This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/3131372e3130332e36382e302f32342d3234203d3e203536323334.roa File: 3131372e3130332e36382e302f32342d3234203d3e203536323334.roa (raw, json) Hash identifier: mKN81nr9n+EB+Ar0JuYmAgcYDj9oQSxKmUu5BZ5rbmU= Subject key identifier: BF:0A:03:3B:66:F1:E7:17:07:3F:D0:AF:93:7C:42:A6:A8:E0:31:7E Certificate issuer: /CN=A9D46A066DBAE3776A15E9AB09A6CD3C8216615B Certificate serial: 07AD405A34DB53B6DD2A67963231F8D96D5DF089 Authority key identifier: A9:D4:6A:06:6D:BA:E3:77:6A:15:E9:AB:09:A6:CD:3C:82:16:61:5B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/3131372e3130332e36382e302f32342d3234203d3e203536323334.roa Signing time: Sat 20 Sep 2025 07:45:25 +0000 ROA not before: Sat 20 Sep 2025 07:40:25 +0000 ROA not after: Sat 19 Sep 2026 07:45:25 +0000 asID: 56234 IP address blocks: 117.103.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.crl rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 14:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:ad:40:5a:34:db:53:b6:dd:2a:67:96:32:31:f8:d9:6d:5d:f0:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9D46A066DBAE3776A15E9AB09A6CD3C8216615B Validity Not Before: Sep 20 07:40:25 2025 GMT Not After : Sep 19 07:45:25 2026 GMT Subject: CN=BF0A033B66F1E717073FD0AF937C42A6A8E0317E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d9:1e:a9:5b:e7:d5:ca:22:ca:b2:51:a6:c1: ad:e3:08:00:a5:aa:0e:40:5e:35:f7:81:62:04:4b: 44:80:89:82:17:ed:43:e3:0d:bd:ad:48:46:fa:05: 75:66:de:91:09:04:e2:64:3a:22:62:92:e7:39:71: 83:69:3a:96:97:72:bb:a8:cb:87:30:66:e8:10:97: d8:90:82:ee:74:ff:f7:b0:de:4f:84:16:b7:f2:e7: f1:f4:8c:99:d4:f6:fb:f6:f6:a0:27:b9:bd:df:5a: 3e:c4:58:be:f3:1c:94:5a:2d:fb:b6:79:06:c3:7e: 34:33:d4:33:f4:e9:70:5c:57:0e:6e:9c:a7:07:f8: b3:c4:8e:34:63:5a:72:a6:29:97:4e:b9:89:0b:f4: 7f:04:28:fd:4e:3e:75:99:3b:9e:c2:2b:78:13:1c: ab:03:3f:3e:22:31:e9:a3:97:81:52:b5:ea:04:18: c9:1c:07:53:df:d4:15:a6:ed:95:f4:85:a1:ca:5c: 1c:bc:f7:d6:24:6e:a4:36:38:bd:f7:70:42:d7:02: 24:b2:28:b3:86:85:a3:11:d9:e3:53:3a:29:08:51: 5c:fe:b2:5f:77:c4:ca:5a:f6:7a:c4:39:73:d4:19: ab:33:09:b9:3a:0a:be:9c:19:d2:e1:8a:fa:b7:4c: b5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:0A:03:3B:66:F1:E7:17:07:3F:D0:AF:93:7C:42:A6:A8:E0:31:7E X509v3 Authority Key Identifier: keyid:A9:D4:6A:06:6D:BA:E3:77:6A:15:E9:AB:09:A6:CD:3C:82:16:61:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/3131372e3130332e36382e302f32342d3234203d3e203536323334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.103.68.