This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3130332e3232382e3131362e302f32332d3233203d3e203536323432.roa File: 3130332e3232382e3131362e302f32332d3233203d3e203536323432.roa (raw, json) Hash identifier: Qs5YsAFrZGsUg7q3cUMLK3YDrimXUuGrA4ZkrObB+E4= Subject key identifier: 8F:17:DC:E1:E9:DE:46:89:2C:C4:91:F3:7E:64:F3:2C:FD:4D:0B:BB Certificate issuer: /CN=8469874AE268E2CD4E9A137EDD5599C748530E9E Certificate serial: 4E019C2121CCD5129659C2D0157198BF6A9BFE1A Authority key identifier: 84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3130332e3232382e3131362e302f32332d3233203d3e203536323432.roa Signing time: Sat 13 Dec 2025 08:00:00 +0000 ROA not before: Sat 13 Dec 2025 07:55:00 +0000 ROA not after: Sat 12 Dec 2026 08:00:00 +0000 asID: 56242 IP address blocks: 103.228.116.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 04:25:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:01:9c:21:21:cc:d5:12:96:59:c2:d0:15:71:98:bf:6a:9b:fe:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8469874AE268E2CD4E9A137EDD5599C748530E9E Validity Not Before: Dec 13 07:55:00 2025 GMT Not After : Dec 12 08:00:00 2026 GMT Subject: CN=8F17DCE1E9DE46892CC491F37E64F32CFD4D0BBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:d3:56:2e:bf:3d:18:f0:41:b1:96:75:ad:ac: 3b:b1:26:4c:98:81:59:83:fb:76:be:e5:5a:f8:64: f6:d2:de:05:13:72:9a:98:f1:d1:c4:08:8d:e6:3b: 16:32:ed:15:9e:9a:bd:3f:f3:48:3e:14:26:79:54: db:5a:0f:36:19:29:63:90:c1:10:6d:6d:38:df:1a: 89:78:61:62:41:54:8b:03:18:4f:c0:ac:b7:97:2d: c6:3f:59:b4:d5:6f:10:1b:01:ae:53:37:06:4e:df: 94:43:7d:b2:42:4c:7a:53:12:cc:95:fb:49:e2:0c: 83:87:e3:1b:94:c6:d5:34:34:a7:ef:c9:41:bf:58: ef:37:f4:94:16:7c:62:8c:87:77:46:f9:e3:6f:17: 7f:13:6f:42:f4:0b:25:99:68:97:c7:ce:90:81:45: 6d:7d:86:f6:1e:19:20:3b:0a:ce:84:31:e3:ec:35: 2d:88:0b:3e:9b:b1:47:a3:82:9c:65:eb:72:d8:4b: cb:cc:cc:e0:4f:d2:df:f8:49:a1:a3:45:3e:47:dc: cb:3f:f7:e0:d0:a2:2b:31:73:ab:c8:4c:39:c8:6c: 85:b9:0a:60:27:42:74:01:3a:44:a9:af:aa:ff:6e: ff:c9:0a:97:69:84:e7:1e:47:28:6b:46:a0:c1:55: 77:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:17:DC:E1:E9:DE:46:89:2C:C4:91:F3:7E:64:F3:2C:FD:4D:0B:BB X509v3 Authority Key Identifier: keyid:84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3130332e3232382e3131362e302f32332d3233203d3e203536323432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.228.116.0/23 Signature Algorithm: sha256WithRSAEncryption 91:08:d5:66:dd:da:42:3f:9d:20:f7:9f:13:fa:af:4b:8c:59: 98:e4:19:c1:4c:08:7d:98:de:3f:21:e9:86:4c:f8:18:75:46: 