This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/3130332e3131312e3231372e302f32342d3234203d3e20313337333235.roa File: 3130332e3131312e3231372e302f32342d3234203d3e20313337333235.roa (raw, json) Hash identifier: X/0Jg8AnYp15IMuFpFjlohJw4a6ZU+8NNk4F0efl1Zo= Subject key identifier: 09:84:DA:EC:6A:56:9B:40:9D:BD:CC:ED:FC:A2:3C:2C:3D:7B:69:2E Certificate issuer: /CN=9CA6DB3A7AC14D26875264793FB5D488BCF01F45 Certificate serial: 56FAFBF52F41C4D0744CDF0FD4393EFD44BBBFB2 Authority key identifier: 9C:A6:DB:3A:7A:C1:4D:26:87:52:64:79:3F:B5:D4:88:BC:F0:1F:45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/3130332e3131312e3231372e302f32342d3234203d3e20313337333235.roa Signing time: Mon 02 Jun 2025 02:04:55 +0000 ROA not before: Mon 02 Jun 2025 01:59:55 +0000 ROA not after: Mon 01 Jun 2026 02:04:55 +0000 asID: 137325 IP address blocks: 103.111.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 05:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:fa:fb:f5:2f:41:c4:d0:74:4c:df:0f:d4:39:3e:fd:44:bb:bf:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CA6DB3A7AC14D26875264793FB5D488BCF01F45 Validity Not Before: Jun 2 01:59:55 2025 GMT Not After : Jun 1 02:04:55 2026 GMT Subject: CN=0984DAEC6A569B409DBDCCEDFCA23C2C3D7B692E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8a:26:64:b3:56:94:22:07:8d:31:37:ef:69: ef:58:56:79:e2:fb:c6:72:92:54:dc:53:03:09:b0: fb:d2:56:ec:bf:10:16:74:29:42:1a:9a:8a:d3:5d: 58:ab:6d:70:16:81:d1:34:7b:3d:ad:2c:93:46:3e: f3:3c:87:9d:15:0c:9d:0e:fe:05:34:8f:5c:10:bc: cb:84:11:aa:3d:9e:f9:79:ee:7d:97:33:90:99:98: 0b:09:5b:a8:b1:c6:88:d7:a0:2c:31:c6:ec:c9:82: b8:26:9c:cc:2e:af:34:3c:c4:da:86:54:9d:2f:da: 10:11:62:5c:ac:3d:9f:1d:bb:0d:34:72:57:47:49: ca:15:5c:f1:c4:10:46:67:7c:33:ef:62:ec:60:15: 95:07:00:76:cc:dc:98:02:13:32:78:5b:80:b5:d7: 12:12:e6:1e:d8:81:42:d8:40:bc:fa:d2:d8:49:38: 85:c6:ad:de:3a:96:8c:70:95:71:12:bc:eb:40:ad: 96:60:7d:f6:42:f4:f5:ce:37:75:d5:40:52:bc:ed: 55:67:ba:af:f0:5c:7f:3d:07:f9:bb:d3:d1:a6:06: 2f:ec:81:69:25:8a:69:bc:cb:94:0d:90:07:df:72: ab:06:56:4f:58:2f:a7:c2:44:62:7c:6d:fd:c7:16: 8c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:84:DA:EC:6A:56:9B:40:9D:BD:CC:ED:FC:A2:3C:2C:3D:7B:69:2E X509v3 Authority Key Identifier: keyid:9C:A6:DB:3A:7A:C1:4D:26:87:52:64:79:3F:B5:D4:88:BC:F0:1F:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/3130332e3131312e3231372e302f32342d3234203d3e20313337333235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.111.217.