This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/3130332e33362e37302e302f32342d3234203d3e20313530323037.roa File: 3130332e33362e37302e302f32342d3234203d3e20313530323037.roa (raw, json) Hash identifier: HKLsheyFBInUiaRgw8Klw1MJDMbLM2+SrSvU3xYlmos= Subject key identifier: C5:97:01:70:12:B2:3A:A7:8C:3F:48:86:2D:0E:49:BC:D3:38:0F:7F Certificate issuer: /CN=1FF9DE476AB686559E1C183A1B5BD4733E1B01ED Certificate serial: 60504607D5E1D5B83AE81272B45574E012B3A2B8 Authority key identifier: 1F:F9:DE:47:6A:B6:86:55:9E:1C:18:3A:1B:5B:D4:73:3E:1B:01:ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/3130332e33362e37302e302f32342d3234203d3e20313530323037.roa Signing time: Tue 30 Dec 2025 13:00:00 +0000 ROA not before: Tue 30 Dec 2025 12:55:00 +0000 ROA not after: Tue 29 Dec 2026 13:00:00 +0000 asID: 150207 IP address blocks: 103.36.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 19:20:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:50:46:07:d5:e1:d5:b8:3a:e8:12:72:b4:55:74:e0:12:b3:a2:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FF9DE476AB686559E1C183A1B5BD4733E1B01ED Validity Not Before: Dec 30 12:55:00 2025 GMT Not After : Dec 29 13:00:00 2026 GMT Subject: CN=C597017012B23AA78C3F48862D0E49BCD3380F7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a0:1c:ea:43:07:48:16:b2:af:3b:4f:52:05: 55:e5:fe:a3:38:19:fd:48:02:15:53:71:61:c6:68: a4:ce:e7:bb:ab:b1:20:66:9b:81:6a:35:c6:42:bb: a1:6e:2a:00:97:0b:65:a5:73:52:76:eb:64:3e:d7: c0:2f:9c:92:a9:1b:6b:95:1e:9b:62:cc:89:b8:bb: 9d:e7:27:5f:f4:4d:fd:7b:fe:67:e7:f4:be:dd:89: 4e:f3:0a:ed:d4:fd:68:7c:88:c3:29:a0:84:19:e0: 68:46:58:69:a7:7f:59:a1:cb:00:5b:34:95:79:a7: c1:07:17:09:ac:01:7f:86:fb:5c:d1:9d:76:d6:fb: ac:9c:a0:9a:49:1b:02:18:87:16:08:e2:0e:6c:e1: f2:82:65:8b:c4:3f:85:a9:f7:78:3a:0d:f8:8a:0f: ac:f7:9c:43:ac:86:83:65:b9:fa:82:2b:a4:da:f6: 36:b7:26:3f:ae:3f:24:1b:54:a8:11:cc:ba:13:00: d4:e9:e0:21:28:0b:1f:f4:7d:c9:63:bc:9e:a8:b7: 12:e7:d0:a1:03:f6:83:3a:57:2b:58:06:c8:de:c2: 69:ee:be:f6:f0:d5:ec:8f:b9:2e:d6:ac:83:71:b2: a2:82:30:8c:e9:e9:80:08:63:1b:2f:fd:8c:8f:b8: c9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:97:01:70:12:B2:3A:A7:8C:3F:48:86:2D:0E:49:BC:D3:38:0F:7F X509v3 Authority Key Identifier: keyid:1F:F9:DE:47:6A:B6:86:55:9E:1C:18:3A:1B:5B:D4:73:3E:1B:01:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/3130332e33362e37302e302f32342d3234203d3e20313530323037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.36.70.0/24 Signature Algorithm: sha256WithRSAEncryption a1:15:73:31:10:31:96:ba:07:2c:a1:cb:be:aa:a3:cf:c2:22: