This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/3130332e3138362e3136372e302f32342d3234203d3e20313439373033.roa File: 3130332e3138362e3136372e302f32342d3234203d3e20313439373033.roa (raw, json) Hash identifier: etKKSveFADWMloWFgv7k4bcqwUD/JCeti3TZy4ckvfE= Subject key identifier: 5A:C2:B0:66:63:02:1C:A5:24:3C:DA:C6:70:09:76:1A:6C:39:76:70 Certificate issuer: /CN=5DF7F909917C4DA09D7486E2B70323E7972B7675 Certificate serial: 291D683A1FA9BC908BD1FE39D8E88D896343CAAD Authority key identifier: 5D:F7:F9:09:91:7C:4D:A0:9D:74:86:E2:B7:03:23:E7:97:2B:76:75 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DF7F909917C4DA09D7486E2B70323E7972B7675.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/3130332e3138362e3136372e302f32342d3234203d3e20313439373033.roa Signing time: Thu 29 Jan 2026 15:01:11 +0000 ROA not before: Thu 29 Jan 2026 14:56:11 +0000 ROA not after: Thu 28 Jan 2027 15:01:11 +0000 asID: 149703 IP address blocks: 103.186.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.crl rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DF7F909917C4DA09D7486E2B70323E7972B7675.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 03:22:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:1d:68:3a:1f:a9:bc:90:8b:d1:fe:39:d8:e8:8d:89:63:43:ca:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DF7F909917C4DA09D7486E2B70323E7972B7675 Validity Not Before: Jan 29 14:56:11 2026 GMT Not After : Jan 28 15:01:11 2027 GMT Subject: CN=5AC2B06663021CA5243CDAC67009761A6C397670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:96:ac:bd:c2:3c:2a:91:28:3c:6e:ef:b1:ed: a1:f7:fa:46:a7:c2:b0:32:db:ab:f5:60:a9:7d:3b: 48:b1:e8:58:15:7b:42:56:d9:01:f9:ae:61:3f:1a: cc:9e:6a:78:10:b7:5d:8e:aa:c4:aa:1f:13:72:4a: b8:e4:f5:d0:dd:5b:29:b9:50:dd:28:74:7c:84:94: 14:50:63:4d:f6:9e:3c:d8:ed:9d:b6:0f:cb:2f:52: 40:78:51:88:ad:f1:de:9a:d9:cc:97:37:60:d8:b6: 08:10:87:e6:d0:03:b1:81:91:22:a8:5f:08:bc:36: 7e:d2:48:4b:27:70:54:09:b0:3e:7d:5c:e5:55:12: 66:47:d2:8e:47:e6:48:b4:5d:45:be:06:6e:14:d5: b2:f9:21:90:ba:28:53:05:a6:45:44:cf:d9:d4:cb: ab:c8:b3:a6:fb:64:b0:cd:0c:5a:f8:a3:a9:04:98: 8f:e6:84:48:59:2e:ce:a7:25:cc:e3:ed:d9:f3:a8: 68:58:14:21:6f:3f:e6:56:76:99:42:97:28:8b:ba: 2f:d8:32:50:62:3e:bb:de:8b:51:80:dc:5a:6a:43: c9:63:87:2b:22:88:dc:98:60:1c:25:ac:c5:da:8f: 49:b8:9b:34:23:90:f1:49:69:5b:cb:56:25:14:e0: 6c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C2:B0:66:63:02:1C:A5:24:3C:DA:C6:70:09:76:1A:6C:39:76:70 X509v3 Authority Key Identifier: keyid:5D:F7:F9:09:91:7C:4D:A0:9D:74:86:E2:B7:03:23:E7:97:2B:76:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DF7F909917C4DA09D7486E2B70323E7972B7675.