This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/3130332e3131322e3134342e302f32332d3233203d3e20323135373237.roa File: 3130332e3131322e3134342e302f32332d3233203d3e20323135373237.roa (raw, json) Hash identifier: 8zDZZBY6bA2jEqKH0/3A7Q4sZMdLlbxldDEJxB2ILt4= Subject key identifier: DB:23:C1:39:E1:D2:B2:76:43:BC:E3:BA:2B:86:4D:39:40:72:6C:C2 Certificate issuer: /CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C Certificate serial: 0701F8F03552820503C566C2C39AF9F43E3DD7B3 Authority key identifier: 09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/3130332e3131322e3134342e302f32332d3233203d3e20323135373237.roa Signing time: Sun 30 Nov 2025 15:40:28 +0000 ROA not before: Sun 30 Nov 2025 15:35:28 +0000 ROA not after: Sun 29 Nov 2026 15:40:28 +0000 asID: 215727 IP address blocks: 103.112.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 07:57:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:01:f8:f0:35:52:82:05:03:c5:66:c2:c3:9a:f9:f4:3e:3d:d7:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C Validity Not Before: Nov 30 15:35:28 2025 GMT Not After : Nov 29 15:40:28 2026 GMT Subject: CN=DB23C139E1D2B27643BCE3BA2B864D3940726CC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:20:66:db:0c:2e:b3:81:bc:7f:6f:2b:43:9d: 32:78:b5:2b:f3:d6:dc:d1:74:21:69:52:6e:25:b9: 9b:3f:c2:8d:2d:bd:d2:6c:9a:8f:c7:48:7b:b4:47: 37:7c:bd:05:3c:21:bb:44:a3:da:f6:6f:20:84:40: 53:1a:c2:68:b5:34:2c:c1:ca:dd:34:57:22:64:36: ab:e6:97:9b:4e:d7:a5:fb:93:b1:bb:1a:ed:13:a6: e4:84:a0:22:0c:5c:fb:a4:49:62:18:c2:08:d0:e8: 11:d2:f2:37:cf:92:9b:f2:99:f9:b4:04:4b:5a:bd: 04:75:58:d5:99:a5:b6:6c:22:92:5c:d0:a8:35:46: 5b:2a:90:ce:26:c2:a9:60:4c:64:a0:0c:07:1b:c5: d9:a3:c1:15:27:66:78:40:a6:8c:8f:be:86:ed:c0: 33:9d:8e:9d:01:ec:00:d2:e2:9d:7b:59:91:7f:45: a7:7e:2c:03:60:1b:68:9c:f5:61:f5:a8:9f:ea:b8: fb:f8:e4:56:ca:45:5f:8f:ca:23:29:ff:f5:17:4e: 6b:7f:3b:83:ff:03:20:70:e7:5d:bf:5f:2d:54:26: 38:8d:25:67:c8:c6:7b:b8:84:6d:7f:c5:38:e2:d7: 95:c8:ed:90:ec:c5:f4:d1:1e:9a:e5:d2:0a:12:25: ed:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:23:C1:39:E1:D2:B2:76:43:BC:E3:BA:2B:86:4D:39:40:72:6C:C2 X509v3 Authority Key Identifier: keyid:09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/3130332e3131322e3134342e302f32332d3233203d3e20323135373237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.112.144.