d6:00:67:ff:4b:97:ff:1a:3f:64:7e:c8:02:66:e1:84:a9:3c: e5:35:4d:8b:af:7f:b1:df:2e:ac:60:ca:21:47:a6:4c:31:f1: 96:58:39:97:e1:14:98:51:4b:da:a7:66:5a:cf:1f:49:4a:a0: a5:9d:1d:1a:9e:43:78:c4:38:02:e8:83:f5:4c:47:52:e2:29: 12:ee:fa:43:65:f0:86:0e:7f:ba:9a:a2:49:85:24:de:1c:f0: 27:aa:b9:7c:82:cd:41:b9:5f:25:32:ab:f8:c9:6a:2f:17:c1: e3:3c:4f:b5:37:75:57:06:39:71:62:0d:61:36:77:5d:8f:74: 7f:7d:ed:69:22:9d:f9:84:a5:b4:0f:1a:7e:a1:96:0f:13:b3: 48:6c:30:45:57:ca:a9:38:cd:47:6b:2a:05:81:f5:8d:52:91: cf:5f:55:c2:86:35:49:e8:b5:57:58:47:9a:01:80:b9:c2:55: 7a:f4:b6:c6:46:40:89:8b:df:05:4b:c8:e7:39:ae:68:1a:d4: 23:47:38:ec:97:29:0c:a0:c4:64:62:51:91:cc:40:f1:5c:60: f5:9a:31:f1:3f:28:a7:83:bf:99:c1:fc:ca:ea:c6:df:40:dd: 9a:57:58:66 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUYFBGB9Xh1bg66BJytFV04BKzorgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGOURFNDc2QUI2ODY1NTlFMUMxODNBMUI1QkQ0NzMz RTFCMDFFRDAeFw0yNTEyMzAxMjU1MDBaFw0yNjEyMjkxMzAwMDBaMDMxMTAvBgNV BAMTKEM1OTcwMTcwMTJCMjNBQTc4QzNGNDg4NjJEMEU0OUJDRDMzODBGN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcoBzqQwdIFrKvO09SBVXl/qM4 Gf1IAhVTcWHGaKTO57ursSBmm4FqNcZCu6FuKgCXC2Wlc1J262Q+18AvnJKpG2uV HptizIm4u53nJ1/0Tf17/mfn9L7diU7zCu3U/Wh8iMMpoIQZ4GhGWGmnf1mhywBb NJV5p8EHFwmsAX+G+1zRnXbW+6ycoJpJGwIYhxYI4g5s4fKCZYvEP4Wp93g6DfiK D6z3nEOshoNlufqCK6Ta9ja3Jj+uPyQbVKgRzLoTANTp4CEoCx/0fcljvJ6otxLn 0KED9oM6VytYBsjewmnuvvbw1eyPuS7WrINxsqKCMIzp6YAIYxsv/YyPuMmJAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUxZcBcBKyOqeMP0iGLQ5JvNM4D38wHwYDVR0j BBgwFoAUH/neR2q2hlWeHBg6G1vUcz4bAe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTExZTk4Zi1mNTRlLTQ2MGItODhmMy1iZjkxZTA0NDNlOTAvMC8xRkY5REU0NzZB QjY4NjU1OUUxQzE4M0ExQjVCRDQ3MzNFMUIwMUVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZGOURFNDc2QUI2ODY1NTlFMUMxODNBMUI1QkQ0NzMzRTFC MDFFRC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JlMTFlOThmLWY1NGUtNDYwYi04 OGYzLWJmOTFlMDQ0M2U5MC8wLzMxMzAzMzJlMzMzNjJlMzczMDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMDMyMzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGckRjANBgkqhkiG 9w0BAQsFAAOCAQEAoRVzMRAxlroHLKHLvqqjz8Ii1gBn/0uX/xo/ZH7IAmbhhKk8 5TVNi69/sd8urGDKIUemTDHxllg5l+EUmFFL2qdmWs8fSUqgpZ0dGp5DeMQ4AuiD 9UxHUuIpEu76Q2Xwhg5/upqiSYUk3hzwJ6q5fILNQblfJTKr+MlqLxfB4zxPtTd1 VwY5cWINYTZ3XY90f33taSKd+YSltA8afqGWDxOzSGwwRVfKqTjNR2sqBYH1jVKR z19VwoY1Sei1V1hHmgGAucJVevS2xkZAiYvfBUvI5zmuaBrUI0c47JcpDKDEZGJR kcxA8Vxg9Zox8T8op4O/mcH8yurG30DdmldYZg== -----END CERTIFICATE-----Generated at Mon Feb 2 13:02:34 2026 by rpki-client