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/3130332e3138362e3136372e302f32342d3234203d3e20313439373033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.167.0/24 Signature Algorithm: sha256WithRSAEncryption aa:76:60:ef:0c:29:ed:0e:ea:00:e2:d9:59:33:ea:5f:fa:11: 71:3d:91:74:ac:03:69:ae:b7:36:39:6b:98:f2:28:46:99:71: 7b:d0:65:21:62:46:4c:37:0f:18:01:77:b8:db:a9:81:87:41: 1b:bf:1c:fb:57:ba:c9:e1:ca:c5:fb:82:30:a6:83:ca:02:ac: 81:7f:58:3d:34:42:9b:34:34:51:96:68:4c:ad:f3:d0:17:b1: 75:23:9e:00:e7:f7:35:ed:9a:d0:f9:98:58:10:7b:df:49:74: 56:a7:52:8a:90:60:51:66:af:0b:18:89:ec:bd:5f:1b:5e:2a: 12:d6:87:52:50:7f:39:39:14:71:af:d6:85:33:a8:b0:54:3f: 7c:c5:7e:dd:d7:7d:0b:06:2b:19:07:a1:39:3b:36:23:77:fe: 13:99:d4:a4:42:df:ad:d8:49:1c:8e:d3:c3:c9:53:de:41:fc: 17:88:d5:66:c0:54:1d:6c:08:1c:fd:ca:01:4c:16:34:bf:0b: 47:59:30:37:3d:79:d4:47:86:d7:50:e1:d9:26:09:33:c7:6b: 3a:e7:b5:16:15:45:89:24:9a:e2:ef:d9:f3:72:22:3f:79:26: 09:1c:87:8d:7a:0b:a1:f6:60:7a:3a:c3:ea:33:b5:35:27:da: b9:89:b8:a5 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUKR1oOh+pvJCL0f452OiNiWNDyq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGN0Y5MDk5MTdDNERBMDlENzQ4NkUyQjcwMzIzRTc5 NzJCNzY3NTAeFw0yNjAxMjkxNDU2MTFaFw0yNzAxMjgxNTAxMTFaMDMxMTAvBgNV BAMTKDVBQzJCMDY2NjMwMjFDQTUyNDNDREFDNjcwMDk3NjFBNkMzOTc2NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGlqy9wjwqkSg8bu+x7aH3+kan wrAy26v1YKl9O0ix6FgVe0JW2QH5rmE/GsyeangQt12OqsSqHxNySrjk9dDdWym5 UN0odHyElBRQY032njzY7Z22D8svUkB4UYit8d6a2cyXN2DYtggQh+bQA7GBkSKo Xwi8Nn7SSEsncFQJsD59XOVVEmZH0o5H5ki0XUW+Bm4U1bL5IZC6KFMFpkVEz9nU y6vIs6b7ZLDNDFr4o6kEmI/mhEhZLs6nJczj7dnzqGhYFCFvP+ZWdplClyiLui/Y MlBiPrvei1GA3FpqQ8ljhysiiNyYYBwlrMXaj0m4mzQjkPFJaVvLViUU4Gy3AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUWsKwZmMCHKUkPNrGcAl2Gmw5dnAwHwYDVR0j BBgwFoAUXff5CZF8TaCddIbitwMj55crdnUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2I2NGMzZS1iMTNkLTQyN2EtYjk4Mi00Mzk0MDczZTVjZjUvMC81REY3RjkwOTkx N0M0REEwOUQ3NDg2RTJCNzAzMjNFNzk3MkI3Njc1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNURGN0Y5MDk5MTdDNERBMDlENzQ4NkUyQjcwMzIzRTc5NzJC NzY3NS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q3YjY0YzNlLWIxM2QtNDI3YS1i OTgyLTQzOTQwNzNlNWNmNS8wLzMxMzAzMzJlMzEzODM2MmUzMTM2MzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzNzMwMzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnuqcwDQYJ KoZIhvcNAQELBQADggEBAKp2YO8MKe0O6gDi2Vkz6l/6EXE9kXSsA2mutzY5a5jy KEaZcXvQZSFiRkw3DxgBd7jbqYGHQRu/HPtXusnhysX7gjCmg8oCrIF/WD00Qps0 NFGWaEyt89AXsXUjngDn9zXtmtD5mFgQe99JdFanUoqQYFFmrwsYiey9XxteKhLW h1JQfzk5FHGv1oUzqLBUP3zFft3XfQsGKxkHoTk7NiN3/hOZ1KRC363YSRyO08PJ U95B/BeI1WbAVB1sCBz9ygFMFjS/C0dZMDc9edRHhtdQ4dkmCTPHazrntRYVRYkk muLv2fNyIj95Jgkch416C6H2YHo6w+oztTUn2rmJuKU= -----END CERTIFICATE-----Generated at Mon Feb 2 13:02:33 2026 by rpki-client