This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/3130332e3133302e3230362e302f32342d3234203d3e20313338303937.roa File: 3130332e3133302e3230362e302f32342d3234203d3e20313338303937.roa (raw, json) Hash identifier: GpDEKCgBX9XD+jiRaKE2yJjAbdJ9JvSIqiEv2cy9Py0= Subject key identifier: 4D:AC:DA:21:9B:53:F9:DB:21:67:16:66:FB:C3:97:7E:A4:A3:22:B8 Certificate issuer: /CN=5509BA3B36B8E5C809C09949749272FEF605F530 Certificate serial: 500B2A833B1CCB10EC3EA977762E4A4A159DB77B Authority key identifier: 55:09:BA:3B:36:B8:E5:C8:09:C0:99:49:74:92:72:FE:F6:05:F5:30 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5509BA3B36B8E5C809C09949749272FEF605F530.cer Subject info access: rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/3130332e3133302e3230362e302f32342d3234203d3e20313338303937.roa Signing time: Thu 20 Nov 2025 05:00:00 +0000 ROA not before: Thu 20 Nov 2025 04:55:00 +0000 ROA not after: Thu 19 Nov 2026 05:00:00 +0000 asID: 138097 IP address blocks: 103.130.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.crl rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5509BA3B36B8E5C809C09949749272FEF605F530.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 17:14:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:0b:2a:83:3b:1c:cb:10:ec:3e:a9:77:76:2e:4a:4a:15:9d:b7:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5509BA3B36B8E5C809C09949749272FEF605F530 Validity Not Before: Nov 20 04:55:00 2025 GMT Not After : Nov 19 05:00:00 2026 GMT Subject: CN=4DACDA219B53F9DB21671666FBC3977EA4A322B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:57:03:f2:49:17:df:cd:42:63:12:44:64:4c: d8:8c:40:04:89:00:81:27:c5:97:f4:1c:85:89:8f: 8c:8d:7b:eb:4a:d2:f4:5f:30:a5:d7:a5:b5:cf:2c: 28:60:1a:e3:3d:32:54:5c:8c:71:d8:3c:a2:bc:75: 61:6e:cf:33:fd:78:73:c4:5e:5c:27:41:f6:5e:b7: d1:d5:37:59:18:09:2e:5a:cd:78:f0:7c:9a:c6:bf: 47:1b:8b:72:60:86:d4:68:f9:44:a9:a1:0c:e9:04: bc:43:6a:3c:60:8e:aa:ff:1f:66:41:fe:ec:01:5e: ac:9a:9c:d6:19:47:3a:b1:ba:b8:f7:cf:be:d3:87: f1:40:0c:6c:32:5b:2a:20:60:93:5d:4d:c2:7b:2c: 9f:90:de:21:c0:8c:3d:91:9f:f7:91:4e:31:d7:6b: d7:c3:db:23:ee:e2:a0:a4:19:1c:d8:d0:fa:11:ce: 5b:bf:4f:ff:7d:37:c6:45:12:41:1b:08:40:9e:48: 2c:98:94:ef:8e:c9:7c:57:0d:e9:dc:99:71:1d:6d: 46:0f:3a:c6:de:74:92:6b:4d:56:f5:10:93:25:39: 68:11:bb:50:6f:cf:98:2a:cc:2b:e7:18:6c:ee:01: 45:11:6e:b4:e4:28:95:96:e4:e0:a9:2e:d8:d7:8e: 6e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:AC:DA:21:9B:53:F9:DB:21:67:16:66:FB:C3:97:7E:A4:A3:22:B8 X509v3 Authority Key Identifier: keyid:55:09:BA:3B:36:B8:E5:C8:09:C0:99:49:74:92:72:FE:F6:05:F5:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5509BA3B36B8E5C809C09949749272FEF605F530.