This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/3130332e39362e35322e302f32342d3234203d3e20313530393232.roa File: 3130332e39362e35322e302f32342d3234203d3e20313530393232.roa (raw, json) Hash identifier: 2ugfUbs5cJ20pMlsi1Lpn48hHyXGtkrzKxCtrqkovSE= Subject key identifier: 0B:3B:FB:E2:AE:E2:5A:68:B6:B7:D6:0F:87:D0:F0:11:75:C2:C8:9D Certificate issuer: /CN=0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79 Certificate serial: 480997BE4F951A989D219A7F79AE1752AA53A0BF Authority key identifier: 03:21:C8:92:A6:AA:C0:A6:EA:4A:30:35:D8:8C:A6:BC:68:67:BF:79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/3130332e39362e35322e302f32342d3234203d3e20313530393232.roa Signing time: Wed 10 Dec 2025 10:01:08 +0000 ROA not before: Wed 10 Dec 2025 09:56:08 +0000 ROA not after: Wed 09 Dec 2026 10:01:08 +0000 asID: 150922 IP address blocks: 103.96.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.crl rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 01:30:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:09:97:be:4f:95:1a:98:9d:21:9a:7f:79:ae:17:52:aa:53:a0:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79 Validity Not Before: Dec 10 09:56:08 2025 GMT Not After : Dec 9 10:01:08 2026 GMT Subject: CN=0B3BFBE2AEE25A68B6B7D60F87D0F01175C2C89D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:38:c0:5e:23:f3:75:3a:ea:cb:bb:ff:7c:6a: 1b:67:45:42:eb:8d:06:4f:54:51:29:15:b1:6a:e5: 0e:7d:c9:bc:36:75:2b:cf:43:ac:55:ed:1f:b2:9b: 40:48:ef:b2:5c:95:0f:3b:bd:06:6f:1a:90:a0:c4: ab:24:a1:3e:e7:9f:d7:06:79:16:df:4e:76:ea:98: dd:f8:20:85:54:b4:17:29:ef:c8:38:3d:4f:ec:95: be:02:41:23:cf:ae:7f:21:3e:51:f2:58:88:39:d1: 08:6c:01:84:4d:7d:b5:fc:37:34:4a:e2:96:f0:bc: 73:9d:e0:a1:6d:00:72:d4:16:37:9e:9e:95:1f:49: 48:f3:94:6f:25:2e:cc:97:da:7e:db:99:42:67:2b: 9c:81:be:fa:34:6a:f4:15:bd:11:a6:f9:f4:76:f9: 71:ab:c4:24:6c:d7:8b:bb:dc:86:94:8b:d4:ad:19: 00:a1:fe:b9:d2:15:09:ee:23:78:5f:a9:07:fc:cb: f6:ca:7b:ce:d0:4a:6a:09:60:be:c2:11:42:d8:d1: 51:bf:ef:b6:3f:ee:a8:01:9e:f8:b7:02:e0:1f:05: 81:91:36:98:c2:66:b9:4e:6d:51:85:81:19:45:9a: 07:0b:63:44:c9:35:42:7c:43:c6:16:da:ea:5b:03: 5f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:3B:FB:E2:AE:E2:5A:68:B6:B7:D6:0F:87:D0:F0:11:75:C2:C8:9D X509v3 Authority Key Identifier: keyid:03:21:C8:92:A6:AA:C0:A6:EA:4A:30:35:D8:8C:A6:BC:68:67:BF:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/3130332e39362e35322e302f32342d3234203d3e20313530393232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.96.52.0/24 Signature Algorithm: sha256WithRSAEncryption 