This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/3130332e3234372e32302e302f32322d3234203d3e203538343835.roa File: 3130332e3234372e32302e302f32322d3234203d3e203538343835.roa (raw, json) Hash identifier: 0yw7rRpcNLCQkltZhjGJL1siB8HST2OMsTJXjD26O8w= Subject key identifier: FF:1C:38:22:A2:EB:35:ED:89:94:4B:F0:BB:55:64:5F:00:D4:77:BC Certificate issuer: /CN=FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39 Certificate serial: 34162D4E2BC517F870C549A4F5AC67C31A88A5BB Authority key identifier: FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/3130332e3234372e32302e302f32322d3234203d3e203538343835.roa Signing time: Wed 11 Jun 2025 04:18:16 +0000 ROA not before: Wed 11 Jun 2025 04:13:16 +0000 ROA not after: Wed 10 Jun 2026 04:18:16 +0000 asID: 58485 IP address blocks: 103.247.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:16:2d:4e:2b:c5:17:f8:70:c5:49:a4:f5:ac:67:c3:1a:88:a5:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39 Validity Not Before: Jun 11 04:13:16 2025 GMT Not After : Jun 10 04:18:16 2026 GMT Subject: CN=FF1C3822A2EB35ED89944BF0BB55645F00D477BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:11:d9:8a:f1:cf:dd:39:a0:19:51:86:ba:ca: c5:3c:95:cf:41:17:22:af:54:86:84:36:fe:a7:39: 18:cb:f6:7e:3e:ef:6f:df:df:d9:29:14:b9:54:26: 63:5d:50:dc:8c:26:01:22:c6:88:50:4d:74:0f:f6: 12:18:06:5c:d7:4d:7c:92:7e:eb:1a:33:c6:19:48: e1:b2:4e:ca:45:4a:41:a1:40:bf:71:5d:62:c6:6d: cf:ad:d3:dc:2e:a2:76:6a:dc:3b:1f:b0:fb:38:30: b3:a9:87:e3:cf:7d:62:d9:2f:b2:93:f1:37:f1:f1: a0:7e:e3:81:f9:ae:44:bc:c2:d5:30:22:b8:a6:83: dc:fd:18:e7:81:de:6c:ed:26:21:d2:f0:c4:f8:3e: eb:95:0f:73:ba:d0:6b:99:37:27:ad:33:7e:fc:76: 21:47:af:75:da:00:b5:5c:91:2b:30:48:38:88:67: 90:55:48:39:00:99:6c:c1:a0:b6:c0:61:ad:bd:22: bc:bb:0a:5e:36:e8:c7:5f:ed:3f:6a:50:68:82:47: 03:0e:ef:c5:fd:0d:f7:30:9e:60:4a:1d:5b:2e:cf: 70:74:5d:27:78:f3:6d:2e:67:7f:58:22:c4:54:75: 5c:40:05:ac:00:1d:77:48:e3:48:b0:6e:5e:df:05: cf:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:1C:38:22:A2:EB:35:ED:89:94:4B:F0:BB:55:64:5F:00:D4:77:BC X509v3 Authority Key Identifier: keyid:FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/3130332e3234372e32302e302f32322d3234203d3e203538343835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.247.20.0/22 Signature Algorithm: sha256WithRSAEncryption 28:ed:47:5f:24:f8:35:0e:b7:e8:5e:d7:fe:a6:b6:13:db:6a: dd:6f:ed:36:f6:86:29:61:d8:3d:e4:cd:00:9a:a7:f1:66:5e: de:f9:17:b1:04:b4:ce:31:ee:72:91:ef:84:e1:a2:f4:4c:3d: 