This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/3130332e3134382e38342e302f32332d3233203d3e20313339393836.roa File: 3130332e3134382e38342e302f32332d3233203d3e20313339393836.roa (raw, json) Hash identifier: wl5DevhHVxkmwfDCCC4JaJfUTNabYHb/Lh+cHr1YoI8= Subject key identifier: 9C:B5:E1:CF:4D:4C:9E:AD:4B:6A:6A:CB:1D:27:E8:26:26:33:F7:5D Certificate issuer: /CN=95C3BA7F23B6351721F77DA8020731F9DA46B3C8 Certificate serial: 639EF7198A4D59984FBEDDAB05BECB1CDCD20BAC Authority key identifier: 95:C3:BA:7F:23:B6:35:17:21:F7:7D:A8:02:07:31:F9:DA:46:B3:C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/3130332e3134382e38342e302f32332d3233203d3e20313339393836.roa Signing time: Wed 10 Dec 2025 10:00:02 +0000 ROA not before: Wed 10 Dec 2025 09:55:02 +0000 ROA not after: Wed 09 Dec 2026 10:00:02 +0000 asID: 139986 IP address blocks: 103.148.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 03:08:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:9e:f7:19:8a:4d:59:98:4f:be:dd:ab:05:be:cb:1c:dc:d2:0b:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95C3BA7F23B6351721F77DA8020731F9DA46B3C8 Validity Not Before: Dec 10 09:55:02 2025 GMT Not After : Dec 9 10:00:02 2026 GMT Subject: CN=9CB5E1CF4D4C9EAD4B6A6ACB1D27E8262633F75D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:86:b1:83:20:7f:c1:ed:56:f9:fb:2e:d6:74: be:cb:a5:41:12:ac:c5:cb:b8:b6:ec:87:14:ee:0a: c9:ff:29:14:6b:c8:02:4d:5d:d9:0c:a1:61:66:8a: 67:26:fd:ff:f8:90:8e:69:d1:05:ad:87:b5:25:6b: 8a:20:fe:73:50:61:4b:ec:60:8f:5d:b5:63:bf:a0: cd:4a:37:34:33:2d:61:70:9c:4b:b5:e0:e5:be:76: d4:d9:00:48:59:58:1a:15:fd:2a:a2:2b:8c:05:e0: 5b:a8:2a:49:8f:cd:5a:89:68:12:13:9d:5e:8f:28: c7:1e:6a:8a:12:9a:12:de:7a:75:e8:9d:b1:c9:c6: d8:c8:13:e3:03:be:5d:cc:dc:13:43:f2:4b:8b:68: f7:d4:d9:32:ee:da:45:8e:97:aa:d8:7f:c7:1a:5b: a4:21:27:e3:f4:85:db:0c:98:e2:b5:61:fa:68:1c: 54:3d:3c:4e:82:6e:b1:14:f4:7f:66:91:80:ac:66: 38:7e:ab:08:6b:f5:bc:39:f1:22:3a:04:72:89:58: 3c:b3:84:d8:5d:65:5c:06:16:f5:70:4c:2f:36:7e: 4d:06:cf:1c:71:91:b4:8d:41:25:c2:dd:d1:05:d5: b3:db:3d:7f:f4:8a:82:9d:42:80:61:8b:6a:02:ca: f1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B5:E1:CF:4D:4C:9E:AD:4B:6A:6A:CB:1D:27:E8:26:26:33:F7:5D X509v3 Authority Key Identifier: keyid:95:C3:BA:7F:23:B6:35:17:21:F7:7D:A8:02:07:31:F9:DA:46:B3:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/3130332e3134382e38342e302f32332d3233203d3e20313339393836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.84.0/23 Signature Algorithm: sha256WithRSAEncryption 3c:37:f4:e2:f6:fd:4f:df:92:0a:fb:9d:83:57:8a:06:6f:85: 