This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/3130332e3136342e36382e302f32342d3234203d3e20323135373237.roa File: 3130332e3136342e36382e302f32342d3234203d3e20323135373237.roa (raw, json) Hash identifier: B5kMPqKnAyjQ7h4n9e2QNS1tW3EwmLswU7gtO5Y0Xds= Subject key identifier: 83:DD:97:19:B8:9A:93:48:CE:32:CE:A1:15:63:FC:1E:73:89:A9:F0 Certificate issuer: /CN=157A25D171E1AD2FAB695F49BDC2555755B6ED7D Certificate serial: 4E439F047FABB22EC4E422CC7603AFE34DEAC95B Authority key identifier: 15:7A:25:D1:71:E1:AD:2F:AB:69:5F:49:BD:C2:55:57:55:B6:ED:7D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/3130332e3136342e36382e302f32342d3234203d3e20323135373237.roa Signing time: Sun 09 Nov 2025 17:25:11 +0000 ROA not before: Sun 09 Nov 2025 17:20:11 +0000 ROA not after: Sun 08 Nov 2026 17:25:11 +0000 asID: 215727 IP address blocks: 103.164.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 14:15:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:43:9f:04:7f:ab:b2:2e:c4:e4:22:cc:76:03:af:e3:4d:ea:c9:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=157A25D171E1AD2FAB695F49BDC2555755B6ED7D Validity Not Before: Nov 9 17:20:11 2025 GMT Not After : Nov 8 17:25:11 2026 GMT Subject: CN=83DD9719B89A9348CE32CEA11563FC1E7389A9F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:64:02:ae:ea:94:e5:cc:a3:ee:b2:5c:ba:1c: 01:09:f6:fe:53:57:fe:af:3a:ac:f6:27:b4:96:5d: 99:7d:c7:04:e3:1f:43:82:b7:a8:fd:0d:31:69:1a: 84:35:c2:e5:59:c3:1e:5e:57:6a:24:b9:56:80:18: c1:d0:23:ce:10:37:f9:1c:86:02:3f:e9:eb:f1:25: c1:30:af:b5:a0:4e:bd:96:f6:c0:37:9e:6a:f0:8a: 03:33:9f:e8:15:4e:90:cd:97:77:dc:4b:72:73:df: 96:ad:97:42:8e:b8:4c:96:42:5d:2b:18:f4:4d:4b: cb:e1:84:00:c1:a3:bc:1d:12:65:4d:32:ee:46:53: 07:d5:04:bd:1f:ce:56:32:11:eb:93:b5:8f:5f:f9: 83:88:11:52:a5:4c:8e:00:5d:d6:77:32:e0:b5:c6: c1:4c:68:3b:30:5d:64:1b:f5:65:89:de:aa:3b:21: e4:9f:90:39:c9:ec:86:98:05:4c:58:0d:b5:4c:f5: 0a:e5:af:9f:d1:c6:3d:9a:3b:dc:bc:fc:7e:d4:24: a1:9e:80:33:ea:dc:af:68:f5:42:39:b6:05:29:b3: 4d:a4:e2:59:da:79:39:35:94:ad:7b:3f:a9:76:22: c4:ae:69:e2:f6:b9:11:81:f0:dc:4c:ef:c6:3a:4c: c7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:DD:97:19:B8:9A:93:48:CE:32:CE:A1:15:63:FC:1E:73:89:A9:F0 X509v3 Authority Key Identifier: keyid:15:7A:25:D1:71:E1:AD:2F:AB:69:5F:49:BD:C2:55:57:55:B6:ED:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/3130332e3136342e36382e302f32342d3234203d3e20323135373237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.164.68.