This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/3130332e3233362e3135302e302f32342d3234203d3e203535363634.roa File: 3130332e3233362e3135302e302f32342d3234203d3e203535363634.roa (raw, json) Hash identifier: 2gNt0b6scD0Vr6P6DjjlOCkxUmLu97iptlipFu8yVHU= Subject key identifier: 2B:12:47:1D:DE:D9:F5:A9:DB:BF:13:BA:D2:05:3B:19:05:2F:9B:27 Certificate issuer: /CN=7932E1C92B451A2FD7A5E85B541135E25AD074D5 Certificate serial: 32CA4E26B78887506F7B530FA2A4EA612161B87A Authority key identifier: 79:32:E1:C9:2B:45:1A:2F:D7:A5:E8:5B:54:11:35:E2:5A:D0:74:D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7932E1C92B451A2FD7A5E85B541135E25AD074D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/3130332e3233362e3135302e302f32342d3234203d3e203535363634.roa Signing time: Tue 09 Dec 2025 11:33:43 +0000 ROA not before: Tue 09 Dec 2025 11:28:43 +0000 ROA not after: Tue 08 Dec 2026 11:33:43 +0000 asID: 55664 IP address blocks: 103.236.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/7932E1C92B451A2FD7A5E85B541135E25AD074D5.crl rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/7932E1C92B451A2FD7A5E85B541135E25AD074D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7932E1C92B451A2FD7A5E85B541135E25AD074D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 08:24:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:ca:4e:26:b7:88:87:50:6f:7b:53:0f:a2:a4:ea:61:21:61:b8:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7932E1C92B451A2FD7A5E85B541135E25AD074D5 Validity Not Before: Dec 9 11:28:43 2025 GMT Not After : Dec 8 11:33:43 2026 GMT Subject: CN=2B12471DDED9F5A9DBBF13BAD2053B19052F9B27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:03:43:51:a1:1a:4c:36:24:d4:b8:42:55:30: 20:ae:c5:f2:4f:0c:c8:85:a9:05:39:6e:eb:6a:b5: 52:67:7d:cb:6e:f0:d5:14:39:fc:3a:cf:17:08:e1: e4:69:a0:f0:c8:74:92:25:64:ee:cf:fa:c4:41:f7: 11:a7:78:2f:52:2f:15:3e:c2:5b:4c:73:54:6e:7d: 4a:f6:82:f2:31:02:ae:48:95:8b:c0:7a:88:64:d8: 75:e0:a0:62:81:8d:db:a3:bf:6f:64:9b:c7:bd:fa: fb:a2:d1:64:e4:7d:3b:34:58:6a:cf:aa:0f:41:6b: 75:d6:38:15:0d:8b:4a:8b:47:43:a8:1f:73:1c:20: a5:43:77:2b:83:72:e9:02:30:62:75:92:72:46:d4: 4b:b7:ca:d6:03:c6:8f:78:41:bc:b5:c1:ff:7c:55: 1c:da:3b:d0:53:f5:d0:aa:73:ac:6d:35:8c:88:ad: d6:09:04:d2:0f:c3:6b:2f:b6:e7:0e:ea:83:73:a2: ca:98:71:3e:7e:86:9f:31:1d:9a:7e:af:38:14:0c: 1a:e4:c5:53:63:29:66:70:59:a7:8c:00:bc:9e:b9: 6c:66:bf:6e:4c:a3:0b:1a:56:d6:8f:3f:26:10:23: f8:be:aa:f7:83:c3:f6:fb:05:08:64:d3:30:0f:c2: fe:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:12:47:1D:DE:D9:F5:A9:DB:BF:13:BA:D2:05:3B:19:05:2F:9B:27 X509v3 Authority Key Identifier: keyid:79:32:E1:C9:2B:45:1A:2F:D7:A5:E8:5B:54:11:35:E2:5A:D0:74:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/7932E1C92B451A2FD7A5E85B541135E25AD074D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7932E1C92B451A2FD7A5E85B541135E25AD074D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/3130332e3233362e3135302e302f32342d3234203d3e203535363634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.236.150.