This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/3130332e31392e3137362e302f32322d3234203d3e20313332363437.roa File: 3130332e31392e3137362e302f32322d3234203d3e20313332363437.roa (raw, json) Hash identifier: IOhGpn9Wqy2Lz6udKRlZRvUg19CFNIwFC8/KHmyaxxA= Subject key identifier: 73:BB:71:68:7F:52:C9:52:84:09:72:DE:8E:FF:8D:8D:09:C5:87:26 Certificate issuer: /CN=EC9D9872A710FE713DC62241D587703BDF7DC1D6 Certificate serial: 760A1E97DACA3B362221251B529C139A48E8FADD Authority key identifier: EC:9D:98:72:A7:10:FE:71:3D:C6:22:41:D5:87:70:3B:DF:7D:C1:D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/3130332e31392e3137362e302f32322d3234203d3e20313332363437.roa Signing time: Fri 12 Dec 2025 08:22:49 +0000 ROA not before: Fri 12 Dec 2025 08:17:49 +0000 ROA not after: Fri 11 Dec 2026 08:22:49 +0000 asID: 132647 IP address blocks: 103.19.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.crl rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 02:25:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:0a:1e:97:da:ca:3b:36:22:21:25:1b:52:9c:13:9a:48:e8:fa:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC9D9872A710FE713DC62241D587703BDF7DC1D6 Validity Not Before: Dec 12 08:17:49 2025 GMT Not After : Dec 11 08:22:49 2026 GMT Subject: CN=73BB71687F52C952840972DE8EFF8D8D09C58726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:40:8e:13:c8:39:e2:b5:97:7d:dd:9e:10:2c: c7:b4:9e:27:08:68:59:b7:8a:fb:12:5b:10:95:b4: d9:44:e8:fe:58:8b:0c:66:6f:a0:b1:04:e9:b0:a9: 7a:a5:8e:45:9e:8b:77:4a:18:5f:cf:1e:10:29:90: 81:0d:79:0b:bf:94:6d:52:fb:d3:9e:f6:98:2b:9a: 12:d5:f3:90:47:21:00:a8:d5:9b:54:d5:e0:7a:aa: e5:33:58:8b:e7:93:3c:a1:e6:39:42:d4:3e:b9:7e: 69:5a:c4:f1:10:13:d3:be:59:e9:7b:fa:97:bb:02: 29:5d:33:0c:a8:d2:56:5f:5a:56:5b:09:d2:f2:e9: 02:df:ae:ab:ef:8d:2e:c2:70:e9:64:42:90:03:35: b1:b6:32:9a:bf:9b:62:55:85:59:1e:e2:dd:68:e2: 76:59:04:0c:74:be:ee:51:f9:41:d1:9c:df:83:a6: 89:95:95:ec:b9:cc:ff:91:43:19:80:12:66:a7:2a: f1:17:2c:4b:be:8f:0d:95:ad:b5:d4:ba:40:79:99: 96:4d:53:c1:cd:b7:57:52:ae:ed:4f:8a:5a:86:b0: b8:4b:66:4c:7a:de:89:c1:ec:6c:86:df:83:34:df: bb:3a:14:e6:ec:12:43:3f:12:d5:25:d5:52:74:c8: 38:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:BB:71:68:7F:52:C9:52:84:09:72:DE:8E:FF:8D:8D:09:C5:87:26 X509v3 Authority Key Identifier: keyid:EC:9D:98:72:A7:10:FE:71:3D:C6:22:41:D5:87:70:3B:DF:7D:C1:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/3130332e31392e3137362e302f32322d3234203d3e20313332363437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.19.176.0/22 Signature Algorithm: sha256WithRSAEncryption 