This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/3130332e3132392e34322e302f32332d3234203d3e20313335343738.roa File: 3130332e3132392e34322e302f32332d3234203d3e20313335343738.roa (raw, json) Hash identifier: uz+mWVTVia+vitlv373HGRqQqyhynrWuHzLw/EVOgos= Subject key identifier: 86:B6:F2:3A:7E:F0:DB:AB:24:F4:35:30:C2:30:3D:77:51:5A:3D:7E Certificate issuer: /CN=B70932ED6C688D58897E32E1D5C990B20910FF02 Certificate serial: 5EE54BD6A28EE76DC9F56A223ED057F30F5475E3 Authority key identifier: B7:09:32:ED:6C:68:8D:58:89:7E:32:E1:D5:C9:90:B2:09:10:FF:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70932ED6C688D58897E32E1D5C990B20910FF02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/3130332e3132392e34322e302f32332d3234203d3e20313335343738.roa Signing time: Wed 05 Nov 2025 10:03:02 +0000 ROA not before: Wed 05 Nov 2025 09:58:02 +0000 ROA not after: Wed 04 Nov 2026 10:03:02 +0000 asID: 135478 IP address blocks: 103.129.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.crl rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70932ED6C688D58897E32E1D5C990B20910FF02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 17:26:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:e5:4b:d6:a2:8e:e7:6d:c9:f5:6a:22:3e:d0:57:f3:0f:54:75:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70932ED6C688D58897E32E1D5C990B20910FF02 Validity Not Before: Nov 5 09:58:02 2025 GMT Not After : Nov 4 10:03:02 2026 GMT Subject: CN=86B6F23A7EF0DBAB24F43530C2303D77515A3D7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6c:4c:f4:6a:1b:2d:a3:23:9f:61:54:c2:49: c1:1b:06:38:6f:5e:4b:b6:8a:84:7d:b7:1a:a0:81: 32:e3:13:39:93:f3:25:fd:a0:b1:f2:8a:70:8c:f0: e8:59:1a:11:11:a0:13:2b:f4:7f:fd:a1:94:5c:90: 3d:9a:73:a2:56:81:53:57:3e:4c:9b:e1:3c:9e:94: b6:2e:6b:d8:f5:10:56:a2:59:87:b7:72:28:a0:c6: b1:02:78:c5:e4:1c:69:18:39:89:67:1d:fb:35:00: b8:4b:4e:ba:1c:3f:c6:0a:d2:1d:ce:34:7d:4f:5c: a0:6f:d2:f3:d4:5b:0b:8c:5f:3d:f0:bd:96:cd:d6: f8:3b:b4:b1:46:1b:c7:db:f5:5f:ac:d4:08:fe:9d: 5f:b8:a9:73:d6:4a:55:1b:ab:15:16:45:dc:7f:bf: 69:57:d2:b4:5b:b5:7f:66:78:2f:2e:e0:db:3a:6c: c2:ca:c7:6e:04:a7:dc:38:54:eb:0f:61:e2:ae:d0: 28:32:8c:9d:61:57:30:c4:d9:9f:20:58:89:32:a8: 14:7f:ae:e0:1f:ef:97:4c:50:e2:00:ad:e0:54:16: 64:40:df:c2:c5:78:e5:37:28:99:9b:0e:2f:a7:ec: 55:c3:65:9a:ec:ca:95:82:ce:f6:0a:33:4d:f1:7b: 51:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B6:F2:3A:7E:F0:DB:AB:24:F4:35:30:C2:30:3D:77:51:5A:3D:7E X509v3 Authority Key Identifier: keyid:B7:09:32:ED:6C:68:8D:58:89:7E:32:E1:D5:C9:90:B2:09:10:FF:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70932ED6C688D58897E32E1D5C990B20910FF02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/3130332e3132392e34322e302f32332d3234203d3e20313335343738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.129.42.0/23 