This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/3130332e39362e35322e302f32332d3233203d3e20323135373237.roa File: 3130332e39362e35322e302f32332d3233203d3e20323135373237.roa (raw, json) Hash identifier: 1aKuOLZIAFfW1+Cqdr1xm8xWMdWqMvn5lk2N7M8OzCk= Subject key identifier: 51:D1:E2:7F:D1:DA:CD:75:1D:BC:39:BD:34:DF:6A:B5:DB:D6:82:AD Certificate issuer: /CN=0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79 Certificate serial: 13E23AA295D9A6CA4BA013DB7B6C8A782D2BF881 Authority key identifier: 03:21:C8:92:A6:AA:C0:A6:EA:4A:30:35:D8:8C:A6:BC:68:67:BF:79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/3130332e39362e35322e302f32332d3233203d3e20323135373237.roa Signing time: Sun 09 Nov 2025 17:06:26 +0000 ROA not before: Sun 09 Nov 2025 17:01:26 +0000 ROA not after: Sun 08 Nov 2026 17:06:26 +0000 asID: 215727 IP address blocks: 103.96.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.crl rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 20:40:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:e2:3a:a2:95:d9:a6:ca:4b:a0:13:db:7b:6c:8a:78:2d:2b:f8:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79 Validity Not Before: Nov 9 17:01:26 2025 GMT Not After : Nov 8 17:06:26 2026 GMT Subject: CN=51D1E27FD1DACD751DBC39BD34DF6AB5DBD682AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:28:19:99:a4:7d:ae:0e:c9:a2:b8:ba:bb:c8: 17:0f:3f:dc:39:a6:d4:f7:de:9c:8b:39:ce:0f:79: f3:82:8c:4b:2f:3d:f6:f2:b0:8d:95:30:ba:30:47: 4e:a0:ba:06:3e:a2:90:94:00:e1:f1:28:be:5d:12: 0f:89:2f:c7:97:cd:25:ff:3d:b9:8f:22:cd:0c:f1: 0a:1a:9a:b5:5d:a8:ed:bd:f7:ec:f8:e5:4a:63:a0: eb:7a:0c:98:f5:64:ae:83:60:dd:1c:69:6b:de:45: 00:0d:0a:77:cf:df:d2:bc:8f:83:27:c9:e8:77:a6: 7e:ce:30:10:31:ee:45:5d:06:75:c2:57:eb:31:19: 93:0d:fa:33:ca:b9:b0:2b:54:67:2c:bb:cf:21:68: 4a:16:d2:77:70:87:d7:a8:c3:98:23:79:a5:6d:fd: 3b:35:4c:3e:fd:58:c7:cd:b8:1c:6c:f4:bd:a8:6a: c6:72:98:11:71:d4:67:e7:71:82:36:b2:b6:03:e7: c0:0d:ae:23:1a:a2:60:b3:ab:ec:d6:47:3c:26:fb: 65:bc:9a:d0:a9:d9:cc:53:87:dc:05:00:b4:06:31: d4:a6:19:22:2a:80:7e:6c:e5:42:18:78:87:e0:26: 12:2d:66:5a:f3:44:2b:25:44:18:81:ea:ce:e6:46: 0d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:D1:E2:7F:D1:DA:CD:75:1D:BC:39:BD:34:DF:6A:B5:DB:D6:82:AD X509v3 Authority Key Identifier: keyid:03:21:C8:92:A6:AA:C0:A6:EA:4A:30:35:D8:8C:A6:BC:68:67:BF:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/3130332e39362e35322e302f32332d3233203d3e20323135373237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.96.52.0/23 Signature Algorithm: sha256WithRSAEncryption