This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/3130332e3132332e38352e302f32342d3234203d3e20313530343939.roa File: 3130332e3132332e38352e302f32342d3234203d3e20313530343939.roa (raw, json) Hash identifier: qMJCzEp1kB255KL4Lpk1hf3Sg7O/3XdgYccTkdZ5jPw= Subject key identifier: EE:75:B9:42:64:51:BA:5E:A2:E3:E6:A4:A1:94:19:F8:B4:E7:F6:1C Certificate issuer: /CN=9CD5DECA8E146A0231AE872283EA0F93B5784114 Certificate serial: 2B7C63CEF00B22DB32C35FDDDC8F03F1A1C64302 Authority key identifier: 9C:D5:DE:CA:8E:14:6A:02:31:AE:87:22:83:EA:0F:93:B5:78:41:14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/3130332e3132332e38352e302f32342d3234203d3e20313530343939.roa Signing time: Mon 22 Dec 2025 08:00:01 +0000 ROA not before: Mon 22 Dec 2025 07:55:01 +0000 ROA not after: Mon 21 Dec 2026 08:00:01 +0000 asID: 150499 IP address blocks: 103.123.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.crl rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 19:07:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:7c:63:ce:f0:0b:22:db:32:c3:5f:dd:dc:8f:03:f1:a1:c6:43:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CD5DECA8E146A0231AE872283EA0F93B5784114 Validity Not Before: Dec 22 07:55:01 2025 GMT Not After : Dec 21 08:00:01 2026 GMT Subject: CN=EE75B9426451BA5EA2E3E6A4A19419F8B4E7F61C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9b:50:3a:9c:ad:e6:d5:21:8b:c0:c1:4c:62: e3:48:e5:a1:60:cf:7d:44:09:1f:00:03:77:a6:6a: ab:4e:c1:74:ec:ab:62:f2:a6:53:23:15:8d:2d:cd: 0f:6c:91:72:21:64:c0:9b:b9:ec:a9:24:6d:88:f8: e4:e2:12:06:21:6c:72:67:c8:c8:e0:8f:1e:2f:cf: 2b:2b:b7:c4:77:29:66:ea:1c:0c:9b:1b:bf:2d:78: ed:7b:b4:08:7c:60:b4:4c:22:f3:04:07:03:99:df: 72:cb:9c:6e:15:7b:e2:38:e3:41:cb:b0:79:10:c1: 49:b2:15:29:1b:0d:f4:db:d3:65:6d:dc:f1:ad:f0: 3c:cf:b9:10:d0:b5:4e:ec:b9:ff:77:4f:54:63:72: ca:4e:f1:df:71:69:2a:cb:d5:af:c4:53:5d:f3:7c: 32:fa:22:eb:57:73:9e:be:7d:ef:5c:4a:e2:07:27: 69:6b:0c:53:75:9f:e2:6c:c6:aa:08:69:7b:c2:6d: e9:62:99:a9:70:54:27:9e:af:ea:12:1c:41:3f:e9: 52:ad:37:64:c4:e5:20:39:fe:c8:a3:09:ef:64:df: 1b:62:21:4d:e8:36:64:2c:db:bc:da:7c:07:32:78: 24:96:85:21:80:0c:02:a1:e9:b1:3d:ba:bc:8c:21: 19:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:75:B9:42:64:51:BA:5E:A2:E3:E6:A4:A1:94:19:F8:B4:E7:F6:1C X509v3 Authority Key Identifier: keyid:9C:D5:DE:CA:8E:14:6A:02:31:AE:87:22:83:EA:0F:93:B5:78:41:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/3130332e3132332e38352e302f32342d3234203d3e20313530343939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.123.85.0/24 Signature Algorithm: sha256WithRSAEncryption 