69:dc:51:bf:d4:dd:d1:33:55:a2:e7:39:49:04:04:96:29:ab: 9a:3d:27:3b:65:89:d0:5e:08:70:aa:49:de:4c:46:e6:1a:38: ed:a1:29:28:e9:a8:7a:36:4a:1a:ca:24:fb:34:81:53:5b:28: d6:85:88:fa:6e:d0:b4:20:f0:2f:0e:cc:48:97:df:d5:d9:29: 08:06:65:a9:fe:b1:86:c8:14:18:af:18:17:8d:1d:2c:c9:08: c6:af:b1:29:21:2e:ed:05:32:7b:aa:66:42:2b:50:cc:27:6e: b2:be:f8:ad:df:1a:88:83:75:b4:85:6d:ae:1d:7a:a7:a9:40: 37:71:e1:f2:f2:db:5f:18:e6:12:be:3d:66:a6:5c:02:7e:5d: 66:b7:9d:dd:49:c4:84:0d:87:ec:58:9b:d2:46:a2:24:e1:cd: 49:49:fb:74:9a:c7:df:aa:49:16:4e:45:96:0f:c9:4c:41:e7: d9:ca:11:b0:81:18:c5:00:b2:49:e1:0f:8a:f7:f8:d8:04:4b: 6b:72:0f:d8:68:f0:5e:78:a7:9e:69:37:00:19:de:ab:aa:9c: 92:19:4b:6b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUTgGcISHM1RKWWcLQFXGYv2qb/howDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ2OTg3NEFFMjY4RTJDRDRFOUExMzdFREQ1NTk5Qzc0 ODUzMEU5RTAeFw0yNTEyMTMwNzU1MDBaFw0yNjEyMTIwODAwMDBaMDMxMTAvBgNV BAMTKDhGMTdEQ0UxRTlERTQ2ODkyQ0M0OTFGMzdFNjRGMzJDRkQ0RDBCQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy01Yuvz0Y8EGxlnWtrDuxJkyY gVmD+3a+5Vr4ZPbS3gUTcpqY8dHECI3mOxYy7RWemr0/80g+FCZ5VNtaDzYZKWOQ wRBtbTjfGol4YWJBVIsDGE/ArLeXLcY/WbTVbxAbAa5TNwZO35RDfbJCTHpTEsyV +0niDIOH4xuUxtU0NKfvyUG/WO839JQWfGKMh3dG+eNvF38Tb0L0CyWZaJfHzpCB RW19hvYeGSA7Cs6EMePsNS2ICz6bsUejgpxl63LYS8vMzOBP0t/4SaGjRT5H3Ms/ 9+DQoisxc6vITDnIbIW5CmAnQnQBOkSpr6r/bv/JCpdphOceRyhrRqDBVXcxAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUjxfc4eneRoksxJHzfmTzLP1NC7swHwYDVR0j BBgwFoAUhGmHSuJo4s1OmhN+3VWZx0hTDp4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2EyZDI1Yi1jYjE4LTQ1YmUtOWZhMS0xNTRjYTE1NzkyMjMvMC84NDY5ODc0QUUy NjhFMkNENEU5QTEzN0VERDU1OTlDNzQ4NTMwRTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ2OTg3NEFFMjY4RTJDRDRFOUExMzdFREQ1NTk5Qzc0ODUz MEU5RS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE3YTJkMjViLWNiMTgtNDViZS05 ZmExLTE1NGNhMTU3OTIyMy8wLzMxMzAzMzJlMzIzMjM4MmUzMTMxMzYyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzNTM2MzIzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ+R0MA0GCSqG SIb3DQEBCwUAA4IBAQCRCNVm3dpCP50g958T+q9LjFmY5BnBTAh9mN4/IemGTPgY dUZp3FG/1N3RM1Wi5zlJBASWKauaPSc7ZYnQXghwqkneTEbmGjjtoSko6ah6Nkoa yiT7NIFTWyjWhYj6btC0IPAvDsxIl9/V2SkIBmWp/rGGyBQYrxgXjR0syQjGr7Ep IS7tBTJ7qmZCK1DMJ26yvvit3xqIg3W0hW2uHXqnqUA3ceHy8ttfGOYSvj1mplwC fl1mt53dScSEDYfsWJvSRqIk4c1JSft0msffqkkWTkWWD8lMQefZyhGwgRjFALJJ 4Q+K9/jYBEtrcg/YaPBeeKeeaTcAGd6rqpySGUtr -----END CERTIFICATE-----Generated at Fri Dec 19 12:57:23 2025 by rpki-client