Signature Algorithm: sha256WithRSAEncryption b9:45:14:8b:43:b5:28:bf:b6:01:7b:eb:a6:b3:74:5d:45:6d: 50:66:9d:5e:55:37:e3:b0:f6:06:ee:ff:86:1e:f3:83:2a:d5: 75:90:66:95:49:cf:72:59:91:10:81:3f:22:16:18:52:32:9b: fe:36:ab:c4:c1:d6:6d:1a:47:74:b4:aa:22:6f:8b:38:7c:e6: 28:a7:e2:9b:99:b0:cd:aa:a8:d0:72:7b:15:ca:13:ba:22:72: 58:17:c3:7a:84:14:69:b5:71:d7:0e:07:68:5a:1e:5d:44:17: 7c:75:88:0d:4c:4d:f1:f6:61:ba:fb:d3:91:c8:06:58:ee:50: 96:87:67:3c:7f:b5:bb:87:0c:e9:b6:4a:f9:d1:40:50:df:81: e3:ea:74:c6:a4:d9:73:ee:60:3e:1f:5f:b0:54:6a:1d:91:2f: 89:73:fd:28:96:07:e7:fd:43:da:75:73:0e:26:0e:d4:c1:90: 23:c2:a2:bd:8a:a3:a7:32:4a:c7:64:21:59:0d:89:c9:5c:91: d9:64:23:fa:1d:a9:d2:11:4e:3d:2d:83:af:3e:c2:c9:11:85: c2:c2:20:a7:1b:e5:8a:0d:24:9c:65:d4:f2:05:36:9c:1b:94: 4f:ba:d1:3f:e3:87:30:6b:a8:c0:2f:bd:81:fa:33:da:4b:60: f6:47:25:66 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUXuVL1qKO523J9WoiPtBX8w9UdeMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcwOTMyRUQ2QzY4OEQ1ODg5N0UzMkUxRDVDOTkwQjIw OTEwRkYwMjAeFw0yNTExMDUwOTU4MDJaFw0yNjExMDQxMDAzMDJaMDMxMTAvBgNV BAMTKDg2QjZGMjNBN0VGMERCQUIyNEY0MzUzMEMyMzAzRDc3NTE1QTNEN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+bEz0ahstoyOfYVTCScEbBjhv Xku2ioR9txqggTLjEzmT8yX9oLHyinCM8OhZGhERoBMr9H/9oZRckD2ac6JWgVNX Pkyb4TyelLYua9j1EFaiWYe3ciigxrECeMXkHGkYOYlnHfs1ALhLTrocP8YK0h3O NH1PXKBv0vPUWwuMXz3wvZbN1vg7tLFGG8fb9V+s1Aj+nV+4qXPWSlUbqxUWRdx/ v2lX0rRbtX9meC8u4Ns6bMLKx24Ep9w4VOsPYeKu0CgyjJ1hVzDE2Z8gWIkyqBR/ ruAf75dMUOIAreBUFmRA38LFeOU3KJmbDi+n7FXDZZrsypWCzvYKM03xe1EpAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUhrbyOn7w26sk9DUwwjA9d1FaPX4wHwYDVR0j BBgwFoAUtwky7WxojViJfjLh1cmQsgkQ/wIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTkwZGE0OS05ODYyLTQxZGUtODMzZS1iMzA0ZjBjMWFlNTcvMC9CNzA5MzJFRDZD Njg4RDU4ODk3RTMyRTFENUM5OTBCMjA5MTBGRjAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjcwOTMyRUQ2QzY4OEQ1ODg5N0UzMkUxRDVDOTkwQjIwOTEw RkYwMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E5OTBkYTQ5LTk4NjItNDFkZS04 MzNlLWIzMDRmMGMxYWU1Ny8wLzMxMzAzMzJlMzEzMjM5MmUzNDMyMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzM1MzQzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ4EqMA0GCSqG SIb3DQEBCwUAA4IBAQC5RRSLQ7Uov7YBe+ums3RdRW1QZp1eVTfjsPYG7v+GHvOD KtV1kGaVSc9yWZEQgT8iFhhSMpv+NqvEwdZtGkd0tKoib4s4fOYop+KbmbDNqqjQ cnsVyhO6InJYF8N6hBRptXHXDgdoWh5dRBd8dYgNTE3x9mG6+9ORyAZY7lCWh2c8 f7W7hwzptkr50UBQ34Hj6nTGpNlz7mA+H1+wVGodkS+Jc/0olgfn/UPadXMOJg7U wZAjwqK9iqOnMkrHZCFZDYnJXJHZZCP6HanSEU49LYOvPsLJEYXCwiCnG+WKDSSc ZdTyBTacG5RPutE/44cwa6jAL72B+jPaS2D2RyVm -----END CERTIFICATE-----Generated at Wed Dec 3 11:48:52 2025 by rpki-client