This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/3130332e3138342e3132382e302f32342d3234203d3e20313439363830.roa File: 3130332e3138342e3132382e302f32342d3234203d3e20313439363830.roa (raw, json) Hash identifier: qAILqHxIh//KPfkbqwXoLWKwUymM3YkGbuohytyxcQQ= Subject key identifier: 36:24:35:0F:2D:37:76:B2:3D:AA:3F:58:9C:3E:56:B3:FD:EA:7A:0C Certificate issuer: /CN=A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794 Certificate serial: 02C82ABE438CE857EC1909C376EDB86846458E5F Authority key identifier: A3:3F:F7:49:65:A9:60:8D:9E:5C:3C:2E:3E:F8:02:EA:1E:5C:D7:94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer Subject info access: rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/3130332e3138342e3132382e302f32342d3234203d3e20313439363830.roa Signing time: Mon 15 Dec 2025 18:00:02 +0000 ROA not before: Mon 15 Dec 2025 17:55:02 +0000 ROA not after: Mon 14 Dec 2026 18:00:02 +0000 asID: 149680 IP address blocks: 103.184.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 14:40:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:c8:2a:be:43:8c:e8:57:ec:19:09:c3:76:ed:b8:68:46:45:8e:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794 Validity Not Before: Dec 15 17:55:02 2025 GMT Not After : Dec 14 18:00:02 2026 GMT Subject: CN=3624350F2D3776B23DAA3F589C3E56B3FDEA7A0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ae:54:74:dc:c9:53:9c:88:43:7f:8b:38:4c: a3:64:91:b8:9c:2e:63:89:c3:e7:9a:05:bc:31:e9: 86:43:c0:9e:21:ce:0d:cb:4e:51:80:c0:cd:72:98: d6:df:a0:5b:66:26:02:dd:4c:ef:d1:b9:c4:7d:67: 5f:30:f0:e0:cd:65:01:11:1f:b7:6a:bb:c0:e3:70: f6:bd:43:8c:0b:f1:16:a2:b5:ce:ba:14:69:31:70: ad:a3:0a:8e:69:e5:5f:b2:2f:27:b1:7c:ca:19:cc: 60:51:2d:4b:56:57:8a:c2:62:9f:4d:c0:55:92:29: 13:17:9b:7a:81:c7:e6:fb:90:72:52:d6:0b:28:6b: 14:b9:06:5d:49:8a:fc:2c:c3:a8:8b:5e:a2:4f:ca: 26:ce:30:5e:0d:c8:94:28:57:bc:29:a7:9e:a2:3b: ed:15:39:2d:f4:d3:8c:b0:29:53:a2:09:54:9d:ec: ea:4c:61:41:15:58:c7:39:c8:a4:4f:26:37:13:79: 9b:d1:b5:90:da:0f:68:33:3e:c0:a0:a7:88:ee:17: 5d:4f:76:38:a6:0d:3b:11:23:26:74:56:81:54:39: 67:a0:1c:93:34:83:ac:7b:67:0e:40:8a:d9:7d:9b: 9e:a6:9e:d2:66:e3:cf:c0:95:65:99:f8:14:68:73: e3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:24:35:0F:2D:37:76:B2:3D:AA:3F:58:9C:3E:56:B3:FD:EA:7A:0C X509v3 Authority Key Identifier: keyid:A3:3F:F7:49:65:A9:60:8D:9E:5C:3C:2E:3E:F8:02:EA:1E:5C:D7:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/3130332e3138342e3132382e302f32342d3234203d3e20313439363830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.184.128.0/24 Signature Algorithm: sha256WithRSAEncryption