This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3130332e3231332e3132382e302f32322d3234203d3e203137363730.roa File: 3130332e3231332e3132382e302f32322d3234203d3e203137363730.roa (raw, json) Hash identifier: LCi1weYpsHjqbHjmDdoyI35l96+t96YsB4f16htlxbU= Subject key identifier: 61:DD:14:69:63:E7:39:B0:B8:E3:49:23:49:43:90:FD:07:05:40:DA Certificate issuer: /CN=89402655017312B8CFCB367BA82966AA21E11F90 Certificate serial: 6BBF5D1ADE9F13957564192B6A486AE912DB681B Authority key identifier: 89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3130332e3231332e3132382e302f32322d3234203d3e203137363730.roa Signing time: Sat 13 Dec 2025 06:00:00 +0000 ROA not before: Sat 13 Dec 2025 05:55:00 +0000 ROA not after: Sat 12 Dec 2026 06:00:00 +0000 asID: 17670 IP address blocks: 103.213.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 20:28:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:bf:5d:1a:de:9f:13:95:75:64:19:2b:6a:48:6a:e9:12:db:68:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89402655017312B8CFCB367BA82966AA21E11F90 Validity Not Before: Dec 13 05:55:00 2025 GMT Not After : Dec 12 06:00:00 2026 GMT Subject: CN=61DD146963E739B0B8E34923494390FD070540DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:84:8e:46:ab:17:d7:ea:01:8c:98:bb:0e:8a: de:cd:3d:3b:28:e7:f4:dc:b3:fa:6a:4e:51:5c:5e: 59:cf:0b:41:08:ce:22:bb:a5:be:d6:f4:1e:a5:0e: 1a:cc:5e:aa:e9:96:16:e4:0d:d9:65:f5:d3:07:d4: 02:04:63:81:c0:85:7a:20:07:62:ae:32:07:43:e3: 05:3f:10:d6:2c:a6:87:72:9c:cb:8c:e4:77:31:b3: 9e:08:2e:9e:19:26:32:df:f4:b2:fe:cf:67:61:1a: a8:75:98:6d:47:df:5a:41:89:c9:21:a3:b9:05:e5: 80:d6:fe:e7:c9:32:58:d2:d4:b7:eb:b5:00:51:a8: 4c:9d:bd:e2:02:3f:e6:fc:f1:fc:89:ab:c6:64:cb: 74:f7:ff:62:76:df:39:cd:6c:04:cd:33:fc:ab:0f: 53:6f:8d:dc:26:8d:4b:3c:37:02:34:8a:37:40:08: d1:75:f2:3b:75:1f:74:b1:fd:ae:be:a5:f6:96:e4: 37:ab:7b:6f:ad:94:58:aa:6c:86:19:92:b2:e9:1a: 40:13:87:3d:5b:2d:78:29:12:fb:83:d4:92:cb:6d: 82:f5:88:2a:f6:69:c0:54:a9:90:59:b6:74:e7:d4: 52:68:00:62:34:f5:10:e1:12:55:61:68:2c:50:f1: 9e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:DD:14:69:63:E7:39:B0:B8:E3:49:23:49:43:90:FD:07:05:40:DA X509v3 Authority Key Identifier: keyid:89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3130332e3231332e3132382e302f32322d3234203d3e203137363730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.213.128.