This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/3130332e3136362e3132322e302f32332d3233203d3e20313431393435.roa File: 3130332e3136362e3132322e302f32332d3233203d3e20313431393435.roa (raw, json) Hash identifier: C7+rbLPo0B/cgVSkvwAdhCUpa719Bxq+aRwWMlLdIX8= Subject key identifier: 11:28:D9:66:6D:44:ED:03:91:8D:05:22:91:12:F6:2C:E0:3D:93:70 Certificate issuer: /CN=EFBA99D11F5C07B48EC639EB1119AB525D8050AF Certificate serial: 35B3CDD12188337A7D978D1ED8CF96F5782EC184 Authority key identifier: EF:BA:99:D1:1F:5C:07:B4:8E:C6:39:EB:11:19:AB:52:5D:80:50:AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/3130332e3136362e3132322e302f32332d3233203d3e20313431393435.roa Signing time: Wed 17 Sep 2025 07:02:58 +0000 ROA not before: Wed 17 Sep 2025 06:57:58 +0000 ROA not after: Wed 16 Sep 2026 07:02:58 +0000 asID: 141945 IP address blocks: 103.166.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.crl rsync://repo-rpki.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 17:43:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:b3:cd:d1:21:88:33:7a:7d:97:8d:1e:d8:cf:96:f5:78:2e:c1:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFBA99D11F5C07B48EC639EB1119AB525D8050AF Validity Not Before: Sep 17 06:57:58 2025 GMT Not After : Sep 16 07:02:58 2026 GMT Subject: CN=1128D9666D44ED03918D05229112F62CE03D9370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cc:7a:1a:5d:ce:09:ea:d1:a0:53:d4:7a:a1: 35:6f:32:5d:4e:53:7d:67:ce:15:f8:20:94:e8:f8: fd:df:3e:45:8b:ea:23:08:18:6a:e8:60:16:d1:e6: 3a:33:04:87:c4:af:66:ac:f7:da:86:fe:48:ca:9e: e1:5a:df:0d:e8:26:07:fa:94:6e:2a:dc:40:15:19: 27:fc:47:90:82:b3:cb:ab:d2:5f:38:ae:ab:7c:3a: 49:f7:3f:f7:0a:53:0b:25:c3:c6:61:ed:a0:50:50: ed:0f:20:15:5e:7c:1a:be:be:ef:65:f7:56:bf:ae: 9e:15:94:2d:f0:bd:05:2a:99:ec:db:2c:12:0f:a0: 38:92:6a:21:5c:bc:09:c2:55:cc:a4:b4:6c:9a:78: 7a:02:dc:e3:a9:ff:ca:53:03:55:d0:86:8e:fc:38: e6:e9:c9:e7:6e:7e:39:8d:95:ee:22:ae:a9:6b:23: 44:be:54:1b:ed:01:8a:57:8c:f7:3d:4c:0e:ab:5a: 2a:26:33:5f:ca:cd:74:59:c9:4f:be:b0:72:e8:3e: f4:6d:da:f4:0d:3e:46:69:41:f6:3a:97:2e:01:cc: af:39:e3:f7:6b:a0:aa:c1:35:49:83:78:6f:05:71: d4:d1:35:ea:dc:f4:fb:3d:59:60:34:f5:c9:08:d2: 0f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:28:D9:66:6D:44:ED:03:91:8D:05:22:91:12:F6:2C:E0:3D:93:70 X509v3 Authority Key Identifier: keyid:EF:BA:99:D1:1F:5C:07:B4:8E:C6:39:EB:11:19:AB:52:5D:80:50:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/3130332e3136362e3132322e302f32332d3233203d3e20313431393435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.122.0/23 Signature Algorithm: sha256WithRSAEncryption