26:46:ea:2f:d2:88:2e:60:af:fa:47:b8:a8:33:f6:e1:34:67: ab:1c:cb:df:b4:fa:a0:51:14:6a:b0:26:33:cc:54:1c:de:d8: b2:32:7e:de:db:40:6d:9f:b5:e8:d9:e4:e1:ef:6b:81:df:49: d5:95:2e:1b:22:30:b9:fa:eb:1f:6c:f1:91:7e:da:29:f4:44: 01:4d:0a:b5:cd:56:c9:a7:b0:c2:e0:d4:37:0e:a2:ff:df:e8: 42:1b:12:3d:80:8f:9a:5c:e6:00:ab:13:a1:b1:e9:33:35:0f: c0:ef:e2:6e:c0:f8:e1:ca:74:f9:14:d1:8b:ec:19:d0:9c:86: 23:46:99:cf:5d:6f:28:95:3d:37:90:2c:6b:d0:74:15:9b:fd: b2:f4:22:f1:a3:74:04:1b:50:69:31:c0:2e:1f:dd:8c:7a:37: ff:99:79:9e:d6:23:98:23:d6:e8:ce:08:00:e7:3f:3e:36:05: 63:71:a7:e7:fe:02:60:aa:0b:f2:92:6d:28:09:12:e9:55:f5: c3:11:af:b6:b7:e3:18:44:e2:11:a8:0d:e3:f3:2b:1c:53:07: b8:63:5a:cd:17:41:80:4f:55:6c:44:5f:fa:0f:f6:04:9a:2e: 7c:c3:59:ee -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUY573GYpNWZhPvt2rBb7LHNzSC6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVDM0JBN0YyM0I2MzUxNzIxRjc3REE4MDIwNzMxRjlE QTQ2QjNDODAeFw0yNTEyMTAwOTU1MDJaFw0yNjEyMDkxMDAwMDJaMDMxMTAvBgNV BAMTKDlDQjVFMUNGNEQ0QzlFQUQ0QjZBNkFDQjFEMjdFODI2MjYzM0Y3NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZhrGDIH/B7Vb5+y7WdL7LpUES rMXLuLbshxTuCsn/KRRryAJNXdkMoWFmimcm/f/4kI5p0QWth7Ula4og/nNQYUvs YI9dtWO/oM1KNzQzLWFwnEu14OW+dtTZAEhZWBoV/SqiK4wF4FuoKkmPzVqJaBIT nV6PKMceaooSmhLeenXonbHJxtjIE+MDvl3M3BND8kuLaPfU2TLu2kWOl6rYf8ca W6QhJ+P0hdsMmOK1YfpoHFQ9PE6CbrEU9H9mkYCsZjh+qwhr9bw58SI6BHKJWDyz hNhdZVwGFvVwTC82fk0GzxxxkbSNQSXC3dEF1bPbPX/0ioKdQoBhi2oCyvFlAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUnLXhz01Mnq1LamrLHSfoJiYz910wHwYDVR0j BBgwFoAUlcO6fyO2NRch932oAgcx+dpGs8gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDBlOWM5Zi1kNjA3LTQ0OTctYWYyOC00ZDJiOTA5MmQ1YTYvMC85NUMzQkE3RjIz QjYzNTE3MjFGNzdEQTgwMjA3MzFGOURBNDZCM0M4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVDM0JBN0YyM0I2MzUxNzIxRjc3REE4MDIwNzMxRjlEQTQ2 QjNDOC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE0MGU5YzlmLWQ2MDctNDQ5Ny1h ZjI4LTRkMmI5MDkyZDVhNi8wLzMxMzAzMzJlMzEzNDM4MmUzODM0MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzMzM5MzkzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5RUMA0GCSqG SIb3DQEBCwUAA4IBAQA8N/Ti9v1P35IK+52DV4oGb4UmRuov0oguYK/6R7ioM/bh NGerHMvftPqgURRqsCYzzFQc3tiyMn7e20Btn7Xo2eTh72uB30nVlS4bIjC5+usf bPGRftop9EQBTQq1zVbJp7DC4NQ3DqL/3+hCGxI9gI+aXOYAqxOhsekzNQ/A7+Ju wPjhynT5FNGL7BnQnIYjRpnPXW8olT03kCxr0HQVm/2y9CLxo3QEG1BpMcAuH92M ejf/mXme1iOYI9bozggA5z8+NgVjcafn/gJgqgvykm0oCRLpVfXDEa+2t+MYROIR qA3j8yscUwe4Y1rNF0GAT1VsRF/6D/YEmi58w1nu -----END CERTIFICATE-----Generated at Fri Dec 19 14:35:10 2025 by rpki-client