This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/3130332e3132362e3139352e302f32342d3234203d3e20313530353438.roa File: 3130332e3132362e3139352e302f32342d3234203d3e20313530353438.roa (raw, json) Hash identifier: GNZzAcmYMO24v0PgoH0PVcbzFxgNvmanVmMwCuln4aA= Subject key identifier: 92:23:69:A3:47:AB:92:F3:9D:D7:CD:C7:5A:F5:35:EC:A3:EF:86:A1 Certificate issuer: /CN=0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D Certificate serial: 3B6B09FE79C01F3D7D37F85B5558E2B27B8D1C38 Authority key identifier: 0F:21:C3:EB:D5:0F:C8:F4:3F:8C:A7:A8:71:14:15:6F:74:25:DC:9D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/3130332e3132362e3139352e302f32342d3234203d3e20313530353438.roa Signing time: Wed 10 Dec 2025 04:03:07 +0000 ROA not before: Wed 10 Dec 2025 03:58:07 +0000 ROA not after: Wed 09 Dec 2026 04:03:07 +0000 asID: 150548 IP address blocks: 103.126.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.crl rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 11:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:6b:09:fe:79:c0:1f:3d:7d:37:f8:5b:55:58:e2:b2:7b:8d:1c:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D Validity Not Before: Dec 10 03:58:07 2025 GMT Not After : Dec 9 04:03:07 2026 GMT Subject: CN=922369A347AB92F39DD7CDC75AF535ECA3EF86A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e4:d7:ad:f6:57:2b:ee:e3:92:ea:ae:76:28: 34:8d:44:bd:47:11:6d:ad:88:97:0a:6d:4d:a4:73: fa:ed:cf:c8:12:d9:9b:50:6a:cb:fc:f9:a1:27:48: d7:e6:93:aa:64:18:5a:c2:74:bb:15:3a:a1:01:f7: 43:cc:3e:81:ac:59:0d:3f:34:78:6e:f4:a4:8a:f4: 00:bc:ab:29:08:11:32:b1:de:0a:58:d5:8b:84:74: 2f:21:91:18:96:0f:53:43:1c:66:27:8f:0f:0a:ac: 8b:0a:1b:aa:35:31:28:00:df:ee:c9:64:95:08:09: 86:96:03:0e:0e:7b:1d:96:ab:1f:27:49:d3:b7:46: bb:91:13:db:11:be:fc:4c:76:a0:69:c9:b0:ab:a2: 8c:d1:a0:fb:e1:21:fa:74:09:e3:68:9b:ce:a4:83: a0:71:2a:21:b4:83:4c:ad:84:19:02:9c:63:33:f3: 10:00:80:24:96:26:eb:86:23:f2:98:5c:ca:fe:e9: 74:5f:d3:3d:26:cf:e5:80:e0:bc:83:66:08:68:37: f7:1a:b6:18:00:c0:67:f4:81:c3:76:b2:79:fb:01: 9b:ad:e0:5e:5b:a6:19:d1:dd:be:4a:82:a9:aa:a5: 04:b6:d5:34:6f:c8:80:65:69:9f:59:85:ce:ef:b3: ac:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:23:69:A3:47:AB:92:F3:9D:D7:CD:C7:5A:F5:35:EC:A3:EF:86:A1 X509v3 Authority Key Identifier: keyid:0F:21:C3:EB:D5:0F:C8:F4:3F:8C:A7:A8:71:14:15:6F:74:25:DC:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/3130332e3132362e3139352e302f32342d3234203d3e20313530353438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.126.195.