This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/3130332e3130322e3135322e302f32322d3233203d3e203538343034.roa File: 3130332e3130322e3135322e302f32322d3233203d3e203538343034.roa (raw, json) Hash identifier: 9AwLYbWK6KWwIboQ7EFHPbMUDIfxQTg43TwmX106/HI= Subject key identifier: 35:D4:82:6C:1A:08:E3:1D:1B:97:AF:D3:BF:1C:06:8A:4B:FD:9C:CC Certificate issuer: /CN=356EA38801BC51EF3EDB8730387F8EDEBD11898F Certificate serial: 4907EF86DF8E3BEE3F3B8049396EAAA9E3E1BA35 Authority key identifier: 35:6E:A3:88:01:BC:51:EF:3E:DB:87:30:38:7F:8E:DE:BD:11:89:8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/3130332e3130322e3135322e302f32322d3233203d3e203538343034.roa Signing time: Mon 22 Dec 2025 02:37:03 +0000 ROA not before: Mon 22 Dec 2025 02:32:03 +0000 ROA not after: Mon 21 Dec 2026 02:37:03 +0000 asID: 58404 IP address blocks: 103.102.152.0/22 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:07:ef:86:df:8e:3b:ee:3f:3b:80:49:39:6e:aa:a9:e3:e1:ba:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=356EA38801BC51EF3EDB8730387F8EDEBD11898F Validity Not Before: Dec 22 02:32:03 2025 GMT Not After : Dec 21 02:37:03 2026 GMT Subject: CN=35D4826C1A08E31D1B97AFD3BF1C068A4BFD9CCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e4:27:f8:20:d3:37:c1:a5:86:43:20:c1:87: 2f:81:3b:9b:25:28:cf:7f:c4:1e:01:5b:51:5a:1e: be:9e:5f:ea:97:e3:28:ed:42:07:63:fd:8f:c1:dc: bd:a8:d4:ec:bc:e9:7f:31:b1:d8:9b:2d:69:14:9e: bd:47:9b:17:4e:04:7e:8d:6e:ee:de:db:61:88:61: a3:16:9e:55:f2:1b:23:3d:2d:79:b6:38:9b:21:cd: 72:7d:78:a2:38:0d:c6:f9:d4:6a:14:ea:1d:f9:fb: 2a:ff:59:d3:fd:96:a2:e1:e2:8f:e7:b1:70:f1:2f: 9f:38:37:c9:e0:b4:11:ae:a1:da:66:52:6f:c1:98: ae:b5:2b:0d:d0:ec:1c:97:7c:18:1d:83:eb:3c:2d: 83:25:aa:cd:7a:7f:99:dc:56:78:38:a3:e6:84:24: 0a:b3:57:04:95:11:df:59:3f:84:5a:2c:bf:42:b2: f5:41:96:5a:78:80:e0:4d:44:4d:8e:16:9c:09:d6: 86:42:98:41:02:24:ce:11:16:85:3f:0c:85:77:85: 09:13:89:eb:5e:f6:22:b1:66:14:64:09:5c:c3:1a: 60:a5:b3:bb:21:11:39:95:98:1f:f3:22:d1:52:13: e2:50:8d:dc:59:ab:86:db:2d:99:94:d5:0d:bd:47: b5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D4:82:6C:1A:08:E3:1D:1B:97:AF:D3:BF:1C:06:8A:4B:FD:9C:CC X509v3 Authority Key Identifier: keyid:35:6E:A3:88:01:BC:51:EF:3E:DB:87:30:38:7F:8E:DE:BD:11:89:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/3130332e3130322e3135322e302f32322d3233203d3e203538343034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.102.152.0/22 Signature Algorithm: sha256WithRSAEncryption 