This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/3130332e38342e3230302e302f32342d3234203d3e20313336303935.roa File: 3130332e38342e3230302e302f32342d3234203d3e20313336303935.roa (raw, json) Hash identifier: ajCQWCbIuLR2rdyLkSz/8WmAOj/J1v9eHfGi8P7WLFg= Subject key identifier: B1:3A:DA:D6:20:C6:BA:0F:BF:05:48:9E:15:EC:81:DA:D7:E0:42:77 Certificate issuer: /CN=D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B Certificate serial: 04E352563733B80F62D53E1549D714EAC624A7DF Authority key identifier: D2:8B:A9:D5:E3:21:93:DE:E2:9E:B4:C1:94:4F:35:FC:32:D8:B1:9B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/3130332e38342e3230302e302f32342d3234203d3e20313336303935.roa Signing time: Thu 10 Jul 2025 10:02:21 +0000 ROA not before: Thu 10 Jul 2025 09:57:21 +0000 ROA not after: Thu 09 Jul 2026 10:02:21 +0000 asID: 136095 IP address blocks: 103.84.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.crl rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 16:27:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:e3:52:56:37:33:b8:0f:62:d5:3e:15:49:d7:14:ea:c6:24:a7:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B Validity Not Before: Jul 10 09:57:21 2025 GMT Not After : Jul 9 10:02:21 2026 GMT Subject: CN=B13ADAD620C6BA0FBF05489E15EC81DAD7E04277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1f:d7:b6:d0:df:67:91:1e:74:e9:e1:fb:c4: 09:1f:60:1e:bd:b6:6a:b2:e7:7c:b7:04:68:9e:0d: df:02:a6:a4:f9:21:54:de:91:8f:73:ea:65:43:83: 0d:9b:a8:e7:c3:ed:0e:aa:0d:63:ee:aa:38:b0:4e: e5:39:8d:4b:b0:d4:48:f5:3f:10:a2:34:07:78:fe: 32:35:49:9d:25:98:bc:35:22:0c:ca:c2:cc:47:0e: 70:3f:29:01:e0:b0:34:1a:2b:8c:8c:41:75:44:a7: ef:66:e3:34:b2:29:89:34:18:52:c8:80:fe:22:f1: 90:d5:0a:a9:8b:43:a2:6e:ba:6d:f0:c8:17:05:75: 64:b4:d4:9d:5e:32:b2:e7:0b:74:66:8c:09:c4:0f: 42:bd:03:e0:65:40:9f:20:ea:5e:16:0d:b6:51:85: a4:de:e8:48:ef:a6:dc:c3:9e:f4:48:be:92:98:ae: ba:86:2c:c0:a9:3c:e4:41:62:54:f9:cd:c3:d1:fb: ca:76:b3:fe:71:9e:5d:ac:44:07:59:99:f8:67:ac: 58:d2:74:71:7d:10:af:69:51:0e:89:57:2d:2e:9e: b9:ea:3a:7b:0c:f8:55:5a:7e:12:3f:f2:0d:9b:06: 4e:a6:f7:7c:40:e5:37:ba:ce:15:bf:a8:42:93:01: 96:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:3A:DA:D6:20:C6:BA:0F:BF:05:48:9E:15:EC:81:DA:D7:E0:42:77 X509v3 Authority Key Identifier: keyid:D2:8B:A9:D5:E3:21:93:DE:E2:9E:B4:C1:94:4F:35:FC:32:D8:B1:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/3130332e38342e3230302e302f32342d3234203d3e20313336303935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.84.200.0/24 Signature Algorithm: sha256WithRSAEncryption 