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:96:20:5e:06:46:75:e7:05:41:a4:bd:d3:22:e6:69:ac:b2: 6b:d4:bb:d5:99:ab:aa:98:4c:4a:79:dd:3f:b7:ce:c3:c0:c7: 81:6d:84:ac:a7:7d:18:3b:3e:98:a6:37:07:67:59:49:b7:59: e9:d5:ec:13:38:af:ef:8a:bc:f7:d0:46:9f:74:7f:9b:fa:38: ae:8f:84:bd:31:13:57:3e:5a:eb:d1:78:cd:39:cb:2f:35:ed: ed:03:e5:6b:96:aa:11:7d:4a:c2:2a:29:9c:b9:fe:ca:5b:fc: 39:a9:d0:46:2a:3d:60:e0:a1:e0:ab:74:f0:2b:f1:ba:48:68: 58:4d:66:bb:c4:f4:aa:b3:69:25:ec:b2:2a:20:9c:f5:38:a5: 38:72:ab:3f:a4:ce:02:26:7d:12:09:23:91:57:9c:07:d4:37: 00:ba:76:03:18:bd:c3:e3:14:25:6c:db:db:74:69:22:14:b0: 7b:5d:36:94:fe:9d:f1:bd:89:2a:3d:52:54:de:ee:89:11:5d: 9f:7c:26:26:7c:49:72:f1:94:21:33:02:d4:18:c2:0e:cf:32: 95:46:20:53:2b:5f:0f:7d:8d:99:ab:82:97:81:38:a3:ed:fb: f5:f3:3a:f4:50:89:5b:a5:e6:43:d2:f8:b1:33:20:74:92:49: b6:2c:c6:74 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUO2sJ/nnAHz19N/hbVVjisnuNHDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyMUMzRUJENTBGQzhGNDNGOENBN0E4NzExNDE1NkY3 NDI1REM5RDAeFw0yNTEyMTAwMzU4MDdaFw0yNjEyMDkwNDAzMDdaMDMxMTAvBgNV BAMTKDkyMjM2OUEzNDdBQjkyRjM5REQ3Q0RDNzVBRjUzNUVDQTNFRjg2QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA5Net9lcr7uOS6q52KDSNRL1H EW2tiJcKbU2kc/rtz8gS2ZtQasv8+aEnSNfmk6pkGFrCdLsVOqEB90PMPoGsWQ0/ NHhu9KSK9AC8qykIETKx3gpY1YuEdC8hkRiWD1NDHGYnjw8KrIsKG6o1MSgA3+7J ZJUICYaWAw4Oex2Wqx8nSdO3RruRE9sRvvxMdqBpybCroozRoPvhIfp0CeNom86k g6BxKiG0g0ythBkCnGMz8xAAgCSWJuuGI/KYXMr+6XRf0z0mz+WA4LyDZghoN/ca thgAwGf0gcN2snn7AZut4F5bphnR3b5KgqmqpQS21TRvyIBlaZ9Zhc7vs6zdAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUkiNpo0erkvOd183HWvU17KPvhqEwHwYDVR0j BBgwFoAUDyHD69UPyPQ/jKeocRQVb3Ql3J0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTkzMDE4ZS03MThmLTQ3NTctYTA4Ny05M2FkNzdiODE4MjEvMC8wRjIxQzNFQkQ1 MEZDOEY0M0Y4Q0E3QTg3MTE0MTU2Rjc0MjVEQzlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYyMUMzRUJENTBGQzhGNDNGOENBN0E4NzExNDE1NkY3NDI1 REM5RC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IxOTMwMThlLTcxOGYtNDc1Ny1h MDg3LTkzYWQ3N2I4MTgyMS8wLzMxMzAzMzJlMzEzMjM2MmUzMTM5MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzAzNTM0Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnfsMwDQYJ KoZIhvcNAQELBQADggEBAEuWIF4GRnXnBUGkvdMi5mmssmvUu9WZq6qYTEp53T+3 zsPAx4FthKynfRg7PpimNwdnWUm3WenV7BM4r++KvPfQRp90f5v6OK6PhL0xE1c+ WuvReM05yy817e0D5WuWqhF9SsIqKZy5/spb/Dmp0EYqPWDgoeCrdPAr8bpIaFhN ZrvE9KqzaSXssiognPU4pThyqz+kzgImfRIJI5FXnAfUNwC6dgMYvcPjFCVs29t0 aSIUsHtdNpT+nfG9iSo9UlTe7okRXZ98JiZ8SXLxlCEzAtQYwg7PMpVGIFMrXw99 jZmrgpeBOKPt+/XzOvRQiVul5kPS+LEzIHSSSbYsxnQ= -----END CERTIFICATE-----Generated at Fri Dec 19 20:17:01 2025 by rpki-client