This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/3130332e3134372e3234352e302f32342d3234203d3e20313339393733.roa File: 3130332e3134372e3234352e302f32342d3234203d3e20313339393733.roa (raw, json) Hash identifier: rlPU/iIgYoRNsLv+c0V6Y8ev4dELtmVNbR6X//tRgJc= Subject key identifier: 2E:CC:C0:11:0A:0E:58:0D:72:F5:A2:48:3C:42:71:72:8B:E5:EC:EB Certificate issuer: /CN=B10FCCE02720E964D29342E0F3BDFC679A4D7BD6 Certificate serial: 5270111C738FFDEDB4AB4057EE17D22FFB0159C9 Authority key identifier: B1:0F:CC:E0:27:20:E9:64:D2:93:42:E0:F3:BD:FC:67:9A:4D:7B:D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/3130332e3134372e3234352e302f32342d3234203d3e20313339393733.roa Signing time: Tue 02 Dec 2025 01:00:02 +0000 ROA not before: Tue 02 Dec 2025 00:55:02 +0000 ROA not after: Tue 01 Dec 2026 01:00:02 +0000 asID: 139973 IP address blocks: 103.147.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.crl rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 06:29:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:70:11:1c:73:8f:fd:ed:b4:ab:40:57:ee:17:d2:2f:fb:01:59:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B10FCCE02720E964D29342E0F3BDFC679A4D7BD6 Validity Not Before: Dec 2 00:55:02 2025 GMT Not After : Dec 1 01:00:02 2026 GMT Subject: CN=2ECCC0110A0E580D72F5A2483C4271728BE5ECEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e5:7b:78:94:89:9a:38:2b:ef:8f:04:be:5f: 23:7b:df:b8:c8:6e:11:76:ed:3a:95:22:bc:b0:1c: 81:47:05:a7:97:96:fb:6b:d6:d7:58:b5:04:fd:b7: 12:5b:0b:41:27:ba:fb:c1:77:72:d1:1e:07:4a:f5: 6e:8c:22:1f:64:70:a2:44:96:d5:38:a5:e9:d9:33: bd:92:13:99:dd:92:2a:48:a2:f8:16:a4:65:7e:fa: 8c:d4:df:81:0e:28:ef:39:e0:89:ca:14:cf:65:5d: b3:ad:55:d8:4f:82:cd:84:4b:47:71:3d:f1:91:e3: 70:86:a1:cb:ec:34:1c:58:69:31:97:04:10:20:c5: 8e:47:3a:ee:9b:7c:28:c1:89:8b:09:72:7e:5e:4a: ee:88:b2:0c:66:27:8a:3b:02:77:8c:cc:c6:20:95: 22:7f:eb:6c:50:82:f4:9c:fa:ca:81:2b:99:b9:3e: 83:3a:69:bb:a7:ac:60:96:3d:27:ab:c3:20:20:72: fc:e0:b8:73:c2:63:5b:ca:76:fe:44:8a:0a:cc:b5: fa:f2:d8:15:8a:2a:d3:79:8e:c0:7a:50:ad:c6:14: a1:25:e6:13:13:f6:f9:4d:03:a7:b4:e3:20:ff:a5: 6d:68:8d:c2:ef:07:b1:df:cd:4c:77:53:97:e1:74: ec:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:CC:C0:11:0A:0E:58:0D:72:F5:A2:48:3C:42:71:72:8B:E5:EC:EB X509v3 Authority Key Identifier: keyid:B1:0F:CC:E0:27:20:E9:64:D2:93:42:E0:F3:BD:FC:67:9A:4D:7B:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/3130332e3134372e3234352e302f32342d3234203d3e20313339393733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.245.