5a:b1:39:bd:22:33:6f:84:3f:97:4d:d9:9d:4d:c4:02:5e:09: ea:bf:20:17:61:23:10:22:88:f6:fd:27:59:1d:3a:4a:e6:f9: ed:1b:7b:a4:ac:79:f0:56:a7:6f:16:83:bc:8b:2a:34:4d:aa: 38:13:0b:af:e2:ba:ee:d5:14:17:6a:8d:ad:ea:54:74:99:ca: 5a:35:79:7b:f9:ef:25:01:8b:75:3c:53:cb:35:7c:92:9c:03: 18:3c:49:10:dc:c5:ee:ec:d4:1c:1a:e2:f5:2d:2f:7b:07:fd: 9c:5a:44:e8:72:d7:53:71:9c:2c:12:4b:20:5f:d2:e6:33:ac: db:01:e7:16:b4:4a:0b:08:d7:fa:19:9e:26:c4:e7:30:32:da: 32:fa:90:02:f2:01:27:66:2a:b6:19:57:73:ed:cf:b9:ea:42: f6:3b:cc:95:6c:49:76:07:98:ad:5c:77:a4:83:27:4c:a5:53: 7f:af:ff:64:c9:7a:25:89:42:e6:42:44:a3:70:df:dd:2e:a3: fe:c9:e6:30:f1:26:5c:2e:83:89:98:35:e8:2e:5f:94:f7:c8: 37:95:9e:2f:80:b8:be:1e:6b:ce:2d:8f:a9:07:38:03:74:cb: 9f:71:6a:a0:81:1a:89:b5:31:4e:b0:12:d9:ee:fd:84:bd:44: bd:0f:ab:d6 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUdgoel9rKOzYiISUbUpwTmkjo+t0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5RDk4NzJBNzEwRkU3MTNEQzYyMjQxRDU4NzcwM0JE RjdEQzFENjAeFw0yNTEyMTIwODE3NDlaFw0yNjEyMTEwODIyNDlaMDMxMTAvBgNV BAMTKDczQkI3MTY4N0Y1MkM5NTI4NDA5NzJERThFRkY4RDhEMDlDNTg3MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzQI4TyDnitZd93Z4QLMe0nicI aFm3ivsSWxCVtNlE6P5Yiwxmb6CxBOmwqXqljkWei3dKGF/PHhApkIENeQu/lG1S +9Oe9pgrmhLV85BHIQCo1ZtU1eB6quUzWIvnkzyh5jlC1D65fmlaxPEQE9O+Wel7 +pe7AildMwyo0lZfWlZbCdLy6QLfrqvvjS7CcOlkQpADNbG2Mpq/m2JVhVke4t1o 4nZZBAx0vu5R+UHRnN+DpomVley5zP+RQxmAEmanKvEXLEu+jw2VrbXUukB5mZZN U8HNt1dSru1PilqGsLhLZkx63onB7GyG34M037s6FObsEkM/EtUl1VJ0yDipAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUc7txaH9SyVKECXLejv+NjQnFhyYwHwYDVR0j BBgwFoAU7J2YcqcQ/nE9xiJB1YdwO999wdYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjYxN2Q4Yy1kMTU0LTQ2MWUtYmNjYS1iNjZkMjY3Y2ZmYzcvMC9FQzlEOTg3MkE3 MTBGRTcxM0RDNjIyNDFENTg3NzAzQkRGN0RDMUQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM5RDk4NzJBNzEwRkU3MTNEQzYyMjQxRDU4NzcwM0JERjdE QzFENi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E2NjE3ZDhjLWQxNTQtNDYxZS1i Y2NhLWI2NmQyNjdjZmZjNy8wLzMxMzAzMzJlMzEzOTJlMzEzNzM2MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzEzMzMyMzYzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZxOwMA0GCSqG SIb3DQEBCwUAA4IBAQBasTm9IjNvhD+XTdmdTcQCXgnqvyAXYSMQIoj2/SdZHTpK 5vntG3ukrHnwVqdvFoO8iyo0Tao4Ewuv4rru1RQXao2t6lR0mcpaNXl7+e8lAYt1 PFPLNXySnAMYPEkQ3MXu7NQcGuL1LS97B/2cWkToctdTcZwsEksgX9LmM6zbAecW tEoLCNf6GZ4mxOcwMtoy+pAC8gEnZiq2GVdz7c+56kL2O8yVbEl2B5itXHekgydM pVN/r/9kyXoliULmQkSjcN/dLqP+yeYw8SZcLoOJmDXoLl+U98g3lZ4vgLi+HmvO LY+pBzgDdMufcWqggRqJtTFOsBLZ7v2EvUS9D6vW -----END CERTIFICATE-----Generated at Fri Dec 19 12:46:41 2025 by rpki-client