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:3e:47:e8:41:71:e0:43:46:7b:80:7c:a0:c9:1c:fe:f4:b2: 63:70:a3:99:1b:43:96:16:fa:29:d9:c2:8d:e0:eb:9f:ce:8c: f3:ef:d2:bc:99:37:21:72:65:e6:75:81:eb:6e:3a:6e:f6:50: 29:23:69:33:f9:4a:a9:68:5c:39:0f:05:6e:57:b3:6b:12:3a: b3:91:80:23:59:0b:30:28:d6:93:bb:90:43:4e:bc:e1:6a:bb: 7a:15:dc:1a:81:b8:56:20:94:3f:a4:b4:76:7f:33:4f:78:09: 86:32:68:cf:54:f4:bb:60:07:33:9e:3c:44:4d:57:1a:42:a9: 1e:cb:f1:0b:a2:a3:a2:cb:e2:20:3e:1e:4d:43:c0:0c:8c:69: 1f:27:df:20:71:1c:b4:16:12:67:f0:37:04:d9:ed:a0:61:a0: 2c:2a:e1:31:bf:c8:86:28:7b:02:1f:45:0c:71:bb:4f:66:cd: 9e:95:b8:da:39:19:91:29:75:da:68:89:a8:38:8d:36:0b:2b: 93:36:56:cc:c8:43:c0:9b:89:48:2a:fe:b2:7c:4d:ba:66:15: 88:a2:6f:94:15:98:56:9a:c9:30:b6:5a:a2:d4:29:4f:de:28: 28:2e:a2:96:ca:3f:3f:fa:a4:c1:30:e6:29:a1:bd:d0:05:0e: 9d:a4:6d:d2 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUB61AWjTbU7bdKmeWMjH42W1d8IkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlENDZBMDY2REJBRTM3NzZBMTVFOUFCMDlBNkNEM0M4 MjE2NjE1QjAeFw0yNTA5MjAwNzQwMjVaFw0yNjA5MTkwNzQ1MjVaMDMxMTAvBgNV BAMTKEJGMEEwMzNCNjZGMUU3MTcwNzNGRDBBRjkzN0M0MkE2QThFMDMxN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd2R6pW+fVyiLKslGmwa3jCACl qg5AXjX3gWIES0SAiYIX7UPjDb2tSEb6BXVm3pEJBOJkOiJikuc5cYNpOpaXcruo y4cwZugQl9iQgu50//ew3k+EFrfy5/H0jJnU9vv29qAnub3fWj7EWL7zHJRaLfu2 eQbDfjQz1DP06XBcVw5unKcH+LPEjjRjWnKmKZdOuYkL9H8EKP1OPnWZO57CK3gT HKsDPz4iMemjl4FSteoEGMkcB1Pf1BWm7ZX0haHKXBy899YkbqQ2OL33cELXAiSy KLOGhaMR2eNTOikIUVz+sl93xMpa9nrEOXPUGaszCbk6Cr6cGdLhivq3TLVJAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUvwoDO2bx5xcHP9Cvk3xCpqjgMX4wHwYDVR0j BBgwFoAUqdRqBm2643dqFemrCabNPIIWYVswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MmM3ZGZkNC1lNTEwLTQ3MDctOTgxOC1hMmIxZTJjNmIyMTYvMC9BOUQ0NkEwNjZE QkFFMzc3NkExNUU5QUIwOUE2Q0QzQzgyMTY2MTVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlENDZBMDY2REJBRTM3NzZBMTVFOUFCMDlBNkNEM0M4MjE2 NjE1Qi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQyYzdkZmQ0LWU1MTAtNDcwNy05 ODE4LWEyYjFlMmM2YjIxNi8wLzMxMzEzNzJlMzEzMDMzMmUzNjM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzNjMyMzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHVnRDANBgkqhkiG 9w0BAQsFAAOCAQEADT5H6EFx4ENGe4B8oMkc/vSyY3CjmRtDlhb6KdnCjeDrn86M 8+/SvJk3IXJl5nWB6246bvZQKSNpM/lKqWhcOQ8FblezaxI6s5GAI1kLMCjWk7uQ Q0684Wq7ehXcGoG4ViCUP6S0dn8zT3gJhjJoz1T0u2AHM548RE1XGkKpHsvxC6Kj osviID4eTUPADIxpHyffIHEctBYSZ/A3BNntoGGgLCrhMb/Ihih7Ah9FDHG7T2bN npW42jkZkSl12miJqDiNNgsrkzZWzMhDwJuJSCr+snxNumYViKJvlBWYVprJMLZa otQpT94oKC6ilso/P/qkwTDmKaG90AUOnaRt0g== -----END CERTIFICATE-----Generated at Wed Dec 3 17:36:18 2025 by rpki-client