This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/3130332e3133362e31332e302f32342d3234203d3e20313338383231.roa File: 3130332e3133362e31332e302f32342d3234203d3e20313338383231.roa (raw, json) Hash identifier: qZQ4FJYs46n/+hOc10zmPRfwJHK6+NPt/Sqykb6up2s= Subject key identifier: 65:A7:4A:E5:B6:AB:A0:D6:58:61:D0:AE:6D:AC:8B:7D:8A:84:F3:18 Certificate issuer: /CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53 Certificate serial: 292CD03EED7F058C8CCAEEA7D6C52455A8DB7E32 Authority key identifier: 6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer Subject info access: rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/3130332e3133362e31332e302f32342d3234203d3e20313338383231.roa Signing time: Fri 28 Nov 2025 15:00:00 +0000 ROA not before: Fri 28 Nov 2025 14:55:00 +0000 ROA not after: Fri 27 Nov 2026 15:00:00 +0000 asID: 138821 IP address blocks: 103.136.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 18:12:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:2c:d0:3e:ed:7f:05:8c:8c:ca:ee:a7:d6:c5:24:55:a8:db:7e:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53 Validity Not Before: Nov 28 14:55:00 2025 GMT Not After : Nov 27 15:00:00 2026 GMT Subject: CN=65A74AE5B6ABA0D65861D0AE6DAC8B7D8A84F318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:54:03:d0:0f:ca:0c:27:da:6d:f7:73:24:e7: 82:98:9e:d6:12:32:f5:10:19:ac:c7:b1:55:76:de: ab:01:02:b0:50:3c:46:42:7a:17:1b:cf:85:b9:66: 73:b9:cc:80:fa:0c:e0:ce:2c:e3:cd:5a:d1:57:0e: 14:f9:2e:1b:87:ae:9f:de:41:2c:69:0e:f6:fe:61: af:e3:1c:2e:e4:81:70:18:71:c1:3f:fb:72:ca:4a: e7:43:64:c6:90:84:89:b0:cf:a7:84:25:eb:35:c1: bf:bb:10:6a:0f:43:60:b8:cb:91:38:29:c4:68:1d: 86:a8:25:95:da:94:be:84:9a:1a:03:dd:e9:46:8a: f3:92:db:9e:98:1c:7a:e2:0d:5b:86:02:68:f6:56: a3:94:c4:80:b2:7f:e2:07:a5:19:be:ed:22:6c:f4: 54:fa:32:5e:99:bf:54:b1:40:c5:ca:e2:e7:78:95: 2d:de:d0:5b:37:0a:3f:ff:0a:b8:a1:38:f2:cb:d5: 58:bd:ee:1d:21:ba:8f:80:b8:a6:b2:92:0e:b9:09: 06:f2:73:19:bc:a1:eb:dc:18:7a:b0:90:98:9b:ba: a6:6f:08:19:c2:97:70:40:8c:af:15:ea:ae:22:37: f2:66:14:f4:9a:d7:58:6b:cb:14:3d:21:78:e0:34: df:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:A7:4A:E5:B6:AB:A0:D6:58:61:D0:AE:6D:AC:8B:7D:8A:84:F3:18 X509v3 Authority Key Identifier: keyid:6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/3130332e3133362e31332e302f32342d3234203d3e20313338383231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.136.13.0/24 Signature Algorithm: sha256WithRSAEncryption 34:a1:b5:e6:e0:4a:82:e3:6d:86:08:08:46:c7:ba:5d:6e:ee: