This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/3130332e39362e35322e302f32342d3234203d3e20323135373237.roa File: 3130332e39362e35322e302f32342d3234203d3e20323135373237.roa (raw, json) Hash identifier: 0krbsaRXLF7hhh/0+kJdsVsdN97iwgE+irNWTCAqAI8= Subject key identifier: C6:24:FD:B9:09:E3:95:D6:4C:EA:DF:1C:37:12:0B:82:D5:D9:83:54 Certificate issuer: /CN=0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79 Certificate serial: 12689163C2CE113D23B00475816C488EAA3337BA Authority key identifier: 03:21:C8:92:A6:AA:C0:A6:EA:4A:30:35:D8:8C:A6:BC:68:67:BF:79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/3130332e39362e35322e302f32342d3234203d3e20323135373237.roa Signing time: Sun 09 Nov 2025 17:05:33 +0000 ROA not before: Sun 09 Nov 2025 17:00:33 +0000 ROA not after: Sun 08 Nov 2026 17:05:33 +0000 asID: 215727 IP address blocks: 103.96.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.crl rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 20:40:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:68:91:63:c2:ce:11:3d:23:b0:04:75:81:6c:48:8e:aa:33:37:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79 Validity Not Before: Nov 9 17:00:33 2025 GMT Not After : Nov 8 17:05:33 2026 GMT Subject: CN=C624FDB909E395D64CEADF1C37120B82D5D98354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1c:77:99:56:76:91:1b:e4:2e:db:a2:28:ae: 81:41:6e:7f:a3:eb:a9:8a:c0:2c:b5:0e:ba:32:ea: da:03:bf:2b:e9:ee:d2:4e:74:1d:dd:5f:d1:31:70: 99:ce:ba:93:b7:e4:b8:b0:d7:5b:24:21:6a:f8:ef: 23:b7:12:98:c3:77:4d:93:c5:2d:e5:c4:04:a4:58: 55:d4:fe:6a:80:85:24:e7:ea:ff:77:26:80:db:d7: 1a:69:57:91:ab:ec:53:66:b7:56:98:84:6c:63:43: d3:56:a1:cb:02:c7:fe:c4:4c:b5:c0:5e:74:30:78: e5:df:79:e7:ee:06:54:a8:fb:13:3f:b3:8f:d8:d5: 84:83:ed:ba:a1:b8:8c:39:39:be:df:44:c0:37:78: be:14:68:17:f6:10:c0:36:40:17:19:b3:c0:ed:1c: 87:af:4b:20:db:c8:91:40:ac:3d:bd:2d:6b:bd:73: cf:4c:d9:2c:ec:b3:72:ea:f3:ee:f5:be:af:7f:60: ee:f7:4e:b7:54:94:47:a5:98:e3:79:81:f0:37:bb: 22:87:3b:92:77:a3:7e:93:a7:98:37:3d:31:f2:73: 46:a2:9b:e9:9f:ef:c6:9d:b3:78:6f:ee:32:ff:27: 68:58:47:62:82:0c:88:18:99:e3:cc:96:2b:df:cc: b7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:24:FD:B9:09:E3:95:D6:4C:EA:DF:1C:37:12:0B:82:D5:D9:83:54 X509v3 Authority Key Identifier: keyid:03:21:C8:92:A6:AA:C0:A6:EA:4A:30:35:D8:8C:A6:BC:68:67:BF:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/3130332e39362e35322e302f32342d3234203d3e20323135373237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.96.52.0/24 Signature Algorithm: sha256WithRSAEncryption 