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:87:1a:06:0a:44:d8:8e:05:8f:67:34:b7:8c:8e:fa:62:ad: 3e:e9:21:6c:11:ff:bf:1e:57:5c:a1:b2:ce:e6:12:47:52:7f: 69:9c:d7:8c:94:48:0f:5b:2d:82:4e:d9:dd:c7:35:d0:96:20: 21:20:f6:46:7a:8a:04:6b:b2:0f:73:c3:54:94:19:e5:de:8e: b9:91:4f:a1:0a:fc:9c:3e:d4:26:43:8e:7d:3e:c6:83:32:8b: 8d:9a:aa:d3:c5:ae:f4:7c:9d:57:bd:83:d5:89:84:e5:04:e4: 09:c3:83:a0:0e:b3:84:3b:0a:5a:81:c0:a9:6a:ab:64:f5:55: af:b2:bd:c3:df:73:e0:80:a2:b0:2e:d5:b5:25:d5:c2:57:f7: eb:d6:17:d7:f5:7e:38:b1:a7:51:bb:75:7d:ce:1e:69:6e:15: f7:0d:ac:2b:f9:87:68:27:fd:9e:99:8a:93:de:6c:53:15:a7: 96:ad:7c:89:1c:4a:fa:06:f7:fc:3c:fe:e2:2a:5f:fc:94:d1: ef:d2:f0:77:4d:03:9b:a7:1f:ee:34:9e:73:86:67:32:24:71: 4b:04:50:53:c3:7d:44:78:52:ed:1c:71:73:9d:b3:7c:7d:5b: bb:f9:95:1d:59:fa:60:a8:76:83:77:73:67:0d:d6:ce:0f:e0: 2c:c3:96:0d -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUBwH48DVSggUDxWbCw5r59D4917MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk0RDU1NkNBMEI1NUFGNEE2MzY4NzNBMUIxRTcwMzJC MkM5ODEzQzAeFw0yNTExMzAxNTM1MjhaFw0yNjExMjkxNTQwMjhaMDMxMTAvBgNV BAMTKERCMjNDMTM5RTFEMkIyNzY0M0JDRTNCQTJCODY0RDM5NDA3MjZDQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLIGbbDC6zgbx/bytDnTJ4tSvz 1tzRdCFpUm4luZs/wo0tvdJsmo/HSHu0Rzd8vQU8IbtEo9r2byCEQFMawmi1NCzB yt00VyJkNqvml5tO16X7k7G7Gu0TpuSEoCIMXPukSWIYwgjQ6BHS8jfPkpvymfm0 BEtavQR1WNWZpbZsIpJc0Kg1RlsqkM4mwqlgTGSgDAcbxdmjwRUnZnhApoyPvobt wDOdjp0B7ADS4p17WZF/Rad+LANgG2ic9WH1qJ/quPv45FbKRV+PyiMp//UXTmt/ O4P/AyBw512/Xy1UJjiNJWfIxnu4hG1/xTji15XI7ZDsxfTRHprl0goSJe23AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU2yPBOeHSsnZDvOO6K4ZNOUBybMIwHwYDVR0j BBgwFoAUCU1VbKC1WvSmNoc6Gx5wMrLJgTwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2QwOGViMy05MzdkLTQzMDQtOTE2Ny00NjNkN2M1OGQ1ZTQvMC8wOTRENTU2Q0Ew QjU1QUY0QTYzNjg3M0ExQjFFNzAzMkIyQzk4MTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDk0RDU1NkNBMEI1NUFGNEE2MzY4NzNBMUIxRTcwMzJCMkM5 ODEzQy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjZDA4ZWIzLTkzN2QtNDMwNC05 MTY3LTQ2M2Q3YzU4ZDVlNC8wLzMxMzAzMzJlMzEzMTMyMmUzMTM0MzQyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMjMxMzUzNzMyMzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFncJAwDQYJ KoZIhvcNAQELBQADggEBAAuHGgYKRNiOBY9nNLeMjvpirT7pIWwR/78eV1yhss7m EkdSf2mc14yUSA9bLYJO2d3HNdCWICEg9kZ6igRrsg9zw1SUGeXejrmRT6EK/Jw+ 1CZDjn0+xoMyi42aqtPFrvR8nVe9g9WJhOUE5AnDg6AOs4Q7ClqBwKlqq2T1Va+y vcPfc+CAorAu1bUl1cJX9+vWF9f1fjixp1G7dX3OHmluFfcNrCv5h2gn/Z6ZipPe bFMVp5atfIkcSvoG9/w8/uIqX/yU0e/S8HdNA5unH+40nnOGZzIkcUsEUFPDfUR4 Uu0ccXOds3x9W7v5lR1Z+mCodoN3c2cN1s4P4CzDlg0= -----END CERTIFICATE-----Generated at Wed Dec 3 16:49:16 2025 by rpki-client