This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/3130332e39362e35332e302f32342d3234203d3e20313530393232.roa File: 3130332e39362e35332e302f32342d3234203d3e20313530393232.roa (raw, json) Hash identifier: gP7psFKFA2RfBnHhdOuG7ZGFzw3Cq/MLVUDPQT38lCM= Subject key identifier: D4:C5:72:99:58:5A:7E:F6:83:2A:5E:4F:58:72:37:A5:16:5B:DA:EB Certificate issuer: /CN=0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79 Certificate serial: 16DF08C8C12DEFEBAD34B8D754615B4749E02C54 Authority key identifier: 03:21:C8:92:A6:AA:C0:A6:EA:4A:30:35:D8:8C:A6:BC:68:67:BF:79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/3130332e39362e35332e302f32342d3234203d3e20313530393232.roa Signing time: Wed 10 Dec 2025 10:01:07 +0000 ROA not before: Wed 10 Dec 2025 09:56:07 +0000 ROA not after: Wed 09 Dec 2026 10:01:07 +0000 asID: 150922 IP address blocks: 103.96.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.crl rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 01:30:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:df:08:c8:c1:2d:ef:eb:ad:34:b8:d7:54:61:5b:47:49:e0:2c:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79 Validity Not Before: Dec 10 09:56:07 2025 GMT Not After : Dec 9 10:01:07 2026 GMT Subject: CN=D4C57299585A7EF6832A5E4F587237A5165BDAEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:86:6b:68:76:2b:f9:92:df:62:68:d9:98:03: eb:4f:ea:d7:56:f6:35:b7:e4:a0:71:e4:b8:9f:7b: df:f2:bc:ae:8d:59:26:07:ca:8f:13:cf:9f:3e:6c: 3b:f9:ea:ef:7c:61:2d:29:45:66:8f:3b:48:d8:c7: f2:0b:c8:97:f9:2f:88:96:99:19:ff:a3:7c:96:30: 83:43:6b:46:03:06:a8:ff:24:74:b6:6a:67:9d:56: f2:0b:e9:19:87:6e:6e:7c:3a:6e:ee:4b:e4:0c:9f: 75:1b:b8:03:81:37:24:91:b5:1a:7f:16:63:40:d9: 1d:44:b9:fc:a9:c6:85:1f:aa:62:5a:91:9b:2a:dc: a7:d5:e4:10:bf:70:ea:73:72:98:69:a9:8c:b4:f6: ed:6c:79:8b:c9:79:b5:ed:3a:e9:65:3e:ca:1f:71: f3:8b:19:0c:f0:c6:9c:0e:8d:a4:e5:0a:90:2c:86: b1:77:5b:1a:4b:17:bc:05:18:06:7e:6f:31:a1:f6: 83:0a:92:0a:9a:6b:9e:25:3f:f2:7f:80:03:a2:3a: f5:12:5b:c3:f9:27:f0:79:25:3e:a8:65:0f:b3:03: e0:46:1f:87:85:df:a2:dd:e8:da:05:ac:9b:ac:03: d4:1c:ff:e7:46:67:80:d9:18:56:f0:30:d7:ab:08: 98:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C5:72:99:58:5A:7E:F6:83:2A:5E:4F:58:72:37:A5:16:5B:DA:EB X509v3 Authority Key Identifier: keyid:03:21:C8:92:A6:AA:C0:A6:EA:4A:30:35:D8:8C:A6:BC:68:67:BF:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/3130332e39362e35332e302f32342d3234203d3e20313530393232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.96.53.