This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3130332e3235332e3231322e302f32322d3232203d3e203538343837.roa File: 3130332e3235332e3231322e302f32322d3232203d3e203538343837.roa (raw, json) Hash identifier: 6GDeFIw3PWJ19SBhLx6qotmSPe8tjX9Upen0ZUGlPaE= Subject key identifier: 7B:E3:00:A4:47:C1:16:66:8E:05:5C:55:B2:7C:1C:4C:A6:43:50:CD Certificate issuer: /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E Certificate serial: 342A628CB4EE53A9ADE2B8C0969ED5E569C04466 Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3130332e3235332e3231322e302f32322d3232203d3e203538343837.roa Signing time: Tue 02 Dec 2025 08:00:53 +0000 ROA not before: Tue 02 Dec 2025 07:55:53 +0000 ROA not after: Tue 01 Dec 2026 08:00:53 +0000 asID: 58487 IP address blocks: 103.253.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 11:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:2a:62:8c:b4:ee:53:a9:ad:e2:b8:c0:96:9e:d5:e5:69:c0:44:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E Validity Not Before: Dec 2 07:55:53 2025 GMT Not After : Dec 1 08:00:53 2026 GMT Subject: CN=7BE300A447C116668E055C55B27C1C4CA64350CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:35:00:8a:ae:75:54:08:f1:0b:e1:cb:2f:16: 11:79:43:50:32:3a:64:a4:4a:5d:4b:4b:1e:85:ec: bf:13:0d:d2:94:ee:0e:a5:d0:a7:d3:bc:e7:0b:60: 67:4b:f2:b3:e9:4b:6a:95:89:24:e8:f9:03:28:6e: e9:db:60:6e:af:b1:7e:4f:bf:51:ee:0a:7d:24:94: 64:62:9a:8b:e7:b8:cb:12:f2:0d:b7:37:7a:35:c3: 2f:42:f2:38:c6:39:aa:13:97:d6:67:45:a0:ac:f6: b3:eb:97:a4:50:44:59:35:04:49:40:68:15:a0:df: ee:f8:1b:81:5d:a8:5b:9d:6a:4c:92:1a:66:96:85: 07:f7:9c:b1:e1:2a:a5:86:af:c7:38:dd:f0:cb:f1: cd:68:78:a9:d8:ce:b3:9c:f2:ed:40:fa:9e:f5:c5: aa:9d:2e:b1:2d:4f:d2:1f:40:fc:da:a9:1c:fa:b2: f3:ce:fb:29:9a:8d:86:1a:c1:19:2e:b2:b9:e1:b6: 59:0c:4e:da:c0:c8:d6:f9:1a:d2:88:a8:28:b3:e7: fb:31:41:8f:f7:80:1d:71:39:d7:e0:c7:5f:4a:b4: e2:90:15:72:36:dd:6a:06:89:bb:e0:fc:04:21:64: 6b:04:90:ad:5a:5b:c7:39:74:e4:44:f3:99:0a:9c: 25:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E3:00:A4:47:C1:16:66:8E:05:5C:55:B2:7C:1C:4C:A6:43:50:CD X509v3 Authority Key Identifier: keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3130332e3235332e3231322e302f32322d3232203d3e203538343837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.253.212.