31:09:fd:b6:d2:20:31:30:98:3e:93:b0:5a:6f:ff:5d:c6:70: 47:a7:de:37:41:a8:65:a1:a1:5b:12:89:c6:4e:d2:3b:eb:b6: c1:2e:30:e6:c8:37:d8:53:6e:2c:fc:7f:af:9b:69:fa:eb:5b: 91:92:c1:75:de:9f:5e:32:10:4c:b1:4e:ba:23:1f:ed:e3:f4: 67:7e:d3:91:97:94:43:0b:38:10:c9:b2:e9:e7:a0:b1:70:27: c6:e0:ff:36:67:61:39:49:d7:58:a3:b7:03:6d:a6:a8:10:fd: 16:16:9a:f6:d3:1d:73:a8:e9:6e:df:5d:eb:89:09:96:ee:9b: 06:76:78:65:b4:d8:97:78:20:ca:3e:89:7f:23:5f:b3:09:45: b7:ca:bb:fc:4c:b4:7c:a1:41:d8:e3:32:9d:9c:51:41:98:a9: d6:45:db:5c:03:a5:e9:d2:80:e5:9e:86:5d:5d:d0:6b:a0:44: 57:30:62:69:1c:44:a4:6e:42:34:84:88:3f:54:e1:b1:1d:d7: 69:a9:ea:2f:5b:fa:c9:c4:d6:8e:88:a9:3b:4a:aa:63:7d:de: 01:a2:66:3b:ee:38:ff:b2:94:d0:04:e1:5f:d1:ab:af:21:e7: 41:a0:23:3d:6f:25:ac:51:b8:65:6c:95:6e:f9:5f:83:d3:41: 1f:99:b8:56 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUSAmXvk+VGpidIZp/ea4XUqpToL8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMyMUM4OTJBNkFBQzBBNkVBNEEzMDM1RDg4Q0E2QkM2 ODY3QkY3OTAeFw0yNTEyMTAwOTU2MDhaFw0yNjEyMDkxMDAxMDhaMDMxMTAvBgNV BAMTKDBCM0JGQkUyQUVFMjVBNjhCNkI3RDYwRjg3RDBGMDExNzVDMkM4OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+OMBeI/N1OurLu/98ahtnRULr jQZPVFEpFbFq5Q59ybw2dSvPQ6xV7R+ym0BI77JclQ87vQZvGpCgxKskoT7nn9cG eRbfTnbqmN34IIVUtBcp78g4PU/slb4CQSPPrn8hPlHyWIg50QhsAYRNfbX8NzRK 4pbwvHOd4KFtAHLUFjeenpUfSUjzlG8lLsyX2n7bmUJnK5yBvvo0avQVvRGm+fR2 +XGrxCRs14u73IaUi9StGQCh/rnSFQnuI3hfqQf8y/bKe87QSmoJYL7CEULY0VG/ 77Y/7qgBnvi3AuAfBYGRNpjCZrlObVGFgRlFmgcLY0TJNUJ8Q8YW2upbA1/DAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUCzv74q7iWmi2t9YPh9DwEXXCyJ0wHwYDVR0j BBgwFoAUAyHIkqaqwKbqSjA12IymvGhnv3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTFjNGMxZi03MTQxLTQ3ZDYtYTdmOC1lMzVmZmUxMTc0MDQvMC8wMzIxQzg5MkE2 QUFDMEE2RUE0QTMwMzVEODhDQTZCQzY4NjdCRjc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMyMUM4OTJBNkFBQzBBNkVBNEEzMDM1RDg4Q0E2QkM2ODY3 QkY3OS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdhMWM0YzFmLTcxNDEtNDdkNi1h N2Y4LWUzNWZmZTExNzQwNC8wLzMxMzAzMzJlMzkzNjJlMzUzMjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMDM5MzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdgNDANBgkqhkiG 9w0BAQsFAAOCAQEAMQn9ttIgMTCYPpOwWm//XcZwR6feN0GoZaGhWxKJxk7SO+u2 wS4w5sg32FNuLPx/r5tp+utbkZLBdd6fXjIQTLFOuiMf7eP0Z37TkZeUQws4EMmy 6eegsXAnxuD/NmdhOUnXWKO3A22mqBD9Fhaa9tMdc6jpbt9d64kJlu6bBnZ4ZbTY l3ggyj6JfyNfswlFt8q7/Ey0fKFB2OMynZxRQZip1kXbXAOl6dKA5Z6GXV3Qa6BE VzBiaRxEpG5CNISIP1ThsR3XaanqL1v6ycTWjoipO0qqY33eAaJmO+44/7KU0ATh X9GrryHnQaAjPW8lrFG4ZWyVbvlfg9NBH5m4Vg== -----END CERTIFICATE-----Generated at Fri Dec 19 12:56:26 2025 by rpki-client