This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/3130332e3135342e37362e302f32342d3234203d3e20313430343831.roa File: 3130332e3135342e37362e302f32342d3234203d3e20313430343831.roa (raw, json) Hash identifier: AokcwqbiC4agd4vuQFD9ZPFGfzBXJyXcGsAxju/Umd8= Subject key identifier: D3:C1:7F:BC:FF:42:B6:C3:8D:41:76:08:B9:37:7A:DA:73:BA:9F:EF Certificate issuer: /CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3 Certificate serial: 298463503459E59F39B7EF4D1680D197412A2D63 Authority key identifier: CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/3130332e3135342e37362e302f32342d3234203d3e20313430343831.roa Signing time: Mon 03 Mar 2025 03:34:31 +0000 ROA not before: Mon 03 Mar 2025 03:29:31 +0000 ROA not after: Mon 02 Mar 2026 03:34:31 +0000 asID: 140481 IP address blocks: 103.154.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:84:63:50:34:59:e5:9f:39:b7:ef:4d:16:80:d1:97:41:2a:2d:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3 Validity Not Before: Mar 3 03:29:31 2025 GMT Not After : Mar 2 03:34:31 2026 GMT Subject: CN=D3C17FBCFF42B6C38D417608B9377ADA73BA9FEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:87:01:b6:98:fb:a0:a3:de:e6:d1:74:6b:da: a2:37:3f:fd:33:57:88:12:37:6c:f5:03:2d:be:93: 50:95:21:19:bf:43:d3:4e:ef:3b:8c:20:27:03:33: 12:0e:c1:65:57:69:0e:dc:ee:f5:77:c8:7f:7c:f2: ff:f2:70:36:dd:ef:d0:9f:86:60:3e:c9:8e:80:c9: 06:45:48:4c:36:6a:f6:0a:f5:fd:33:99:f0:5f:72: cc:00:08:bd:dd:9f:d9:ea:66:9b:8d:c2:9d:10:08: e4:ff:2d:c0:99:98:a6:e9:2b:b1:4b:a3:3d:78:9d: 28:6e:80:20:77:1d:ea:cb:91:e9:73:54:47:4e:33: a6:b0:6b:82:19:00:60:76:f7:23:2f:a5:56:f0:41: 62:ca:3a:4b:27:a7:81:41:59:3d:86:79:df:de:f1: cb:8c:e9:15:1d:e1:fd:7c:36:b9:4e:04:65:9e:c4: d0:24:65:4f:f7:4b:62:90:38:bf:f4:dd:a6:bb:7d: 75:f0:c2:99:13:10:eb:4a:21:34:bf:f2:00:d7:cd: 90:04:53:48:b7:c6:57:bd:ce:bf:94:65:15:4d:6a: f0:47:10:44:1c:07:65:25:4c:9f:d1:7e:8c:76:f7: b4:1f:28:53:45:1f:e7:f7:21:dc:c4:15:79:55:a9: 48:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C1:7F:BC:FF:42:B6:C3:8D:41:76:08:B9:37:7A:DA:73:BA:9F:EF X509v3 Authority Key Identifier: keyid:CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/3130332e3135342e37362e302f32342d3234203d3e20313430343831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.154.76.0/24 Signature Algorithm: sha256WithRSAEncryption 34:10:0f:7b:8e:fd:ad:a3:74:8a:6f:be:b2:04:2e:ef:76:c5: 48:7d:b8:88:3e:81:42:24:a9:d3:30:0a:ed:ac:0c:f7:73:6d: 