This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/3130332e3134372e31302e302f32332d3234203d3e20313339393435.roa File: 3130332e3134372e31302e302f32332d3234203d3e20313339393435.roa (raw, json) Hash identifier: m1QpsKWNC41Yh1C09h9LTHnCTbrVYQeuxu9fgYg+m8o= Subject key identifier: 8B:84:E8:68:10:02:B6:9A:40:56:15:4F:3A:BF:72:BE:08:FE:92:0F Certificate issuer: /CN=CF2362E92169BC7C5B93E1CA38A3BF909879C05A Certificate serial: 17AB83DE29C606E1B176AF13D0F709E114F4A465 Authority key identifier: CF:23:62:E9:21:69:BC:7C:5B:93:E1:CA:38:A3:BF:90:98:79:C0:5A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/3130332e3134372e31302e302f32332d3234203d3e20313339393435.roa Signing time: Tue 09 Dec 2025 05:01:44 +0000 ROA not before: Tue 09 Dec 2025 04:56:44 +0000 ROA not after: Tue 08 Dec 2026 05:01:44 +0000 asID: 139945 IP address blocks: 103.147.10.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.crl rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 21:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:ab:83:de:29:c6:06:e1:b1:76:af:13:d0:f7:09:e1:14:f4:a4:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF2362E92169BC7C5B93E1CA38A3BF909879C05A Validity Not Before: Dec 9 04:56:44 2025 GMT Not After : Dec 8 05:01:44 2026 GMT Subject: CN=8B84E8681002B69A4056154F3ABF72BE08FE920F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9b:b9:a0:01:07:f2:79:1c:6d:08:ff:46:b6: 9c:6a:73:21:05:39:48:a8:57:fc:f0:f8:92:74:83: f8:fc:d5:ff:76:cd:be:cb:ff:79:0b:1c:f6:8e:9b: d7:83:bb:76:23:6b:f7:5b:86:b5:22:e6:c7:37:e2: 52:fd:05:18:bf:6e:79:ed:63:d6:4f:9e:63:d3:80: 8b:e3:14:05:95:c9:18:70:d6:b2:37:9e:1d:c6:e5: 62:72:cb:e4:a3:8b:94:8b:fa:36:b5:77:b0:e2:e5: 5c:96:0c:5c:ac:2f:93:40:70:41:52:df:d1:e2:c8: ef:2e:e3:03:3f:d6:51:74:f9:82:1f:59:04:22:3e: b7:b0:25:3f:d0:23:fe:b5:ce:3b:1f:84:ad:83:d0: f3:77:87:30:f7:ff:98:4d:3a:f1:4b:0a:dc:1a:ca: d6:e2:5c:9f:30:13:71:4f:16:e7:05:c4:89:d7:0c: 01:aa:bb:5f:cc:f9:f5:76:96:20:34:37:13:ca:16: 76:73:28:9c:65:f7:74:c8:f4:7e:4e:53:65:56:6c: eb:67:63:5f:21:be:9b:35:d9:4a:b8:73:0a:40:1a: 33:05:24:64:c7:a2:12:53:c5:ea:e7:99:f4:31:38: 0a:45:ee:35:76:8e:e9:ae:20:6d:82:9c:1e:74:6c: 23:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:84:E8:68:10:02:B6:9A:40:56:15:4F:3A:BF:72:BE:08:FE:92:0F X509v3 Authority Key Identifier: keyid:CF:23:62:E9:21:69:BC:7C:5B:93:E1:CA:38:A3:BF:90:98:79:C0:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/3130332e3134372e31302e302f32332d3234203d3e20313339393435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.10.0/23 Signature Algorithm: sha256WithRSAEncryption