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:3a:9e:d4:ac:4f:ed:37:ab:e1:6d:8e:98:a6:f2:5f:6e:c8: 17:69:bb:79:c2:26:74:78:b1:f5:4d:82:76:13:44:1a:e9:1f: 5c:8c:5e:1e:2e:fa:aa:14:7f:1c:6f:cb:f7:4c:d6:3c:5f:cd: 80:00:10:27:c8:c3:05:50:2b:92:41:6c:49:aa:75:71:82:05: cd:72:f5:d0:31:4f:40:4d:31:7a:4f:1b:88:50:9d:98:a9:47: cf:6c:60:dd:13:54:52:df:b4:e3:48:b7:96:d7:7a:ce:4b:96: 72:4d:56:f9:ce:bf:f9:21:06:85:de:79:3a:9d:dc:95:5b:cf: 97:3f:7c:1a:32:b0:47:af:4e:fc:eb:c3:5f:8c:ff:2e:a2:08: 49:cc:40:f8:74:40:ce:50:a3:3d:7a:d2:bd:41:13:0b:1f:07: a9:32:c1:cc:f2:05:8e:02:41:a7:99:80:ec:ae:76:b6:0c:66: 4b:18:4f:33:d5:97:16:eb:0f:ed:66:d0:a8:13:45:06:cb:4c: 68:7e:47:30:cb:36:31:11:cd:58:5c:8f:f8:ac:ae:ee:f4:30: 89:27:c4:e9:dc:f0:31:e8:42:0d:0f:70:ad:55:b4:32:62:4b: 75:6a:a8:68:8f:75:75:43:4b:67:64:f7:94:b0:50:a7:73:fc: 40:be:a3:3b -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUFt8IyMEt7+utNLjXVGFbR0ngLFQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMyMUM4OTJBNkFBQzBBNkVBNEEzMDM1RDg4Q0E2QkM2 ODY3QkY3OTAeFw0yNTEyMTAwOTU2MDdaFw0yNjEyMDkxMDAxMDdaMDMxMTAvBgNV BAMTKEQ0QzU3Mjk5NTg1QTdFRjY4MzJBNUU0RjU4NzIzN0E1MTY1QkRBRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQhmtodiv5kt9iaNmYA+tP6tdW 9jW35KBx5Life9/yvK6NWSYHyo8Tz58+bDv56u98YS0pRWaPO0jYx/ILyJf5L4iW mRn/o3yWMINDa0YDBqj/JHS2amedVvIL6RmHbm58Om7uS+QMn3UbuAOBNySRtRp/ FmNA2R1EufypxoUfqmJakZsq3KfV5BC/cOpzcphpqYy09u1seYvJebXtOullPsof cfOLGQzwxpwOjaTlCpAshrF3WxpLF7wFGAZ+bzGh9oMKkgqaa54lP/J/gAOiOvUS W8P5J/B5JT6oZQ+zA+BGH4eF36Ld6NoFrJusA9Qc/+dGZ4DZGFbwMNerCJhhAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU1MVymVhafvaDKl5PWHI3pRZb2uswHwYDVR0j BBgwFoAUAyHIkqaqwKbqSjA12IymvGhnv3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTFjNGMxZi03MTQxLTQ3ZDYtYTdmOC1lMzVmZmUxMTc0MDQvMC8wMzIxQzg5MkE2 QUFDMEE2RUE0QTMwMzVEODhDQTZCQzY4NjdCRjc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMyMUM4OTJBNkFBQzBBNkVBNEEzMDM1RDg4Q0E2QkM2ODY3 QkY3OS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdhMWM0YzFmLTcxNDEtNDdkNi1h N2Y4LWUzNWZmZTExNzQwNC8wLzMxMzAzMzJlMzkzNjJlMzUzMzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMDM5MzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdgNTANBgkqhkiG 9w0BAQsFAAOCAQEAPjqe1KxP7Ter4W2OmKbyX27IF2m7ecImdHix9U2CdhNEGukf XIxeHi76qhR/HG/L90zWPF/NgAAQJ8jDBVArkkFsSap1cYIFzXL10DFPQE0xek8b iFCdmKlHz2xg3RNUUt+040i3ltd6zkuWck1W+c6/+SEGhd55Op3clVvPlz98GjKw R69O/OvDX4z/LqIIScxA+HRAzlCjPXrSvUETCx8HqTLBzPIFjgJBp5mA7K52tgxm SxhPM9WXFusP7WbQqBNFBstMaH5HMMs2MRHNWFyP+Kyu7vQwiSfE6dzwMehCDQ9w rVW0MmJLdWqoaI91dUNLZ2T3lLBQp3P8QL6jOw== -----END CERTIFICATE-----Generated at Fri Dec 19 12:56:22 2025 by rpki-client