This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/3130332e3132392e36382e302f32332d3234203d3e20313335343738.roa File: 3130332e3132392e36382e302f32332d3234203d3e20313335343738.roa (raw, json) Hash identifier: g7r/RVB4oSYAg9bJf585oALndM8Pi1RvbkwVKzFMHo8= Subject key identifier: D8:58:10:4C:97:01:BD:0F:76:6F:1F:8C:3E:D2:E6:79:38:D6:14:7C Certificate issuer: /CN=CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A Certificate serial: 3AE21838FCD8396A9C44347D7CFA0C2D40CF7405 Authority key identifier: CB:B5:E8:D8:79:96:C4:89:7C:9F:5D:C0:CB:32:86:4F:4F:0C:5A:7A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/3130332e3132392e36382e302f32332d3234203d3e20313335343738.roa Signing time: Wed 05 Nov 2025 10:02:56 +0000 ROA not before: Wed 05 Nov 2025 09:57:56 +0000 ROA not after: Wed 04 Nov 2026 10:02:56 +0000 asID: 135478 IP address blocks: 103.129.68.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 02:51:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:e2:18:38:fc:d8:39:6a:9c:44:34:7d:7c:fa:0c:2d:40:cf:74:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A Validity Not Before: Nov 5 09:57:56 2025 GMT Not After : Nov 4 10:02:56 2026 GMT Subject: CN=D858104C9701BD0F766F1F8C3ED2E67938D6147C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:04:d2:5c:23:49:d3:11:06:97:98:fa:df:de: c8:2e:bd:03:04:aa:82:3b:06:06:24:d6:07:f3:9b: 70:1b:93:09:b8:75:c3:26:21:4c:55:fc:8a:e5:b0: 9c:eb:96:3c:dd:44:b3:e2:ab:ae:f9:19:a5:79:ca: f3:df:5f:dc:3a:36:98:43:e7:20:ff:c8:16:34:c0: 2b:7b:1f:f1:54:a2:34:5e:ef:c3:ba:dc:88:a4:f9: 06:63:b3:d5:b9:72:0c:b8:c4:a0:b2:04:99:5b:52: ae:f8:ba:92:72:46:0d:ee:7e:fe:b5:4e:92:63:f9: a1:68:f7:f5:7f:81:75:d8:d3:fd:2c:94:3e:7a:6e: af:68:19:7d:b6:1f:05:17:23:2b:7a:11:f5:35:5a: 53:bc:e6:3a:05:f3:61:a4:72:8b:e6:1a:ef:45:16: f8:a4:9b:8c:e6:f6:23:3f:01:ef:fa:32:e0:2d:94: 14:b4:95:8c:0f:7c:1a:73:75:70:58:12:5a:9b:33: 3f:6f:2f:66:be:8b:68:db:5b:13:3c:3f:84:d2:1a: 60:85:86:e8:37:a2:0c:db:c6:29:7e:9d:5f:15:df: 41:60:41:e6:92:2f:65:54:0c:bf:19:cb:fe:7f:aa: 50:2f:0c:22:d0:48:6c:9f:54:8c:ff:98:cc:44:5d: 08:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:58:10:4C:97:01:BD:0F:76:6F:1F:8C:3E:D2:E6:79:38:D6:14:7C X509v3 Authority Key Identifier: keyid:CB:B5:E8:D8:79:96:C4:89:7C:9F:5D:C0:CB:32:86:4F:4F:0C:5A:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/3130332e3132392e36382e302f32332d3234203d3e20313335343738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.129.68.0/23 Signature Algorithm: sha256WithRSAEncryption 