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:28:44:c4:9e:9a:31:07:8b:97:19:d7:5b:50:e3:96:01:59: 72:f7:a5:eb:ed:df:6a:2a:d3:e8:27:f0:bc:83:95:c9:e3:b6: a5:05:2e:06:34:29:e8:97:5e:40:45:b9:4f:a7:a1:e5:55:e7: 30:e8:53:c4:aa:fd:ff:cd:b0:16:c7:5c:18:ec:46:0e:68:d4: 73:9e:84:49:66:f1:01:37:c2:fd:59:00:b6:8b:fa:77:bb:37: fe:1c:6a:8c:8e:c5:9f:f1:14:34:38:38:87:33:b8:33:22:d5: a8:46:bb:95:05:3c:96:2f:a3:65:b4:00:6f:77:85:45:e9:c9: e0:9c:63:7e:81:e8:c5:a7:5a:a6:cd:42:34:5b:72:d1:1d:12: 28:da:65:c2:b1:23:9a:54:cf:6b:02:87:3f:93:d3:c8:2d:b5: 18:de:72:80:71:bc:5d:18:d6:61:57:f1:78:5a:22:0d:f4:04: 67:ca:f9:d0:81:20:00:e9:41:a3:b2:9f:9a:28:b8:19:de:cb: 57:72:dc:32:77:11:a0:9c:d6:e9:a4:89:9b:9f:95:74:8d:73: ba:d3:4a:0e:ff:e5:b2:39:c9:d6:69:a4:b3:77:2a:9d:25:c6: f6:24:97:4e:2a:9d:6a:90:94:9e:30:04:0d:b8:0d:78:f8:dd: cc:47:bf:e3 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUMspOJreIh1Bve1MPoqTqYSFhuHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzkzMkUxQzkyQjQ1MUEyRkQ3QTVFODVCNTQxMTM1RTI1 QUQwNzRENTAeFw0yNTEyMDkxMTI4NDNaFw0yNjEyMDgxMTMzNDNaMDMxMTAvBgNV BAMTKDJCMTI0NzFEREVEOUY1QTlEQkJGMTNCQUQyMDUzQjE5MDUyRjlCMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTA0NRoRpMNiTUuEJVMCCuxfJP DMiFqQU5butqtVJnfctu8NUUOfw6zxcI4eRpoPDIdJIlZO7P+sRB9xGneC9SLxU+ wltMc1RufUr2gvIxAq5IlYvAeohk2HXgoGKBjdujv29km8e9+vui0WTkfTs0WGrP qg9Ba3XWOBUNi0qLR0OoH3McIKVDdyuDcukCMGJ1knJG1Eu3ytYDxo94Qby1wf98 VRzaO9BT9dCqc6xtNYyIrdYJBNIPw2svtucO6oNzosqYcT5+hp8xHZp+rzgUDBrk xVNjKWZwWaeMALyeuWxmv25MowsaVtaPPyYQI/i+qveDw/b7BQhk0zAPwv4rAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUKxJHHd7Z9anbvxO60gU7GQUvmycwHwYDVR0j BBgwFoAUeTLhyStFGi/XpehbVBE14lrQdNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGE3OTc1NS0yMzhhLTQ2ZDItYjA1Mi0zMDU4N2JmOWVmZjcvMC83OTMyRTFDOTJC NDUxQTJGRDdBNUU4NUI1NDExMzVFMjVBRDA3NEQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzkzMkUxQzkyQjQ1MUEyRkQ3QTVFODVCNTQxMTM1RTI1QUQw NzRENS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI4YTc5NzU1LTIzOGEtNDZkMi1i MDUyLTMwNTg3YmY5ZWZmNy8wLzMxMzAzMzJlMzIzMzM2MmUzMTM1MzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNTM1MzYzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+yWMA0GCSqG SIb3DQEBCwUAA4IBAQAKKETEnpoxB4uXGddbUOOWAVly96Xr7d9qKtPoJ/C8g5XJ 47alBS4GNCnol15ARblPp6HlVecw6FPEqv3/zbAWx1wY7EYOaNRznoRJZvEBN8L9 WQC2i/p3uzf+HGqMjsWf8RQ0ODiHM7gzItWoRruVBTyWL6NltABvd4VF6cngnGN+ gejFp1qmzUI0W3LRHRIo2mXCsSOaVM9rAoc/k9PILbUY3nKAcbxdGNZhV/F4WiIN 9ARnyvnQgSAA6UGjsp+aKLgZ3stXctwydxGgnNbppImbn5V0jXO600oO/+WyOcnW aaSzdyqdJcb2JJdOKp1qkJSeMAQNuA14+N3MR7/j -----END CERTIFICATE-----Generated at Fri Dec 19 12:18:30 2025 by rpki-client