This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/3130332e3130322e3234382e302f32342d3234203d3e20313331373639.roa File: 3130332e3130322e3234382e302f32342d3234203d3e20313331373639.roa (raw, json) Hash identifier: PlQgzB/cRsoh7ZWV0eeB0CCERK7vc0F8oX5TvclNELU= Subject key identifier: 54:40:43:4B:60:22:AD:D4:A3:45:3C:87:CE:42:65:71:E3:E2:CD:29 Certificate issuer: /CN=35369AC685201508541197F86A8FDAC2375BE30A Certificate serial: 39D324554EC792B48C2AB69EE16AD4B85D992F99 Authority key identifier: 35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/3130332e3130322e3234382e302f32342d3234203d3e20313331373639.roa Signing time: Thu 18 Dec 2025 09:00:02 +0000 ROA not before: Thu 18 Dec 2025 08:55:02 +0000 ROA not after: Thu 17 Dec 2026 09:00:02 +0000 asID: 131769 IP address blocks: 103.102.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 19:24:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:d3:24:55:4e:c7:92:b4:8c:2a:b6:9e:e1:6a:d4:b8:5d:99:2f:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35369AC685201508541197F86A8FDAC2375BE30A Validity Not Before: Dec 18 08:55:02 2025 GMT Not After : Dec 17 09:00:02 2026 GMT Subject: CN=5440434B6022ADD4A3453C87CE426571E3E2CD29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ff:a3:ba:59:1b:08:4f:04:c7:6f:bd:bb:ec: ec:fa:fb:fd:28:93:10:cc:c5:de:19:23:d6:78:75: 44:f2:4a:25:f4:90:1d:7d:3a:d1:f8:a3:8a:20:12: 72:d7:4f:48:6c:d8:bd:75:ca:1d:83:6c:f4:5e:9e: e5:9f:54:88:7f:28:b1:2e:b0:aa:a3:92:52:a6:bd: 41:fb:5e:b8:b7:f5:b9:f5:3b:36:2f:c7:5d:33:87: 75:73:0e:f0:dd:da:ca:5c:9d:8f:af:5e:db:ed:8f: 17:16:85:35:e0:86:02:0e:d7:7e:79:9d:cc:94:11: 1a:e7:31:63:8f:2b:0e:f4:d9:7b:48:7a:0e:b1:e4: f5:17:fd:03:c6:71:2d:c6:31:1e:a9:20:60:96:e4: 3a:3b:8f:58:6a:db:4d:02:5a:d5:f7:86:aa:1b:e5: 4b:9e:4c:d0:64:32:fd:48:4b:82:f9:db:98:cc:56: 1a:4c:69:eb:3e:a2:6d:18:14:7c:57:78:b1:59:01: 7b:6b:39:8e:bf:44:c9:f4:c8:ad:ed:57:1e:b4:b0: ec:09:37:7a:cc:0c:9d:fb:fe:e2:85:94:24:44:1c: ce:5d:a2:80:d6:59:00:db:4c:ff:94:b1:b2:d4:60: d0:c2:6d:da:12:4d:9e:88:11:ca:d8:1e:1f:f0:13: 25:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:40:43:4B:60:22:AD:D4:A3:45:3C:87:CE:42:65:71:E3:E2:CD:29 X509v3 Authority Key Identifier: keyid:35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/3130332e3130322e3234382e302f32342d3234203d3e20313331373639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.102.248.