This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/3130332e38302e3233302e302f32342d3234203d3e20313531353832.roa File: 3130332e38302e3233302e302f32342d3234203d3e20313531353832.roa (raw, json) Hash identifier: enORB7AQ2Y+42S5HE1FDggaW6vwKU8hKfiqSx3+Dqyk= Subject key identifier: A7:21:F0:63:78:8D:0F:5B:C3:4D:CE:EF:C6:E3:26:40:F2:93:90:8A Certificate issuer: /CN=28719EEFA340A5EDEDE0078C4CB48497B36F3AD6 Certificate serial: 40AA3F7B00B1716D89AA4AD43419784B0EB6DCDF Authority key identifier: 28:71:9E:EF:A3:40:A5:ED:ED:E0:07:8C:4C:B4:84:97:B3:6F:3A:D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/3130332e38302e3233302e302f32342d3234203d3e20313531353832.roa Signing time: Thu 27 Nov 2025 06:00:01 +0000 ROA not before: Thu 27 Nov 2025 05:55:01 +0000 ROA not after: Thu 26 Nov 2026 06:00:01 +0000 asID: 151582 IP address blocks: 103.80.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 18:03:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:aa:3f:7b:00:b1:71:6d:89:aa:4a:d4:34:19:78:4b:0e:b6:dc:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28719EEFA340A5EDEDE0078C4CB48497B36F3AD6 Validity Not Before: Nov 27 05:55:01 2025 GMT Not After : Nov 26 06:00:01 2026 GMT Subject: CN=A721F063788D0F5BC34DCEEFC6E32640F293908A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:96:e8:75:c8:9b:d4:64:4a:6e:54:c9:49:c4: 05:08:2e:ae:25:b1:8e:80:ea:a8:1a:79:e1:2b:a6: 50:41:a5:85:8e:31:15:37:93:32:32:90:e4:50:68: f6:f1:2e:5f:94:13:7a:ba:36:92:6c:bf:aa:b2:37: 6c:44:ea:97:24:18:d4:44:64:6e:3c:85:26:20:e2: 1b:ec:db:23:d4:33:7e:34:86:42:b6:d8:16:d6:51: 28:43:61:34:d8:a7:c6:af:89:c4:40:d0:74:f5:e3: 8f:ca:77:b7:94:bf:3b:f4:a7:f7:c6:3b:21:1f:e8: 3c:0a:e7:11:9e:a7:60:18:23:ff:26:99:10:a7:0d: 14:cf:18:0d:d5:4a:79:2f:54:9c:74:66:85:0d:63: c6:77:cc:8b:4c:ab:8b:4c:0e:2d:5b:22:8c:f3:d2: 09:ea:7e:b0:80:3d:39:45:0a:a4:13:59:6c:f7:35: 32:82:24:22:66:e5:4b:20:13:41:3e:34:cd:bd:8a: 92:7a:6f:78:aa:e3:d0:ff:f4:6d:9a:dd:70:75:72: 78:fe:59:1c:e3:3f:64:7e:bd:8b:82:d5:b1:e1:55: a2:82:38:4f:e5:30:ee:e0:b9:c0:88:ce:63:2d:53: a4:ad:e7:a9:f3:e2:85:e8:b5:05:b2:71:b5:ba:6a: 24:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:21:F0:63:78:8D:0F:5B:C3:4D:CE:EF:C6:E3:26:40:F2:93:90:8A X509v3 Authority Key Identifier: keyid:28:71:9E:EF:A3:40:A5:ED:ED:E0:07:8C:4C:B4:84:97:B3:6F:3A:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/3130332e38302e3233302e302f32342d3234203d3e20313531353832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.80.230.0/24 Signature Algorithm: sha256WithRSAEncryption 