71:cc:cc:91:7a:7f:05:f1:ca:d4:c5:69:3f:94:d8:9b:0e:47: 72:5d:3c:a3:48:d6:c5:3c:a3:4f:f4:d7:92:a3:b9:54:7d:9b: 9e:af:87:7c:73:7b:bf:d8:c0:72:f3:2f:8d:25:ba:e7:5f:36: 5e:46:8b:c9:4a:d4:0b:fc:51:c3:ef:be:0b:0b:91:ed:31:5c: 75:30:aa:e0:f5:15:ae:da:fd:47:b6:37:de:75:1e:a5:05:75: 3c:37:fc:3f:7e:9e:a5:8f:a2:f7:05:6c:fd:fd:85:61:40:aa: cf:78:2a:70:bf:e3:e8:5a:09:9a:f6:bb:52:ef:d6:60:0d:4b: b2:4c:3c:87:12:23:e9:05:02:eb:8d:a1:47:6d:d4:2e:24:64: 8e:d8:34:84:a1:b8:42:f2:0c:b8:50:b8:6d:fc:ed:f0:01:c1: 8a:e9:51:50:9d:b5:90:0e:36:ac:9a:64:42:e0:c0:6b:f7:d6: 47:58:1d:62:1a:8b:40:7c:c8:4e:8e:14:43:24:5e:1f:47:df: 9e:52:04:35:24:8a:fd:a1:32:5b:4c:e1:96:95:8f:55:ca:e5: 1e:af:34:da -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUKYRjUDRZ5Z85t+9NFoDRl0EqLWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEzMDlC NjVEMTdEMzAeFw0yNTAzMDMwMzI5MzFaFw0yNjAzMDIwMzM0MzFaMDMxMTAvBgNV BAMTKEQzQzE3RkJDRkY0MkI2QzM4RDQxNzYwOEI5Mzc3QURBNzNCQTlGRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCohwG2mPugo97m0XRr2qI3P/0z V4gSN2z1Ay2+k1CVIRm/Q9NO7zuMICcDMxIOwWVXaQ7c7vV3yH988v/ycDbd79Cf hmA+yY6AyQZFSEw2avYK9f0zmfBfcswACL3dn9nqZpuNwp0QCOT/LcCZmKbpK7FL oz14nShugCB3HerLkelzVEdOM6awa4IZAGB29yMvpVbwQWLKOksnp4FBWT2Ged/e 8cuM6RUd4f18NrlOBGWexNAkZU/3S2KQOL/03aa7fXXwwpkTEOtKITS/8gDXzZAE U0i3xle9zr+UZRVNavBHEEQcB2UlTJ/Rfox297QfKFNFH+f3IdzEFXlVqUhfAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU08F/vP9CtsONQXYIuTd62nO6n+8wHwYDVR0j BBgwFoAUzq5Pd1nuIbplLg+4nQGjCbZdF9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjM1YTQ1MS1jMzA0LTQ1ZjUtYjdkYi01Njg3ZTJiMTA4MDcvMC9DRUFFNEY3NzU5 RUUyMUJBNjUyRTBGQjg5RDAxQTMwOUI2NUQxN0QzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEzMDlCNjVE MTdEMy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE2MzVhNDUxLWMzMDQtNDVmNS1i N2RiLTU2ODdlMmIxMDgwNy8wLzMxMzAzMzJlMzEzNTM0MmUzNzM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMwMzQzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5pMMA0GCSqG SIb3DQEBCwUAA4IBAQA0EA97jv2to3SKb76yBC7vdsVIfbiIPoFCJKnTMArtrAz3 c21xzMyRen8F8crUxWk/lNibDkdyXTyjSNbFPKNP9NeSo7lUfZuer4d8c3u/2MBy 8y+NJbrnXzZeRovJStQL/FHD774LC5HtMVx1MKrg9RWu2v1HtjfedR6lBXU8N/w/ fp6lj6L3BWz9/YVhQKrPeCpwv+PoWgma9rtS79ZgDUuyTDyHEiPpBQLrjaFHbdQu JGSO2DSEobhC8gy4ULht/O3wAcGK6VFQnbWQDjasmmRC4MBr99ZHWB1iGotAfMhO jhRDJF4fR9+eUgQ1JIr9oTJbTOGWlY9VyuUerzTa -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:23 2025 by rpki-client