This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/3130332e3134342e33382e302f32332d3233203d3e20313339343234.roa File: 3130332e3134342e33382e302f32332d3233203d3e20313339343234.roa (raw, json) Hash identifier: XP0ftXtJRKTRnMmM5RHfXvqivFStcWbbL9fTaa1lIQs= Subject key identifier: 93:F6:14:5E:A6:1C:6D:51:16:10:B0:10:73:24:8D:BA:E4:04:32:50 Certificate issuer: /CN=507DBCE0DE73C38C3EE975AE23FB7C0C0377011A Certificate serial: 3D8E9F0DC4FA897C5135FC16BB389298DC357FD6 Authority key identifier: 50:7D:BC:E0:DE:73:C3:8C:3E:E9:75:AE:23:FB:7C:0C:03:77:01:1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/3130332e3134342e33382e302f32332d3233203d3e20313339343234.roa Signing time: Tue 18 Nov 2025 10:02:11 +0000 ROA not before: Tue 18 Nov 2025 09:57:11 +0000 ROA not after: Tue 17 Nov 2026 10:02:11 +0000 asID: 139424 IP address blocks: 103.144.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.crl rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 11:36:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:8e:9f:0d:c4:fa:89:7c:51:35:fc:16:bb:38:92:98:dc:35:7f:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=507DBCE0DE73C38C3EE975AE23FB7C0C0377011A Validity Not Before: Nov 18 09:57:11 2025 GMT Not After : Nov 17 10:02:11 2026 GMT Subject: CN=93F6145EA61C6D511610B01073248DBAE4043250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f2:af:4d:11:94:ca:9b:42:3d:99:bf:32:5a: 85:56:0e:6b:a9:05:c2:0f:bb:ca:45:1d:52:c5:90: ac:36:0e:0a:a8:e2:31:45:af:5a:e2:a3:cd:bc:24: 6a:3b:fd:ae:35:e9:a4:19:fd:fd:b7:57:25:51:7a: 27:21:63:d8:e7:98:db:e4:fc:88:d4:77:1c:5c:00: bd:b7:38:d1:de:5a:4c:b4:a2:13:b4:a4:38:04:a7: c3:48:67:84:2f:64:34:9e:ba:8e:e1:ec:ce:c5:65: ba:cb:50:6d:e8:e8:fd:cf:1a:ee:4b:bd:d2:15:f8: a5:ce:66:ea:f0:24:5b:e1:50:dd:9f:ee:6e:2f:e7: ee:dd:36:cf:df:b8:4e:3d:a9:d6:af:53:39:5c:83: c2:71:57:92:bb:79:45:df:dd:1e:44:c2:73:f7:6f: 24:ee:fb:b1:51:16:19:0a:81:b9:b6:5b:f7:e4:40: 2f:91:c5:3d:c4:6c:f1:7b:32:79:fa:8b:f1:2d:d9: 27:c8:4e:e5:8a:dc:0f:b7:39:04:ab:38:96:5a:9f: 39:fe:e2:35:52:bd:68:5e:e2:77:d4:22:b8:38:14: 67:0f:41:9f:79:d6:0b:64:bf:d7:0d:4b:1c:90:56: 17:d4:4c:4d:79:38:46:6d:7b:0d:02:7d:e4:c4:83: 55:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:F6:14:5E:A6:1C:6D:51:16:10:B0:10:73:24:8D:BA:E4:04:32:50 X509v3 Authority Key Identifier: keyid:50:7D:BC:E0:DE:73:C3:8C:3E:E9:75:AE:23:FB:7C:0C:03:77:01:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/3130332e3134342e33382e302f32332d3233203d3e20313339343234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.144.38.0/23 Signature Algorithm: sha256WithRSAEncryption 