This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/3130332e3132312e3134342e302f32332d3234203d3e20313335343738.roa File: 3130332e3132312e3134342e302f32332d3234203d3e20313335343738.roa (raw, json) Hash identifier: +CdAlYM7nun1wI/1nBpguFrXp8lMNDu4i4cocPNWO9s= Subject key identifier: 07:45:F9:83:5A:4D:19:9C:00:17:25:97:96:F5:E9:30:AC:14:4C:D6 Certificate issuer: /CN=D714F468978E86AB39DC1CFD7B22A6CED936605D Certificate serial: 16E521169C5DB2881910259C0D19AE19519F7DE3 Authority key identifier: D7:14:F4:68:97:8E:86:AB:39:DC:1C:FD:7B:22:A6:CE:D9:36:60:5D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D714F468978E86AB39DC1CFD7B22A6CED936605D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/3130332e3132312e3134342e302f32332d3234203d3e20313335343738.roa Signing time: Wed 05 Nov 2025 10:02:59 +0000 ROA not before: Wed 05 Nov 2025 09:57:59 +0000 ROA not after: Wed 04 Nov 2026 10:02:59 +0000 asID: 135478 IP address blocks: 103.121.144.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.crl rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D714F468978E86AB39DC1CFD7B22A6CED936605D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 23:52:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:e5:21:16:9c:5d:b2:88:19:10:25:9c:0d:19:ae:19:51:9f:7d:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D714F468978E86AB39DC1CFD7B22A6CED936605D Validity Not Before: Nov 5 09:57:59 2025 GMT Not After : Nov 4 10:02:59 2026 GMT Subject: CN=0745F9835A4D199C0017259796F5E930AC144CD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:35:1d:20:bd:d6:4c:5c:63:b8:25:ce:2b:b3: 23:24:2a:73:4c:d4:5d:af:41:10:0f:d5:f7:db:91: ff:49:e5:4f:c5:4d:18:89:7f:32:a6:0d:97:29:4f: e9:88:ad:09:b2:ce:1e:26:f4:54:90:0f:ed:7b:71: 3a:79:7a:e4:22:cf:f8:36:5d:46:fd:bd:7e:62:7c: ff:d3:b3:49:94:13:b4:59:d3:0b:bd:ea:a9:9b:a8: 0b:8e:75:5b:fd:d0:ce:d9:6c:5b:28:14:bf:31:b0: 24:0e:c5:80:77:78:a7:5d:98:74:e9:59:f6:5c:c4: 48:aa:f0:53:de:e3:0a:50:df:f9:81:e5:6b:6e:e7: 91:d0:a8:78:61:11:71:d2:64:28:43:42:24:e5:7f: e1:d4:2c:33:f0:4b:be:ae:a0:52:61:1f:80:43:12: 6a:3b:b7:c2:36:e8:b4:5b:10:74:9a:c2:c1:d7:03: 58:84:31:c7:ae:1e:d5:73:5d:65:9d:0a:f9:4f:cf: f5:8a:0e:83:d0:87:e3:e1:ea:3d:93:74:54:f1:b0: 51:22:d0:bf:e2:6e:97:01:30:6a:a5:b2:1f:7c:6b: e8:0b:d5:35:ed:13:e4:63:42:12:ea:a1:7b:6b:25: 3c:80:43:78:1a:92:d3:b1:69:a2:a5:28:88:d2:bf: c7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:45:F9:83:5A:4D:19:9C:00:17:25:97:96:F5:E9:30:AC:14:4C:D6 X509v3 Authority Key Identifier: keyid:D7:14:F4:68:97:8E:86:AB:39:DC:1C:FD:7B:22:A6:CE:D9:36:60:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D714F468978E86AB39DC1CFD7B22A6CED936605D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/3130332e3132312e3134342e302f32332d3234203d3e20313335343738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.121.144.0/23 