This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/3130332e3139332e3136362e302f32342d3234203d3e20313530313835.roa File: 3130332e3139332e3136362e302f32342d3234203d3e20313530313835.roa (raw, json) Hash identifier: RK/lRgQFYGeXg6Bzk3ovyOFZdgVFVtKMAYe3R6PnsZs= Subject key identifier: 7B:CB:7F:61:16:4E:10:B3:3F:E8:64:32:6A:9A:9D:D3:E9:84:BD:01 Certificate issuer: /CN=210BE7BD512F122FD63FE9057A7F1522DC9B81A7 Certificate serial: 7C3C6AF1E91FD47F1BF32CC426DDBC6AA47FEF41 Authority key identifier: 21:0B:E7:BD:51:2F:12:2F:D6:3F:E9:05:7A:7F:15:22:DC:9B:81:A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/3130332e3139332e3136362e302f32342d3234203d3e20313530313835.roa Signing time: Fri 12 Dec 2025 11:02:29 +0000 ROA not before: Fri 12 Dec 2025 10:57:29 +0000 ROA not after: Fri 11 Dec 2026 11:02:29 +0000 asID: 150185 IP address blocks: 103.193.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.crl rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 00:16:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:3c:6a:f1:e9:1f:d4:7f:1b:f3:2c:c4:26:dd:bc:6a:a4:7f:ef:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=210BE7BD512F122FD63FE9057A7F1522DC9B81A7 Validity Not Before: Dec 12 10:57:29 2025 GMT Not After : Dec 11 11:02:29 2026 GMT Subject: CN=7BCB7F61164E10B33FE864326A9A9DD3E984BD01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:a9:ea:f0:9f:39:8e:2c:e2:6c:84:04:ef:f6: a9:28:69:f9:0c:e6:d2:de:6b:05:0c:da:99:2c:94: a2:ff:63:d4:8b:99:17:83:51:b0:17:08:08:bb:74: 3b:fd:b0:ef:b4:cb:d5:5d:61:85:d1:f6:2a:d4:90: 22:33:6b:5c:4d:a4:d6:06:47:bd:db:a1:fc:c7:57: 70:74:b8:8b:72:bd:2c:d9:2a:a6:eb:99:54:25:df: fb:db:d4:39:b0:7f:36:f3:6f:6a:87:5e:5f:52:b1: 85:78:35:57:29:49:24:26:a7:fd:2d:50:8c:2d:fa: df:61:d0:b5:ed:95:f8:c1:4c:27:65:2e:b2:c1:16: 8d:2d:a0:d0:96:49:cf:49:f2:d9:c6:3d:d4:2e:f3: 9e:ef:56:2b:3f:04:cd:93:ef:2b:52:cb:e0:79:e1: b5:4f:1f:c8:b2:62:6b:d6:c8:42:ff:d6:a3:99:b6: c1:ba:b8:18:49:9e:2e:66:a2:83:96:a1:be:cc:21: 4c:f4:ca:41:4f:96:a0:e4:a8:7e:ee:2c:4c:dc:15: 79:4a:bc:d2:25:97:88:b5:c0:1b:dd:7b:0a:e8:2d: a9:b1:fb:b3:86:a9:8f:56:37:66:39:c6:02:26:a8: 83:51:27:40:20:d7:c9:72:40:43:58:15:8a:3f:40: af:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:CB:7F:61:16:4E:10:B3:3F:E8:64:32:6A:9A:9D:D3:E9:84:BD:01 X509v3 Authority Key Identifier: keyid:21:0B:E7:BD:51:2F:12:2F:D6:3F:E9:05:7A:7F:15:22:DC:9B:81:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/3130332e3139332e3136362e302f32342d3234203d3e20313530313835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.193.166.0/24 Signature Algorithm: sha256WithRSAEncryption 