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:17:14:0c:58:5c:a9:5d:17:0e:ba:22:e5:2f:b3:ce:2b:50: d0:6d:5f:2f:ae:1b:e8:eb:f2:97:d2:bd:a4:03:04:21:ee:cc: 88:40:32:16:1d:02:fd:c8:28:a7:1d:e6:cb:7d:54:93:c5:68: d4:a8:2b:78:50:b8:c0:9c:af:48:a7:78:cd:fc:78:5b:6d:4a: 5d:b9:25:a9:0f:a2:9d:e8:97:77:70:fa:1a:e2:a9:c1:b1:fb: b0:e6:eb:9a:c1:28:4c:c4:35:91:7a:d4:be:03:a2:32:50:8f: 2e:60:49:59:81:34:d6:a3:87:92:cb:f9:55:74:39:ac:a1:8d: 1d:77:c9:70:24:17:d4:9e:10:02:54:0b:a4:13:fb:65:80:9d: 6f:22:c5:6a:88:0f:b1:fd:af:0a:e0:2c:fd:4c:62:f3:d2:64: ec:5c:17:54:1a:cc:fa:8f:5c:87:4c:78:8b:68:87:06:b9:76: a0:2d:f1:a8:ac:0e:d5:2e:6e:ca:27:f1:f3:9c:35:1c:0d:a2: c3:25:85:fe:13:bd:b7:e6:d3:a3:ef:f8:12:c4:ac:69:da:51: 84:71:d2:34:03:06:34:18:d7:19:d7:7b:0a:52:12:9e:cd:53: 8f:21:96:9e:99:ad:67:ca:69:33:90:b4:f7:d8:3a:3f:f8:6e: 80:fa:99:8c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUa79dGt6fE5V1ZBkrakhq6RLbaBswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2QUEy MUUxMUY5MDAeFw0yNTEyMTMwNTU1MDBaFw0yNjEyMTIwNjAwMDBaMDMxMTAvBgNV BAMTKDYxREQxNDY5NjNFNzM5QjBCOEUzNDkyMzQ5NDM5MEZEMDcwNTQwREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCchI5GqxfX6gGMmLsOit7NPTso 5/Tcs/pqTlFcXlnPC0EIziK7pb7W9B6lDhrMXqrplhbkDdll9dMH1AIEY4HAhXog B2KuMgdD4wU/ENYspodynMuM5Hcxs54ILp4ZJjLf9LL+z2dhGqh1mG1H31pBickh o7kF5YDW/ufJMljS1LfrtQBRqEydveICP+b88fyJq8Zky3T3/2J23znNbATNM/yr D1NvjdwmjUs8NwI0ijdACNF18jt1H3Sx/a6+pfaW5Dere2+tlFiqbIYZkrLpGkAT hz1bLXgpEvuD1JLLbYL1iCr2acBUqZBZtnTn1FJoAGI09RDhElVhaCxQ8Z6HAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUYd0UaWPnObC440kjSUOQ/QcFQNowHwYDVR0j BBgwFoAUiUAmVQFzErjPyzZ7qClmqiHhH5AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmIxYzgwYy00ZDZjLTQ0MDgtODk0Ny1mYmE2ZTdjNGJlN2MvMC84OTQwMjY1NTAx NzMxMkI4Q0ZDQjM2N0JBODI5NjZBQTIxRTExRjkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2QUEyMUUx MUY5MC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVmYjFjODBjLTRkNmMtNDQwOC04 OTQ3LWZiYTZlN2M0YmU3Yy8wLzMxMzAzMzJlMzIzMTMzMmUzMTMyMzgyZTMwMmYz MjMyMmQzMjM0MjAzZDNlMjAzMTM3MzYzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ9WAMA0GCSqG SIb3DQEBCwUAA4IBAQAuFxQMWFypXRcOuiLlL7POK1DQbV8vrhvo6/KX0r2kAwQh 7syIQDIWHQL9yCinHebLfVSTxWjUqCt4ULjAnK9Ip3jN/HhbbUpduSWpD6Kd6Jd3 cPoa4qnBsfuw5uuawShMxDWRetS+A6IyUI8uYElZgTTWo4eSy/lVdDmsoY0dd8lw JBfUnhACVAukE/tlgJ1vIsVqiA+x/a8K4Cz9TGLz0mTsXBdUGsz6j1yHTHiLaIcG uXagLfGorA7VLm7KJ/HznDUcDaLDJYX+E7235tOj7/gSxKxp2lGEcdI0AwY0GNcZ 13sKUhKezVOPIZaema1nymkzkLT32Do/+G6A+pmM -----END CERTIFICATE-----Generated at Thu Dec 25 09:32:28 2025 by rpki-client