52:b3:ef:64:ca:5b:a8:40:a0:8c:20:29:f1:41:16:41:5a:2c: cc:47:19:fc:3b:f1:8d:f3:c4:64:8a:de:24:b1:54:83:50:fd: 44:86:6b:e5:6f:e8:4b:32:fc:45:9f:f8:59:6d:22:df:d8:99: c7:6e:d8:df:fa:d3:24:3c:ab:fc:cd:d1:b9:40:5c:78:b0:6b: d4:c8:a5:38:10:2b:39:92:03:6a:cd:0d:12:51:74:21:a9:bf: 30:40:a8:cf:92:c9:42:06:13:e6:91:11:33:b0:29:cb:1c:db: 6d:77:8f:03:81:47:c5:2c:fb:ce:67:7a:62:b5:b0:7d:25:7e: 22:7d:1e:2e:c4:42:bf:2f:e4:0d:69:2a:c1:49:68:b4:87:2c: 3c:d1:1c:97:16:55:bb:f0:2d:0d:75:1e:a5:2e:1e:ac:96:8b: 6a:03:fd:8f:15:25:87:66:bd:71:0e:55:16:94:c3:ec:6b:11: 60:f2:07:c5:40:89:f1:a2:93:d3:31:1d:f8:a2:ca:55:20:ae: b2:d2:16:04:4f:73:d1:2f:45:d0:e7:99:d4:99:81:ff:3a:5e: 37:bd:03:ba:86:14:bb:70:08:1c:e3:84:70:34:b6:77:3f:05: 3c:f0:ac:ab:09:36:6e:dd:47:4e:32:d4:0e:e5:5f:be:bb:d9: fe:0c:3e:01 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUBONSVjczuA9i1T4VSdcU6sYkp98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI4QkE5RDVFMzIxOTNERUUyOUVCNEMxOTQ0RjM1RkMz MkQ4QjE5QjAeFw0yNTA3MTAwOTU3MjFaFw0yNjA3MDkxMDAyMjFaMDMxMTAvBgNV BAMTKEIxM0FEQUQ2MjBDNkJBMEZCRjA1NDg5RTE1RUM4MURBRDdFMDQyNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXH9e20N9nkR506eH7xAkfYB69 tmqy53y3BGieDd8CpqT5IVTekY9z6mVDgw2bqOfD7Q6qDWPuqjiwTuU5jUuw1Ej1 PxCiNAd4/jI1SZ0lmLw1IgzKwsxHDnA/KQHgsDQaK4yMQXVEp+9m4zSyKYk0GFLI gP4i8ZDVCqmLQ6Juum3wyBcFdWS01J1eMrLnC3RmjAnED0K9A+BlQJ8g6l4WDbZR haTe6EjvptzDnvRIvpKYrrqGLMCpPORBYlT5zcPR+8p2s/5xnl2sRAdZmfhnrFjS dHF9EK9pUQ6JVy0unrnqOnsM+FVafhI/8g2bBk6m93xA5Te6zhW/qEKTAZbvAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUsTra1iDGug+/BUieFeyB2tfgQncwHwYDVR0j BBgwFoAU0oup1eMhk97inrTBlE81/DLYsZswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NWUyNDE1Yy03ZDRmLTQ0MjctODMyZC01OWI0Yzc5YWFlNWEvMC9EMjhCQTlENUUz MjE5M0RFRTI5RUI0QzE5NDRGMzVGQzMyRDhCMTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI4QkE5RDVFMzIxOTNERUUyOUVCNEMxOTQ0RjM1RkMzMkQ4 QjE5Qi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI1ZTI0MTVjLTdkNGYtNDQyNy04 MzJkLTU5YjRjNzlhYWU1YS8wLzMxMzAzMzJlMzgzNDJlMzIzMDMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzAzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ1TIMA0GCSqG SIb3DQEBCwUAA4IBAQBSs+9kyluoQKCMICnxQRZBWizMRxn8O/GN88Rkit4ksVSD UP1Ehmvlb+hLMvxFn/hZbSLf2JnHbtjf+tMkPKv8zdG5QFx4sGvUyKU4ECs5kgNq zQ0SUXQhqb8wQKjPkslCBhPmkREzsCnLHNttd48DgUfFLPvOZ3pitbB9JX4ifR4u xEK/L+QNaSrBSWi0hyw80RyXFlW78C0NdR6lLh6slotqA/2PFSWHZr1xDlUWlMPs axFg8gfFQInxopPTMR34ospVIK6y0hYET3PRL0XQ55nUmYH/Ol43vQO6hhS7cAgc 44RwNLZ3PwU88KyrCTZu3UdOMtQO5V++u9n+DD4B -----END CERTIFICATE-----Generated at Wed Dec 3 16:07:19 2025 by rpki-client