This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/3130332e31302e37302e302f32342d3234203d3e20313530323130.roa File: 3130332e31302e37302e302f32342d3234203d3e20313530323130.roa (raw, json) Hash identifier: GkGrk3uoqwZ411t/pDhy3mlwE7XrelZ7UpYea4pdtg4= Subject key identifier: 60:D5:31:0A:68:DE:41:E2:E4:25:75:92:A6:8C:B3:74:C6:F4:43:4E Certificate issuer: /CN=8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB Certificate serial: 6D21F8A094DF0803BE377DE1481C7B0684F2510A Authority key identifier: 8C:6B:9F:E8:0E:F1:DA:40:B9:64:D4:42:9F:78:78:5A:DD:D2:9E:FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/3130332e31302e37302e302f32342d3234203d3e20313530323130.roa Signing time: Tue 16 Dec 2025 12:00:01 +0000 ROA not before: Tue 16 Dec 2025 11:55:01 +0000 ROA not after: Tue 15 Dec 2026 12:00:01 +0000 asID: 150210 IP address blocks: 103.10.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 13:27:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:21:f8:a0:94:df:08:03:be:37:7d:e1:48:1c:7b:06:84:f2:51:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB Validity Not Before: Dec 16 11:55:01 2025 GMT Not After : Dec 15 12:00:01 2026 GMT Subject: CN=60D5310A68DE41E2E4257592A68CB374C6F4434E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:21:81:65:d4:8d:89:bc:d3:55:7e:c9:c0:ef: 86:98:18:e1:16:ba:cc:e9:29:e8:6f:06:e1:11:90: 59:bc:9c:2b:63:e7:44:2a:39:18:41:45:94:b8:94: cb:1e:d9:fd:26:b7:66:ac:7e:9e:a6:32:a2:5e:fd: 07:d7:9a:5c:07:72:4a:aa:f3:94:e8:cb:06:10:bb: a9:db:dd:e3:93:fb:e0:9b:d5:bd:f5:f8:e6:96:5f: b5:9c:20:16:96:7b:5a:41:3d:d2:a3:87:02:a1:d1: 8f:b7:40:bc:a9:c7:d8:09:ab:74:d1:ff:db:d4:a3: 3c:a4:83:c3:35:39:19:7a:25:54:c8:60:20:95:1c: 56:f7:a5:94:4d:fa:56:5f:42:9a:89:f0:db:df:cf: f6:93:2e:66:67:5e:60:90:61:bb:aa:2a:55:3a:61: 68:72:66:73:3d:92:e4:3f:15:bd:f4:0b:e7:b3:0e: a4:95:8b:8c:c6:c7:34:9c:80:ef:d8:4d:2c:a9:ca: 82:88:74:d4:65:15:8a:18:0f:cb:fd:66:67:3b:f9: 25:a8:e0:20:19:23:df:27:37:be:25:65:f7:66:cb: a1:a1:7c:29:cb:c7:89:9d:02:ad:5d:01:c6:af:01: 37:2b:4b:3b:71:22:0d:91:14:96:e2:0b:a0:0e:ea: cb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D5:31:0A:68:DE:41:E2:E4:25:75:92:A6:8C:B3:74:C6:F4:43:4E X509v3 Authority Key Identifier: keyid:8C:6B:9F:E8:0E:F1:DA:40:B9:64:D4:42:9F:78:78:5A:DD:D2:9E:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/3130332e31302e37302e302f32342d3234203d3e20313530323130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.10.70.