This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/3130332e3233362e3134382e302f32342d3234203d3e203535363634.roa File: 3130332e3233362e3134382e302f32342d3234203d3e203535363634.roa (raw, json) Hash identifier: Vp8nm0q1fVdfpoUq1ph6iBsHdLxuIgv5gZec72xD2Lk= Subject key identifier: A3:D1:DE:3F:A0:CA:7D:4B:F2:D4:DF:02:57:22:BF:06:B2:9E:80:62 Certificate issuer: /CN=7932E1C92B451A2FD7A5E85B541135E25AD074D5 Certificate serial: 61823BE210C6211DB4182B9E26CEE75B9A04FF2D Authority key identifier: 79:32:E1:C9:2B:45:1A:2F:D7:A5:E8:5B:54:11:35:E2:5A:D0:74:D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7932E1C92B451A2FD7A5E85B541135E25AD074D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/3130332e3233362e3134382e302f32342d3234203d3e203535363634.roa Signing time: Tue 09 Dec 2025 11:33:23 +0000 ROA not before: Tue 09 Dec 2025 11:28:23 +0000 ROA not after: Tue 08 Dec 2026 11:33:23 +0000 asID: 55664 IP address blocks: 103.236.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/7932E1C92B451A2FD7A5E85B541135E25AD074D5.crl rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/7932E1C92B451A2FD7A5E85B541135E25AD074D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7932E1C92B451A2FD7A5E85B541135E25AD074D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 08:24:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:82:3b:e2:10:c6:21:1d:b4:18:2b:9e:26:ce:e7:5b:9a:04:ff:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7932E1C92B451A2FD7A5E85B541135E25AD074D5 Validity Not Before: Dec 9 11:28:23 2025 GMT Not After : Dec 8 11:33:23 2026 GMT Subject: CN=A3D1DE3FA0CA7D4BF2D4DF025722BF06B29E8062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:78:7b:aa:53:ce:99:f6:1c:ea:80:d4:b8:60: 4c:09:34:4e:c4:ba:35:44:a9:5e:7f:ed:39:9f:e8: 83:54:28:09:cd:60:f9:c0:1d:2b:45:2c:85:36:3d: b5:cc:05:74:a5:5e:45:82:aa:b1:83:d3:96:ed:e8: 76:e4:64:0b:eb:06:d2:49:af:6c:da:c9:78:77:0e: df:03:cd:61:a7:a1:5d:f6:74:ba:09:f2:bd:7b:2e: 1d:73:86:3c:e0:c3:b0:71:b3:b5:38:56:76:b8:b3: c3:dd:4d:09:d9:8a:81:d1:a9:cd:65:e3:d2:6b:2c: 9f:28:c1:e6:76:7d:a3:88:5a:7f:c7:c6:ee:ab:79: 75:ac:a6:50:77:4b:08:40:2b:5c:ee:84:e7:92:ab: cc:38:54:33:af:c8:09:74:49:39:2b:69:e3:89:40: 0e:95:d3:8f:c8:fb:4f:9e:56:69:00:e8:fa:c5:38: 4f:74:a2:b6:48:c4:b6:da:b2:51:67:cf:8a:1c:e3: 09:17:12:28:04:5b:1e:7c:90:eb:4f:aa:c7:64:9e: 0e:db:46:a8:f3:74:70:9c:5f:69:26:6b:04:1e:21: 87:1b:5b:f7:dd:ae:3b:90:94:56:45:b9:85:d3:73: 71:6a:35:e5:9a:eb:76:7c:61:d1:47:7b:d6:28:03: b8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D1:DE:3F:A0:CA:7D:4B:F2:D4:DF:02:57:22:BF:06:B2:9E:80:62 X509v3 Authority Key Identifier: keyid:79:32:E1:C9:2B:45:1A:2F:D7:A5:E8:5B:54:11:35:E2:5A:D0:74:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/7932E1C92B451A2FD7A5E85B541135E25AD074D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7932E1C92B451A2FD7A5E85B541135E25AD074D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/3130332e3233362e3134382e302f32342d3234203d3e203535363634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.236.148.