This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/3130332e3139312e3135332e302f32342d3234203d3e203338353234.roa File: 3130332e3139312e3135332e302f32342d3234203d3e203338353234.roa (raw, json) Hash identifier: 79HlO+LSLY3tmhIbxY08KatYQ7yRtRdViTkMJQak98w= Subject key identifier: 1D:9C:EC:91:CF:E8:17:B0:46:F3:12:BA:5A:6A:10:A4:9D:41:60:F7 Certificate issuer: /CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47 Certificate serial: 201B8B288373B54B1E13948A1F3B30D40D33C4BC Authority key identifier: 28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/3130332e3139312e3135332e302f32342d3234203d3e203338353234.roa Signing time: Tue 09 Dec 2025 16:37:46 +0000 ROA not before: Tue 09 Dec 2025 16:32:46 +0000 ROA not after: Tue 08 Dec 2026 16:37:46 +0000 asID: 38524 IP address blocks: 103.191.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 17:55:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:1b:8b:28:83:73:b5:4b:1e:13:94:8a:1f:3b:30:d4:0d:33:c4:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47 Validity Not Before: Dec 9 16:32:46 2025 GMT Not After : Dec 8 16:37:46 2026 GMT Subject: CN=1D9CEC91CFE817B046F312BA5A6A10A49D4160F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:3d:11:49:96:d4:ee:be:8c:fe:5e:dc:4a:37: f8:d1:fd:d2:85:2b:fe:21:13:54:81:43:6d:0c:1a: 5e:33:90:89:04:63:25:1c:83:85:57:79:31:44:de: 45:41:48:f0:d6:d9:de:b9:9f:fc:c6:f7:7b:1a:38: dc:f0:18:b2:ba:05:c4:3e:a6:53:db:fa:ec:92:70: 5e:46:3c:9f:bb:80:fa:b3:9e:b1:03:2a:5c:a9:46: fd:ff:4e:9d:5e:ca:e8:d4:98:91:b9:66:16:1c:5e: 53:73:d7:b4:f6:9b:c8:f5:eb:b8:6c:99:fe:4a:1d: 8f:fe:3c:de:3b:e0:62:c4:d1:78:19:1e:79:35:ce: 84:30:fd:35:b2:44:cf:a2:c2:2a:a2:00:af:7f:49: 5e:2d:2a:71:5e:2e:6c:75:45:2a:a4:a6:5d:a4:58: 7f:65:36:5e:a3:3a:2b:91:45:92:b5:e1:12:6b:d3: 8a:da:ab:45:6e:82:9a:0c:20:8a:9d:7f:4c:4e:4d: 47:65:25:44:58:55:23:83:16:9f:aa:36:4c:d4:48: f7:99:f4:0e:9b:21:ac:a9:a9:7f:3e:e4:b8:c7:95: 9c:ad:07:f2:45:93:d1:b3:8d:a2:19:86:41:ad:93: 0e:88:fc:cd:87:f1:83:d4:46:03:2e:25:e1:fe:f6: f2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:9C:EC:91:CF:E8:17:B0:46:F3:12:BA:5A:6A:10:A4:9D:41:60:F7 X509v3 Authority Key Identifier: keyid:28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/3130332e3139312e3135332e302f32342d3234203d3e203338353234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.153.0/24 Signature Algorithm: sha256WithRSAEncryption 79:22:e7:a7:1c:a0:37:37:a3:55:0c:02:5e:32:8e:69:cd:b5: 