Signature Algorithm: sha256WithRSAEncryption 32:9d:0d:8a:1b:cc:b5:5d:d1:c2:0c:94:74:47:f1:de:ea:ec: 2b:16:1e:0c:61:b8:35:2a:8c:94:3f:46:bd:c8:5a:7d:71:c0: 3c:c4:3d:0c:d4:a1:d4:4e:72:fe:22:b2:c1:9b:e0:39:99:e0: 83:0c:cc:37:67:c3:cf:98:bc:bf:4d:b0:c7:75:1d:43:ee:a0: 33:48:ee:d6:f8:3a:06:ca:cf:cf:78:5b:49:a5:68:e7:df:6f: 3f:ad:c6:6d:d9:b5:e0:14:ed:76:8f:54:5b:07:2e:5a:45:58: 58:cb:40:07:a8:33:97:af:9b:9c:93:f1:21:3f:10:0e:96:ae: 96:b0:73:11:c9:df:91:07:28:88:55:50:d9:e7:6e:9d:2e:43: 11:cf:b4:99:9a:7c:c1:21:98:49:b2:01:55:51:ca:31:13:36: bf:d6:62:78:72:d1:d5:ba:5f:bf:07:76:b6:88:ce:2d:cb:12: 2c:bc:18:e1:47:1e:37:84:98:64:f9:56:70:65:c0:89:c6:89: c5:1e:5e:63:ed:c9:48:b8:25:1a:db:90:a0:91:34:a9:42:17: 5c:55:0a:89:d5:58:ed:97:5c:91:db:1c:2d:aa:87:ec:34:e4: 99:76:82:56:34:07:d8:87:6a:cd:06:31:a7:a0:c8:c8:e9:b3: 95:94:2a:00 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUFuUhFpxdsogZECWcDRmuGVGffeMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDcxNEY0Njg5NzhFODZBQjM5REMxQ0ZEN0IyMkE2Q0VE OTM2NjA1RDAeFw0yNTExMDUwOTU3NTlaFw0yNjExMDQxMDAyNTlaMDMxMTAvBgNV BAMTKDA3NDVGOTgzNUE0RDE5OUMwMDE3MjU5Nzk2RjVFOTMwQUMxNDRDRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuNR0gvdZMXGO4Jc4rsyMkKnNM 1F2vQRAP1ffbkf9J5U/FTRiJfzKmDZcpT+mIrQmyzh4m9FSQD+17cTp5euQiz/g2 XUb9vX5ifP/Ts0mUE7RZ0wu96qmbqAuOdVv90M7ZbFsoFL8xsCQOxYB3eKddmHTp WfZcxEiq8FPe4wpQ3/mB5Wtu55HQqHhhEXHSZChDQiTlf+HULDPwS76uoFJhH4BD Emo7t8I26LRbEHSawsHXA1iEMceuHtVzXWWdCvlPz/WKDoPQh+Ph6j2TdFTxsFEi 0L/ibpcBMGqlsh98a+gL1TXtE+RjQhLqoXtrJTyAQ3gaktOxaaKlKIjSv8cfAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUB0X5g1pNGZwAFyWXlvXpMKwUTNYwHwYDVR0j BBgwFoAU1xT0aJeOhqs53Bz9eyKmztk2YF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MWUwMDc3OS00YTM5LTQ3ZjAtODMzOC00NGY4OGMyOTE3MDYvMC9ENzE0RjQ2ODk3 OEU4NkFCMzlEQzFDRkQ3QjIyQTZDRUQ5MzY2MDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDcxNEY0Njg5NzhFODZBQjM5REMxQ0ZEN0IyMkE2Q0VEOTM2 NjA1RC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUxZTAwNzc5LTRhMzktNDdmMC04 MzM4LTQ0Zjg4YzI5MTcwNi8wLzMxMzAzMzJlMzEzMjMxMmUzMTM0MzQyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzUzNDM3Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFneZAwDQYJ KoZIhvcNAQELBQADggEBADKdDYobzLVd0cIMlHRH8d7q7CsWHgxhuDUqjJQ/Rr3I Wn1xwDzEPQzUodROcv4issGb4DmZ4IMMzDdnw8+YvL9NsMd1HUPuoDNI7tb4OgbK z894W0mlaOffbz+txm3ZteAU7XaPVFsHLlpFWFjLQAeoM5evm5yT8SE/EA6Wrpaw cxHJ35EHKIhVUNnnbp0uQxHPtJmafMEhmEmyAVVRyjETNr/WYnhy0dW6X78HdraI zi3LEiy8GOFHHjeEmGT5VnBlwInGicUeXmPtyUi4JRrbkKCRNKlCF1xVConVWO2X XJHbHC2qh+w05Jl2glY0B9iHas0GMaegyMjps5WUKgA= -----END CERTIFICATE-----Generated at Wed Dec 3 11:48:53 2025 by rpki-client