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:ad:e7:90:f6:40:aa:1b:4c:61:b0:01:16:a6:f9:09:f0:38: c6:5f:74:1e:0c:e3:22:24:4e:28:c1:fb:c3:10:44:1a:10:88: cd:07:a2:c3:59:fb:e7:af:f4:85:8c:40:62:9d:07:a2:c3:fb: 81:81:e1:f8:4d:57:05:56:7a:1c:1d:46:dd:6b:cb:d3:c2:b0: 82:fe:4d:7a:0a:8d:41:33:63:17:bf:27:b3:f0:ba:78:c4:af: 60:6c:b4:5c:92:f4:3c:05:1c:56:1a:07:de:a3:31:a4:68:21: f2:3e:c2:63:37:ba:ed:45:f6:ab:45:09:3b:1a:81:e6:d9:1e: 5a:56:04:62:0c:5f:f3:f9:be:c8:6e:84:df:77:86:c0:c2:85: d3:0b:ad:b9:4d:7a:6c:24:16:eb:f7:d4:b5:80:37:ac:86:97: b5:48:c1:06:ad:e9:18:7e:97:20:eb:06:a6:2c:e5:e9:93:65: 0b:7b:85:8d:9c:1f:c7:c5:b9:75:b4:50:97:f5:42:d8:b4:33: e3:05:d5:b9:93:4b:71:29:1c:51:e8:42:8d:86:cf:e4:f4:d6: c5:57:b6:01:1a:26:5d:87:a8:07:2d:19:9a:9a:a3:3a:40:c6: 47:1a:1a:b2:7d:57:3f:1c:a7:a2:10:07:1c:2b:5d:dc:45:0a: 9e:66:0e:a2 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUYYI74hDGIR20GCueJs7nW5oE/y0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzkzMkUxQzkyQjQ1MUEyRkQ3QTVFODVCNTQxMTM1RTI1 QUQwNzRENTAeFw0yNTEyMDkxMTI4MjNaFw0yNjEyMDgxMTMzMjNaMDMxMTAvBgNV BAMTKEEzRDFERTNGQTBDQTdENEJGMkQ0REYwMjU3MjJCRjA2QjI5RTgwNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCieHuqU86Z9hzqgNS4YEwJNE7E ujVEqV5/7Tmf6INUKAnNYPnAHStFLIU2PbXMBXSlXkWCqrGD05bt6HbkZAvrBtJJ r2zayXh3Dt8DzWGnoV32dLoJ8r17Lh1zhjzgw7Bxs7U4Vna4s8PdTQnZioHRqc1l 49JrLJ8oweZ2faOIWn/Hxu6reXWsplB3SwhAK1zuhOeSq8w4VDOvyAl0STkraeOJ QA6V04/I+0+eVmkA6PrFOE90orZIxLbaslFnz4oc4wkXEigEWx58kOtPqsdkng7b RqjzdHCcX2kmawQeIYcbW/fdrjuQlFZFuYXTc3FqNeWa63Z8YdFHe9YoA7gxAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUo9HeP6DKfUvy1N8CVyK/BrKegGIwHwYDVR0j BBgwFoAUeTLhyStFGi/XpehbVBE14lrQdNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGE3OTc1NS0yMzhhLTQ2ZDItYjA1Mi0zMDU4N2JmOWVmZjcvMC83OTMyRTFDOTJC NDUxQTJGRDdBNUU4NUI1NDExMzVFMjVBRDA3NEQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzkzMkUxQzkyQjQ1MUEyRkQ3QTVFODVCNTQxMTM1RTI1QUQw NzRENS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI4YTc5NzU1LTIzOGEtNDZkMi1i MDUyLTMwNTg3YmY5ZWZmNy8wLzMxMzAzMzJlMzIzMzM2MmUzMTM0MzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNTM1MzYzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+yUMA0GCSqG SIb3DQEBCwUAA4IBAQA+reeQ9kCqG0xhsAEWpvkJ8DjGX3QeDOMiJE4owfvDEEQa EIjNB6LDWfvnr/SFjEBinQeiw/uBgeH4TVcFVnocHUbda8vTwrCC/k16Co1BM2MX vyez8Lp4xK9gbLRckvQ8BRxWGgfeozGkaCHyPsJjN7rtRfarRQk7GoHm2R5aVgRi DF/z+b7IboTfd4bAwoXTC625TXpsJBbr99S1gDeshpe1SMEGrekYfpcg6wamLOXp k2ULe4WNnB/Hxbl1tFCX9ULYtDPjBdW5k0txKRxR6EKNhs/k9NbFV7YBGiZdh6gH LRmamqM6QMZHGhqyfVc/HKeiEAccK13cRQqeZg6i -----END CERTIFICATE-----Generated at Fri Dec 19 09:39:53 2025 by rpki-client