This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3130332e3130392e32362e302f32342d3234203d3e20313337333131.roa File: 3130332e3130392e32362e302f32342d3234203d3e20313337333131.roa (raw, json) Hash identifier: 2hd2Kw7s5AZpDbq89PNUJ3gEV2BNvCaqP2MGIQVe7Kc= Subject key identifier: 40:30:31:63:2C:59:ED:0A:91:DB:86:E4:62:44:7C:54:34:5E:93:BE Certificate issuer: /CN=A42F07BEA859C831526717AB1D092E11E7890BDD Certificate serial: 061E9FCFC6A207AC21AD8E13FBB4EC5C75743047 Authority key identifier: A4:2F:07:BE:A8:59:C8:31:52:67:17:AB:1D:09:2E:11:E7:89:0B:DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3130332e3130392e32362e302f32342d3234203d3e20313337333131.roa Signing time: Mon 29 Dec 2025 10:00:04 +0000 ROA not before: Mon 29 Dec 2025 09:55:04 +0000 ROA not after: Mon 28 Dec 2026 10:00:04 +0000 asID: 137311 IP address blocks: 103.109.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.crl rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 13:08:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:1e:9f:cf:c6:a2:07:ac:21:ad:8e:13:fb:b4:ec:5c:75:74:30:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A42F07BEA859C831526717AB1D092E11E7890BDD Validity Not Before: Dec 29 09:55:04 2025 GMT Not After : Dec 28 10:00:04 2026 GMT Subject: CN=403031632C59ED0A91DB86E462447C54345E93BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fb:f0:10:57:49:c3:25:ca:07:c8:d2:49:cb: 79:c8:08:18:86:58:4f:84:6d:45:67:2c:b5:03:3a: e2:23:56:17:2f:44:80:85:c4:c4:1f:64:eb:40:ba: e4:01:d3:23:fc:3a:97:11:53:29:ac:4d:0e:48:56: 5b:e3:53:38:a4:0a:db:d2:b0:50:5d:70:13:c0:83: 7f:e9:03:b1:37:5b:79:08:e4:37:90:a6:24:68:cb: bb:fa:f7:8f:85:5d:75:05:00:1a:c5:61:97:e9:42: 96:90:26:e9:11:4a:d0:e1:06:6a:f1:77:ec:42:65: 80:08:06:3c:03:91:00:45:db:b0:98:9e:d3:f7:76: 9a:be:88:d0:c4:00:c0:c9:35:38:44:de:c3:af:4e: dc:f4:e8:e8:7f:ae:74:a1:b1:c4:03:e0:91:a3:27: 3c:06:0d:14:46:3a:70:fa:98:57:94:0d:fb:67:3f: eb:88:e0:5e:3a:0f:3d:e5:48:90:05:e1:93:f5:d7: e3:5b:0b:b1:42:3d:63:66:f4:3e:93:9d:ee:78:1c: 2e:df:82:66:a6:90:07:86:5a:01:71:3a:eb:36:1d: 6d:04:22:29:fb:fb:2d:9c:e8:e9:0b:0d:5a:bd:fb: 37:b5:d2:16:05:2e:54:5b:5c:8d:dd:42:cb:69:50: cc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:30:31:63:2C:59:ED:0A:91:DB:86:E4:62:44:7C:54:34:5E:93:BE X509v3 Authority Key Identifier: keyid:A4:2F:07:BE:A8:59:C8:31:52:67:17:AB:1D:09:2E:11:E7:89:0B:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3130332e3130392e32362e302f32342d3234203d3e20313337333131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.109.26.