0f:63:73:ea:62:e3:ed:c8:6f:3d:ec:a5:91:95:6b:35:85:da: 14:e2:79:71:f9:42:2a:41:61:78:75:32:a1:8f:7b:5a:a3:0b: 52:c9:ee:f5:9b:9b:09:50:0a:5b:f8:23:8c:4a:09:d5:6e:11: 83:d7:a3:7a:ff:19:9e:fa:cd:03:e0:ef:6e:cf:07:90:1f:28: 60:dd:78:01:7d:ee:41:0c:00:cc:fa:0d:62:87:27:36:27:2b: f9:f7:9b:68:c0:4d:95:7c:18:72:51:69:0e:72:b5:8c:31:47: 0b:b9:aa:f3:70:21:56:8b:98:75:ba:dc:16:8d:3f:93:4a:73: 90:27:83:ee:65:21:2f:b0:a6:ab:94:bd:a4:38:ae:5e:58:a6: f1:af:28:f1:18:f6:12:5b:1f:88:3a:4a:34:24:3a:10:f2:db: 10:b7:ae:bc:3f:26:71:f3:b4:d9:7c:06:71:fb:00:e9:21:9d: 5c:08:41:c8:3c:b8:36:0e:09:40:40:3b:cb:b3:e8:46:f2:31: 1e:a0:c0:85:85:3f:36:a3:6d:8f:78:31:8c:4a:e0:e0:72:fc: 03:23:37:a6:d3:19:fa:b9:aa:15:3a:72:4d:fa:7d:b8:d9:97: 28:48:a3:b7 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUIBuLKINztUseE5SKHzsw1A0zxLwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNFNTA0 MzFGMEY0NzAeFw0yNTEyMDkxNjMyNDZaFw0yNjEyMDgxNjM3NDZaMDMxMTAvBgNV BAMTKDFEOUNFQzkxQ0ZFODE3QjA0NkYzMTJCQTVBNkExMEE0OUQ0MTYwRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4PRFJltTuvoz+XtxKN/jR/dKF K/4hE1SBQ20MGl4zkIkEYyUcg4VXeTFE3kVBSPDW2d65n/zG93saONzwGLK6BcQ+ plPb+uyScF5GPJ+7gPqznrEDKlypRv3/Tp1eyujUmJG5ZhYcXlNz17T2m8j167hs mf5KHY/+PN474GLE0XgZHnk1zoQw/TWyRM+iwiqiAK9/SV4tKnFeLmx1RSqkpl2k WH9lNl6jOiuRRZK14RJr04raq0VugpoMIIqdf0xOTUdlJURYVSODFp+qNkzUSPeZ 9A6bIaypqX8+5LjHlZytB/JFk9GzjaIZhkGtkw6I/M2H8YPURgMuJeH+9vLbAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUHZzskc/oF7BG8xK6WmoQpJ1BYPcwHwYDVR0j BBgwFoAUKKv4UipDz3zHJXkFpbo+UEMfD0cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NmE2Y2ExMi1iMjg3LTRhYzctODdiOC02Y2Q3MzM1M2U2N2YvMC8yOEFCRjg1MjJB NDNDRjdDQzcyNTc5MDVBNUJBM0U1MDQzMUYwRjQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNFNTA0MzFG MEY0Ny5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI2YTZjYTEyLWIyODctNGFjNy04 N2I4LTZjZDczMzUzZTY3Zi8wLzMxMzAzMzJlMzEzOTMxMmUzMTM1MzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzUzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7+ZMA0GCSqG SIb3DQEBCwUAA4IBAQB5IuenHKA3N6NVDAJeMo5pzbUPY3PqYuPtyG897KWRlWs1 hdoU4nlx+UIqQWF4dTKhj3taowtSye71m5sJUApb+COMSgnVbhGD16N6/xme+s0D 4O9uzweQHyhg3XgBfe5BDADM+g1ihyc2Jyv595towE2VfBhyUWkOcrWMMUcLuarz cCFWi5h1utwWjT+TSnOQJ4PuZSEvsKarlL2kOK5eWKbxryjxGPYSWx+IOko0JDoQ 8tsQt668PyZx87TZfAZx+wDpIZ1cCEHIPLg2DglAQDvLs+hG8jEeoMCFhT82o22P eDGMSuDgcvwDIzem0xn6uaoVOnJN+n242ZcoSKO3 -----END CERTIFICATE-----Generated at Sat Dec 20 12:19:37 2025 by rpki-client