a3:e4:45:34:3e:d9:95:9a:33:d1:df:bd:07:7e:15:ac:98:6b: 0f:22:69:aa:53:14:e0:03:67:79:75:d0:72:74:a8:6f:59:b4: c8:9e:17:42:38:9e:af:40:f5:0c:8b:d2:56:46:7e:80:87:12: 38:9d:1e:cd:d0:31:ef:2f:29:f6:f9:8a:be:06:38:ec:84:e9: 09:c5:6c:65:27:5a:56:4e:cd:3d:96:78:1a:04:ca:28:52:85: 07:98:e5:e6:a1:5a:03:5f:4a:86:8e:32:2f:1b:8d:47:23:cb: d0:c8:6b:6e:41:ae:26:58:ec:9d:60:73:5b:36:b5:9e:83:96: a6:38:23:b8:6b:09:04:13:b3:2e:0d:97:72:36:a7:3d:93:01: 39:46:b3:30:30:e1:4d:56:f4:da:2e:2e:4c:97:2d:58:d4:5c: 0b:57:25:69:50:a6:50:21:f5:c8:c3:8b:c2:03:f1:d0:a6:7d: f5:88:4b:8d:1a:f9:ec:74:dd:48:6e:8d:58:e2:9e:fa:3a:b0: c5:fc:78:99:07:f2:40:0e:c6:4a:31:50:41:2a:54:87:92:f3: af:21:aa:8a:e5:7a:ca:67:a7:06:63:dd:30:dc:95:d1:44:cf: 85:7b:fd:3c:15:2a:c7:65:6a:b6:56:30:23:da:88:ad:2a:6f: 6c:60:7f:18 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUF6uD3inGBuGxdq8T0PcJ4RT0pGUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMzYyRTkyMTY5QkM3QzVCOTNFMUNBMzhBM0JGOTA5 ODc5QzA1QTAeFw0yNTEyMDkwNDU2NDRaFw0yNjEyMDgwNTAxNDRaMDMxMTAvBgNV BAMTKDhCODRFODY4MTAwMkI2OUE0MDU2MTU0RjNBQkY3MkJFMDhGRTkyMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCum7mgAQfyeRxtCP9GtpxqcyEF OUioV/zw+JJ0g/j81f92zb7L/3kLHPaOm9eDu3Yja/dbhrUi5sc34lL9BRi/bnnt Y9ZPnmPTgIvjFAWVyRhw1rI3nh3G5WJyy+Sji5SL+ja1d7Di5VyWDFysL5NAcEFS 39HiyO8u4wM/1lF0+YIfWQQiPrewJT/QI/61zjsfhK2D0PN3hzD3/5hNOvFLCtwa ytbiXJ8wE3FPFucFxInXDAGqu1/M+fV2liA0NxPKFnZzKJxl93TI9H5OU2VWbOtn Y18hvps12Uq4cwpAGjMFJGTHohJTxernmfQxOApF7jV2jumuIG2CnB50bCP9AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUi4ToaBACtppAVhVPOr9yvgj+kg8wHwYDVR0j BBgwFoAUzyNi6SFpvHxbk+HKOKO/kJh5wFowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTYyY2YzZC1kOWY3LTQ4YTktOTE1OS05ZjBkN2E0NzY3OTAvMC9DRjIzNjJFOTIx NjlCQzdDNUI5M0UxQ0EzOEEzQkY5MDk4NzlDMDVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0YyMzYyRTkyMTY5QkM3QzVCOTNFMUNBMzhBM0JGOTA5ODc5 QzA1QS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE1NjJjZjNkLWQ5ZjctNDhhOS05 MTU5LTlmMGQ3YTQ3Njc5MC8wLzMxMzAzMzJlMzEzNDM3MmUzMTMwMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzNDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5MKMA0GCSqG SIb3DQEBCwUAA4IBAQCj5EU0PtmVmjPR370HfhWsmGsPImmqUxTgA2d5ddBydKhv WbTInhdCOJ6vQPUMi9JWRn6AhxI4nR7N0DHvLyn2+Yq+BjjshOkJxWxlJ1pWTs09 lngaBMooUoUHmOXmoVoDX0qGjjIvG41HI8vQyGtuQa4mWOydYHNbNrWeg5amOCO4 awkEE7MuDZdyNqc9kwE5RrMwMOFNVvTaLi5Mly1Y1FwLVyVpUKZQIfXIw4vCA/HQ pn31iEuNGvnsdN1Ibo1Y4p76OrDF/HiZB/JADsZKMVBBKlSHkvOvIaqK5XrKZ6cG Y90w3JXRRM+Fe/08FSrHZWq2VjAj2oitKm9sYH8Y -----END CERTIFICATE-----Generated at Sun Dec 21 03:19:45 2025 by rpki-client