This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/3130332e3138352e35322e302f32332d3234203d3e20313339343536.roa File: 3130332e3138352e35322e302f32332d3234203d3e20313339343536.roa (raw, json) Hash identifier: HSvccbcXy7k9kPjMD6mXV/KFzh471F30ZXh1rABYDjw= Subject key identifier: 85:98:51:67:0E:6C:09:73:07:EA:47:7C:0D:FD:3F:76:1D:5A:44:83 Certificate issuer: /CN=DFE92467290F9E190072585C1045251D6F8B05A3 Certificate serial: 42E5DA52E5F522B63B96096B827F60BD2D92BABD Authority key identifier: DF:E9:24:67:29:0F:9E:19:00:72:58:5C:10:45:25:1D:6F:8B:05:A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/3130332e3138352e35322e302f32332d3234203d3e20313339343536.roa Signing time: Tue 09 Dec 2025 05:04:12 +0000 ROA not before: Tue 09 Dec 2025 04:59:12 +0000 ROA not after: Tue 08 Dec 2026 05:04:12 +0000 asID: 139456 IP address blocks: 103.185.52.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.crl rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 01:25:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:e5:da:52:e5:f5:22:b6:3b:96:09:6b:82:7f:60:bd:2d:92:ba:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFE92467290F9E190072585C1045251D6F8B05A3 Validity Not Before: Dec 9 04:59:12 2025 GMT Not After : Dec 8 05:04:12 2026 GMT Subject: CN=859851670E6C097307EA477C0DFD3F761D5A4483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:bd:d6:6b:ce:fc:9f:2b:13:89:09:25:1a:78: d3:7d:9d:34:df:9d:77:27:4d:5b:3d:34:aa:5a:13: 35:70:57:a3:24:d1:62:e3:af:14:c1:0a:ae:7a:cd: 39:a1:6a:cf:81:20:e5:cf:65:1f:80:40:2f:da:1e: 4c:ec:78:f2:d1:ea:2f:9e:b5:d8:42:58:ba:7d:ce: d2:3e:9d:88:8f:32:b7:34:18:c0:6c:42:9e:d0:b7: 89:1f:e3:b7:66:79:a0:43:70:ca:ad:16:8e:c2:59: ab:47:72:8d:e1:ec:d0:63:21:1b:77:27:68:13:6a: 61:fb:58:0d:ed:84:48:b4:3e:9c:5d:95:87:c4:fb: 49:6b:a2:31:e4:27:2f:ab:03:58:7f:98:ae:ec:54: 00:70:8d:d5:de:f0:e6:cf:8e:f6:f9:e3:35:39:53: ab:14:29:67:83:21:bb:9c:cc:93:bc:6b:65:d9:52: 35:5d:04:e7:51:30:96:a2:ed:8e:b7:e6:50:6a:57: f3:0e:06:19:07:90:aa:5f:17:ef:f5:f3:f8:5c:cf: 52:20:2e:0f:70:c1:66:10:fa:5f:99:82:82:9e:6f: 7e:6e:23:d8:6b:9d:a6:12:d3:8e:87:99:bd:42:d1: 3f:1d:c6:04:f6:56:57:57:71:c4:1a:32:35:29:78: 00:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:98:51:67:0E:6C:09:73:07:EA:47:7C:0D:FD:3F:76:1D:5A:44:83 X509v3 Authority Key Identifier: keyid:DF:E9:24:67:29:0F:9E:19:00:72:58:5C:10:45:25:1D:6F:8B:05:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/3130332e3138352e35322e302f32332d3234203d3e20313339343536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.185.52.