This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3130332e3234372e3234352e302f32342d3234203d3e203435323938.roa File: 3130332e3234372e3234352e302f32342d3234203d3e203435323938.roa (raw, json) Hash identifier: bHqpsq84uIhoWcWxe7oYJq3JF/6gomerkmgGc5KSkIk= Subject key identifier: A3:4C:D1:D3:1E:80:AA:1D:8F:F0:E7:92:00:99:6B:A0:AA:94:00:56 Certificate issuer: /CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE Certificate serial: 183EE4CB899992977D59003200F30F99392910B5 Authority key identifier: 1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3130332e3234372e3234352e302f32342d3234203d3e203435323938.roa Signing time: Wed 05 Nov 2025 14:00:01 +0000 ROA not before: Wed 05 Nov 2025 13:55:01 +0000 ROA not after: Wed 04 Nov 2026 14:00:01 +0000 asID: 45298 IP address blocks: 103.247.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 11:29:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:3e:e4:cb:89:99:92:97:7d:59:00:32:00:f3:0f:99:39:29:10:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE Validity Not Before: Nov 5 13:55:01 2025 GMT Not After : Nov 4 14:00:01 2026 GMT Subject: CN=A34CD1D31E80AA1D8FF0E79200996BA0AA940056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1c:da:63:24:69:ea:0c:58:7c:35:a5:8b:2b: f4:64:2f:3d:ac:03:02:d2:9d:87:d6:60:3a:cb:50: fc:e3:79:af:d9:b8:1a:2d:8f:1c:06:64:79:3a:7c: 5f:ee:0e:b1:12:a7:dc:76:bc:c5:ac:4b:9e:cf:cc: 62:97:4d:12:46:7a:58:6d:58:67:41:7c:ad:c9:55: 60:4d:1e:93:47:87:b0:2f:98:10:3c:e8:e4:dd:a6: a9:20:47:4c:34:a4:be:46:86:a4:e3:7c:74:4a:da: df:71:15:34:e6:b7:0b:ef:0c:3a:4f:bd:3f:e9:14: 42:32:ab:4f:34:6c:38:5f:e7:c0:2c:86:0f:8b:42: 58:cb:77:cd:22:ae:b3:71:09:8a:25:7e:45:dc:0a: 51:1f:c3:a2:ff:1e:d1:50:e8:82:c6:9d:f3:d7:6e: 9d:ab:00:3f:34:f5:81:0a:98:a2:5a:9c:0a:c8:1f: 3d:d5:66:dd:7f:76:97:e9:54:0d:08:cc:db:39:8b: 29:76:28:e2:c4:c8:3c:58:da:3c:cd:80:3d:5f:74: 38:2e:bc:76:1f:b6:d4:6e:dd:fe:dc:86:f3:31:83: 60:99:3f:af:00:89:b9:25:7d:87:c3:d9:2d:ce:86: 0d:0a:17:69:76:41:59:82:bc:e9:6c:6d:c0:b6:62: 2b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:4C:D1:D3:1E:80:AA:1D:8F:F0:E7:92:00:99:6B:A0:AA:94:00:56 X509v3 Authority Key Identifier: keyid:1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3130332e3234372e3234352e302f32342d3234203d3e203435323938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.247.245.0/24 Signature Algorithm: sha256WithRSAEncryption 72:30:85:d1:6d:b1:8c:e5:24:a9:cd:04:d1:0e:5f:55:89:8f: 3b:76:e2:78:b4:5a:03:e1:d3:b4:51:26:f9:c1:1c:69:08:75: ed:44:d3:e8:b9:07:1c:d9:72:fe:99:1a:65:fa:92:5a:6e:ce: 29:cb:96:69:8c:51:cc:b2:51:ff:06:10:73:31:66:3b:7a:fe: 92:b5:43:c6:07:71:76:04:bc:da:6c:be:4c:6d:87:e8:a2:94: 46:7b:4b:36:dd:3b:27:1c:41:9c:cb:21:a7:f3:71:bb:e9:da: 11:8b:0f:ad:73:6b:9d:6a:34:48:81:57:69:8b:9c:09:9c:b0: 95:34:77:aa:2b:12:95:d9:dd:8c:bf:8d:06:ab:2e:b4:e2:1f: 66:47:f8:5e:92:db:03:8d:20:c7:3a:8f:92:0b:3c:b3:91:0f: ab:eb:c9:c5:45:88:b6:b1:02:93:b2:b4:ff:d2:fb:61:6e:c0: ec:bf:58:70:dc:94:95:a3:14:f8:cf:c8:08:9a:23:bc:b3:3e: 8d:8e:47:52:4b:03:98:c7:8e:bc:b1:e1:34:6f:b4:4e:17:e9: c9:fd:ec:80:c6:2e:73:82:f4:39:d3:fe:c3:c7:74:9b:87:71: 93:4a:a4:fc:f9:26:67:b8:40:7f:ed:08:7f:5a:cd:65:dd:6b: 62:1c:94:6e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUGD7ky4mZkpd9WQAyAPMPmTkpELUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFENTk3RDM0MDNGQkQxMzdDODE0MjlFM0RFNkQ4N0JD ODg2RjFERTAeFw0yNTExMDUxMzU1MDFaFw0yNjExMDQxNDAwMDFaMDMxMTAvBgNV BAMTKEEzNENEMUQzMUU4MEFBMUQ4RkYwRTc5MjAwOTk2QkEwQUE5NDAwNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6HNpjJGnqDFh8NaWLK/RkLz2s AwLSnYfWYDrLUPzjea/ZuBotjxwGZHk6fF/uDrESp9x2vMWsS57PzGKXTRJGelht WGdBfK3JVWBNHpNHh7AvmBA86OTdpqkgR0w0pL5GhqTjfHRK2t9xFTTmtwvvDDpP vT/pFEIyq080bDhf58Ashg+LQljLd80irrNxCYolfkXcClEfw6L/HtFQ6ILGnfPX bp2rAD809YEKmKJanArIHz3VZt1/dpfpVA0IzNs5iyl2KOLEyDxY2jzNgD1fdDgu vHYfttRu3f7chvMxg2CZP68AibklfYfD2S3Ohg0KF2l2QVmCvOlsbcC2Yis5AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUo0zR0x6Aqh2P8OeSAJlroKqUAFYwHwYDVR0j BBgwFoAUGtWX00A/vRN8gUKePebYe8iG8d4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NWVjMjVlNC05YWE4LTRiZWYtOTA5Ny1jMGJlYzBiMjY2YTcvMC8xQUQ1OTdEMzQw M0ZCRDEzN0M4MTQyOUUzREU2RDg3QkM4ODZGMURFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUFENTk3RDM0MDNGQkQxMzdDODE0MjlFM0RFNkQ4N0JDODg2 RjFERS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY1ZWMyNWU0LTlhYTgtNGJlZi05 MDk3LWMwYmVjMGIyNjZhNy8wLzMxMzAzMzJlMzIzNDM3MmUzMjM0MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM1MzIzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ/f1MA0GCSqG SIb3DQEBCwUAA4IBAQByMIXRbbGM5SSpzQTRDl9ViY87duJ4tFoD4dO0USb5wRxp CHXtRNPouQcc2XL+mRpl+pJabs4py5ZpjFHMslH/BhBzMWY7ev6StUPGB3F2BLza bL5MbYfoopRGe0s23TsnHEGcyyGn83G76doRiw+tc2udajRIgVdpi5wJnLCVNHeq KxKV2d2Mv40Gqy604h9mR/hektsDjSDHOo+SCzyzkQ+r68nFRYi2sQKTsrT/0vth bsDsv1hw3JSVoxT4z8gImiO8sz6NjkdSSwOYx468seE0b7ROF+nJ/eyAxi5zgvQ5 0/7Dx3Sbh3GTSqT8+SZnuEB/7Qh/Ws1l3WtiHJRu -----END CERTIFICATE-----Generated at Wed Dec 3 15:49:05 2025 by rpki-client