a8:88:13:7c:62:da:6b:bd:31:8e:07:bb:9e:80:e1:60:32:60: 5f:76:69:60:d0:56:ba:08:54:19:21:a0:70:40:39:e9:df:09: ae:eb:35:67:5f:d3:8c:ab:a3:2d:c2:4f:a2:ab:57:c9:31:41: d5:04:db:6b:2c:04:7b:1a:29:1c:e4:07:ce:f9:88:73:dd:68: 5c:80:3a:bd:74:da:ef:a9:27:8a:a0:dd:d0:e6:81:7a:77:db: 10:5a:3b:6e:9a:d4:ec:d7:5a:57:de:94:91:6d:dc:6a:f7:17: d1:6a:aa:da:ad:c2:5d:20:e5:0f:7b:44:c2:01:68:a0:75:f2: 44:f2:67:6d:1f:10:47:ba:6d:cf:57:75:a3:13:66:19:27:77: c6:09:83:1e:b8:92:22:58:de:48:11:3f:70:69:49:d5:63:60: 13:ab:17:b2:4d:e3:2c:60:dc:89:89:10:3d:0a:3f:78:b2:7d: 06:4f:e8:fd:f2:33:2e:3a:dd:31:d4:c5:26:cb:ea:b6:9f:4a: 40:e4:ee:8e:b6:2d:a1:a7:f2:6c:a0:18:6e:ec:d8:08:a3:29: 66:d9:8c:66:fd:9e:58:1e:d0:12:5a:ba:e6:ec:d8:7b:f1:cf: f7:92:c9:17:c4:65:9d:85:f4:e2:32:09:f3:cf:4c:8d:8a:34: 8e:f2:d1:a8 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUAsgqvkOM6FfsGQnDdu24aEZFjl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTMzRkY3NDk2NUE5NjA4RDlFNUMzQzJFM0VGODAyRUEx RTVDRDc5NDAeFw0yNTEyMTUxNzU1MDJaFw0yNjEyMTQxODAwMDJaMDMxMTAvBgNV BAMTKDM2MjQzNTBGMkQzNzc2QjIzREFBM0Y1ODlDM0U1NkIzRkRFQTdBMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyrlR03MlTnIhDf4s4TKNkkbic LmOJw+eaBbwx6YZDwJ4hzg3LTlGAwM1ymNbfoFtmJgLdTO/RucR9Z18w8ODNZQER H7dqu8DjcPa9Q4wL8Raitc66FGkxcK2jCo5p5V+yLyexfMoZzGBRLUtWV4rCYp9N wFWSKRMXm3qBx+b7kHJS1gsoaxS5Bl1Jivwsw6iLXqJPyibOMF4NyJQoV7wpp56i O+0VOS3004ywKVOiCVSd7OpMYUEVWMc5yKRPJjcTeZvRtZDaD2gzPsCgp4juF11P djimDTsRIyZ0VoFUOWegHJM0g6x7Zw5Aitl9m56mntJm48/AlWWZ+BRoc+PNAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUNiQ1Dy03drI9qj9YnD5Ws/3qegwwHwYDVR0j BBgwFoAUoz/3SWWpYI2eXDwuPvgC6h5c15QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTNlM2QyNi00YWFmLTRlOTYtYWQ0OS01MjczZjBhNGU2ZWQvMC9BMzNGRjc0OTY1 QTk2MDhEOUU1QzNDMkUzRUY4MDJFQTFFNUNENzk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTMzRkY3NDk2NUE5NjA4RDlFNUMzQzJFM0VGODAyRUExRTVD RDc5NC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk5M2UzZDI2LTRhYWYtNGU5Ni1h ZDQ5LTUyNzNmMGE0ZTZlZC8wLzMxMzAzMzJlMzEzODM0MmUzMTMyMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzNjM4MzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnuIAwDQYJ KoZIhvcNAQELBQADggEBAKiIE3xi2mu9MY4Hu56A4WAyYF92aWDQVroIVBkhoHBA OenfCa7rNWdf04yroy3CT6KrV8kxQdUE22ssBHsaKRzkB875iHPdaFyAOr102u+p J4qg3dDmgXp32xBaO26a1OzXWlfelJFt3Gr3F9Fqqtqtwl0g5Q97RMIBaKB18kTy Z20fEEe6bc9XdaMTZhknd8YJgx64kiJY3kgRP3BpSdVjYBOrF7JN4yxg3ImJED0K P3iyfQZP6P3yMy463THUxSbL6rafSkDk7o62LaGn8mygGG7s2AijKWbZjGb9nlge 0BJauubs2Hvxz/eSyRfEZZ2F9OIyCfPPTI2KNI7y0ag= -----END CERTIFICATE-----Generated at Fri Dec 19 12:56:26 2025 by rpki-client