51:dd:a5:be:8a:28:f0:38:32:47:eb:fa:70:e4:ea:c3:11:73: 17:e7:17:c3:a6:d3:8b:ea:2a:93:ec:2e:7d:19:10:db:c8:95: ad:dc:a2:89:27:fa:6b:af:a5:f8:31:f6:86:bb:26:e8:5e:2d: 39:63:03:63:77:3e:82:16:e6:39:52:a2:43:d0:c6:92:5d:73: d7:2d:a7:16:f2:61:c7:df:5e:66:94:9e:21:a0:d0:56:0e:1d: 5e:2c:8a:3b:2e:40:0c:e4:85:1e:c8:56:b2:d6:0e:c6:46:c7: 92:46:cb:4f:d6:13:40:29:87:3b:87:ce:eb:10:56:81:76:81: 03:b8:3c:9d:a0:85:a5:e9:e7:30:3e:53:27:9e:57:63:b2:d3: e4:17:f1:e1:45:a2:9b:96:30:c3:d6:2f:e6:dc:5d:14:65:8d: 7e:39:18:9b:53:ee:d0:29:ba:40:95:32:4b:13:72:da:b6:82: af:a3:82:f6:49:cb:b2:1a:74:c9:43:46:53:81:f5:f2:0b:60: 37:3e:21:02:aa:bf:1c:de:b6:46:b7:ba:3d:51:8f:0a:27:94: 71:75:97:a8:c9:4e:01:74:6f:06:03:47:99:9f:2a:bb:da:cd: 23:29:d6:99:b2:40:3e:77:81:e6:8c:c0:d2:42:60:cc:67:21: ec:44:34:0a -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUOuIYOPzYOWqcRDR9fPoMLUDPdAUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2NEY0 RjBDNUE3QTAeFw0yNTExMDUwOTU3NTZaFw0yNjExMDQxMDAyNTZaMDMxMTAvBgNV BAMTKEQ4NTgxMDRDOTcwMUJEMEY3NjZGMUY4QzNFRDJFNjc5MzhENjE0N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFBNJcI0nTEQaXmPrf3sguvQME qoI7BgYk1gfzm3Abkwm4dcMmIUxV/IrlsJzrljzdRLPiq675GaV5yvPfX9w6NphD 5yD/yBY0wCt7H/FUojRe78O63Iik+QZjs9W5cgy4xKCyBJlbUq74upJyRg3ufv61 TpJj+aFo9/V/gXXY0/0slD56bq9oGX22HwUXIyt6EfU1WlO85joF82GkcovmGu9F Fvikm4zm9iM/Ae/6MuAtlBS0lYwPfBpzdXBYElqbMz9vL2a+i2jbWxM8P4TSGmCF hug3ogzbxil+nV8V30FgQeaSL2VUDL8Zy/5/qlAvDCLQSGyfVIz/mMxEXQi1AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU2FgQTJcBvQ92bx+MPtLmeTjWFHwwHwYDVR0j BBgwFoAUy7Xo2HmWxIl8n13AyzKGT08MWnowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2Y2ZTU3Yi00YzI2LTQ0MmItOGFmYy0wMzI5ZWVkYWZiNzIvMC9DQkI1RThEODc5 OTZDNDg5N0M5RjVEQzBDQjMyODY0RjRGMEM1QTdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2NEY0RjBD NUE3QS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU3ZjZlNTdiLTRjMjYtNDQyYi04 YWZjLTAzMjllZWRhZmI3Mi8wLzMxMzAzMzJlMzEzMjM5MmUzNjM4MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzM1MzQzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ4FEMA0GCSqG SIb3DQEBCwUAA4IBAQBR3aW+iijwODJH6/pw5OrDEXMX5xfDptOL6iqT7C59GRDb yJWt3KKJJ/prr6X4MfaGuyboXi05YwNjdz6CFuY5UqJD0MaSXXPXLacW8mHH315m lJ4hoNBWDh1eLIo7LkAM5IUeyFay1g7GRseSRstP1hNAKYc7h87rEFaBdoEDuDyd oIWl6ecwPlMnnldjstPkF/HhRaKbljDD1i/m3F0UZY1+ORibU+7QKbpAlTJLE3La toKvo4L2ScuyGnTJQ0ZTgfXyC2A3PiECqr8c3rZGt7o9UY8KJ5RxdZeoyU4BdG8G A0eZnyq72s0jKdaZskA+d4HmjMDSQmDMZyHsRDQK -----END CERTIFICATE-----Generated at Wed Dec 3 11:48:32 2025 by rpki-client