81:13:50:7c:08:b6:03:5a:e6:33:9b:ab:98:ad:ed:00:89:e2: 02:14:d1:41:3f:31:cc:5a:9f:80:60:c0:18:e5:af:85:65:60: 3c:e0:73:a8:a0:07:90:2b:ff:6a:cc:f2:c6:32:05:12:d1:3d: 2c:48:e2:7f:bb:c7:1d:5f:aa:14:f9:27:f3:54:5d:ff:b3:72: a8:e9:37:3c:dd:99:c0:e3:3f:73:8d:46:2e:fb:be:ab:bd:f0: da:9b:4f:83:2a:27:c3:13:08:ac:d0:34:ab:e6:08:f6:8d:7b: 45:da:08:c4:5f:64:36:86:96:7d:46:d3:2f:c6:9e:12:53:92: 61:93:7d:04:db:87:1a:ce:9b:4c:67:35:0c:7d:a5:4b:43:38: 3f:26:6e:3e:37:73:1c:13:a3:af:eb:2b:e4:3a:79:b5:6c:5b: a8:be:d9:37:ac:46:a2:78:40:66:47:e0:90:4a:c6:22:ef:f3: 94:6f:b8:69:32:e0:f5:34:97:36:eb:8a:12:6a:a1:64:25:dc: 4e:d4:55:23:54:1a:98:94:a7:cb:58:14:ff:52:cb:3d:01:53: c5:2f:f6:b9:c9:36:13:fb:28:04:10:ac:0d:7b:96:1a:05:dd: bb:bd:99:e2:5b:6d:43:39:14:52:ca:c9:22:a4:ab:56:1a:1e: 4a:ac:d9:0e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUQKo/ewCxcW2JqkrUNBl4Sw623N8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0OTdC MzZGM0FENjAeFw0yNTExMjcwNTU1MDFaFw0yNjExMjYwNjAwMDFaMDMxMTAvBgNV BAMTKEE3MjFGMDYzNzg4RDBGNUJDMzREQ0VFRkM2RTMyNjQwRjI5MzkwOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBluh1yJvUZEpuVMlJxAUILq4l sY6A6qgaeeErplBBpYWOMRU3kzIykORQaPbxLl+UE3q6NpJsv6qyN2xE6pckGNRE ZG48hSYg4hvs2yPUM340hkK22BbWUShDYTTYp8avicRA0HT144/Kd7eUvzv0p/fG OyEf6DwK5xGep2AYI/8mmRCnDRTPGA3VSnkvVJx0ZoUNY8Z3zItMq4tMDi1bIozz 0gnqfrCAPTlFCqQTWWz3NTKCJCJm5UsgE0E+NM29ipJ6b3iq49D/9G2a3XB1cnj+ WRzjP2R+vYuC1bHhVaKCOE/lMO7gucCIzmMtU6St56nz4oXotQWycbW6aiSTAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUpyHwY3iND1vDTc7vxuMmQPKTkIowHwYDVR0j BBgwFoAUKHGe76NApe3t4AeMTLSEl7NvOtYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDFlODIyMy1jYzY4LTQxMGUtYjY3Yi05Yjg4MjViNWNkNWYvMC8yODcxOUVFRkEz NDBBNUVERURFMDA3OEM0Q0I0ODQ5N0IzNkYzQUQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0OTdCMzZG M0FENi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc0MWU4MjIzLWNjNjgtNDEwZS1i NjdiLTliODgyNWI1Y2Q1Zi8wLzMxMzAzMzJlMzgzMDJlMzIzMzMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMxMzUzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ1DmMA0GCSqG SIb3DQEBCwUAA4IBAQCBE1B8CLYDWuYzm6uYre0AieICFNFBPzHMWp+AYMAY5a+F ZWA84HOooAeQK/9qzPLGMgUS0T0sSOJ/u8cdX6oU+SfzVF3/s3Ko6Tc83ZnA4z9z jUYu+76rvfDam0+DKifDEwis0DSr5gj2jXtF2gjEX2Q2hpZ9RtMvxp4SU5Jhk30E 24cazptMZzUMfaVLQzg/Jm4+N3McE6Ov6yvkOnm1bFuovtk3rEaieEBmR+CQSsYi 7/OUb7hpMuD1NJc264oSaqFkJdxO1FUjVBqYlKfLWBT/Uss9AVPFL/a5yTYT+ygE EKwNe5YaBd27vZniW21DORRSyskipKtWGh5KrNkO -----END CERTIFICATE-----Generated at Wed Dec 3 16:51:01 2025 by rpki-client