This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133382e302f32342d3234203d3e20343031373833.roa File: 3230332e38342e3133382e302f32342d3234203d3e20343031373833.roa (raw, json) Hash identifier: eVMvkA9PMIdG9FBzwgH72ukhkH9I3rRMduJ9Yft3cy4= Subject key identifier: 15:F0:FB:61:F8:E3:60:41:A5:62:40:87:F3:AF:59:2A:1C:55:22:AE Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Certificate serial: 7E56A7976798FAD116EF0F52A0233E1219E89BE5 Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133382e302f32342d3234203d3e20343031373833.roa Signing time: Tue 16 Dec 2025 11:14:51 +0000 ROA not before: Tue 16 Dec 2025 11:09:51 +0000 ROA not after: Tue 15 Dec 2026 11:14:51 +0000 asID: 401783 IP address blocks: 203.84.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Jan 2026 02:53:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:56:a7:97:67:98:fa:d1:16:ef:0f:52:a0:23:3e:12:19:e8:9b:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Validity Not Before: Dec 16 11:09:51 2025 GMT Not After : Dec 15 11:14:51 2026 GMT Subject: CN=15F0FB61F8E36041A5624087F3AF592A1C5522AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:96:4c:da:21:18:02:82:0e:59:2e:af:5d:f6: 15:ba:84:81:4b:46:5e:39:a8:bb:47:f6:ea:cb:22: c5:81:51:81:85:b5:9d:b6:d3:bb:33:84:b4:6c:02: e8:9c:69:bb:aa:0e:a6:29:1e:0b:7d:f3:ab:fe:c7: 71:72:35:68:bf:fa:d3:a4:58:08:b7:93:05:16:81: 45:91:ee:94:dd:67:7e:e6:dc:d5:33:1e:14:5a:3d: b9:55:6c:22:e1:90:cd:77:b0:d5:3f:27:c4:85:8b: 5a:ea:b0:7f:4c:d7:e6:0c:1a:8b:91:23:46:ac:65: 14:ef:5a:a5:77:03:53:ff:0a:89:4e:36:2a:e2:da: 96:60:07:f6:04:c6:60:b1:c7:0a:51:18:01:55:b0: 2e:e1:62:da:f2:27:4a:7d:0d:9a:cd:23:74:48:88: e4:ee:3c:e3:45:ce:cd:23:69:c5:98:60:3e:82:19: 39:a0:07:09:30:d9:d8:03:9f:dd:6e:0b:c0:d1:b7: 30:00:9e:88:8e:a6:db:83:f4:29:73:6a:b1:f5:00: 04:78:26:81:b7:65:84:b7:a1:00:4c:16:ef:b1:ec: 66:d6:26:ab:fd:ce:1b:96:12:c6:a5:f9:a2:ae:56: ba:9a:42:c9:c4:07:fd:3c:10:e9:2a:7f:82:88:5b: 1f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F0:FB:61:F8:E3:60:41:A5:62:40:87:F3:AF:59:2A:1C:55:22:AE X509v3 Authority Key Identifier: keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133382e302f32342d3234203d3e20343031373833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.84.138.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:47:73:12:1f:f7:10:34:f8:e9:95:f2:90:2b:fc:16:29:f4: 3c:e8:36:81:73:0a:be:0c:c3:84:91:3d:8d:3d:6f:1f:5d:53: 15:38:fd:49:de:06:7f:2a:32:ce:18:82:ff:15:19:d4:ed:b5: dd:96:7c:31:f2:17:2b:59:d2:84:e8:a8:9d:0c:6f:c6:a3:66: 8b:a3:98:d5:3c:c4:a3:6f:c4:dd:be:83:09:4e:76:c5:50:30: 91:87:c1:21:ce:38:6d:95:75:8d:a2:c1:27:17:94:c5:dd:fc: ad:5c:f7:13:65:51:f0:4c:d8:e7:b9:13:2d:a4:fc:5e:58:8e: cd:3f:bf:94:1f:a9:ee:e4:cc:73:ff:1a:b2:80:63:00:9b:43: ff:b2:43:47:12:17:61:c3:25:3e:8a:ea:80:ab:05:3d:0e:a8: 4e:32:f6:0d:b1:dc:c8:a1:3f:1e:43:89:96:db:79:9f:ef:6b: d5:c7:42:40:00:06:16:e0:4e:69:16:62:9b:77:0c:58:5d:36: 1d:06:b2:e7:ec:eb:15:72:94:09:7a:6d:8f:97:20:bf:aa:9a: 57:08:8e:71:d4:3b:76:f5:35:d5:f1:46:2c:a9:99:dc:6d:3e: 98:65:84:52:8b:ea:4d:3e:dc:59:82:9a:61:03:5d:2c:01:a6: cc:3c:26:ca -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUflanl2eY+tEW7w9SoCM+Ehnom+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NC MEMxMDhBOTAeFw0yNTEyMTYxMTA5NTFaFw0yNjEyMTUxMTE0NTFaMDMxMTAvBgNV BAMTKDE1RjBGQjYxRjhFMzYwNDFBNTYyNDA4N0YzQUY1OTJBMUM1NTIyQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtlkzaIRgCgg5ZLq9d9hW6hIFL Rl45qLtH9urLIsWBUYGFtZ2207szhLRsAuicabuqDqYpHgt986v+x3FyNWi/+tOk WAi3kwUWgUWR7pTdZ37m3NUzHhRaPblVbCLhkM13sNU/J8SFi1rqsH9M1+YMGouR I0asZRTvWqV3A1P/ColONiri2pZgB/YExmCxxwpRGAFVsC7hYtryJ0p9DZrNI3RI iOTuPONFzs0jacWYYD6CGTmgBwkw2dgDn91uC8DRtzAAnoiOptuD9ClzarH1AAR4 JoG3ZYS3oQBMFu+x7GbWJqv9zhuWEsal+aKuVrqaQsnEB/08EOkqf4KIWx9JAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUFfD7YfjjYEGlYkCH869ZKhxVIq4wHwYDVR0j BBgwFoAUmB5Wd6xgKVCr4aRCwneefLDBCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzkyMmY4OS0zZTliLTRiMjEtOTE4Ni1hNjQ4YzJkYTNmN2IvMC85ODFFNTY3N0FD NjAyOTUwQUJFMUE0NDJDMjc3OUU3Q0IwQzEwOEE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NCMEMx MDhBOS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E3OTIyZjg5LTNlOWItNGIyMS05 MTg2LWE2NDhjMmRhM2Y3Yi8wLzMyMzAzMzJlMzgzNDJlMzEzMzM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzMDMxMzczODMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy1SKMA0GCSqG SIb3DQEBCwUAA4IBAQCLR3MSH/cQNPjplfKQK/wWKfQ86DaBcwq+DMOEkT2NPW8f XVMVOP1J3gZ/KjLOGIL/FRnU7bXdlnwx8hcrWdKE6KidDG/Go2aLo5jVPMSjb8Td voMJTnbFUDCRh8EhzjhtlXWNosEnF5TF3fytXPcTZVHwTNjnuRMtpPxeWI7NP7+U H6nu5Mxz/xqygGMAm0P/skNHEhdhwyU+iuqAqwU9DqhOMvYNsdzIoT8eQ4mW23mf 72vVx0JAAAYW4E5pFmKbdwxYXTYdBrLn7OsVcpQJem2PlyC/qppXCI5x1Dt29TXV 8UYsqZncbT6YZYRSi+pNPtxZgpphA10sAabMPCbK -----END CERTIFICATE-----Generated at Sun Jan 18 07:02:37 2026 by rpki-client