05:c1:7f:1a:7a:75:2f:3f:3d:e5:3e:e8:3a:2f:25:46:c3:5f: cd:43:95:9d:2b:49:dd:6a:f9:22:f1:3e:39:42:d4:04:e2:34: 12:b1:ad:73:f7:ad:50:73:c4:eb:18:f6:d6:09:17:a7:2f:df: 12:57:2b:89:32:a7:1c:c4:1c:ab:1c:cd:49:f8:2e:4f:f3:54: 61:12:24:54:9b:bc:3e:12:09:82:7f:55:fe:29:40:5f:b4:5a: 52:a1:c1:b2:3f:f0:12:b6:7d:f5:42:5c:c3:2b:e1:75:af:f9: ad:c5:34:9c:53:f6:8c:d9:85:d4:65:98:fa:f5:8c:6b:25:5c: c2:fb:63:9f:6b:9a:0d:55:6f:21:70:10:54:fa:0a:5d:d8:79: 7c:00:f6:4a:17:02:2f:b1:9b:10:15:8d:12:bb:88:94:7d:9b: f0:d6:38:63:a8:46:a6:dd:77:11:48:32:f5:02:3e:93:b6:52: 67:63:e1:90:75:df:25:41:2a:ed:9c:56:68:e7:a5:b6:f1:84: 49:26:a0:44:8d:04:4d:26:ee:79:bd:82:68:5b:d1:b2:1d:51: 88:2f:ea:8f:b5:49:16:84:06:0a:dc:bb:28:74:43:d4:b1:99: 7f:6b:d5:94:51:0b:61:ff:a4:51:61:92:c4:c7:5c:3d:89:e7: e9:84:f7:8d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUPY6fDcT6iXxRNfwWuziSmNw1f9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA3REJDRTBERTczQzM4QzNFRTk3NUFFMjNGQjdDMEMw Mzc3MDExQTAeFw0yNTExMTgwOTU3MTFaFw0yNjExMTcxMDAyMTFaMDMxMTAvBgNV BAMTKDkzRjYxNDVFQTYxQzZENTExNjEwQjAxMDczMjQ4REJBRTQwNDMyNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr8q9NEZTKm0I9mb8yWoVWDmup BcIPu8pFHVLFkKw2Dgqo4jFFr1rio828JGo7/a416aQZ/f23VyVReichY9jnmNvk /IjUdxxcAL23ONHeWky0ohO0pDgEp8NIZ4QvZDSeuo7h7M7FZbrLUG3o6P3PGu5L vdIV+KXOZurwJFvhUN2f7m4v5+7dNs/fuE49qdavUzlcg8JxV5K7eUXf3R5EwnP3 byTu+7FRFhkKgbm2W/fkQC+RxT3EbPF7Mnn6i/Et2SfITuWK3A+3OQSrOJZanzn+ 4jVSvWhe4nfUIrg4FGcPQZ951gtkv9cNSxyQVhfUTE15OEZtew0CfeTEg1URAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUk/YUXqYcbVEWELAQcySNuuQEMlAwHwYDVR0j BBgwFoAUUH284N5zw4w+6XWuI/t8DAN3ARowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWIwYTU5YS02MWJhLTQ2MmUtYTgyYS1hMjAyYjdmYjgwZjAvMC81MDdEQkNFMERF NzNDMzhDM0VFOTc1QUUyM0ZCN0MwQzAzNzcwMTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTA3REJDRTBERTczQzM4QzNFRTk3NUFFMjNGQjdDMEMwMzc3 MDExQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVhYjBhNTlhLTYxYmEtNDYyZS1h ODJhLWEyMDJiN2ZiODBmMC8wLzMxMzAzMzJlMzEzNDM0MmUzMzM4MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzMzM5MzQzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5AmMA0GCSqG SIb3DQEBCwUAA4IBAQAFwX8aenUvPz3lPug6LyVGw1/NQ5WdK0ndavki8T45QtQE 4jQSsa1z961Qc8TrGPbWCRenL98SVyuJMqccxByrHM1J+C5P81RhEiRUm7w+EgmC f1X+KUBftFpSocGyP/AStn31QlzDK+F1r/mtxTScU/aM2YXUZZj69YxrJVzC+2Of a5oNVW8hcBBU+gpd2Hl8APZKFwIvsZsQFY0Su4iUfZvw1jhjqEam3XcRSDL1Aj6T tlJnY+GQdd8lQSrtnFZo56W28YRJJqBEjQRNJu55vYJoW9GyHVGIL+qPtUkWhAYK 3LsodEPUsZl/a9WUUQth/6RRYZLEx1w9iefphPeN -----END CERTIFICATE-----Generated at Wed Dec 3 16:53:03 2025 by rpki-client