This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/3130332e3135352e3230302e302f32332d3234203d3e20313431303733.roa File: 3130332e3135352e3230302e302f32332d3234203d3e20313431303733.roa (raw, json) Hash identifier: 9xklfE4ToaNUXHfz0ScOS9CrgCGo8s6jfw/9Yuz7c2I= Subject key identifier: E5:CB:84:4E:C8:A9:A8:A9:20:8B:39:0F:9A:2D:E3:62:7A:4E:6C:99 Certificate issuer: /CN=2D18956397FA6055A44153CABF07303FD6E55E44 Certificate serial: 3235DA40C99D48E825BF7B6AA9304A91A13B5426 Authority key identifier: 2D:18:95:63:97:FA:60:55:A4:41:53:CA:BF:07:30:3F:D6:E5:5E:44 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D18956397FA6055A44153CABF07303FD6E55E44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/3130332e3135352e3230302e302f32332d3234203d3e20313431303733.roa Signing time: Wed 03 Dec 2025 05:00:02 +0000 ROA not before: Wed 03 Dec 2025 04:55:02 +0000 ROA not after: Wed 02 Dec 2026 05:00:02 +0000 asID: 141073 IP address blocks: 103.155.200.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.crl rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D18956397FA6055A44153CABF07303FD6E55E44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 14:50:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:35:da:40:c9:9d:48:e8:25:bf:7b:6a:a9:30:4a:91:a1:3b:54:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D18956397FA6055A44153CABF07303FD6E55E44 Validity Not Before: Dec 3 04:55:02 2025 GMT Not After : Dec 2 05:00:02 2026 GMT Subject: CN=E5CB844EC8A9A8A9208B390F9A2DE3627A4E6C99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:5d:4e:af:c7:c5:19:e6:e1:4d:da:1e:f9:27: f7:2d:14:73:d0:38:eb:3f:4d:bf:1c:6d:12:2f:7c: 47:d5:62:37:5e:16:17:80:d0:de:9c:5b:32:e5:62: 49:44:7c:4a:1b:7d:ef:16:44:14:d2:19:61:0f:a3: 70:e3:90:a1:57:1c:c8:dc:0e:07:c4:e0:ea:10:32: c7:bc:4f:18:55:8d:f8:73:0f:9d:81:b2:17:c4:da: c9:1e:20:e1:3d:0f:af:2c:7d:c9:e1:3c:69:3c:63: c4:32:84:f5:08:46:be:05:10:40:5d:98:ed:49:94: 23:f9:79:11:6c:d3:44:65:1c:c7:7a:27:7f:c2:48: 03:06:0c:31:56:7a:be:a3:62:ee:56:2a:47:6f:b8: bd:3e:9b:20:fa:c2:9d:4a:24:f5:d0:9b:5b:ee:cc: a2:d8:9a:bd:b1:c8:b2:b9:be:10:7b:76:0f:cc:b1: 19:9a:8b:3e:5b:b1:46:fb:80:13:ad:18:8f:23:5c: ce:f6:d9:37:78:6f:86:af:2b:15:06:63:c5:70:d9: e8:4d:37:36:80:28:49:ae:06:af:79:41:e1:10:f6: 7c:6b:de:7c:31:f4:90:49:80:69:f5:0c:49:22:66: e2:08:dd:fc:0b:f3:0f:35:09:78:ba:c1:32:52:80: e9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:CB:84:4E:C8:A9:A8:A9:20:8B:39:0F:9A:2D:E3:62:7A:4E:6C:99 X509v3 Authority Key Identifier: keyid:2D:18:95:63:97:FA:60:55:A4:41:53:CA:BF:07:30:3F:D6:E5:5E:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D18956397FA6055A44153CABF07303FD6E55E44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/3130332e3135352e3230302e302f32332d3234203d3e20313431303733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.155.200.0/23 