This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/3130332e3137362e3230302e302f32342d3234203d3e20313532333733.roa File: 3130332e3137362e3230302e302f32342d3234203d3e20313532333733.roa (raw, json) Hash identifier: e2maHu55FP5fp6lO5LJsBGEPwnDr2gnnfc83H1faNCM= Subject key identifier: 4E:3A:CE:A7:E5:12:CD:E5:A9:4D:A8:98:F6:E4:8A:39:8F:CA:9D:78 Certificate issuer: /CN=D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66 Certificate serial: 0F5669E0B7D8EF456D6B63D2E85B510A2596BFA3 Authority key identifier: D6:C1:F1:3C:67:CD:02:54:5D:EB:AA:84:6E:B2:8F:6E:A3:FC:EB:66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/3130332e3137362e3230302e302f32342d3234203d3e20313532333733.roa Signing time: Wed 10 Dec 2025 20:40:29 +0000 ROA not before: Wed 10 Dec 2025 20:35:29 +0000 ROA not after: Wed 09 Dec 2026 20:40:29 +0000 asID: 152373 IP address blocks: 103.176.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 17:12:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:56:69:e0:b7:d8:ef:45:6d:6b:63:d2:e8:5b:51:0a:25:96:bf:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66 Validity Not Before: Dec 10 20:35:29 2025 GMT Not After : Dec 9 20:40:29 2026 GMT Subject: CN=4E3ACEA7E512CDE5A94DA898F6E48A398FCA9D78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e9:11:17:98:e7:4a:7f:8d:86:8e:ad:4e:8d: 71:10:f1:b7:94:aa:18:ca:c8:22:e5:b2:ab:b1:f6: 77:76:72:c1:71:58:2c:e8:a2:36:98:26:c6:0e:18: ba:5c:c7:2c:f7:89:41:a0:8b:b1:ee:a7:ed:7e:88: 51:fa:99:5a:68:b6:51:56:d6:c9:92:4b:24:b1:05: dd:37:20:b6:ef:35:56:9b:b7:18:27:d1:20:f4:47: 93:bf:33:4c:7b:34:a5:63:ba:bf:96:74:bf:e1:7b: d6:91:ac:d7:5d:c5:ef:36:6b:05:49:d4:41:23:67: c2:64:58:59:4a:37:0e:da:11:41:43:83:fb:12:5a: d9:6a:59:1c:2f:b9:3a:bf:fc:3d:24:cd:6f:c7:37: 60:55:f1:d1:a7:7e:34:78:a7:a1:7c:85:64:87:0b: af:cb:c9:30:f2:04:8b:60:a5:39:4a:2f:2a:46:9c: f6:ec:0d:fb:f1:d6:f8:71:c2:25:32:08:7e:47:43: 65:6a:1a:31:0f:ff:94:a2:e2:dc:a8:2a:6c:c0:05: aa:83:e1:15:7f:07:b9:af:5c:3b:a2:82:ef:73:01: a7:18:03:ef:b7:f3:ce:19:a9:ec:e5:cc:c6:f8:5d: 68:d2:04:65:56:b7:a2:f0:7f:24:4e:6f:76:e5:70: 34:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:3A:CE:A7:E5:12:CD:E5:A9:4D:A8:98:F6:E4:8A:39:8F:CA:9D:78 X509v3 Authority Key Identifier: keyid:D6:C1:F1:3C:67:CD:02:54:5D:EB:AA:84:6E:B2:8F:6E:A3:FC:EB:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/3130332e3137362e3230302e302f32342d3234203d3e20313532333733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.176.200.