This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/3130332e3132342e3133382e302f32332d3234203d3e20313338303839.roa File: 3130332e3132342e3133382e302f32332d3234203d3e20313338303839.roa (raw, json) Hash identifier: U/6aanmiS3G1NNN9piNHjwZVd8g8y5TJEUDFQPXUGlk= Subject key identifier: 53:E1:0B:FA:1D:49:BA:27:02:8B:25:33:FF:03:12:16:DE:42:98:FE Certificate issuer: /CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733 Certificate serial: 716B6CB358223D4ECD98E988118AB38F97F23BBF Authority key identifier: 7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/3130332e3132342e3133382e302f32332d3234203d3e20313338303839.roa Signing time: Wed 10 Dec 2025 02:00:00 +0000 ROA not before: Wed 10 Dec 2025 01:55:00 +0000 ROA not after: Wed 09 Dec 2026 02:00:00 +0000 asID: 138089 IP address blocks: 103.124.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 05:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:6b:6c:b3:58:22:3d:4e:cd:98:e9:88:11:8a:b3:8f:97:f2:3b:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733 Validity Not Before: Dec 10 01:55:00 2025 GMT Not After : Dec 9 02:00:00 2026 GMT Subject: CN=53E10BFA1D49BA27028B2533FF031216DE4298FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:af:8b:ad:f7:67:ae:95:00:ef:89:50:11:69: 7f:6b:04:d8:13:f3:5e:23:d1:b3:53:fc:35:f5:4b: 24:4d:74:b8:a0:97:3c:d0:9d:ef:ae:16:93:16:1b: ae:b0:5c:bd:c9:49:be:cd:86:b9:f2:70:b8:54:3b: 94:66:6f:64:02:b1:a3:e7:bc:ea:d5:c1:8f:59:da: 5e:92:00:9a:31:16:2c:32:86:d7:6d:0c:4b:bd:5a: c6:e0:ef:08:0a:0a:ca:fc:2b:86:9b:92:fd:b7:f5: 34:10:3d:6c:d7:1f:20:a9:55:ee:ae:cb:d6:c3:a1: ef:ca:48:0c:03:80:36:7e:ce:0f:8b:f3:fa:a1:3c: d0:85:4d:39:92:9e:88:c1:68:4c:65:13:fc:b2:95: b8:77:e0:d8:86:47:e0:e4:d3:0f:56:f2:32:0c:cf: c9:af:99:ab:6d:77:c9:9e:ba:46:2e:2c:40:04:6d: be:7f:08:f7:3b:1a:a0:1b:79:31:80:6c:5c:de:1f: 08:18:3e:17:04:f6:3c:cf:f2:84:ba:c4:2e:e8:a4: d3:6b:51:80:6d:f5:87:fe:3b:f7:31:b2:d9:08:45: a2:f1:7b:89:1c:2d:e7:16:d7:72:b9:57:75:be:82: d3:74:1f:e6:0f:80:70:48:93:ae:af:fa:81:a8:33: e5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:E1:0B:FA:1D:49:BA:27:02:8B:25:33:FF:03:12:16:DE:42:98:FE X509v3 Authority Key Identifier: keyid:7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/3130332e3132342e3133382e302f32332d3234203d3e20313338303839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.124.138.0/23 Signature Algorithm: sha256WithRSAEncryption 4b:78:c8:42:f8:22:09:90:01:86:cf:29:26:61:f9:a9:ac:3a: 5a:d7:96:4f:97:0f:46:96:9b:fb:8b:6e:ee:81:4c:5a:b6:c4: 