b0:93:84:10:bd:a2:8f:4c:3b:97:82:7d:3a:af:cd:44:73:bb: 5d:e8:a2:d5:94:0f:2d:e8:18:25:54:6c:31:a5:25:b4:73:1f: 1a:02:4a:e1:52:e5:14:a2:ca:18:48:bf:61:c3:20:13:ce:79: 9a:17:2e:20:8e:02:06:76:9d:7d:40:1c:e9:3e:17:09:ba:66: 1c:ec:6c:84:28:43:e5:cb:68:14:e7:36:52:30:d6:53:04:d3: fa:eb:16:5c:5a:ca:81:3c:60:39:39:ec:01:f1:61:14:c9:ac: a7:79:9b:f0:a4:8e:ca:a5:00:a8:91:7a:e0:56:4b:4a:db:43: 02:b9:6f:ef:d1:06:0d:b4:ba:2d:5f:1d:2c:f9:0f:1c:c1:8a: 2b:0a:c2:df:41:37:2e:f3:db:7d:45:a5:3c:7a:31:1e:0b:f9: 68:f1:47:6b:b0:11:3c:d3:c7:45:6d:a3:c3:bf:9d:b5:3f:c4: eb:34:e9:60:5a:bd:06:a5:82:6c:5e:e4:3f:a8:7a:45:aa:7f: 6f:ee:12:da:53:68:ce:c9:67:0c:bf:bb:59:55:09:12:85:6f: d0:dc:3c:00:7b:87:d9:12:b2:9c:23:47:eb:d1:3a:72:aa:e0: 38:e5:56:85:d7:10:af:f7:2a:5d:d5:2a:76:29:3b:a0:54:a3: e8:ad:e8:28 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUE+I6opXZpspLoBPbe2yKeC0r+IEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMyMUM4OTJBNkFBQzBBNkVBNEEzMDM1RDg4Q0E2QkM2 ODY3QkY3OTAeFw0yNTExMDkxNzAxMjZaFw0yNjExMDgxNzA2MjZaMDMxMTAvBgNV BAMTKDUxRDFFMjdGRDFEQUNENzUxREJDMzlCRDM0REY2QUI1REJENjgyQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmKBmZpH2uDsmiuLq7yBcPP9w5 ptT33pyLOc4PefOCjEsvPfbysI2VMLowR06gugY+opCUAOHxKL5dEg+JL8eXzSX/ PbmPIs0M8QoamrVdqO299+z45UpjoOt6DJj1ZK6DYN0caWveRQANCnfP39K8j4Mn yeh3pn7OMBAx7kVdBnXCV+sxGZMN+jPKubArVGcsu88haEoW0ndwh9eow5gjeaVt /Ts1TD79WMfNuBxs9L2oasZymBFx1GfncYI2srYD58ANriMaomCzq+zWRzwm+2W8 mtCp2cxTh9wFALQGMdSmGSIqgH5s5UIYeIfgJhItZlrzRCslRBiB6s7mRg0VAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUUdHif9HazXUdvDm9NN9qtdvWgq0wHwYDVR0j BBgwFoAUAyHIkqaqwKbqSjA12IymvGhnv3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTFjNGMxZi03MTQxLTQ3ZDYtYTdmOC1lMzVmZmUxMTc0MDQvMC8wMzIxQzg5MkE2 QUFDMEE2RUE0QTMwMzVEODhDQTZCQzY4NjdCRjc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMyMUM4OTJBNkFBQzBBNkVBNEEzMDM1RDg4Q0E2QkM2ODY3 QkY3OS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdhMWM0YzFmLTcxNDEtNDdkNi1h N2Y4LWUzNWZmZTExNzQwNC8wLzMxMzAzMzJlMzkzNjJlMzUzMjJlMzAyZjMyMzMy ZDMyMzMyMDNkM2UyMDMyMzEzNTM3MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWdgNDANBgkqhkiG 9w0BAQsFAAOCAQEAsJOEEL2ij0w7l4J9Oq/NRHO7Xeii1ZQPLegYJVRsMaUltHMf GgJK4VLlFKLKGEi/YcMgE855mhcuII4CBnadfUAc6T4XCbpmHOxshChD5ctoFOc2 UjDWUwTT+usWXFrKgTxgOTnsAfFhFMmsp3mb8KSOyqUAqJF64FZLSttDArlv79EG DbS6LV8dLPkPHMGKKwrC30E3LvPbfUWlPHoxHgv5aPFHa7ARPNPHRW2jw7+dtT/E 6zTpYFq9BqWCbF7kP6h6Rap/b+4S2lNozslnDL+7WVUJEoVv0Nw8AHuH2RKynCNH 69E6cqrgOOVWhdcQr/cqXdUqdik7oFSj6K3oKA== -----END CERTIFICATE-----Generated at Wed Dec 3 16:41:31 2025 by rpki-client