09:21:93:6d:b3:9b:1e:40:f7:bb:13:b5:2a:50:6d:46:d0:bc: c7:c8:bc:52:d1:ff:fd:67:31:6f:20:ad:d6:8e:b6:49:2e:bd: f2:92:9b:e6:46:de:81:85:14:46:ee:e1:d8:d9:79:a3:88:a6: f9:ac:78:b7:bc:ae:f6:aa:fd:1e:42:2d:e2:cc:2a:e0:6d:ac: ff:41:d3:3c:93:d5:41:bf:f0:ac:d0:30:da:af:9f:6f:35:35: 23:e6:6b:b2:35:31:7e:80:49:2d:85:65:be:03:fd:7f:6f:c4: a8:d6:09:35:a5:e7:51:06:69:e9:47:b6:b1:52:25:93:da:ce: ce:3e:47:50:67:3c:3d:eb:4d:c9:04:09:6c:57:ca:36:f1:1e: 88:d8:9b:89:ec:2d:c3:5f:6d:2d:6d:95:35:37:cb:2d:80:25: a7:b3:82:5c:ae:fe:77:7a:72:8e:55:be:a6:04:91:bf:a1:c5: 0b:25:df:1c:00:f4:92:63:ff:cb:04:03:2c:8d:55:2e:27:ed: 6b:58:85:5d:4e:62:b8:96:e5:2c:17:b9:e4:f4:9c:dd:a7:18: 5b:f5:1b:c8:d5:bb:78:34:cd:ab:5d:50:22:0b:f0:aa:89:7f: 29:11:9e:69:91:80:1a:fe:56:b6:09:f5:8d:19:16:20:93:ce: 3d:dc:24:3e -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUEmiRY8LOET0jsAR1gWxIjqozN7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMyMUM4OTJBNkFBQzBBNkVBNEEzMDM1RDg4Q0E2QkM2 ODY3QkY3OTAeFw0yNTExMDkxNzAwMzNaFw0yNjExMDgxNzA1MzNaMDMxMTAvBgNV BAMTKEM2MjRGREI5MDlFMzk1RDY0Q0VBREYxQzM3MTIwQjgyRDVEOTgzNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOHHeZVnaRG+Qu26IoroFBbn+j 66mKwCy1Droy6toDvyvp7tJOdB3dX9ExcJnOupO35Liw11skIWr47yO3EpjDd02T xS3lxASkWFXU/mqAhSTn6v93JoDb1xppV5Gr7FNmt1aYhGxjQ9NWocsCx/7ETLXA XnQweOXfeefuBlSo+xM/s4/Y1YSD7bqhuIw5Ob7fRMA3eL4UaBf2EMA2QBcZs8Dt HIevSyDbyJFArD29LWu9c89M2Szss3Lq8+71vq9/YO73TrdUlEelmON5gfA3uyKH O5J3o36Tp5g3PTHyc0aim+mf78ads3hv7jL/J2hYR2KCDIgYmePMlivfzLenAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUxiT9uQnjldZM6t8cNxILgtXZg1QwHwYDVR0j BBgwFoAUAyHIkqaqwKbqSjA12IymvGhnv3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTFjNGMxZi03MTQxLTQ3ZDYtYTdmOC1lMzVmZmUxMTc0MDQvMC8wMzIxQzg5MkE2 QUFDMEE2RUE0QTMwMzVEODhDQTZCQzY4NjdCRjc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMyMUM4OTJBNkFBQzBBNkVBNEEzMDM1RDg4Q0E2QkM2ODY3 QkY3OS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdhMWM0YzFmLTcxNDEtNDdkNi1h N2Y4LWUzNWZmZTExNzQwNC8wLzMxMzAzMzJlMzkzNjJlMzUzMjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMyMzEzNTM3MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdgNDANBgkqhkiG 9w0BAQsFAAOCAQEACSGTbbObHkD3uxO1KlBtRtC8x8i8UtH//WcxbyCt1o62SS69 8pKb5kbegYUURu7h2Nl5o4im+ax4t7yu9qr9HkIt4swq4G2s/0HTPJPVQb/wrNAw 2q+fbzU1I+ZrsjUxfoBJLYVlvgP9f2/EqNYJNaXnUQZp6Ue2sVIlk9rOzj5HUGc8 PetNyQQJbFfKNvEeiNibiewtw19tLW2VNTfLLYAlp7OCXK7+d3pyjlW+pgSRv6HF CyXfHAD0kmP/ywQDLI1VLifta1iFXU5iuJblLBe55PSc3acYW/UbyNW7eDTNq11Q Igvwqol/KRGeaZGAGv5Wtgn1jRkWIJPOPdwkPg== -----END CERTIFICATE-----Generated at Wed Dec 3 16:41:31 2025 by rpki-client