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:2b:16:ea:d6:62:56:a1:c8:33:6e:98:02:4c:91:4d:b8:c8: 57:07:d7:0a:bb:34:30:aa:83:7e:e0:45:2b:89:2d:21:51:0b: 62:eb:bd:b0:68:26:07:37:e8:fe:7a:af:6c:34:a3:e3:9e:a5: 7b:5a:03:ad:5a:ba:cf:97:6e:5a:3b:b0:32:10:d8:4a:11:71: ca:1f:19:80:31:1a:d9:cc:42:7d:65:4d:ee:27:cc:4d:dd:ac: 21:53:96:ee:7a:77:75:46:63:f4:33:9b:6b:fb:1f:e7:93:b9: 3c:bf:5d:bc:23:1f:75:9c:7b:07:40:f6:d9:de:0f:a7:7f:d3: 72:11:6e:c1:ff:b4:86:2f:70:8e:d1:d5:fa:e5:60:22:33:95: 0c:4c:33:cc:e0:36:83:75:e3:51:47:aa:cc:74:76:76:d9:93: 03:5f:39:96:f9:36:95:47:e5:fe:17:68:0b:ed:6c:cc:14:02: 29:e2:74:b8:cf:bd:fb:31:7a:7c:7a:8a:48:92:25:6d:e7:f5: ab:d4:5e:91:d7:c2:ec:72:8e:65:c4:5d:c5:9a:2f:f9:50:8c: 1b:e3:a9:dd:f9:4e:b1:aa:d9:3b:89:0e:29:01:a5:88:d6:d3: a6:fa:0e:10:b8:fb:df:3d:8d:12:d2:fa:57:c8:9a:17:b0:f6: 26:46:a6:7d -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUVvr79S9BxNB0TN8P1Dk+/US7v7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0ODhC Q0YwMUY0NTAeFw0yNTA2MDIwMTU5NTVaFw0yNjA2MDEwMjA0NTVaMDMxMTAvBgNV BAMTKDA5ODREQUVDNkE1NjlCNDA5REJEQ0NFREZDQTIzQzJDM0Q3QjY5MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCziiZks1aUIgeNMTfvae9YVnni +8ZyklTcUwMJsPvSVuy/EBZ0KUIamorTXVirbXAWgdE0ez2tLJNGPvM8h50VDJ0O /gU0j1wQvMuEEao9nvl57n2XM5CZmAsJW6ixxojXoCwxxuzJgrgmnMwurzQ8xNqG VJ0v2hARYlysPZ8duw00cldHScoVXPHEEEZnfDPvYuxgFZUHAHbM3JgCEzJ4W4C1 1xIS5h7YgULYQLz60thJOIXGrd46loxwlXESvOtArZZgffZC9PXON3XVQFK87VVn uq/wXH89B/m709GmBi/sgWklimm8y5QNkAffcqsGVk9YL6fCRGJ8bf3HFoxtAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUCYTa7GpWm0Cdvczt/KI8LD17aS4wHwYDVR0j BBgwFoAUnKbbOnrBTSaHUmR5P7XUiLzwH0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDY1MmJjNi04YmI2LTRmMjYtODhiMS0zODBkYWMxOGUyNjgvMC85Q0E2REIzQTdB QzE0RDI2ODc1MjY0NzkzRkI1RDQ4OEJDRjAxRjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0ODhCQ0Yw MUY0NS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkwNjUyYmM2LThiYjYtNGYyNi04 OGIxLTM4MGRhYzE4ZTI2OC8wLzMxMzAzMzJlMzEzMTMxMmUzMjMxMzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzczMzMyMzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnb9kwDQYJ KoZIhvcNAQELBQADggEBAF8rFurWYlahyDNumAJMkU24yFcH1wq7NDCqg37gRSuJ LSFRC2LrvbBoJgc36P56r2w0o+OepXtaA61aus+Xblo7sDIQ2EoRccofGYAxGtnM Qn1lTe4nzE3drCFTlu56d3VGY/Qzm2v7H+eTuTy/XbwjH3WcewdA9tneD6d/03IR bsH/tIYvcI7R1frlYCIzlQxMM8zgNoN141FHqsx0dnbZkwNfOZb5NpVH5f4XaAvt bMwUAinidLjPvfsxenx6ikiSJW3n9avUXpHXwuxyjmXEXcWaL/lQjBvjqd35TrGq 2TuJDikBpYjW06b6DhC4+989jRLS+lfImhew9iZGpn0= -----END CERTIFICATE-----Generated at Wed Dec 3 15:31:45 2025 by rpki-client