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:43:af:97:5c:1e:0b:6a:57:dd:f5:49:51:bc:b1:4c:62:bb: 87:c6:f2:c6:5a:3d:48:76:a0:f3:e1:d5:7d:69:29:45:c2:08: 9c:b0:10:e2:4f:5a:fa:7c:24:e5:a6:0c:d3:47:61:e4:f0:60: 1e:b0:d8:41:b4:55:a6:b3:e9:59:47:8a:32:c6:d0:df:7b:80: 79:ae:35:cc:5a:40:ff:b8:78:06:2f:66:d9:64:be:be:f0:2a: b3:e7:ba:0a:bc:79:16:6d:15:be:1e:d3:2d:e4:bd:f6:87:9e: 79:58:ce:74:46:62:fc:21:eb:f3:9c:ee:1e:e4:1d:b3:b7:ef: 23:b8:8a:8c:15:c7:a9:c5:2b:89:3d:ce:70:8e:7a:b1:d7:1d: f6:f0:5e:1f:00:81:fe:8e:9e:d2:4e:35:39:f6:6b:2a:2f:6f: 2a:6c:fe:50:14:6e:58:79:6f:22:52:62:4b:56:75:78:94:32: 94:57:5c:26:8e:8f:d3:f6:2d:af:45:b0:94:30:ad:05:29:20: 24:fc:f4:50:f5:f9:9a:4b:f4:46:24:59:16:ac:a2:59:11:5d: da:04:ad:2d:85:3a:af:39:22:b8:ae:7f:80:c7:a4:54:98:34: 37:3f:56:b4:39:9d:86:ad:57:67:6a:b5:89:8c:e0:de:10:6e: 23:37:f8:55 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUBh6fz8aiB6whrY4T+7TsXHV0MEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJFMTFF Nzg5MEJERDAeFw0yNTEyMjkwOTU1MDRaFw0yNjEyMjgxMDAwMDRaMDMxMTAvBgNV BAMTKDQwMzAzMTYzMkM1OUVEMEE5MURCODZFNDYyNDQ3QzU0MzQ1RTkzQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi+/AQV0nDJcoHyNJJy3nICBiG WE+EbUVnLLUDOuIjVhcvRICFxMQfZOtAuuQB0yP8OpcRUymsTQ5IVlvjUzikCtvS sFBdcBPAg3/pA7E3W3kI5DeQpiRoy7v694+FXXUFABrFYZfpQpaQJukRStDhBmrx d+xCZYAIBjwDkQBF27CYntP3dpq+iNDEAMDJNThE3sOvTtz06Oh/rnShscQD4JGj JzwGDRRGOnD6mFeUDftnP+uI4F46Dz3lSJAF4ZP11+NbC7FCPWNm9D6Tne54HC7f gmamkAeGWgFxOus2HW0EIin7+y2c6OkLDVq9+ze10hYFLlRbXI3dQstpUMyhAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUQDAxYyxZ7QqR24bkYkR8VDRek74wHwYDVR0j BBgwFoAUpC8HvqhZyDFSZxerHQkuEeeJC90wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODM1Y2I0YS0yZmI5LTQwZDctYjE1NS1kY2NlN2NiMDAyOTMvMC9BNDJGMDdCRUE4 NTlDODMxNTI2NzE3QUIxRDA5MkUxMUU3ODkwQkRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJFMTFFNzg5 MEJERC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q4MzVjYjRhLTJmYjktNDBkNy1i MTU1LWRjY2U3Y2IwMDI5My8wLzMxMzAzMzJlMzEzMDM5MmUzMjM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM3MzMzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ20aMA0GCSqG SIb3DQEBCwUAA4IBAQAcQ6+XXB4Lalfd9UlRvLFMYruHxvLGWj1IdqDz4dV9aSlF wgicsBDiT1r6fCTlpgzTR2Hk8GAesNhBtFWms+lZR4oyxtDfe4B5rjXMWkD/uHgG L2bZZL6+8Cqz57oKvHkWbRW+HtMt5L32h555WM50RmL8IevznO4e5B2zt+8juIqM FcepxSuJPc5wjnqx1x328F4fAIH+jp7STjU59msqL28qbP5QFG5YeW8iUmJLVnV4 lDKUV1wmjo/T9i2vRbCUMK0FKSAk/PRQ9fmaS/RGJFkWrKJZEV3aBK0thTqvOSK4 rn+Ax6RUmDQ3P1a0OZ2GrVdnarWJjODeEG4jN/hV -----END CERTIFICATE-----Generated at Wed Dec 31 07:21:14 2025 by rpki-client