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:bd:d5:99:eb:09:bd:62:8a:ff:72:4e:06:fd:ec:59:ea:70: b0:54:72:d4:6d:cc:47:bf:cb:ab:6a:5a:f6:92:31:7c:ec:3f: c1:2e:12:43:d2:54:b2:15:b9:2a:50:03:bd:76:42:17:e2:c8: 5c:02:24:d1:b5:61:e6:bb:d2:85:c3:4b:df:bf:04:1e:b4:a1: cc:22:54:ce:a6:a7:d0:fd:5d:8d:ac:42:9a:ac:3c:4f:49:3d: 7d:cb:bf:ce:3a:dc:09:aa:5c:dd:16:a9:50:89:da:d0:7c:4c: 30:88:45:8b:0c:9a:24:5a:f7:16:27:09:cb:ef:e1:82:5b:92: 0d:bd:70:c0:ce:a6:55:4e:94:51:cf:fa:02:23:ab:5e:2d:b4: 3c:05:8c:b0:3d:0b:bf:fb:fb:67:26:04:7c:8e:a1:91:51:60: 01:77:f7:d4:91:da:2b:80:37:d9:3c:d7:8e:31:f3:bd:d6:56: 8f:7d:63:89:13:50:1c:a7:e5:de:b1:d7:05:b4:69:aa:d3:55: 98:b6:e3:9d:d1:84:1c:ce:c6:3b:f6:be:81:c6:ec:cc:22:32: c8:16:b9:75:e4:a7:59:1e:a5:05:1c:ca:25:e1:20:89:56:22: fc:6e:b3:f8:e5:44:95:93:39:4a:36:76:50:f8:04:8d:4f:7e: ae:04:ea:79 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUNCpijLTuU6mt4rjAlp7V5WnARGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZGMTMyMjMyMTQxMkVGRDA0MUE2QzJDMEIyOTdBMTA5 MkFBQkU2RTAeFw0yNTEyMDIwNzU1NTNaFw0yNjEyMDEwODAwNTNaMDMxMTAvBgNV BAMTKDdCRTMwMEE0NDdDMTE2NjY4RTA1NUM1NUIyN0MxQzRDQTY0MzUwQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXNQCKrnVUCPEL4csvFhF5Q1Ay OmSkSl1LSx6F7L8TDdKU7g6l0KfTvOcLYGdL8rPpS2qViSTo+QMobunbYG6vsX5P v1HuCn0klGRimovnuMsS8g23N3o1wy9C8jjGOaoTl9ZnRaCs9rPrl6RQRFk1BElA aBWg3+74G4FdqFudakySGmaWhQf3nLHhKqWGr8c43fDL8c1oeKnYzrOc8u1A+p71 xaqdLrEtT9IfQPzaqRz6svPO+ymajYYawRkusrnhtlkMTtrAyNb5GtKIqCiz5/sx QY/3gB1xOdfgx19KtOKQFXI23WoGibvg/AQhZGsEkK1aW8c5dORE85kKnCXVAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUe+MApEfBFmaOBVxVsnwcTKZDUM0wHwYDVR0j BBgwFoAUtvEyIyFBLv0EGmwsCyl6EJKqvm4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDhmMDYwZi1lNGIzLTRhNGUtOTdmZC1mNjFhYjE3ZGVlZWQvMC9CNkYxMzIyMzIx NDEyRUZEMDQxQTZDMkMwQjI5N0ExMDkyQUFCRTZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjZGMTMyMjMyMTQxMkVGRDA0MUE2QzJDMEIyOTdBMTA5MkFB QkU2RS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkOGYwNjBmLWU0YjMtNGE0ZS05 N2ZkLWY2MWFiMTdkZWVlZC8wLzMxMzAzMzJlMzIzNTMzMmUzMjMxMzIyZTMwMmYz MjMyMmQzMjMyMjAzZDNlMjAzNTM4MzQzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ/3UMA0GCSqG SIb3DQEBCwUAA4IBAQAevdWZ6wm9Yor/ck4G/exZ6nCwVHLUbcxHv8uralr2kjF8 7D/BLhJD0lSyFbkqUAO9dkIX4shcAiTRtWHmu9KFw0vfvwQetKHMIlTOpqfQ/V2N rEKarDxPST19y7/OOtwJqlzdFqlQidrQfEwwiEWLDJokWvcWJwnL7+GCW5INvXDA zqZVTpRRz/oCI6teLbQ8BYywPQu/+/tnJgR8jqGRUWABd/fUkdorgDfZPNeOMfO9 1laPfWOJE1Acp+XesdcFtGmq01WYtuOd0YQczsY79r6BxuzMIjLIFrl15KdZHqUF HMol4SCJViL8brP45USVkzlKNnZQ+ASNT36uBOp5 -----END CERTIFICATE-----Generated at Wed Dec 3 16:49:51 2025 by rpki-client