Signature Algorithm: sha256WithRSAEncryption ae:fb:90:e7:ab:59:d4:88:cf:d8:0f:3b:92:c8:45:01:33:bb: e9:dc:4c:45:eb:be:48:ae:f2:2c:f0:5b:c3:19:e3:59:57:0a: ab:6b:d1:f5:8f:38:10:b1:86:be:2f:0e:73:85:2a:0a:2e:4d: f0:a9:33:fc:36:87:f9:cf:e0:c9:85:9c:a2:84:11:d5:b2:4e: 37:44:ce:3d:75:92:5d:e3:f7:64:62:6c:0a:35:9f:73:0e:33: 15:26:fd:91:31:19:94:11:68:00:d4:3d:2a:e9:88:b0:73:83: 45:e5:0a:f0:d0:b6:a8:f3:35:da:18:87:1a:c9:97:c5:21:55: 1e:3d:9b:bc:c8:a1:ed:0e:93:92:4d:81:61:3f:a8:64:84:e2: 36:9f:7a:a0:5a:5c:b9:81:ef:74:a0:5c:31:34:a3:a7:fd:83: ec:86:74:4d:8d:31:f5:33:ad:a7:e0:3b:79:a1:80:c5:ad:15: 9b:55:27:90:65:9a:0d:71:d4:7c:ee:f0:5a:0a:0d:b4:12:f9: 67:87:d6:62:5e:ff:56:06:0f:11:71:83:cd:9d:3c:f5:30:bd: 59:73:b9:32:32:d0:13:a4:03:20:76:70:23:28:66:69:73:14: e5:4f:36:6b:5e:e0:8e:6e:6b:96:90:24:0d:98:1e:30:ae:c5: c0:bc:06:09 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUMjXaQMmdSOglv3tqqTBKkaE7VCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQxODk1NjM5N0ZBNjA1NUE0NDE1M0NBQkYwNzMwM0ZE NkU1NUU0NDAeFw0yNTEyMDMwNDU1MDJaFw0yNjEyMDIwNTAwMDJaMDMxMTAvBgNV BAMTKEU1Q0I4NDRFQzhBOUE4QTkyMDhCMzkwRjlBMkRFMzYyN0E0RTZDOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6XU6vx8UZ5uFN2h75J/ctFHPQ OOs/Tb8cbRIvfEfVYjdeFheA0N6cWzLlYklEfEobfe8WRBTSGWEPo3DjkKFXHMjc DgfE4OoQMse8TxhVjfhzD52BshfE2skeIOE9D68sfcnhPGk8Y8QyhPUIRr4FEEBd mO1JlCP5eRFs00RlHMd6J3/CSAMGDDFWer6jYu5WKkdvuL0+myD6wp1KJPXQm1vu zKLYmr2xyLK5vhB7dg/MsRmaiz5bsUb7gBOtGI8jXM722Td4b4avKxUGY8Vw2ehN NzaAKEmuBq95QeEQ9nxr3nwx9JBJgGn1DEkiZuII3fwL8w81CXi6wTJSgOl/AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU5cuETsipqKkgizkPmi3jYnpObJkwHwYDVR0j BBgwFoAULRiVY5f6YFWkQVPKvwcwP9blXkQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODU4Zjg1Yy1hNDU4LTRhNTgtYmJkZS00YmZiMzQzZGM0YjAvMC8yRDE4OTU2Mzk3 RkE2MDU1QTQ0MTUzQ0FCRjA3MzAzRkQ2RTU1RTQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQxODk1NjM5N0ZBNjA1NUE0NDE1M0NBQkYwNzMwM0ZENkU1 NUU0NC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ4NThmODVjLWE0NTgtNGE1OC1i YmRlLTRiZmIzNDNkYzRiMC8wLzMxMzAzMzJlMzEzNTM1MmUzMjMwMzAyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzEzMDM3MzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnm8gwDQYJ KoZIhvcNAQELBQADggEBAK77kOerWdSIz9gPO5LIRQEzu+ncTEXrvkiu8izwW8MZ 41lXCqtr0fWPOBCxhr4vDnOFKgouTfCpM/w2h/nP4MmFnKKEEdWyTjdEzj11kl3j 92RibAo1n3MOMxUm/ZExGZQRaADUPSrpiLBzg0XlCvDQtqjzNdoYhxrJl8UhVR49 m7zIoe0Ok5JNgWE/qGSE4jafeqBaXLmB73SgXDE0o6f9g+yGdE2NMfUzrafgO3mh gMWtFZtVJ5Blmg1x1Hzu8FoKDbQS+WeH1mJe/1YGDxFxg82dPPUwvVlzuTIy0BOk AyB2cCMoZmlzFOVPNmte4I5ua5aQJA2YHjCuxcC8Bgk= -----END CERTIFICATE-----Generated at Wed Dec 3 16:21:19 2025 by rpki-client