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:3e:81:5a:df:82:48:ff:e1:61:2a:7d:37:1b:cf:1d:82:7c: 20:99:73:27:15:22:ae:db:39:b4:5d:57:58:df:de:c5:b7:76: 40:df:83:cb:e3:54:f8:1a:cd:52:e0:c7:87:ae:16:20:a6:82: fa:c4:b3:2d:60:ad:95:70:ef:11:14:5e:76:58:bf:db:4e:9b: dc:d9:13:ed:08:ed:f1:5a:fc:75:60:ef:24:32:64:09:ee:83: 69:3c:a7:21:1f:f1:bd:4d:41:c7:fd:51:a1:19:ae:e8:eb:be: aa:48:61:bf:33:28:ea:c0:64:6c:0d:ba:b5:0e:dc:d2:55:0c: c0:eb:15:e0:74:2b:9f:9d:b2:54:3d:0d:96:2b:0b:f7:28:f0: d6:ce:8f:20:7f:99:e1:af:39:cc:db:58:a0:13:bb:83:bf:f4: 3d:45:ca:fa:a4:05:cb:19:e0:6b:9b:cc:b9:34:f7:77:4e:85: 02:6f:e1:3b:76:e5:50:97:8a:34:eb:52:23:4f:fd:ba:4f:8a: 0f:58:d1:a9:9e:e3:d0:40:bb:b8:55:e9:3c:7d:35:b3:39:60: 0a:2b:0c:34:09:fb:e3:e3:bf:96:e5:6c:75:e6:5c:be:b5:0a: 65:62:82:73:6a:3c:d0:60:4d:27:12:47:de:ae:6d:84:17:8e: e1:b1:1d:c0 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUUnARHHOP/e20q0BX7hfSL/sBWckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjEwRkNDRTAyNzIwRTk2NEQyOTM0MkUwRjNCREZDNjc5 QTREN0JENjAeFw0yNTEyMDIwMDU1MDJaFw0yNjEyMDEwMTAwMDJaMDMxMTAvBgNV BAMTKDJFQ0NDMDExMEEwRTU4MEQ3MkY1QTI0ODNDNDI3MTcyOEJFNUVDRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC65Xt4lImaOCvvjwS+XyN737jI bhF27TqVIrywHIFHBaeXlvtr1tdYtQT9txJbC0EnuvvBd3LRHgdK9W6MIh9kcKJE ltU4penZM72SE5ndkipIovgWpGV++ozU34EOKO854InKFM9lXbOtVdhPgs2ES0dx PfGR43CGocvsNBxYaTGXBBAgxY5HOu6bfCjBiYsJcn5eSu6IsgxmJ4o7AneMzMYg lSJ/62xQgvSc+sqBK5m5PoM6abunrGCWPSerwyAgcvzguHPCY1vKdv5EigrMtfry 2BWKKtN5jsB6UK3GFKEl5hMT9vlNA6e04yD/pW1ojcLvB7HfzUx3U5fhdOyDAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQULszAEQoOWA1y9aJIPEJxcovl7OswHwYDVR0j BBgwFoAUsQ/M4Ccg6WTSk0Lg8738Z5pNe9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTU5MzQ0NS1hMjVkLTQ4ZTAtYWJjMi1hYjA1ZTA2NTA2NTUvMC9CMTBGQ0NFMDI3 MjBFOTY0RDI5MzQyRTBGM0JERkM2NzlBNEQ3QkQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjEwRkNDRTAyNzIwRTk2NEQyOTM0MkUwRjNCREZDNjc5QTRE N0JENi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA1NTkzNDQ1LWEyNWQtNDhlMC1h YmMyLWFiMDVlMDY1MDY1NS8wLzMxMzAzMzJlMzEzNDM3MmUzMjM0MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzkzOTM3MzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnk/UwDQYJ KoZIhvcNAQELBQADggEBAFw+gVrfgkj/4WEqfTcbzx2CfCCZcycVIq7bObRdV1jf 3sW3dkDfg8vjVPgazVLgx4euFiCmgvrEsy1grZVw7xEUXnZYv9tOm9zZE+0I7fFa /HVg7yQyZAnug2k8pyEf8b1NQcf9UaEZrujrvqpIYb8zKOrAZGwNurUO3NJVDMDr FeB0K5+dslQ9DZYrC/co8NbOjyB/meGvOczbWKATu4O/9D1FyvqkBcsZ4GubzLk0 93dOhQJv4Tt25VCXijTrUiNP/bpPig9Y0ame49BAu7hV6Tx9NbM5YAorDDQJ++Pj v5blbHXmXL61CmVignNqPNBgTScSR96ubYQXjuGxHcA= -----END CERTIFICATE-----Generated at Wed Dec 3 16:21:55 2025 by rpki-client