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:9d:b4:e2:9c:45:ec:b6:c9:aa:2a:67:ee:26:89:f8:0a:56: 5a:8f:d7:9d:76:f0:da:60:24:a5:86:92:d4:3d:4e:bc:f4:ca: b8:db:a8:46:a2:cf:ba:c3:b3:2d:d6:59:a5:57:58:32:4c:29: f6:f3:93:3e:af:42:ff:cf:e6:5e:e0:3f:b9:da:b9:80:ad:31: 2a:e3:3e:68:d0:3c:ba:16:38:f5:01:db:7f:45:ad:84:ec:96: 68:80:4e:3c:e5:04:73:5c:81:f5:5b:3c:99:5d:c9:bd:e6:01: 0b:08:95:87:b2:4c:e4:e1:34:69:32:1b:d0:f4:9f:92:54:4a: 34:e4:fa:96:98:a6:f2:7f:1d:92:46:4f:d0:ff:9c:b0:ff:86: 7b:40:c6:0d:35:bf:0f:1b:12:27:c3:ab:89:3d:fc:3c:10:d6: 18:fc:4d:75:4f:c3:a2:49:4e:8b:2b:0d:ae:dc:30:ec:43:e4: 27:9f:e2:1c:a2:d5:02:5a:26:49:e6:2f:31:35:07:bb:58:25: b5:3e:50:1a:22:42:55:f6:54:97:20:e6:e2:dd:aa:30:f5:a7: ec:3e:12:a3:03:bb:51:11:18:d0:15:79:01:f6:e6:df:28:54: db:14:72:ef:0e:02:4e:85:43:0c:ad:79:e8:08:f0:57:ac:13: 3d:8d:38:94 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUD1Zp4LfY70Vta2PS6FtRCiWWv6MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZDMUYxM0M2N0NEMDI1NDVERUJBQTg0NkVCMjhGNkVB M0ZDRUI2NjAeFw0yNTEyMTAyMDM1MjlaFw0yNjEyMDkyMDQwMjlaMDMxMTAvBgNV BAMTKDRFM0FDRUE3RTUxMkNERTVBOTREQTg5OEY2RTQ4QTM5OEZDQTlENzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC6REXmOdKf42Gjq1OjXEQ8beU qhjKyCLlsqux9nd2csFxWCzoojaYJsYOGLpcxyz3iUGgi7Hup+1+iFH6mVpotlFW 1smSSySxBd03ILbvNVabtxgn0SD0R5O/M0x7NKVjur+WdL/he9aRrNddxe82awVJ 1EEjZ8JkWFlKNw7aEUFDg/sSWtlqWRwvuTq//D0kzW/HN2BV8dGnfjR4p6F8hWSH C6/LyTDyBItgpTlKLypGnPbsDfvx1vhxwiUyCH5HQ2VqGjEP/5Si4tyoKmzABaqD 4RV/B7mvXDuigu9zAacYA++3884ZqezlzMb4XWjSBGVWt6LwfyROb3blcDSVAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUTjrOp+USzeWpTaiY9uSKOY/KnXgwHwYDVR0j BBgwFoAU1sHxPGfNAlRd66qEbrKPbqP862YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2EyZTBkYi1lMjkzLTQxYzUtODU4My0zODAxNTc1ODQyMWMvMC9ENkMxRjEzQzY3 Q0QwMjU0NURFQkFBODQ2RUIyOEY2RUEzRkNFQjY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDZDMUYxM0M2N0NEMDI1NDVERUJBQTg0NkVCMjhGNkVBM0ZD RUI2Ni5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NjYTJlMGRiLWUyOTMtNDFjNS04 NTgzLTM4MDE1NzU4NDIxYy8wLzMxMzAzMzJlMzEzNzM2MmUzMjMwMzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzIzMzM3MzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnsMgwDQYJ KoZIhvcNAQELBQADggEBAEydtOKcRey2yaoqZ+4mifgKVlqP15128NpgJKWGktQ9 Trz0yrjbqEaiz7rDsy3WWaVXWDJMKfbzkz6vQv/P5l7gP7nauYCtMSrjPmjQPLoW OPUB239FrYTslmiATjzlBHNcgfVbPJldyb3mAQsIlYeyTOThNGkyG9D0n5JUSjTk +paYpvJ/HZJGT9D/nLD/hntAxg01vw8bEifDq4k9/DwQ1hj8TXVPw6JJTosrDa7c MOxD5Cef4hyi1QJaJknmLzE1B7tYJbU+UBoiQlX2VJcg5uLdqjD1p+w+EqMDu1ER GNAVeQH25t8oVNsUcu8OAk6FQwyteegI8FesEz2NOJQ= -----END CERTIFICATE-----Generated at Sun Dec 21 07:17:31 2025 by rpki-client