This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/3130332e3136342e36382e302f32332d3233203d3e20323135373237.roa File: 3130332e3136342e36382e302f32332d3233203d3e20323135373237.roa (raw, json) Hash identifier: mY/gedfST1aVTT2whoYkCrdSLWtVr5yC5xbhzMtOrsM= Subject key identifier: FA:5E:C1:4D:CE:46:1F:3B:81:C4:33:DA:2C:EA:34:AB:73:F0:92:BB Certificate issuer: /CN=157A25D171E1AD2FAB695F49BDC2555755B6ED7D Certificate serial: 31CDA282E487A4722EEEE5F701C4EC6DC0C32AA7 Authority key identifier: 15:7A:25:D1:71:E1:AD:2F:AB:69:5F:49:BD:C2:55:57:55:B6:ED:7D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/3130332e3136342e36382e302f32332d3233203d3e20323135373237.roa Signing time: Sun 09 Nov 2025 17:25:40 +0000 ROA not before: Sun 09 Nov 2025 17:20:40 +0000 ROA not after: Sun 08 Nov 2026 17:25:40 +0000 asID: 215727 IP address blocks: 103.164.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 14:15:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:cd:a2:82:e4:87:a4:72:2e:ee:e5:f7:01:c4:ec:6d:c0:c3:2a:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=157A25D171E1AD2FAB695F49BDC2555755B6ED7D Validity Not Before: Nov 9 17:20:40 2025 GMT Not After : Nov 8 17:25:40 2026 GMT Subject: CN=FA5EC14DCE461F3B81C433DA2CEA34AB73F092BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6a:27:fd:b1:7f:13:1b:c1:97:bb:b1:9f:be: d3:01:cd:9c:8e:fe:09:ad:ee:45:16:9c:7b:7c:8d: 15:70:51:52:00:bb:0a:80:de:01:62:fe:d7:20:c6: 56:94:2a:2b:bc:77:43:4e:59:d9:20:bb:d8:5c:d6: f2:1e:dc:cb:79:70:1b:58:33:08:e1:bb:5f:ca:85: 01:f8:c6:d4:e0:3c:6e:63:e2:5d:f5:ba:ad:9d:7b: 35:5b:f9:63:f5:32:5a:a1:4a:47:ad:81:17:21:ca: 9d:e5:e8:35:fa:3b:af:ab:bb:f2:67:9a:fb:0c:ec: ca:42:26:26:65:35:f3:11:4b:e5:2d:d8:c4:d0:34: 91:55:bf:13:3e:c5:61:f2:f2:f7:bd:f0:9c:96:be: f5:d3:7a:05:58:c9:10:6c:b5:9b:3a:c4:fd:df:3d: ad:27:0b:af:16:8c:2d:8a:65:0b:40:c3:c4:73:c7: ab:00:dd:0b:3c:54:5b:5f:68:55:f9:ac:a2:8f:d2: 20:f9:1d:06:36:38:b2:14:30:49:46:b4:18:3c:52: d1:f0:ad:7f:fa:fc:d8:a1:72:1f:a8:5c:7e:73:22: 20:af:3e:42:33:9e:c4:5e:ac:38:a8:a9:ea:5a:b4: df:8e:ef:cd:05:ae:f6:fc:98:b6:c9:7c:b2:92:bd: ce:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:5E:C1:4D:CE:46:1F:3B:81:C4:33:DA:2C:EA:34:AB:73:F0:92:BB X509v3 Authority Key Identifier: keyid:15:7A:25:D1:71:E1:AD:2F:AB:69:5F:49:BD:C2:55:57:55:B6:ED:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/3130332e3136342e36382e302f32332d3233203d3e20323135373237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.164.68.0/23 Signature Algorithm: sha256WithRSAEncryption 