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:56:a9:b9:96:13:07:71:6a:98:53:c6:1b:27:ae:62:b3:a2: bb:2a:da:1c:50:11:ee:97:65:51:1f:94:f2:07:59:53:69:1c: 50:10:33:96:d2:ce:43:2a:09:87:23:12:9d:2f:b7:32:bd:c2: d6:91:af:51:03:ce:f6:e5:26:9b:7b:21:37:a7:c1:e8:ae:82: b8:8b:5f:66:26:6d:cb:ed:79:f5:06:90:31:34:14:7c:00:7c: 09:95:1b:b0:ca:b4:ff:44:59:61:f0:9a:bf:d7:03:c2:e8:04: 0e:eb:e7:65:9f:3f:48:2d:5b:73:69:a9:b5:f0:24:66:e7:d7: 24:45:05:67:eb:31:ca:e5:e8:63:24:a6:3e:1e:0b:d1:fa:9c: 9a:df:c7:71:11:0b:05:7f:a5:64:18:b0:07:a1:c7:09:7c:66: 28:71:80:c0:aa:00:b7:a7:da:54:41:c6:c3:b7:45:24:a6:9e: b1:a8:f6:01:da:9f:3c:fa:98:d9:34:02:aa:19:68:1f:8a:d5: 93:f7:48:e8:39:a4:eb:be:83:42:25:b9:ea:8e:c1:e4:c4:96: 4e:db:7b:7d:13:74:aa:82:d6:98:eb:18:ed:3b:d2:35:c6:3c: 15:e1:65:f2:88:30:1e:0b:19:a2:b7:81:04:a7:91:a9:90:4c: ae:41:b9:ae -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUQuXaUuX1IrY7lglrgn9gvS2Sur0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZFOTI0NjcyOTBGOUUxOTAwNzI1ODVDMTA0NTI1MUQ2 RjhCMDVBMzAeFw0yNTEyMDkwNDU5MTJaFw0yNjEyMDgwNTA0MTJaMDMxMTAvBgNV BAMTKDg1OTg1MTY3MEU2QzA5NzMwN0VBNDc3QzBERkQzRjc2MUQ1QTQ0ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYvdZrzvyfKxOJCSUaeNN9nTTf nXcnTVs9NKpaEzVwV6Mk0WLjrxTBCq56zTmhas+BIOXPZR+AQC/aHkzsePLR6i+e tdhCWLp9ztI+nYiPMrc0GMBsQp7Qt4kf47dmeaBDcMqtFo7CWatHco3h7NBjIRt3 J2gTamH7WA3thEi0PpxdlYfE+0lrojHkJy+rA1h/mK7sVABwjdXe8ObPjvb54zU5 U6sUKWeDIbuczJO8a2XZUjVdBOdRMJai7Y635lBqV/MOBhkHkKpfF+/18/hcz1Ig Lg9wwWYQ+l+ZgoKeb35uI9hrnaYS046Hmb1C0T8dxgT2VldXccQaMjUpeAARAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUhZhRZw5sCXMH6kd8Df0/dh1aRIMwHwYDVR0j BBgwFoAU3+kkZykPnhkAclhcEEUlHW+LBaMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YzQ1NzRlMi0zYjk0LTQxNjAtOGViOC04ZjA5YWFkODJjMmMvMC9ERkU5MjQ2NzI5 MEY5RTE5MDA3MjU4NUMxMDQ1MjUxRDZGOEIwNUEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREZFOTI0NjcyOTBGOUUxOTAwNzI1ODVDMTA0NTI1MUQ2RjhC MDVBMy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZjNDU3NGUyLTNiOTQtNDE2MC04 ZWI4LThmMDlhYWQ4MmMyYy8wLzMxMzAzMzJlMzEzODM1MmUzNTMyMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzM5MzQzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7k0MA0GCSqG SIb3DQEBCwUAA4IBAQAdVqm5lhMHcWqYU8YbJ65is6K7KtocUBHul2VRH5TyB1lT aRxQEDOW0s5DKgmHIxKdL7cyvcLWka9RA8725SabeyE3p8HoroK4i19mJm3L7Xn1 BpAxNBR8AHwJlRuwyrT/RFlh8Jq/1wPC6AQO6+dlnz9ILVtzaam18CRm59ckRQVn 6zHK5ehjJKY+HgvR+pya38dxEQsFf6VkGLAHoccJfGYocYDAqgC3p9pUQcbDt0Uk pp6xqPYB2p88+pjZNAKqGWgfitWT90joOaTrvoNCJbnqjsHkxJZO23t9E3SqgtaY 6xjtO9I1xjwV4WXyiDAeCxmit4EEp5GpkEyuQbmu -----END CERTIFICATE-----Generated at Fri Dec 19 11:20:46 2025 by rpki-client