b6:98:15:ed:9f:c4:86:ac:83:7f:f7:f5:6f:c6:05:51:bd:d1: 77:3c:fc:a6:95:2b:c2:12:3c:e7:be:7f:f9:50:50:80:14:0e: f7:df:54:2d:fc:be:c2:4a:03:04:d3:5b:d8:d0:1b:f4:b8:4e: 43:06:41:e7:bf:9c:1e:32:d7:5e:36:ee:34:7c:c7:e3:d7:55: 5b:cb:28:9e:64:21:ce:c2:33:c9:9b:d6:1f:b7:60:55:96:46: 0b:62:f6:f4:21:54:18:e3:53:66:43:e2:2a:67:4f:4a:ef:4c: 91:5c:e3:59:8b:f6:51:d0:3a:8a:57:d2:55:e6:cc:95:4f:81: 77:31:1f:43:3a:7a:2b:ea:05:b0:77:f7:b3:97:74:c5:1f:1c: dd:05:27:61:9c:74:0c:d9:65:02:e5:a5:f5:8e:18:6a:2e:d7: 2a:e9:70:74:70:9a:7e:70:c0:51:67:01:37:7c:d8:62:20:8f: a5:ff:85:c3:f7:5b:ab:30:c1:f5:f6:58:f8:70:fe:a9:ea:4f: ef:44:4c:2a:ad:90:69:12:44:47:66:5f:ca:41:41:35:fa:61: d9:df:68:12:e5:67:6f:1d:1f:f0:c5:8d:73:88:b4:fe:83:2e: e5:9f:25:45:3e:f2:0c:6a:ef:53:92:d9:1e:f9:ad:bd:3a:b3: 67:be:d0:4b -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUNbPN0SGIM3p9l40e2M+W9XguwYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZCQTk5RDExRjVDMDdCNDhFQzYzOUVCMTExOUFCNTI1 RDgwNTBBRjAeFw0yNTA5MTcwNjU3NThaFw0yNjA5MTYwNzAyNThaMDMxMTAvBgNV BAMTKDExMjhEOTY2NkQ0NEVEMDM5MThEMDUyMjkxMTJGNjJDRTAzRDkzNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3zHoaXc4J6tGgU9R6oTVvMl1O U31nzhX4IJTo+P3fPkWL6iMIGGroYBbR5jozBIfEr2as99qG/kjKnuFa3w3oJgf6 lG4q3EAVGSf8R5CCs8ur0l84rqt8Okn3P/cKUwslw8Zh7aBQUO0PIBVefBq+vu9l 91a/rp4VlC3wvQUqmezbLBIPoDiSaiFcvAnCVcyktGyaeHoC3OOp/8pTA1XQho78 OObpyedufjmNle4irqlrI0S+VBvtAYpXjPc9TA6rWiomM1/KzXRZyU++sHLoPvRt 2vQNPkZpQfY6ly4BzK854/droKrBNUmDeG8FcdTRNerc9Ps9WWA09ckI0g/pAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUESjZZm1E7QORjQUikRL2LOA9k3AwHwYDVR0j BBgwFoAU77qZ0R9cB7SOxjnrERmrUl2AUK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NDNjYzZhOC1lN2FhLTRmMzctYmQwOC1mMmViNTdlODg3MzYvMC9FRkJBOTlEMTFG NUMwN0I0OEVDNjM5RUIxMTE5QUI1MjVEODA1MEFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZCQTk5RDExRjVDMDdCNDhFQzYzOUVCMTExOUFCNTI1RDgw NTBBRi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU0M2NjNmE4LWU3YWEtNGYzNy1i ZDA4LWYyZWI1N2U4ODczNi8wLzMxMzAzMzJlMzEzNjM2MmUzMTMyMzIyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzEzOTM0MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnpnowDQYJ KoZIhvcNAQELBQADggEBALaYFe2fxIasg3/39W/GBVG90Xc8/KaVK8ISPOe+f/lQ UIAUDvffVC38vsJKAwTTW9jQG/S4TkMGQee/nB4y11427jR8x+PXVVvLKJ5kIc7C M8mb1h+3YFWWRgti9vQhVBjjU2ZD4ipnT0rvTJFc41mL9lHQOopX0lXmzJVPgXcx H0M6eivqBbB397OXdMUfHN0FJ2GcdAzZZQLlpfWOGGou1yrpcHRwmn5wwFFnATd8 2GIgj6X/hcP3W6swwfX2WPhw/qnqT+9ETCqtkGkSREdmX8pBQTX6YdnfaBLlZ28d H/DFjXOItP6DLuWfJUU+8gxq71OS2R75rb06s2e+0Es= -----END CERTIFICATE-----Generated at Wed Dec 3 16:07:34 2025 by rpki-client