96:6c:4c:7e:12:26:f6:9d:16:63:3a:e1:11:4f:65:79:ec:8d: 9f:07:41:fd:fb:7b:0b:ae:b3:68:33:41:67:3d:06:85:5e:fb: bd:0d:3b:e8:ca:1b:8f:08:65:e8:cd:e4:9d:c6:13:84:0d:30: 7a:1c:0d:b9:01:0c:b0:da:dd:c7:01:1e:21:93:a8:af:44:6d: 72:c3:c8:c2:44:e8:35:5a:61:9d:a7:3e:92:e5:26:82:48:42: 74:cf:9d:11:4f:5f:5b:c3:c4:23:59:9f:a4:13:da:b8:53:49: 66:59:27:70:c3:8f:03:8e:6d:77:b8:d6:94:cd:d2:18:7a:9d: d4:f4:2d:cc:56:90:13:9f:12:d8:a0:d3:29:45:b4:72:01:db: 94:d1:32:f2:ca:e6:4a:bd:52:f4:ca:e2:22:25:b9:f0:ae:0f: af:9f:13:c6:ba:67:fa:13:76:b5:bd:22:04:e7:24:76:a9:20: bf:8b:a8:fa:88:15:54:45:e0:e8:06:3f:a3:16:3d:f7:b6:c0: d7:d3:c1:bc:b5:fb:47:52:bd:e3:e7:fa:9d:4b:9b:3c:f7:14: 43:7f:32:01:b5:fa:10:6d:a5:38:9e:15:fa:4f:b3:c7:94:2d: 8a:f3:5c:8f:51:bf:df:d3:73:ad:44:ab:e8:13:fb:54:b1:3a: 7e:1d:e4:b5 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUK3xjzvALItsyw1/d3I8D8aHGQwIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNENURFQ0E4RTE0NkEwMjMxQUU4NzIyODNFQTBGOTNC NTc4NDExNDAeFw0yNTEyMjIwNzU1MDFaFw0yNjEyMjEwODAwMDFaMDMxMTAvBgNV BAMTKEVFNzVCOTQyNjQ1MUJBNUVBMkUzRTZBNEExOTQxOUY4QjRFN0Y2MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9m1A6nK3m1SGLwMFMYuNI5aFg z31ECR8AA3emaqtOwXTsq2LyplMjFY0tzQ9skXIhZMCbueypJG2I+OTiEgYhbHJn yMjgjx4vzysrt8R3KWbqHAybG78teO17tAh8YLRMIvMEBwOZ33LLnG4Ve+I440HL sHkQwUmyFSkbDfTb02Vt3PGt8DzPuRDQtU7suf93T1RjcspO8d9xaSrL1a/EU13z fDL6IutXc56+fe9cSuIHJ2lrDFN1n+JsxqoIaXvCbelimalwVCeer+oSHEE/6VKt N2TE5SA5/sijCe9k3xtiIU3oNmQs27zafAcyeCSWhSGADAKh6bE9uryMIRlXAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU7nW5QmRRul6i4+akoZQZ+LTn9hwwHwYDVR0j BBgwFoAUnNXeyo4UagIxrocig+oPk7V4QRQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDJiNGY3Ny03NGQwLTQ3OTctYWVlMC05ZWE5MDc2NTQ3MzAvMC85Q0Q1REVDQThF MTQ2QTAyMzFBRTg3MjI4M0VBMEY5M0I1Nzg0MTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNENURFQ0E4RTE0NkEwMjMxQUU4NzIyODNFQTBGOTNCNTc4 NDExNC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZkMmI0Zjc3LTc0ZDAtNDc5Ny1h ZWUwLTllYTkwNzY1NDczMC8wLzMxMzAzMzJlMzEzMjMzMmUzODM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzQzOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3tVMA0GCSqG SIb3DQEBCwUAA4IBAQCWbEx+Eib2nRZjOuERT2V57I2fB0H9+3sLrrNoM0FnPQaF Xvu9DTvoyhuPCGXozeSdxhOEDTB6HA25AQyw2t3HAR4hk6ivRG1yw8jCROg1WmGd pz6S5SaCSEJ0z50RT19bw8QjWZ+kE9q4U0lmWSdww48Djm13uNaUzdIYep3U9C3M VpATnxLYoNMpRbRyAduU0TLyyuZKvVL0yuIiJbnwrg+vnxPGumf6E3a1vSIE5yR2 qSC/i6j6iBVUReDoBj+jFj33tsDX08G8tftHUr3j5/qdS5s89xRDfzIBtfoQbaU4 nhX6T7PHlC2K81yPUb/f03OtRKvoE/tUsTp+HeS1 -----END CERTIFICATE-----Generated at Thu Dec 25 03:04:59 2025 by rpki-client