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:02:3b:34:60:4d:ec:13:0e:ae:97:de:e6:bb:b9:58:2d:db: 6d:79:55:15:c9:6b:6e:a9:8a:0f:d4:03:c6:47:ea:a9:24:03: 82:25:c7:36:b2:14:23:61:f4:26:32:c0:be:d7:9f:45:71:9a: 41:a1:14:5a:c0:7a:02:74:07:41:10:1f:0d:aa:5e:4c:28:11: 90:bb:d4:b6:69:b0:84:63:f0:dd:1f:23:ad:7c:b1:43:34:e9: e0:1c:dc:b0:b5:ba:fa:99:4c:02:75:be:79:6d:ea:4d:be:ce: cb:ac:90:d0:92:dc:aa:24:50:44:ce:04:4b:14:c1:92:55:84: 7b:ef:e8:18:61:81:c4:06:c9:e5:22:53:29:83:dc:36:8f:00: 52:cd:7f:01:06:b6:c8:d9:f4:52:70:02:bc:0b:72:dc:b3:e7: 97:1d:0f:10:12:84:9c:8f:26:8f:34:8e:de:70:db:3b:9d:b1: de:5c:e3:f8:a9:1a:d8:f2:a7:72:93:a0:a2:50:7d:96:75:ef: a2:77:76:27:42:08:c4:85:cc:d3:ea:a4:24:b1:7b:7d:71:ae: fe:27:6a:31:f7:63:f6:7d:fc:f1:65:34:bc:b4:39:5a:9e:64: 35:5a:1b:2e:61:12:63:78:2c:9b:c3:66:a7:21:11:4f:ae:16: 7c:0f:1e:82 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUTkOfBH+rsi7E5CLMdgOv403qyVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1NTc1 NUI2RUQ3RDAeFw0yNTExMDkxNzIwMTFaFw0yNjExMDgxNzI1MTFaMDMxMTAvBgNV BAMTKDgzREQ5NzE5Qjg5QTkzNDhDRTMyQ0VBMTE1NjNGQzFFNzM4OUE5RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDZAKu6pTlzKPusly6HAEJ9v5T V/6vOqz2J7SWXZl9xwTjH0OCt6j9DTFpGoQ1wuVZwx5eV2okuVaAGMHQI84QN/kc hgI/6evxJcEwr7WgTr2W9sA3nmrwigMzn+gVTpDNl3fcS3Jz35atl0KOuEyWQl0r GPRNS8vhhADBo7wdEmVNMu5GUwfVBL0fzlYyEeuTtY9f+YOIEVKlTI4AXdZ3MuC1 xsFMaDswXWQb9WWJ3qo7IeSfkDnJ7IaYBUxYDbVM9Qrlr5/Rxj2aO9y8/H7UJKGe gDPq3K9o9UI5tgUps02k4lnaeTk1lK17P6l2IsSuaeL2uRGB8NxM78Y6TMfjAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUg92XGbiak0jOMs6hFWP8HnOJqfAwHwYDVR0j BBgwFoAUFXol0XHhrS+raV9JvcJVV1W27X0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZGI2YjNiYy1mYTY1LTQ5ZjMtYWY2MS0wZDVkYzM5MzM0YTEvMC8xNTdBMjVEMTcx RTFBRDJGQUI2OTVGNDlCREMyNTU1NzU1QjZFRDdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1NTc1NUI2 RUQ3RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNkYjZiM2JjLWZhNjUtNDlmMy1h ZjYxLTBkNWRjMzkzMzRhMS8wLzMxMzAzMzJlMzEzNjM0MmUzNjM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzMTM1MzczMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6REMA0GCSqG SIb3DQEBCwUAA4IBAQAPAjs0YE3sEw6ul97mu7lYLdtteVUVyWtuqYoP1APGR+qp JAOCJcc2shQjYfQmMsC+159FcZpBoRRawHoCdAdBEB8Nql5MKBGQu9S2abCEY/Dd HyOtfLFDNOngHNywtbr6mUwCdb55bepNvs7LrJDQktyqJFBEzgRLFMGSVYR77+gY YYHEBsnlIlMpg9w2jwBSzX8BBrbI2fRScAK8C3Lcs+eXHQ8QEoScjyaPNI7ecNs7 nbHeXOP4qRrY8qdyk6CiUH2Wde+id3YnQgjEhczT6qQksXt9ca7+J2ox92P2ffzx ZTS8tDlanmQ1WhsuYRJjeCybw2anIRFPrhZ8Dx6C -----END CERTIFICATE-----Generated at Fri Dec 5 15:37:51 2025 by rpki-client