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:73:9e:c0:18:37:0b:a1:0d:fd:1d:8f:af:63:11:29:d1:c0: 00:12:b2:3c:fd:b5:2c:20:c3:06:e8:34:1e:9f:b6:7c:b4:7f: 73:6d:1e:c2:b2:76:13:d2:7b:b4:0b:4a:6f:d9:53:bd:20:d9: 5a:8b:93:e2:fa:57:b4:35:b6:83:ac:b3:43:78:c4:2a:49:7a: 7f:21:db:1a:cc:98:0f:2d:a4:b7:fa:14:47:79:09:7b:f8:e7: a2:70:08:a4:33:5c:02:66:55:9a:d1:01:52:6e:2d:92:dc:49: 38:05:4f:04:b8:fe:ef:47:09:f0:ba:9f:e2:d9:43:02:95:09: d8:07:cc:64:01:3c:a1:fb:28:19:7d:61:92:42:1a:91:1e:d1: 86:6e:27:87:a2:59:08:81:ec:f7:69:38:61:80:35:b6:2d:75: 44:b3:bf:54:c3:92:6f:53:57:d4:1b:02:d4:4e:bd:14:5c:e7: ac:5e:dd:35:49:6d:96:36:0f:37:ab:24:6f:32:65:54:b6:26: 73:94:c5:2c:27:ea:83:be:d0:43:04:58:fe:18:bc:fe:3d:60: 7e:48:b2:3f:fe:39:25:5f:35:f7:04:4a:b1:e1:3c:b0:b9:69: 25:f8:2b:5a:74:cf:ba:a0:58:33:b6:14:46:9c:d9:c4:98:73: 9c:37:33:e6 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUbSH4oJTfCAO+N33hSBx7BoTyUQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4NUFE REQyOUVGQjAeFw0yNTEyMTYxMTU1MDFaFw0yNjEyMTUxMjAwMDFaMDMxMTAvBgNV BAMTKDYwRDUzMTBBNjhERTQxRTJFNDI1NzU5MkE2OENCMzc0QzZGNDQzNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmIYFl1I2JvNNVfsnA74aYGOEW uszpKehvBuERkFm8nCtj50QqORhBRZS4lMse2f0mt2asfp6mMqJe/QfXmlwHckqq 85ToywYQu6nb3eOT++Cb1b31+OaWX7WcIBaWe1pBPdKjhwKh0Y+3QLypx9gJq3TR /9vUozykg8M1ORl6JVTIYCCVHFb3pZRN+lZfQpqJ8Nvfz/aTLmZnXmCQYbuqKlU6 YWhyZnM9kuQ/Fb30C+ezDqSVi4zGxzScgO/YTSypyoKIdNRlFYoYD8v9Zmc7+SWo 4CAZI98nN74lZfdmy6GhfCnLx4mdAq1dAcavATcrSztxIg2RFJbiC6AO6su9AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUYNUxCmjeQeLkJXWSpoyzdMb0Q04wHwYDVR0j BBgwFoAUjGuf6A7x2kC5ZNRCn3h4Wt3SnvswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWNiNzE4Ny03YTVmLTRlMjMtYmU5NC01OTNhMGMyODhjYjkvMC84QzZCOUZFODBF RjFEQTQwQjk2NEQ0NDI5Rjc4Nzg1QURERDI5RUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4NUFEREQy OUVGQi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RhY2I3MTg3LTdhNWYtNGUyMy1i ZTk0LTU5M2EwYzI4OGNiOS8wLzMxMzAzMzJlMzEzMDJlMzczMDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMDMyMzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcKRjANBgkqhkiG 9w0BAQsFAAOCAQEAO3OewBg3C6EN/R2Pr2MRKdHAABKyPP21LCDDBug0Hp+2fLR/ c20ewrJ2E9J7tAtKb9lTvSDZWouT4vpXtDW2g6yzQ3jEKkl6fyHbGsyYDy2kt/oU R3kJe/jnonAIpDNcAmZVmtEBUm4tktxJOAVPBLj+70cJ8Lqf4tlDApUJ2AfMZAE8 ofsoGX1hkkIakR7Rhm4nh6JZCIHs92k4YYA1ti11RLO/VMOSb1NX1BsC1E69FFzn rF7dNUltljYPN6skbzJlVLYmc5TFLCfqg77QQwRY/hi8/j1gfkiyP/45JV819wRK seE8sLlpJfgrWnTPuqBYM7YURpzZxJhznDcz5g== -----END CERTIFICATE-----Generated at Wed Dec 24 10:49:31 2025 by rpki-client