10:d9:0b:bf:44:8e:77:eb:db:df:50:ac:2c:78:1e:d3:8e:7c: 08:19:fd:a4:01:8b:92:cf:53:b6:a2:51:c4:ab:f9:f4:7f:4f: 51:87:04:5c:ef:fe:c8:d2:70:a0:22:dc:98:d9:03:b1:f5:f2: fd:77:c3:2d:ba:fb:af:fd:80:ff:96:a9:37:03:c1:fc:76:a7: ea:17:70:c7:b7:1a:f0:f5:7f:05:47:13:6f:b7:d0:27:0b:c2: ab:0b:f1:35:ab:b3:87:53:22:99:14:85:3e:02:f0:1e:ef:47: 27:37:04:fc:35:61:65:1a:64:e1:e7:2d:84:4c:0c:24:1e:60: d1:6b:bb:13:e2:05:40:8a:fa:c9:e3:5a:b7:d8:e2:23:13:8a: 16:7d:ef:e5:9c:ca:f5:4b:59:6d:b3:b9:c6:b0:03:84:3e:01: ca:ef:43:dd:0f:12:e7:9f:f3:47:55:76:ed:a6:1f:78:c8:71: 46:43:af:15:da:25:0b:bd:1e:b3:97:5f:a2:76:c3:fc:48:82: b3:6b:55:fc:48:6a:78:29:16:61:1a:ad:8b:cd:f9:51:00:7e: 36:ef:47:8e:54:f1:96:ba:de:52:4e:b0:68:11:db:80:88:fd: 65:82:04:7e:1d:d9:e4:ce:da:ef:82:15:5b:1b:2f:8f:0e:a3: 2c:ab:25:0f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUMc2iguSHpHIu7uX3AcTsbcDDKqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1NTc1 NUI2RUQ3RDAeFw0yNTExMDkxNzIwNDBaFw0yNjExMDgxNzI1NDBaMDMxMTAvBgNV BAMTKEZBNUVDMTREQ0U0NjFGM0I4MUM0MzNEQTJDRUEzNEFCNzNGMDkyQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuaif9sX8TG8GXu7GfvtMBzZyO /gmt7kUWnHt8jRVwUVIAuwqA3gFi/tcgxlaUKiu8d0NOWdkgu9hc1vIe3Mt5cBtY Mwjhu1/KhQH4xtTgPG5j4l31uq2dezVb+WP1MlqhSketgRchyp3l6DX6O6+ru/Jn mvsM7MpCJiZlNfMRS+Ut2MTQNJFVvxM+xWHy8ve98JyWvvXTegVYyRBstZs6xP3f Pa0nC68WjC2KZQtAw8Rzx6sA3Qs8VFtfaFX5rKKP0iD5HQY2OLIUMElGtBg8UtHw rX/6/Nihch+oXH5zIiCvPkIznsRerDioqepatN+O780Frvb8mLbJfLKSvc6lAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU+l7BTc5GHzuBxDPaLOo0q3PwkrswHwYDVR0j BBgwFoAUFXol0XHhrS+raV9JvcJVV1W27X0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZGI2YjNiYy1mYTY1LTQ5ZjMtYWY2MS0wZDVkYzM5MzM0YTEvMC8xNTdBMjVEMTcx RTFBRDJGQUI2OTVGNDlCREMyNTU1NzU1QjZFRDdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1NTc1NUI2 RUQ3RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNkYjZiM2JjLWZhNjUtNDlmMy1h ZjYxLTBkNWRjMzkzMzRhMS8wLzMxMzAzMzJlMzEzNjM0MmUzNjM4MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzIzMTM1MzczMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6REMA0GCSqG SIb3DQEBCwUAA4IBAQAQ2Qu/RI5369vfUKwseB7TjnwIGf2kAYuSz1O2olHEq/n0 f09RhwRc7/7I0nCgItyY2QOx9fL9d8Mtuvuv/YD/lqk3A8H8dqfqF3DHtxrw9X8F RxNvt9AnC8KrC/E1q7OHUyKZFIU+AvAe70cnNwT8NWFlGmTh5y2ETAwkHmDRa7sT 4gVAivrJ41q32OIjE4oWfe/lnMr1S1lts7nGsAOEPgHK70PdDxLnn/NHVXbtph94 yHFGQ68V2iULvR6zl1+idsP8SIKza1X8SGp4KRZhGq2LzflRAH4270eOVPGWut5S TrBoEduAiP1lggR+HdnkztrvghVbGy+PDqMsqyUP -----END CERTIFICATE-----Generated at Fri Dec 5 15:37:52 2025 by rpki-client