16:95:29:bb:7a:7d:28:35:ed:f8:57: 16:05:80:a5:3a:2a:03:41:75:4d:5c:d3:97:2c:ce: 63:30:45:c3:8c:b0:cd:45:06:81:1b:7b:0e:e8:ac: 51:a9:03:de:3d:e4:9b:51:75:0e:0c:d5:b6:85:0f: 4c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:53:92:5B:BC:ED:89:79:93:04:75:48:D6:16:CA:A2:DE:31:5F:A4 X509v3 Authority Key Identifier: keyid:E0:D5:4A:27:1C:D0:45:83:E0:30:46:13:C7:07:5C:15:FA:03:E4:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/3130332e3133382e36322e302f32332d3234203d3e20313338383433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.138.62.0/23 Signature Algorithm: sha256WithRSAEncryption 33:fc:f9:01:1e:5e:b6:e1:93:f7:d3:6c:b1:77:ea:3e:29:c8: d9:18:12:8c:09:c3:c6:26:0b:7b:58:65:8a:9b:f7:76:67:89: 08:b0:de:61:96:56:28:19:08:ee:99:68:37:59:e3:4a:f6:6b: 7d:c2:9e:d8:a3:5c:5c:6d:3f:3f:3e:9a:df:2c:65:19:82:29: b9:4c:40:9e:48:1a:34:04:73:0d:48:f4:59:d3:76:58:39:76: 95:84:92:c0:72:a4:bd:c2:ad:06:8c:92:15:41:41:95:cb:04: c3:c4:c8:d3:96:1e:9b:fe:3f:19:a9:df:8d:95:a0:37:b6:75: 19:7a:b0:ca:a4:7e:34:9f:ec:ba:02:3a:cb:56:5c:52:cd:7b: 6e:2d:fc:7f:a9:65:06:4e:eb:03:d1:b2:51:a8:0e:34:64:82: fd:06:56:83:e1:e1:4c:60:78:f4:91:f7:61:40:98:a0:7d:22: 42:dd:ef:b4:73:3a:d5:3f:6b:17:09:fc:b1:d5:6c:10:c8:50: 6d:09:40:aa:49:5f:0b:73:f4:6c:87:c2:07:af:3e:f2:28:34: 3a:cc:85:a9:47:5d:c9:7c:fd:f2:11:38:a1:72:cd:cc:bc:e1: 83:66:ea:8c:00:86:ac:cc:cf:bf:e3:90:f2:dd:44:5f:63:19: fd:05:af:00 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUP5Wnl8ZNu/InLU/m0vbqK7pql4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBENTRBMjcxQ0QwNDU4M0UwMzA0NjEzQzcwNzVDMTVG QTAzRTQ5NzAeFw0yNTEyMzExMDU3MzhaFw0yNjEyMzAxMTAyMzhaMDMxMTAvBgNV BAMTKEVDNTM5MjVCQkNFRDg5Nzk5MzA0NzU0OEQ2MTZDQUEyREUzMTVGQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYoRRZSlBpvexDROlv5perGomi f/BRHUvKn5PGQ0QGb97xl66TWqI/ajNSFGSaNrNbdygW50UMfaed9z5Xm13wr7TG HGwZGQXrX588hoDDbfO5vVB2aHB6emICuiDGi+dOFb/xZhtbZyfijvvt5Utn/HQp 2XFfCGXx0xYRaosFQkaPLUtyWLbuMI9I5QQT8qBaxty/tW07698Rax0ehgApZOK4 HY6s6hfu20fkycjqrPf/w3vlBbY9QNMQmmj5bnRy7+OTUBoWlSm7en0oNe34VxYF gKU6KgNBdU1c05cszmMwRcOMsM1FBoEbew7orFGpA9495JtRdQ4M1baFD0ynAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU7FOSW7ztiXmTBHVI1hbKot4xX6QwHwYDVR0j BBgwFoAU4NVKJxzQRYPgMEYTxwdcFfoD5JcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YzU4NjdkOC0zZDZmLTQ4MTYtYjg0Zi1mZGQ1YzUwMmI2MzQvMC9FMEQ1NEEyNzFD RDA0NTgzRTAzMDQ2MTNDNzA3NUMxNUZBMDNFNDk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTBENTRBMjcxQ0QwNDU4M0UwMzA0NjEzQzcwNzVDMTVGQTAz RTQ5Ny5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JjNTg2N2Q4LTNkNmYtNDgxNi1i ODRmLWZkZDVjNTAyYjYzNC8wLzMxMzAzMzJlMzEzMzM4MmUzNjMyMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzM4MzgzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ4o+MA0GCSqG SIb3DQEBCwUAA4IBAQAz/PkBHl624ZP302yxd+o+KcjZGBKMCcPGJgt7WGWKm/d2 Z4kIsN5hllYoGQjumWg3WeNK9mt9wp7Yo1xcbT8/PprfLGUZgim5TECeSBo0BHMN SPRZ03ZYOXaVhJLAcqS9wq0GjJIVQUGVywTDxMjTlh6b/j8Zqd+NlaA3tnUZerDK pH40n+y6AjrLVlxSzXtuLfx/qWUGTusD0bJRqA40ZIL9BlaD4eFMYHj0kfdhQJig fSJC3e+0czrVP2sXCfyx1WwQyFBtCUCqSV8Lc/Rsh8IHrz7yKDQ6zIWpR13JfP3y ETihcs3MvOGDZuqMAIaszM+/45Dy3URfYxn9Ba8A -----END CERTIFICATE-----Generated at Sun Jan 18 09:33:13 2026 by rpki-client