This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/3130332e3132392e32362e302f32332d3234203d3e20313335343738.roa File: 3130332e3132392e32362e302f32332d3234203d3e20313335343738.roa (raw, json) Hash identifier: Sbm29pNNDtrirUa5TWrnPomraWgx9d4wS4uCAUKgspQ= Subject key identifier: E9:71:E1:21:8B:09:20:B8:EB:58:C3:AD:0C:4F:58:C6:C4:F1:E4:34 Certificate issuer: /CN=532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F Certificate serial: 3B86A9B7AFCE5D2DACE7B6F166912BA6F1E583B3 Authority key identifier: 53:2A:4A:6E:A2:52:E9:D1:CF:F5:74:81:A5:A8:6B:35:CE:0D:D2:1F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/3130332e3132392e32362e302f32332d3234203d3e20313335343738.roa Signing time: Wed 05 Nov 2025 10:02:26 +0000 ROA not before: Wed 05 Nov 2025 09:57:26 +0000 ROA not after: Wed 04 Nov 2026 10:02:26 +0000 asID: 135478 IP address blocks: 103.129.26.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.crl rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:86:a9:b7:af:ce:5d:2d:ac:e7:b6:f1:66:91:2b:a6:f1:e5:83:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F Validity Not Before: Nov 5 09:57:26 2025 GMT Not After : Nov 4 10:02:26 2026 GMT Subject: CN=E971E1218B0920B8EB58C3AD0C4F58C6C4F1E434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:60:8f:fc:68:6e:c9:fa:79:04:38:b4:12:9a: 01:06:12:f4:78:33:1c:b5:89:d8:bc:26:b6:03:21: dc:51:27:94:1d:1e:89:d8:c4:13:c7:10:cb:3e:fb: ef:2b:b0:ca:54:24:80:e9:96:1b:43:f7:8f:21:d7: 0d:d9:de:4c:9d:bd:1c:90:c4:e8:fc:fb:d1:90:6e: b1:c5:db:8e:d3:dc:5e:9e:c4:00:42:ef:42:89:22: d0:69:f7:dc:63:e1:0b:9c:77:83:15:f8:b5:fb:08: e2:4c:c6:d2:58:07:53:00:92:ab:5e:b3:a9:56:03: f5:24:c8:39:46:2a:c0:51:b4:ec:14:96:00:30:60: 91:2e:39:26:0c:3c:2b:f2:1c:ed:09:92:86:52:12: f1:34:33:28:7e:28:c3:cd:90:7b:1b:dd:fc:81:45: 3c:67:05:cc:70:50:e1:ab:da:7b:aa:aa:0d:c3:88: df:db:3d:52:17:89:61:76:b3:62:92:b4:0b:99:57: 13:4e:69:1c:4f:57:ea:d4:4b:5f:c6:c8:88:71:08: 61:d8:7f:a7:e7:22:6d:24:ef:16:0c:d7:54:f9:69: c7:5f:7b:91:ca:bb:2c:90:98:ae:bd:cd:a8:5a:bd: 4a:ee:da:95:f7:a4:9b:84:2c:b5:68:f3:eb:42:48: 41:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:71:E1:21:8B:09:20:B8:EB:58:C3:AD:0C:4F:58:C6:C4:F1:E4:34 X509v3 Authority Key Identifier: keyid:53:2A:4A:6E:A2:52:E9:D1:CF:F5:74:81:A5:A8:6B:35:CE:0D:D2:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/3130332e3132392e32362e302f32332d3234203d3e20313335343738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.129.26.0/23 Signature Algorithm: sha256WithRSAEncryption 90:78:ca:a4:59:95:cd:9d:be:cc:cb:c8:a6:0c:90:fd:6c:df: 