6d:cc:f9:f0:26:c9:6e:c4:06:63:cf:38:4e:a6:54:9a:33:0f: a2:9c:38:32:73:eb:15:c1:85:d6:c8:60:4d:ac:b5:90:c9:91: e8:d1:14:e7:f2:94:7f:aa:42:08:80:88:5f:f6:7e:ac:83:b3: b8:72:c3:57:4a:d9:01:f8:ec:2e:1c:5f:47:58:2f:04:71:a3: da:48:75:44:f9:86:5e:c3:dc:4f:4d:e0:e7:58:9d:3c:73:47: dd:71:93:2f:d4:04:63:42:1a:56:cf:00:81:b9:18:d0:dd:4f: c8:db:5e:f9:4f:d5:1e:34:79:8b:40:a4:45:43:e6:5d:36:61: 5e:67:a8:4a:2d:87:14:94:25:4b:ff:d3:6b:a9:e8:e0:0d:ea: ba:83:50:a8:bd:cc:b5:5a:f6:b7:5d:21:c4:46:db:cd:c5:73: 81:9f:2a:37:18:43:75:7c:74:22:84:93:9a:20:5c:a5:63:fb: 5d:a2:ea:b5:95:25:40:23:ec:86:75:df:06:72:59:56:51:f5: f6:e4:bc:ff -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUNBYtTivFF/hwxUmk9axnwxqIpbswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE1QkNBOTg0RUVCQUZGRENFRDg0MTkwQzcwNzU2REJF QjNCRkYzOTAeFw0yNTA2MTEwNDEzMTZaFw0yNjA2MTAwNDE4MTZaMDMxMTAvBgNV BAMTKEZGMUMzODIyQTJFQjM1RUQ4OTk0NEJGMEJCNTU2NDVGMDBENDc3QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdEdmK8c/dOaAZUYa6ysU8lc9B FyKvVIaENv6nORjL9n4+72/f39kpFLlUJmNdUNyMJgEixohQTXQP9hIYBlzXTXyS fusaM8YZSOGyTspFSkGhQL9xXWLGbc+t09wuonZq3DsfsPs4MLOph+PPfWLZL7KT 8Tfx8aB+44H5rkS8wtUwIrimg9z9GOeB3mztJiHS8MT4PuuVD3O60GuZNyetM378 diFHr3XaALVckSswSDiIZ5BVSDkAmWzBoLbAYa29Iry7Cl426Mdf7T9qUGiCRwMO 78X9DfcwnmBKHVsuz3B0XSd4820uZ39YIsRUdVxABawAHXdI40iwbl7fBc8FAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU/xw4IqLrNe2JlEvwu1VkXwDUd7wwHwYDVR0j BBgwFoAU+lvKmE7rr/3O2EGQxwdW2+s7/zkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZWU0N2JiZi1iYTg0LTQ0OGYtOTYyYi0yYWFmNWM3ZGQ2OGQvMC9GQTVCQ0E5ODRF RUJBRkZEQ0VEODQxOTBDNzA3NTZEQkVCM0JGRjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkE1QkNBOTg0RUVCQUZGRENFRDg0MTkwQzcwNzU2REJFQjNC RkYzOS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJlZTQ3YmJmLWJhODQtNDQ4Zi05 NjJiLTJhYWY1YzdkZDY4ZC8wLzMxMzAzMzJlMzIzNDM3MmUzMjMwMmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzUzODM0MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmf3FDANBgkqhkiG 9w0BAQsFAAOCAQEAKO1HXyT4NQ636F7X/qa2E9tq3W/tNvaGKWHYPeTNAJqn8WZe 3vkXsQS0zjHucpHvhOGi9Ew9bcz58CbJbsQGY884TqZUmjMPopw4MnPrFcGF1shg Tay1kMmR6NEU5/KUf6pCCICIX/Z+rIOzuHLDV0rZAfjsLhxfR1gvBHGj2kh1RPmG XsPcT03g51idPHNH3XGTL9QEY0IaVs8AgbkY0N1PyNte+U/VHjR5i0CkRUPmXTZh XmeoSi2HFJQlS//Ta6no4A3quoNQqL3MtVr2t10hxEbbzcVzgZ8qNxhDdXx0IoST miBcpWP7XaLqtZUlQCPshnXfBnJZVlH19uS8/w== -----END CERTIFICATE-----Generated at Wed Dec 3 16:09:19 2025 by rpki-client