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/3130332e3133302e3230362e302f32342d3234203d3e20313338303937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.130.206.0/24 Signature Algorithm: sha256WithRSAEncryption 99:fd:88:cc:a8:b5:7e:fe:91:c9:25:e5:32:be:5e:9e:88:28: f9:e6:cc:62:7d:f8:df:3f:3a:82:d5:86:c2:30:24:25:6f:34: 38:c3:9a:00:f1:57:ba:6b:11:95:58:f2:1c:cd:3a:f1:f4:3f: 4c:96:81:01:ad:95:30:27:0d:6b:7a:d4:dd:ec:56:7a:77:8b: 01:e0:d0:bf:d7:b9:d3:14:9f:a4:4a:46:05:9a:b8:56:9a:be: 27:78:79:42:f5:74:bb:8f:d5:b8:d5:64:6c:c8:db:e6:61:68: 48:e6:e8:05:82:76:98:1b:07:e3:cd:e0:28:43:a8:a4:fc:f3: e2:ba:ee:7a:2f:9d:26:c5:fd:a1:5d:f3:82:f7:75:aa:b8:29: 1b:3f:d7:04:2e:ee:bf:6c:06:97:68:a4:85:4c:82:92:03:8b: 53:b9:db:6d:25:24:3d:bd:da:98:89:a1:93:59:09:d9:40:00: ed:c5:52:3a:85:22:93:b2:96:33:0e:09:f6:ad:47:8c:e6:6a: 10:c9:89:7e:d0:d6:37:90:b0:a3:6b:64:42:82:74:c6:c9:8e: c4:9a:6e:04:c4:43:ee:de:81:20:29:02:15:42:8f:81:b7:0d: 1e:44:93:dd:93:26:ac:b0:a7:b8:19:2f:b0:a2:b5:9f:52:30: 64:b5:0a:37 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUUAsqgzscyxDsPql3di5KShWdt3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUwOUJBM0IzNkI4RTVDODA5QzA5OTQ5NzQ5MjcyRkVG NjA1RjUzMDAeFw0yNTExMjAwNDU1MDBaFw0yNjExMTkwNTAwMDBaMDMxMTAvBgNV BAMTKDREQUNEQTIxOUI1M0Y5REIyMTY3MTY2NkZCQzM5NzdFQTRBMzIyQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRVwPySRffzUJjEkRkTNiMQASJ AIEnxZf0HIWJj4yNe+tK0vRfMKXXpbXPLChgGuM9MlRcjHHYPKK8dWFuzzP9eHPE XlwnQfZet9HVN1kYCS5azXjwfJrGv0cbi3JghtRo+USpoQzpBLxDajxgjqr/H2ZB /uwBXqyanNYZRzqxurj3z77Th/FADGwyWyogYJNdTcJ7LJ+Q3iHAjD2Rn/eRTjHX a9fD2yPu4qCkGRzY0PoRzlu/T/99N8ZFEkEbCECeSCyYlO+OyXxXDencmXEdbUYP OsbedJJrTVb1EJMlOWgRu1Bvz5gqzCvnGGzuAUURbrTkKJWW5OCpLtjXjm6VAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUTazaIZtT+dshZxZm+8OXfqSjIrgwHwYDVR0j BBgwFoAUVQm6Oza45cgJwJlJdJJy/vYF9TAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MGEzOTJkYy0yZTRlLTQ3NzAtOGY2OC1iYzYxZjgwYjc0YTcvMC81NTA5QkEzQjM2 QjhFNUM4MDlDMDk5NDk3NDkyNzJGRUY2MDVGNTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTUwOUJBM0IzNkI4RTVDODA5QzA5OTQ5NzQ5MjcyRkVGNjA1 RjUzMC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMwYTM5MmRjLTJlNGUtNDc3MC04 ZjY4LWJjNjFmODBiNzRhNy8wLzMxMzAzMzJlMzEzMzMwMmUzMjMwMzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMDM5Mzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABngs4wDQYJ KoZIhvcNAQELBQADggEBAJn9iMyotX7+kckl5TK+Xp6IKPnmzGJ9+N8/OoLVhsIw JCVvNDjDmgDxV7prEZVY8hzNOvH0P0yWgQGtlTAnDWt61N3sVnp3iwHg0L/XudMU n6RKRgWauFaavid4eUL1dLuP1bjVZGzI2+ZhaEjm6AWCdpgbB+PN4ChDqKT88+K6 7novnSbF/aFd84L3daq4KRs/1wQu7r9sBpdopIVMgpIDi1O5220lJD292piJoZNZ CdlAAO3FUjqFIpOyljMOCfatR4zmahDJiX7Q1jeQsKNrZEKCdMbJjsSabgTEQ+7e gSApAhVCj4G3DR5Ek92TJqywp7gZL7CitZ9SMGS1Cjc= -----END CERTIFICATE-----Generated at Wed Dec 3 15:29:16 2025 by rpki-client