af:63:e4:dc:59:91:29:5b:db:c3:71:c2:f8:4d:9f:73:ab:61: 0d:ad:60:b8:b0:d9:87:56:de:7e:49:3c:f9:c2:05:bf:d3:22: af:01:8e:e8:57:16:a2:d6:4a:f7:6b:77:ef:01:23:aa:dc:3b: c8:d2:7f:55:b5:ee:0f:ab:64:58:90:b4:ce:3d:89:40:df:5a: a9:4f:a3:af:35:56:a7:ae:bf:2b:cb:d9:df:0f:ae:d6:f7:3d: 2a:bb:10:3e:56:b8:01:2d:81:60:9c:e4:02:bb:10:2c:a5:89: c5:c9:f1:0e:c0:d2:5d:2e:de:a7:7f:9d:22:61:9a:2e:ea:48: 1d:d6:3e:4d:65:f4:09:d6:aa:55:43:ff:1e:ad:32:0b:49:63: 93:b0:a1:09:df:11:89:7d:b6:4f:de:95:4b:35:2b:61:6a:b7: 50:0e:b6:cb:4a:cc:f2:c5:eb:fe:9c:a1:27:3b:32:55:66:0d: 29:d4:17:5c:cd:6c:b1:af:fa:f6:7f:b3:2c:68:56:22:e6:ee: ee:f7:f5:4e:0f:bc:65:ac:02:dd:8a:93:dd:a9:50:c7:8e:57: 94:e6:0a:e7:cf:01:15:21:5d:99:20:91:ca:af:37:56:95:de: ec:54:8e:6f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUKSzQPu1/BYyMyu6n1sUkVajbfjIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE2OUVGQzVDODk3OTA3Qzc0QzhBMUVCREQ5RDM3RkNC RkIzN0I1MzAeFw0yNTExMjgxNDU1MDBaFw0yNjExMjcxNTAwMDBaMDMxMTAvBgNV BAMTKDY1QTc0QUU1QjZBQkEwRDY1ODYxRDBBRTZEQUM4QjdEOEE4NEYzMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7VAPQD8oMJ9pt93Mk54KYntYS MvUQGazHsVV23qsBArBQPEZCehcbz4W5ZnO5zID6DODOLOPNWtFXDhT5LhuHrp/e QSxpDvb+Ya/jHC7kgXAYccE/+3LKSudDZMaQhImwz6eEJes1wb+7EGoPQ2C4y5E4 KcRoHYaoJZXalL6EmhoD3elGivOS256YHHriDVuGAmj2VqOUxICyf+IHpRm+7SJs 9FT6Ml6Zv1SxQMXK4ud4lS3e0Fs3Cj//CrihOPLL1Vi97h0huo+AuKaykg65CQby cxm8oevcGHqwkJibuqZvCBnCl3BAjK8V6q4iN/JmFPSa11hryxQ9IXjgNN+TAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUZadK5baroNZYYdCubayLfYqE8xgwHwYDVR0j BBgwFoAUamnvxciXkHx0yKHr3Z03/L+ze1MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDFiMWMxYi02NTZjLTQ4OWQtOWVkMy1jY2M3N2M4MzAxOGQvMC82QTY5RUZDNUM4 OTc5MDdDNzRDOEExRUJERDlEMzdGQ0JGQjM3QjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkE2OUVGQzVDODk3OTA3Qzc0QzhBMUVCREQ5RDM3RkNCRkIz N0I1My5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQwMWIxYzFiLTY1NmMtNDg5ZC05 ZWQzLWNjYzc3YzgzMDE4ZC8wLzMxMzAzMzJlMzEzMzM2MmUzMTMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzgzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4gNMA0GCSqG SIb3DQEBCwUAA4IBAQA0obXm4EqC422GCAhGx7pdbu6vY+TcWZEpW9vDccL4TZ9z q2ENrWC4sNmHVt5+STz5wgW/0yKvAY7oVxai1kr3a3fvASOq3DvI0n9Vte4Pq2RY kLTOPYlA31qpT6OvNVanrr8ry9nfD67W9z0quxA+VrgBLYFgnOQCuxAspYnFyfEO wNJdLt6nf50iYZou6kgd1j5NZfQJ1qpVQ/8erTILSWOTsKEJ3xGJfbZP3pVLNSth ardQDrbLSszyxev+nKEnOzJVZg0p1BdczWyxr/r2f7MsaFYi5u7u9/VOD7xlrALd ipPdqVDHjleU5grnzwEVIV2ZIJHKrzdWld7sVI5v -----END CERTIFICATE-----Generated at Wed Dec 3 16:07:02 2025 by rpki-client