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:20:39:61:4b:5d:6d:cb:fe:b1:8f:b8:b5:64:61:12:f1:68: e4:b7:da:88:2d:15:5f:d8:10:e2:0c:24:17:b9:f4:88:b2:6b: 96:ef:42:5a:29:34:bf:d7:6f:d5:52:2b:36:c8:c6:9d:05:f4: 3f:95:68:1b:77:7e:bb:12:52:28:08:6f:ab:81:eb:1c:65:60: 8e:9d:db:40:94:18:48:46:f1:56:e1:d9:16:ef:e8:c2:b0:a5: 28:0f:7a:ba:be:cc:ff:66:c2:23:b9:1b:ca:4d:ce:aa:2d:57: 47:92:b2:77:0b:6e:20:87:97:81:64:ff:ae:4b:c0:4b:18:05: 98:dc:0f:89:3c:2a:7d:de:47:b9:f6:d0:06:23:00:95:1c:8e: 08:24:96:b7:64:bf:3c:03:e5:ca:45:58:26:61:c3:da:49:de: 03:6f:a8:70:62:33:d3:9f:4a:af:64:9a:08:00:5b:43:1b:8f: d9:0b:21:55:2f:cb:a7:76:ba:5a:9b:92:05:74:49:d0:41:62: b3:8f:ab:94:77:86:1f:cc:8c:dd:75:a6:35:5b:32:47:82:5e: bd:98:7b:1c:b2:1b:91:29:a0:82:4b:f0:27:a9:4c:79:84:ef: 03:19:93:52:51:b4:79:02:d5:5a:c9:39:2f:9d:bc:61:4b:ff: 0c:e0:91:06 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUOdMkVU7HkrSMKrae4WrUuF2ZL5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRBQzIz NzVCRTMwQTAeFw0yNTEyMTgwODU1MDJaFw0yNjEyMTcwOTAwMDJaMDMxMTAvBgNV BAMTKDU0NDA0MzRCNjAyMkFERDRBMzQ1M0M4N0NFNDI2NTcxRTNFMkNEMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ/6O6WRsITwTHb7277Oz6+/0o kxDMxd4ZI9Z4dUTySiX0kB19OtH4o4ogEnLXT0hs2L11yh2DbPRenuWfVIh/KLEu sKqjklKmvUH7Xri39bn1OzYvx10zh3VzDvDd2spcnY+vXtvtjxcWhTXghgIO1355 ncyUERrnMWOPKw702XtIeg6x5PUX/QPGcS3GMR6pIGCW5Do7j1hq200CWtX3hqob 5UueTNBkMv1IS4L525jMVhpMaes+om0YFHxXeLFZAXtrOY6/RMn0yK3tVx60sOwJ N3rMDJ37/uKFlCREHM5dooDWWQDbTP+UsbLUYNDCbdoSTZ6IEcrYHh/wEyWhAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUVEBDS2AirdSjRTyHzkJlcePizSkwHwYDVR0j BBgwFoAUNTaaxoUgFQhUEZf4ao/awjdb4wowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTRhY2EzYy02M2RjLTRjMWItYTdlOC1hY2JhZTgyMWNkZTUvMC8zNTM2OUFDNjg1 MjAxNTA4NTQxMTk3Rjg2QThGREFDMjM3NUJFMzBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRBQzIzNzVC RTMwQS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdlNGFjYTNjLTYzZGMtNGMxYi1h N2U4LWFjYmFlODIxY2RlNS8wLzMxMzAzMzJlMzEzMDMyMmUzMjM0MzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzEzNzM2Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnZvgwDQYJ KoZIhvcNAQELBQADggEBAJ0gOWFLXW3L/rGPuLVkYRLxaOS32ogtFV/YEOIMJBe5 9Iiya5bvQlopNL/Xb9VSKzbIxp0F9D+VaBt3frsSUigIb6uB6xxlYI6d20CUGEhG 8Vbh2Rbv6MKwpSgPerq+zP9mwiO5G8pNzqotV0eSsncLbiCHl4Fk/65LwEsYBZjc D4k8Kn3eR7n20AYjAJUcjggklrdkvzwD5cpFWCZhw9pJ3gNvqHBiM9OfSq9kmggA W0Mbj9kLIVUvy6d2ulqbkgV0SdBBYrOPq5R3hh/MjN11pjVbMkeCXr2YexyyG5Ep oIJL8CepTHmE7wMZk1JRtHkC1VrJOS+dvGFL/wzgkQY= -----END CERTIFICATE-----Generated at Fri Dec 19 12:19:51 2025 by rpki-client