This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/3130332e3138342e35372e302f32342d3234203d3e20313532333532.roa File: 3130332e3138342e35372e302f32342d3234203d3e20313532333532.roa (raw, json) Hash identifier: bpEdGaau57Ls0LX+FXCrBVL5qcwulWWQkMdNRaMhV9U= Subject key identifier: 8F:AE:72:14:EB:3D:51:27:39:BF:3C:D5:1C:6F:A0:34:BF:83:58:7F Certificate issuer: /CN=2F24A2044806301EB7FA6CE5C8521FE03941B7BA Certificate serial: 532C95981599D760B639CF7014A4E6C34436BE18 Authority key identifier: 2F:24:A2:04:48:06:30:1E:B7:FA:6C:E5:C8:52:1F:E0:39:41:B7:BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/3130332e3138342e35372e302f32342d3234203d3e20313532333532.roa Signing time: Sat 29 Nov 2025 11:00:02 +0000 ROA not before: Sat 29 Nov 2025 10:55:02 +0000 ROA not after: Sat 28 Nov 2026 11:00:02 +0000 asID: 152352 IP address blocks: 103.184.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 17:34:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:2c:95:98:15:99:d7:60:b6:39:cf:70:14:a4:e6:c3:44:36:be:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F24A2044806301EB7FA6CE5C8521FE03941B7BA Validity Not Before: Nov 29 10:55:02 2025 GMT Not After : Nov 28 11:00:02 2026 GMT Subject: CN=8FAE7214EB3D512739BF3CD51C6FA034BF83587F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9d:33:44:a8:3d:b7:9d:af:a2:6f:4f:f2:ce: b8:9d:e6:ab:1c:19:69:6a:e3:34:f9:7d:58:8a:eb: 0a:d7:01:95:36:fe:9e:df:5b:f8:af:fa:a1:75:39: e0:d9:f5:0b:d9:82:63:ad:d3:96:d2:dc:19:73:0e: fd:7d:36:79:68:bc:47:df:99:2e:a6:bf:71:46:3f: 73:80:26:ce:cd:73:98:56:af:cc:ac:9e:73:ad:7d: 39:bd:cc:15:30:ed:0b:cf:7e:44:63:5c:3c:60:03: da:9a:e7:84:ea:8a:93:b0:75:4f:aa:97:dd:53:eb: a6:25:e9:f8:ba:09:e1:1f:72:ab:46:fa:ea:87:6e: 2c:2c:59:3a:aa:24:02:e4:df:11:63:fa:2e:c4:b7: 33:99:12:2a:0f:2f:72:d0:b4:96:18:2c:94:cf:40: 6a:aa:a6:be:89:3e:96:57:03:e8:f2:16:04:48:94: 6e:80:5b:21:02:3d:08:f7:ac:73:ba:e5:9d:85:bc: dc:b6:af:1b:32:c1:bb:f5:22:0a:c3:31:fc:b7:9d: 26:ee:cb:d7:61:e4:5e:72:29:e8:c2:8c:12:6f:20: f5:9c:79:ba:3a:a9:5d:08:a6:ab:0a:2f:7b:e0:99: 0d:84:37:a5:92:8d:ba:ab:90:02:41:7b:1a:bf:be: 88:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:AE:72:14:EB:3D:51:27:39:BF:3C:D5:1C:6F:A0:34:BF:83:58:7F X509v3 Authority Key Identifier: keyid:2F:24:A2:04:48:06:30:1E:B7:FA:6C:E5:C8:52:1F:E0:39:41:B7:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/3130332e3138342e35372e302f32342d3234203d3e20313532333532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.184.57.0/24 Signature Algorithm: sha256WithRSAEncryption 