This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/3130332e3132342e3133362e302f32332d3234203d3e20313338303839.roa File: 3130332e3132342e3133362e302f32332d3234203d3e20313338303839.roa (raw, json) Hash identifier: UcZisdRV6VpbDwvpN9+PovvAC3nXLEWnKVwQNbh4YQE= Subject key identifier: 8A:BA:A9:AE:E2:98:BA:72:DB:ED:D1:2F:48:00:6E:CC:50:30:85:DA Certificate issuer: /CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733 Certificate serial: 2C53B9F3ABDF24D9E0EE6225E312B0C2C372AFF8 Authority key identifier: 7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/3130332e3132342e3133362e302f32332d3234203d3e20313338303839.roa Signing time: Wed 10 Dec 2025 04:03:06 +0000 ROA not before: Wed 10 Dec 2025 03:58:06 +0000 ROA not after: Wed 09 Dec 2026 04:03:06 +0000 asID: 138089 IP address blocks: 103.124.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 05:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:53:b9:f3:ab:df:24:d9:e0:ee:62:25:e3:12:b0:c2:c3:72:af:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733 Validity Not Before: Dec 10 03:58:06 2025 GMT Not After : Dec 9 04:03:06 2026 GMT Subject: CN=8ABAA9AEE298BA72DBEDD12F48006ECC503085DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4b:32:74:33:66:9c:89:6f:46:b1:97:32:28: 04:8d:43:b4:63:a2:1d:a2:5c:7c:c8:e6:20:af:72: e0:3b:aa:1a:cd:4c:3b:25:cf:b6:f3:e1:00:6f:81: a3:45:b2:70:2b:7f:88:ba:65:e5:e2:3a:9b:23:1c: fd:97:77:03:de:12:8b:8a:2d:04:27:a8:4f:61:c6: 07:13:30:3a:37:0d:4d:a2:04:2d:93:22:8f:35:a5: bc:20:3d:2b:ea:19:56:b9:d5:a7:70:d7:55:37:60: 99:a0:90:e5:84:ab:a6:1b:1e:91:c3:ed:49:8b:fa: b1:5c:2d:ad:5e:42:31:bd:81:c8:7e:42:2c:c4:41: 0f:d5:7f:e0:7a:8f:22:e3:4d:82:50:a9:54:b0:bd: d4:71:90:03:a6:94:73:4f:29:5d:b8:09:c3:f0:52: 7f:f6:5c:ba:4f:95:15:24:30:f4:1d:b4:e2:fa:ef: 39:b5:9e:04:11:13:49:21:fe:f6:f3:93:b3:b8:88: 54:e8:e1:a6:30:39:d8:d2:bf:cf:0e:23:7e:46:c4: d7:54:43:28:ce:3a:94:55:08:a3:12:56:f1:9a:91: 41:d0:43:35:a5:39:15:6d:8e:53:a7:72:eb:16:a0: a7:32:1d:a8:25:63:cb:d4:6d:8c:ba:20:58:58:66: 4d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:BA:A9:AE:E2:98:BA:72:DB:ED:D1:2F:48:00:6E:CC:50:30:85:DA X509v3 Authority Key Identifier: keyid:7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/3130332e3132342e3133362e302f32332d3234203d3e20313338303839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.124.136.0/23 Signature Algorithm: sha256WithRSAEncryption 79:f0:3a:07:ad:e0:c4:4d:0e:cc:e1:2d:f7:19:88:94:2f:f2: df:94:b6:d8:04:15:aa:8d:90:ef:4d:3d:80:88:5f:4a:10:83: 