3c:9f:a9:c6:f3:48:3b:9a:64:64:a8:68:37:c1:b5:56:10:ec: a7:f4:8b:ad:b8:75:04:4d:07:2a:45:0a:06:9d:1e:cd:3d:53: 5a:49:10:04:d9:21:4d:b9:d3:15:23:ec:71:a0:fc:37:8d:34: 45:56:f2:40:f2:5b:6b:03:31:da:ca:da:03:25:30:81:99:1b: c4:3d:8a:7c:6b:10:81:4e:08:8f:4c:33:3c:c0:5c:83:60:9b: 39:ea:cb:6b:1e:5b:52:3d:c2:a8:7c:d5:79:b4:d7:7b:6e:2d: a3:58:22:46:0d:cc:f0:b4:e7:06:5a:ac:73:63:fe:9c:d2:6b: 51:7b:c0:18:a0:3d:1a:34:95:d1:e0:fe:f5:f8:b1:4b:8f:ea: 94:a2:9e:5d:6f:47:8f:d5:46:50:4c:a6:c6:05:7f:47:be:c3: 76:ec:83:55:b1:f2:be:3c:9c:d0:92:5e:0a:88:0e:92:32:bd: 46:29:67:b0:62:5e:b5:f8:cc:b3:47:37:59:47:bc:3c:31:46: 0e:eb:93:8b:18:bc:57:33:5d:fd:63:4b:36:f1:cb:76:30:fe: aa:c5:90:91:85:0c:e4:fc:af:2a:21:ea:f2:7e:f7:5c:94:21: a3:d2:31:c3:c8:3f:1c:08:e2:c3:ca:a4:fc:84:f1:4c:4b:64: 84:ff:99:6f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUSQfvht+OO+4/O4BJOW6qqePhujUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhFREVC RDExODk4RjAeFw0yNTEyMjIwMjMyMDNaFw0yNjEyMjEwMjM3MDNaMDMxMTAvBgNV BAMTKDM1RDQ4MjZDMUEwOEUzMUQxQjk3QUZEM0JGMUMwNjhBNEJGRDlDQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk5Cf4INM3waWGQyDBhy+BO5sl KM9/xB4BW1FaHr6eX+qX4yjtQgdj/Y/B3L2o1Oy86X8xsdibLWkUnr1HmxdOBH6N bu7e22GIYaMWnlXyGyM9LXm2OJshzXJ9eKI4Dcb51GoU6h35+yr/WdP9lqLh4o/n sXDxL584N8ngtBGuodpmUm/BmK61Kw3Q7ByXfBgdg+s8LYMlqs16f5ncVng4o+aE JAqzVwSVEd9ZP4RaLL9CsvVBllp4gOBNRE2OFpwJ1oZCmEECJM4RFoU/DIV3hQkT iete9iKxZhRkCVzDGmCls7shETmVmB/zItFSE+JQjdxZq4bbLZmU1Q29R7VJAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUNdSCbBoI4x0bl6/TvxwGikv9nMwwHwYDVR0j BBgwFoAUNW6jiAG8Ue8+24cwOH+O3r0RiY8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjJiNmVkMi1jYzU4LTQ1YzUtYmQ4OC1jYjk1NTA3MTZhMDQvMC8zNTZFQTM4ODAx QkM1MUVGM0VEQjg3MzAzODdGOEVERUJEMTE4OThGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhFREVCRDEx ODk4Ri5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBmMmI2ZWQyLWNjNTgtNDVjNS1i ZDg4LWNiOTU1MDcxNmEwNC8wLzMxMzAzMzJlMzEzMDMyMmUzMTM1MzIyZTMwMmYz MjMyMmQzMjMzMjAzZDNlMjAzNTM4MzQzMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ2aYMA0GCSqG SIb3DQEBCwUAA4IBAQA8n6nG80g7mmRkqGg3wbVWEOyn9IutuHUETQcqRQoGnR7N PVNaSRAE2SFNudMVI+xxoPw3jTRFVvJA8ltrAzHaytoDJTCBmRvEPYp8axCBTgiP TDM8wFyDYJs56strHltSPcKofNV5tNd7bi2jWCJGDczwtOcGWqxzY/6c0mtRe8AY oD0aNJXR4P71+LFLj+qUop5db0eP1UZQTKbGBX9HvsN27INVsfK+PJzQkl4KiA6S Mr1GKWewYl61+MyzRzdZR7w8MUYO65OLGLxXM139Y0s28ct2MP6qxZCRhQzk/K8q IeryfvdclCGj0jHDyD8cCOLDyqT8hPFMS2SE/5lv -----END CERTIFICATE-----Generated at Wed Dec 24 22:03:34 2025 by rpki-client