52:19:38:de:bf:38:19:c5:23:1a:2b:a9:86:e3:6d:17:f1:5a: ae:41:09:6d:79:3e:c9:1a:c2:9b:1c:dc:3f:42:65:23:04:24: 66:10:26:71:43:4a:c9:a4:71:17:37:b3:7c:97:c4:48:86:37: a8:21:49:9b:51:5c:70:bd:4d:c9:c5:bd:82:e7:26:54:3a:d8: a8:e8:08:7b:57:7b:d7:08:30:a8:b8:8e:0f:35:c9:0e:f7:84: bc:7c:68:77:bc:71:5c:8d:91:4b:40:9c:fc:2a:05:1d:c2:a1: 35:02:0c:78:01:18:4d:ad:ad:d8:b3:10:dc:1b:27:a1:88:d6: c0:36:e8:06:4d:04:da:a4:da:be:2e:b4:65:bf:58:1b:c9:04: df:75:34:e9:04:50:74:ae:c7:e4:8c:dd:43:e1:4a:81:24:0c: 17:63:7a:f3:7c:1d:08:64:46:5e:ed:d4:02:89:8c:55:c0:73: 06:9d:a6:bf:58:51:5d:ca:6e:54:8c:1f:6c:8f:53:81:09:00: 0d:cd:f5:37:bd:d5:4c:57:11:00:73:f3:05:de:11:df:2a:c4: 6b:8d:74:4c -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUcWtss1giPU7NmOmIEYqzj5fyO78wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q0RjBEMDA3QjYwMTM0OTk2QUMzMTk4QjlFNUI3MUVB RjcwRTczMzAeFw0yNTEyMTAwMTU1MDBaFw0yNjEyMDkwMjAwMDBaMDMxMTAvBgNV BAMTKDUzRTEwQkZBMUQ0OUJBMjcwMjhCMjUzM0ZGMDMxMjE2REU0Mjk4RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQr4ut92eulQDviVARaX9rBNgT 814j0bNT/DX1SyRNdLiglzzQne+uFpMWG66wXL3JSb7NhrnycLhUO5Rmb2QCsaPn vOrVwY9Z2l6SAJoxFiwyhtdtDEu9Wsbg7wgKCsr8K4abkv239TQQPWzXHyCpVe6u y9bDoe/KSAwDgDZ+zg+L8/qhPNCFTTmSnojBaExlE/yylbh34NiGR+Dk0w9W8jIM z8mvmattd8meukYuLEAEbb5/CPc7GqAbeTGAbFzeHwgYPhcE9jzP8oS6xC7opNNr UYBt9Yf+O/cxstkIRaLxe4kcLecW13K5V3W+gtN0H+YPgHBIk66v+oGoM+VFAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUU+EL+h1JuicCiyUz/wMSFt5CmP4wHwYDVR0j BBgwFoAUfU8NAHtgE0mWrDGYueW3Hq9w5zMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWJhNGU1OS1mYjMxLTQxYjUtODhlNy0wYjJjZWQxZjIwMWMvMC83RDRGMEQwMDdC NjAxMzQ5OTZBQzMxOThCOUU1QjcxRUFGNzBFNzMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q0RjBEMDA3QjYwMTM0OTk2QUMzMTk4QjlFNUI3MUVBRjcw RTczMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVhYmE0ZTU5LWZiMzEtNDFiNS04 OGU3LTBiMmNlZDFmMjAxYy8wLzMxMzAzMzJlMzEzMjM0MmUzMTMzMzgyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzgzMDM4Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnfIowDQYJ KoZIhvcNAQELBQADggEBAEt4yEL4IgmQAYbPKSZh+amsOlrXlk+XD0aWm/uLbu6B TFq2xFIZON6/OBnFIxorqYbjbRfxWq5BCW15Pskawpsc3D9CZSMEJGYQJnFDSsmk cRc3s3yXxEiGN6ghSZtRXHC9TcnFvYLnJlQ62KjoCHtXe9cIMKi4jg81yQ73hLx8 aHe8cVyNkUtAnPwqBR3CoTUCDHgBGE2trdizENwbJ6GI1sA26AZNBNqk2r4utGW/ WBvJBN91NOkEUHSux+SM3UPhSoEkDBdjevN8HQhkRl7t1AKJjFXAcwadpr9YUV3K blSMH2yPU4EJAA3N9Te91UxXEQBz8wXeEd8qxGuNdEw= -----END CERTIFICATE-----Generated at Fri Dec 19 12:49:20 2025 by rpki-client