6e:4c:20:19:b9:04:be:2b:49:8d:02:a6:30:51:3e:1f:d1:95: cf:72:29:75:1f:8c:48:20:fd:10:ee:2f:fb:0a:10:45:6d:e4: c1:1f:e3:b4:36:3e:46:c0:6c:8d:7c:8c:8f:4a:34:01:ad:a7: 22:52:e6:a2:84:10:ef:7c:a1:36:f6:3f:83:28:90:f3:ec:6c: ae:30:61:2d:9c:13:7e:40:8b:9a:62:69:9d:bf:65:86:f4:99: 02:9e:f2:78:d4:07:ff:db:c1:2e:6a:c4:ca:8f:f0:b1:30:9a: 66:05:90:af:f8:e7:ea:1d:1d:93:62:d4:6f:40:19:60:5f:ad: 7b:b6:26:55:e6:3a:ae:4b:ed:ab:29:64:51:05:b9:4b:78:f4: 2e:9d:84:bf:92:43:a9:5a:bc:98:29:b1:9d:f0:45:69:b9:32: 08:f7:aa:fa:c0:b2:1f:1f:8b:80:0d:64:57:2e:83:3d:29:2a: c6:37:32:37:f6:01:78:6f:d3:8a:dc:08:8d:d1:20:84:e0:86: 79:e6:0d:26:58:3e:3a:38:a3:4d:da:bd:1c:27:b9:a1:a0:50: 50:35:b1:ef -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIULFO586vfJNng7mIl4xKwwsNyr/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q0RjBEMDA3QjYwMTM0OTk2QUMzMTk4QjlFNUI3MUVB RjcwRTczMzAeFw0yNTEyMTAwMzU4MDZaFw0yNjEyMDkwNDAzMDZaMDMxMTAvBgNV BAMTKDhBQkFBOUFFRTI5OEJBNzJEQkVERDEyRjQ4MDA2RUNDNTAzMDg1REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrSzJ0M2aciW9GsZcyKASNQ7Rj oh2iXHzI5iCvcuA7qhrNTDslz7bz4QBvgaNFsnArf4i6ZeXiOpsjHP2XdwPeEouK LQQnqE9hxgcTMDo3DU2iBC2TIo81pbwgPSvqGVa51adw11U3YJmgkOWEq6YbHpHD 7UmL+rFcLa1eQjG9gch+QizEQQ/Vf+B6jyLjTYJQqVSwvdRxkAOmlHNPKV24CcPw Un/2XLpPlRUkMPQdtOL67zm1ngQRE0kh/vbzk7O4iFTo4aYwOdjSv88OI35GxNdU QyjOOpRVCKMSVvGakUHQQzWlORVtjlOncusWoKcyHaglY8vUbYy6IFhYZk0ZAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUirqpruKYunLb7dEvSABuzFAwhdowHwYDVR0j BBgwFoAUfU8NAHtgE0mWrDGYueW3Hq9w5zMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWJhNGU1OS1mYjMxLTQxYjUtODhlNy0wYjJjZWQxZjIwMWMvMC83RDRGMEQwMDdC NjAxMzQ5OTZBQzMxOThCOUU1QjcxRUFGNzBFNzMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q0RjBEMDA3QjYwMTM0OTk2QUMzMTk4QjlFNUI3MUVBRjcw RTczMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVhYmE0ZTU5LWZiMzEtNDFiNS04 OGU3LTBiMmNlZDFmMjAxYy8wLzMxMzAzMzJlMzEzMjM0MmUzMTMzMzYyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzgzMDM4Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnfIgwDQYJ KoZIhvcNAQELBQADggEBAHnwOget4MRNDszhLfcZiJQv8t+UttgEFaqNkO9NPYCI X0oQg25MIBm5BL4rSY0CpjBRPh/Rlc9yKXUfjEgg/RDuL/sKEEVt5MEf47Q2PkbA bI18jI9KNAGtpyJS5qKEEO98oTb2P4MokPPsbK4wYS2cE35Ai5piaZ2/ZYb0mQKe 8njUB//bwS5qxMqP8LEwmmYFkK/45+odHZNi1G9AGWBfrXu2JlXmOq5L7aspZFEF uUt49C6dhL+SQ6lavJgpsZ3wRWm5Mgj3qvrAsh8fi4ANZFcugz0pKsY3Mjf2AXhv 04rcCI3RIITghnnmDSZYPjo4o03avRwnuaGgUFA1se8= -----END CERTIFICATE-----Generated at Fri Dec 19 12:47:53 2025 by rpki-client