73:37:a6:17:f1:89:0d:c9:48:2c:37:68:0e:00:8c:c7:e3:b2: dd:8a:b6:c8:9e:32:41:67:09:1f:3a:7f:cf:a5:aa:25:63:0a: 5b:6b:21:ce:e5:2f:68:c3:0e:25:ad:8b:25:c8:89:fc:a7:e4: f2:4d:9b:59:e8:70:24:ca:4a:a7:ce:d8:b6:f3:2d:d0:e9:72: dc:02:a0:11:c6:5e:0a:de:a5:79:e6:46:95:95:2e:58:c0:08: af:ce:54:ce:a8:07:53:67:bf:a0:21:f2:13:17:e2:9f:5c:13: 82:ac:86:a0:84:b1:40:45:a7:61:f0:da:9d:c2:4d:3b:08:77: 56:92:07:a6:82:e5:af:03:b6:be:fa:60:03:f4:53:0b:91:29: fa:a9:36:84:3b:ed:f6:09:9f:99:1c:e7:b0:6f:9a:21:fb:e9: 46:d8:6a:f5:9c:17:39:a7:ae:72:54:ae:6e:c7:96:b5:fb:78: f6:91:15:62:15:d5:e4:6e:bf:63:f3:e1:89:cf:b8:9a:50:f4: bd:25:bf:c3:aa:e1:8b:58:ea:1b:fb:49:12:2a:c8:7c:11:12: 2f:c8:89:f5:e2:db:1d:85:3d:d5:27:28:dd:cd:65:2b:a4:1c: be:e7:73:f6 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUO4apt6/OXS2s57bxZpErpvHlg7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyQTRBNkVBMjUyRTlEMUNGRjU3NDgxQTVBODZCMzVD RTBERDIxRjAeFw0yNTExMDUwOTU3MjZaFw0yNjExMDQxMDAyMjZaMDMxMTAvBgNV BAMTKEU5NzFFMTIxOEIwOTIwQjhFQjU4QzNBRDBDNEY1OEM2QzRGMUU0MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXYI/8aG7J+nkEOLQSmgEGEvR4 Mxy1idi8JrYDIdxRJ5QdHonYxBPHEMs+++8rsMpUJIDplhtD948h1w3Z3kydvRyQ xOj8+9GQbrHF247T3F6exABC70KJItBp99xj4Qucd4MV+LX7COJMxtJYB1MAkqte s6lWA/UkyDlGKsBRtOwUlgAwYJEuOSYMPCvyHO0JkoZSEvE0Myh+KMPNkHsb3fyB RTxnBcxwUOGr2nuqqg3DiN/bPVIXiWF2s2KStAuZVxNOaRxPV+rUS1/GyIhxCGHY f6fnIm0k7xYM11T5acdfe5HKuyyQmK69zahavUru2pX3pJuELLVo8+tCSEETAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU6XHhIYsJILjrWMOtDE9YxsTx5DQwHwYDVR0j BBgwFoAUUypKbqJS6dHP9XSBpahrNc4N0h8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 N2RmMmFkMC02ZTk5LTQ0YTctYTA2OC01MDA2NTZmZmIwMGYvMC81MzJBNEE2RUEy NTJFOUQxQ0ZGNTc0ODFBNUE4NkIzNUNFMEREMjFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTMyQTRBNkVBMjUyRTlEMUNGRjU3NDgxQTVBODZCMzVDRTBE RDIxRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ3ZGYyYWQwLTZlOTktNDRhNy1h MDY4LTUwMDY1NmZmYjAwZi8wLzMxMzAzMzJlMzEzMjM5MmUzMjM2MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzM1MzQzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ4EaMA0GCSqG SIb3DQEBCwUAA4IBAQCQeMqkWZXNnb7My8imDJD9bN9zN6YX8YkNyUgsN2gOAIzH 47LdirbInjJBZwkfOn/PpaolYwpbayHO5S9oww4lrYslyIn8p+TyTZtZ6HAkykqn zti28y3Q6XLcAqARxl4K3qV55kaVlS5YwAivzlTOqAdTZ7+gIfITF+KfXBOCrIag hLFARadh8Nqdwk07CHdWkgemguWvA7a++mAD9FMLkSn6qTaEO+32CZ+ZHOewb5oh ++lG2Gr1nBc5p65yVK5ux5a1+3j2kRViFdXkbr9j8+GJz7iaUPS9Jb/DquGLWOob +0kSKsh8ERIvyIn14tsdhT3VJyjdzWUrpBy+53P2 -----END CERTIFICATE-----Generated at Wed Dec 3 11:48:29 2025 by rpki-client