27:5f:a4:b5:80:8f:98:cb:f0:9b:39:4b:41:d4:c1:c0:3e:9d: 5f:82:7c:f0:c9:04:cc:07:bb:c8:cb:67:9f:75:c2:42:07:a2: 8a:be:ed:aa:a6:ff:93:52:52:30:34:17:92:31:c6:1e:fd:65: 01:3c:82:44:89:60:00:bf:19:cd:fa:b1:f0:67:00:88:79:54: 1f:b5:5f:0e:1a:1c:4e:03:b2:d3:d5:1e:a1:c1:fe:6f:4e:90: 27:4f:ba:82:6e:05:f9:d5:f2:67:53:00:39:98:e6:44:f0:42: d7:e0:2e:21:79:42:c3:6b:4f:be:b0:ef:3c:30:82:1f:da:50: 84:9b:6f:71:26:58:64:56:1b:96:fc:a0:18:c8:23:40:dc:ff: eb:99:ef:49:c3:9a:81:5e:9c:78:c4:28:dc:7f:d1:3f:38:e1: f8:08:77:b6:fc:8f:d1:27:99:b4:81:1e:bf:87:25:e4:7d:10: ec:11:a6:d7:9b:f1:31:ef:bb:fe:e0:44:69:2b:ca:a7:be:cb: cb:25:4f:ad:a2:0e:67:ff:2d:85:05:88:78:4b:b5:0a:22:4d: d7:a7:65:ee:e4:bb:27:e6:f4:6e:4e:a4:f6:dd:08:e2:a2:94: be:ba:68:6e:7f:c2:c9:b5:ef:1c:75:ae:c1:5f:cf:49:06:21: 0c:78:08:15 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUUyyVmBWZ12C2Oc9wFKTmw0Q2vhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFGRTAz OTQxQjdCQTAeFw0yNTExMjkxMDU1MDJaFw0yNjExMjgxMTAwMDJaMDMxMTAvBgNV BAMTKDhGQUU3MjE0RUIzRDUxMjczOUJGM0NENTFDNkZBMDM0QkY4MzU4N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCenTNEqD23na+ib0/yzrid5qsc GWlq4zT5fViK6wrXAZU2/p7fW/iv+qF1OeDZ9QvZgmOt05bS3BlzDv19NnlovEff mS6mv3FGP3OAJs7Nc5hWr8ysnnOtfTm9zBUw7QvPfkRjXDxgA9qa54TqipOwdU+q l91T66Yl6fi6CeEfcqtG+uqHbiwsWTqqJALk3xFj+i7EtzOZEioPL3LQtJYYLJTP QGqqpr6JPpZXA+jyFgRIlG6AWyECPQj3rHO65Z2FvNy2rxsywbv1IgrDMfy3nSbu y9dh5F5yKejCjBJvIPWcebo6qV0IpqsKL3vgmQ2EN6WSjbqrkAJBexq/voiFAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUj65yFOs9USc5vzzVHG+gNL+DWH8wHwYDVR0j BBgwFoAULySiBEgGMB63+mzlyFIf4DlBt7owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWEyOTI5Yy02MDg4LTRjYjUtODNjNi1mNGEzNTZiMjBmOWQvMC8yRjI0QTIwNDQ4 MDYzMDFFQjdGQTZDRTVDODUyMUZFMDM5NDFCN0JBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFGRTAzOTQx QjdCQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkxYTI5MjljLTYwODgtNGNiNS04 M2M2LWY0YTM1NmIyMGY5ZC8wLzMxMzAzMzJlMzEzODM0MmUzNTM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzMzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7g5MA0GCSqG SIb3DQEBCwUAA4IBAQAnX6S1gI+Yy/CbOUtB1MHAPp1fgnzwyQTMB7vIy2efdcJC B6KKvu2qpv+TUlIwNBeSMcYe/WUBPIJEiWAAvxnN+rHwZwCIeVQftV8OGhxOA7LT 1R6hwf5vTpAnT7qCbgX51fJnUwA5mOZE8ELX4C4heULDa0++sO88MIIf2lCEm29x JlhkVhuW/KAYyCNA3P/rme9Jw5qBXpx4xCjcf9E/OOH4CHe2/I/RJ5m0gR6/hyXk fRDsEabXm/Ex77v+4ERpK8qnvsvLJU+tog5n/y2FBYh4S7UKIk3Xp2Xu5Lsn5vRu TqT23QjiopS+umhuf8LJte8cda7BX89JBiEMeAgV -----END CERTIFICATE-----Generated at Wed Dec 3 14:45:42 2025 by rpki-client