This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/3130332e3139352e32382e302f32342d3234203d3e20313530353133.roa File: 3130332e3139352e32382e302f32342d3234203d3e20313530353133.roa (raw, json) Hash identifier: 4LNzIiiVAjfAPDaN3C6qI+UuH36Wsb+t94eV+et+GFs= Subject key identifier: B5:99:FA:06:A1:C8:15:E6:C8:28:AB:5C:1A:37:48:65:C7:E1:A3:38 Certificate issuer: /CN=A01B6715A5B29F23D33C70B4E59135B0FA2231F5 Certificate serial: 1A9A0ED1FC64AA4484A1B253EFD52E201EBCD2D8 Authority key identifier: A0:1B:67:15:A5:B2:9F:23:D3:3C:70:B4:E5:91:35:B0:FA:22:31:F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/3130332e3139352e32382e302f32342d3234203d3e20313530353133.roa Signing time: Mon 22 Dec 2025 09:01:52 +0000 ROA not before: Mon 22 Dec 2025 08:56:52 +0000 ROA not after: Mon 21 Dec 2026 09:01:52 +0000 asID: 150513 IP address blocks: 103.195.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.crl rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:9a:0e:d1:fc:64:aa:44:84:a1:b2:53:ef:d5:2e:20:1e:bc:d2:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A01B6715A5B29F23D33C70B4E59135B0FA2231F5 Validity Not Before: Dec 22 08:56:52 2025 GMT Not After : Dec 21 09:01:52 2026 GMT Subject: CN=B599FA06A1C815E6C828AB5C1A374865C7E1A338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6a:73:a3:60:5d:f1:4c:a6:e5:69:68:42:a6: 1d:df:42:cd:82:2e:c1:41:df:ae:97:db:2a:10:04: 8a:03:8a:29:a3:40:3a:ba:56:83:d5:fb:46:41:b1: a3:33:a6:a6:c5:15:15:dc:17:25:30:bb:d4:a2:67: 9d:f0:b7:1e:51:a9:68:e5:e0:8c:59:64:7f:8c:2f: 29:8c:22:5c:c3:30:4c:2c:66:b5:a8:19:f8:2c:04: cb:08:d0:b1:17:1d:1a:1b:34:08:0b:68:25:54:df: bc:b6:d2:02:5b:78:4d:d5:f4:49:54:4e:e1:f5:4d: 76:f0:9f:31:85:0a:c7:2a:26:10:3e:b6:5b:37:98: 6b:fc:99:96:0f:ed:53:0d:fe:03:1b:8b:28:ac:d1: 2b:23:08:45:08:ab:44:7a:9b:5e:2c:80:df:1e:07: e0:3e:43:36:8c:85:4f:c2:9c:9f:04:12:1d:f3:ee: 34:07:1a:b7:a5:96:a8:56:e4:bb:49:f0:b9:10:69: ea:00:0b:18:95:22:a1:76:3e:53:1c:2c:5d:66:4c: 0e:20:66:5f:e4:08:40:1b:22:63:e5:3d:60:2f:e9: 43:82:ea:13:7a:8b:cc:e4:1e:de:fe:99:8d:0d:e0: bf:19:54:09:58:47:33:0a:80:6c:ba:18:3a:7c:17: 66:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:99:FA:06:A1:C8:15:E6:C8:28:AB:5C:1A:37:48:65:C7:E1:A3:38 X509v3 Authority Key Identifier: keyid:A0:1B:67:15:A5:B2:9F:23:D3:3C:70:B4:E5:91:35:B0:FA:22:31:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/3130332e3139352e32382e302f32342d3234203d3e20313530353133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.195.28.0/24 Signature Algorithm: sha256WithRSAEncryption 88:2d:f3:32:87:96:d3:55:fc:0d:0e:b1:6b:cd:56:c8:55:3a: a2:7f:ed:9d:25:ce:3f:53:bf:55:32:7e:6c:3e:06:f5:29:75: 77:45:bd:b8:9e:a0:16:80:be:1a:15:9d:b6:42:0a:54:d3:0d: f7:25:d1:26:55:96:8d:08:41:21:b0:b8:ff:f7:5e:65:9c:e1: aa:9a:3f:78:ec:5b:07:9e:d1:da:65:43:97:ea:bb:48:18:e3: fd:01:15:7a:d0:d0:c7:41:18:3b:ec:bb:72:69:f1:0e:44:28: 2a:3e:33:b7:7d:89:20:ef:65:7b:50:87:3a:07:37:a1:9a:67: 39:ba:a1:65:f0:c8:9d:c0:bb:50:e4:c1:42:66:09:5a:0a:f8: 92:91:2e:0c:be:f8:ed:ff:f3:92:16:35:76:e3:62:37:1d:2b: b8:12:fb:83:ad:8d:d7:47:2c:d5:b6:5c:88:eb:b6:7d:74:64: c9:d4:23:7d:42:f5:eb:8f:76:79:a0:d3:07:a2:dd:3a:35:7e: 62:f0:21:71:f1:0c:01:06:aa:73:0d:3b:4c:55:f8:ed:a3:6d: 72:c9:7c:42:10:be:68:77:e8:52:b0:6a:ec:61:58:d1:a0:cf: bc:9e:28:03:5a:9f:8f:39:1f:ef:58:13:e9:ed:9a:bd:59:e0: ee:a5:c5:01 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUGpoO0fxkqkSEobJT79UuIB680tgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAxQjY3MTVBNUIyOUYyM0QzM0M3MEI0RTU5MTM1QjBG QTIyMzFGNTAeFw0yNTEyMjIwODU2NTJaFw0yNjEyMjEwOTAxNTJaMDMxMTAvBgNV BAMTKEI1OTlGQTA2QTFDODE1RTZDODI4QUI1QzFBMzc0ODY1QzdFMUEzMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJanOjYF3xTKblaWhCph3fQs2C LsFB366X2yoQBIoDiimjQDq6VoPV+0ZBsaMzpqbFFRXcFyUwu9SiZ53wtx5RqWjl 4IxZZH+MLymMIlzDMEwsZrWoGfgsBMsI0LEXHRobNAgLaCVU37y20gJbeE3V9ElU TuH1TXbwnzGFCscqJhA+tls3mGv8mZYP7VMN/gMbiyis0SsjCEUIq0R6m14sgN8e B+A+QzaMhU/CnJ8EEh3z7jQHGrellqhW5LtJ8LkQaeoACxiVIqF2PlMcLF1mTA4g Zl/kCEAbImPlPWAv6UOC6hN6i8zkHt7+mY0N4L8ZVAlYRzMKgGy6GDp8F2ZDAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUtZn6BqHIFebIKKtcGjdIZcfhozgwHwYDVR0j BBgwFoAUoBtnFaWynyPTPHC05ZE1sPoiMfUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDkxMmM5Yi1kY2U0LTQwZTYtOTU4OC1kN2NhOGMzN2VmNGQvMC9BMDFCNjcxNUE1 QjI5RjIzRDMzQzcwQjRFNTkxMzVCMEZBMjIzMUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAxQjY3MTVBNUIyOUYyM0QzM0M3MEI0RTU5MTM1QjBGQTIy MzFGNS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I0OTEyYzliLWRjZTQtNDBlNi05 NTg4LWQ3Y2E4YzM3ZWY0ZC8wLzMxMzAzMzJlMzEzOTM1MmUzMjM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzUzMTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ8McMA0GCSqG SIb3DQEBCwUAA4IBAQCILfMyh5bTVfwNDrFrzVbIVTqif+2dJc4/U79VMn5sPgb1 KXV3Rb24nqAWgL4aFZ22QgpU0w33JdEmVZaNCEEhsLj/915lnOGqmj947FsHntHa ZUOX6rtIGOP9ARV60NDHQRg77LtyafEORCgqPjO3fYkg72V7UIc6Bzehmmc5uqFl 8MidwLtQ5MFCZglaCviSkS4Mvvjt//OSFjV242I3HSu4EvuDrY3XRyzVtlyI67Z9 dGTJ1CN9QvXrj3Z5oNMHot06NX5i8CFx8QwBBqpzDTtMVfjto21yyXxCEL5od+hS sGrsYVjRoM+8nigDWp+POR/vWBPp7Zq9WeDupcUB -----END CERTIFICATE-----Generated at Wed Dec 24 22:06:53 2025 by rpki-client