58:be:68:be:e0:13:09:9c:21:82:b5:b7:0b:0d:88:79:18:df: 77:a8:93:2d:72:3c:97:b3:6c:77:09:77:ce:97:08:e6:b2:90: 5a:d3:af:51:96:8f:41:39:a9:87:49:93:e7:94:e3:e5:4f:27: 54:a4:fc:cd:e5:74:83:4c:0c:95:a5:38:c7:b4:42:ff:23:d2: 41:b0:9d:d6:40:94:90:19:79:b7:37:7e:65:83:02:df:ea:a4: 0c:d1:e9:9d:1e:de:f7:c0:7f:52:d3:5e:8d:f9:de:48:74:53: 91:8a:b9:2c:37:87:b3:1c:78:08:81:dd:51:98:31:8d:32:a9: 37:f8:92:ce:d9:d4:d2:63:36:d3:dc:37:7d:95:a0:95:3d:f7: a6:3f:72:44:4a:d4:14:05:cc:04:de:9e:53:4b:02:83:98:3d: a5:1a:a0:fd:50:65:43:47:ac:c9:cf:0e:26:88:67:23:c0:cb: ed:40:2f:43:b9:c7:57:54:04:4a:cc:e3:e9:50:07:6e:d2:12: 45:72:2d:ec:3e:3c:c9:cd:0c:55:5b:12:f4:6d:6f:81:a2:72: 77:16:8d:b8:1c:e1:63:77:27:06:93:bf:0d:bc:6f:3f:97:3c: 60:ae:a3:fd:26:2f:3a:f3:70:20:64:41:a0:89:cb:88:58:5b: 47:ff:9b:4a -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUfDxq8ekf1H8b8yzEJt28aqR/70EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjEwQkU3QkQ1MTJGMTIyRkQ2M0ZFOTA1N0E3RjE1MjJE QzlCODFBNzAeFw0yNTEyMTIxMDU3MjlaFw0yNjEyMTExMTAyMjlaMDMxMTAvBgNV BAMTKDdCQ0I3RjYxMTY0RTEwQjMzRkU4NjQzMjZBOUE5REQzRTk4NEJEMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrqerwnzmOLOJshATv9qkoafkM 5tLeawUM2pkslKL/Y9SLmReDUbAXCAi7dDv9sO+0y9VdYYXR9irUkCIza1xNpNYG R73bofzHV3B0uItyvSzZKqbrmVQl3/vb1Dmwfzbzb2qHXl9SsYV4NVcpSSQmp/0t UIwt+t9h0LXtlfjBTCdlLrLBFo0toNCWSc9J8tnGPdQu857vVis/BM2T7ytSy+B5 4bVPH8iyYmvWyEL/1qOZtsG6uBhJni5mooOWob7MIUz0ykFPlqDkqH7uLEzcFXlK vNIll4i1wBvdewroLamx+7OGqY9WN2Y5xgImqINRJ0Ag18lyQENYFYo/QK/3AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUe8t/YRZOELM/6GQyapqd0+mEvQEwHwYDVR0j BBgwFoAUIQvnvVEvEi/WP+kFen8VItybgacwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NzAzNjk3NC04MTMxLTQ1YWYtOTRjZS1mNDliNDgxMWMxNzMvMC8yMTBCRTdCRDUx MkYxMjJGRDYzRkU5MDU3QTdGMTUyMkRDOUI4MUE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjEwQkU3QkQ1MTJGMTIyRkQ2M0ZFOTA1N0E3RjE1MjJEQzlC ODFBNy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I3MDM2OTc0LTgxMzEtNDVhZi05 NGNlLWY0OWI0ODExYzE3My8wLzMxMzAzMzJlMzEzOTMzMmUzMTM2MzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzAzMTM4MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnwaYwDQYJ KoZIhvcNAQELBQADggEBAFi+aL7gEwmcIYK1twsNiHkY33eoky1yPJezbHcJd86X COaykFrTr1GWj0E5qYdJk+eU4+VPJ1Sk/M3ldINMDJWlOMe0Qv8j0kGwndZAlJAZ ebc3fmWDAt/qpAzR6Z0e3vfAf1LTXo353kh0U5GKuSw3h7MceAiB3VGYMY0yqTf4 ks7Z1NJjNtPcN32VoJU996Y/ckRK1BQFzATenlNLAoOYPaUaoP1QZUNHrMnPDiaI ZyPAy+1AL0O5x1dUBErM4+lQB27SEkVyLew+PMnNDFVbEvRtb4GicncWjbgc4WN3 JwaTvw28bz+XPGCuo/0mLzrzcCBkQaCJy4hYW0f/m0o= -----END CERTIFICATE-----Generated at Wed Dec 24 23:54:42 2025 by rpki-client