This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/3130332e3137332e3134312e302f32342d3234203d3e203538343835.roa File: 3130332e3137332e3134312e302f32342d3234203d3e203538343835.roa (raw, json) Hash identifier: P9ZT0gx4PZCiyvKWCx2aRwpm5VsSmy2L7+39A7JpiDw= Subject key identifier: 2B:26:91:D7:52:73:4E:0F:8A:FC:DD:1B:81:DF:08:1F:48:5E:CD:A6 Certificate issuer: /CN=E35DA07B114BD42901F7C1DB8E684E995E2E4433 Certificate serial: 2D31B64FDDE1B77425C1649CB0548E3FBDE7FD Authority key identifier: E3:5D:A0:7B:11:4B:D4:29:01:F7:C1:DB:8E:68:4E:99:5E:2E:44:33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/3130332e3137332e3134312e302f32342d3234203d3e203538343835.roa Signing time: Wed 12 Nov 2025 21:00:02 +0000 ROA not before: Wed 12 Nov 2025 20:55:02 +0000 ROA not after: Wed 11 Nov 2026 21:00:02 +0000 asID: 58485 IP address blocks: 103.173.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.crl rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 14:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:31:b6:4f:dd:e1:b7:74:25:c1:64:9c:b0:54:8e:3f:bd:e7:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E35DA07B114BD42901F7C1DB8E684E995E2E4433 Validity Not Before: Nov 12 20:55:02 2025 GMT Not After : Nov 11 21:00:02 2026 GMT Subject: CN=2B2691D752734E0F8AFCDD1B81DF081F485ECDA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5a:5b:3c:f9:b1:b0:eb:23:c7:4e:ad:5f:31: 96:07:11:69:fc:ff:a7:00:7a:d6:c9:c9:0a:68:c2: 76:cd:89:14:3b:0c:80:7e:2a:f2:38:b2:2e:48:0f: 73:c1:83:ba:a0:15:52:a4:0c:fd:39:f4:47:fe:c0: 99:b6:95:5d:9d:ec:89:81:0b:c0:5d:f1:76:bb:d5: 46:92:f5:ca:17:8c:5e:b8:d9:c3:22:59:07:8d:5f: 4b:e6:18:3d:52:81:86:01:d7:a3:64:f6:f4:a2:b2: e1:d4:a1:a9:43:6c:ca:e0:0a:fc:c7:02:5b:28:fb: 5b:01:64:c9:c0:b3:c6:bd:b1:74:80:9e:82:a2:38: 01:16:8b:0e:88:09:44:be:b5:0a:d2:9e:63:d8:2d: 0c:75:36:d8:28:96:de:75:27:d7:39:0c:90:09:3b: d6:3a:5a:b7:9a:e0:66:69:7c:29:a9:82:b0:65:1f: 5d:ca:5c:54:97:ed:e8:50:b6:19:32:dd:9c:7c:2d: c0:9c:45:7b:39:84:0c:f8:ef:c4:7b:1b:1d:29:4c: d1:02:3f:e7:70:04:97:ac:df:49:ca:c4:c8:ce:75: de:de:2b:4b:79:e6:d2:95:86:6b:76:fa:0e:68:ef: ce:c7:b6:d5:bb:ac:45:e6:38:f5:c9:63:96:c4:78: 23:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:26:91:D7:52:73:4E:0F:8A:FC:DD:1B:81:DF:08:1F:48:5E:CD:A6 X509v3 Authority Key Identifier: keyid:E3:5D:A0:7B:11:4B:D4:29:01:F7:C1:DB:8E:68:4E:99:5E:2E:44:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/3130332e3137332e3134312e302f32342d3234203d3e203538343835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.173.141.0/24 Signature Algorithm: sha256WithRSAEncryption 63:56:9f:21:8b:f1:15:e8:c6:de:c6:21:10:7e:b8:7e:21:57: f6:69:c9:1f:d2:5a:f1:90:d3:f7:5c:21:f1:f1:12:d5:fc:62: b1:98:57:57:37:5b:c6:fd:c6:00:0f:a4:e2:59:a6:bc:71:59: c4:3e:eb:c8:f7:ce:32:be:93:74:e1:df:9b:30:40:b6:74:43: 2e:32:9d:fd:c2:5c:a7:40:1c:1c:2a:8d:07:58:4f:61:a6:53: 04:85:e4:86:dd:f9:37:4e:ab:db:f8:db:71:da:56:e8:f1:6d: ae:f6:e5:8e:48:f5:53:5e:02:fc:ba:f6:3f:88:8c:c4:f1:2d: 30:38:71:76:f4:d0:e7:07:23:ef:f1:3d:78:10:7d:5f:69:4f: 74:a1:e7:73:c7:5e:da:0a:28:a3:18:8f:57:46:07:cc:0b:cc: a3:d9:c3:ce:fa:6e:00:4a:4e:4e:e3:e1:a8:7d:7d:e6:50:20: 1e:fd:5e:f1:e7:d4:a3:48:29:0d:34:40:4b:d5:c5:62:1f:90: 65:88:c8:53:ce:0c:08:69:d2:80:02:58:07:2f:a3:15:91:2d: a6:c2:1b:41:bc:0a:77:7e:1f:7a:d7:44:38:b2:52:e6:f7:69: d8:a3:13:a5:b7:16:74:73:4d:3a:be:a4:b8:eb:2f:b0:40:e3: 21:b5:7a:f3 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgITLTG2T93ht3QlwWScsFSOP73n/TANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhFMzVEQTA3QjExNEJENDI5MDFGN0MxREI4RTY4NEU5OTVF MkU0NDMzMB4XDTI1MTExMjIwNTUwMloXDTI2MTExMTIxMDAwMlowMzExMC8GA1UE AxMoMkIyNjkxRDc1MjczNEUwRjhBRkNERDFCODFERjA4MUY0ODVFQ0RBNjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMpaWzz5sbDrI8dOrV8xlgcRafz/ pwB61snJCmjCds2JFDsMgH4q8jiyLkgPc8GDuqAVUqQM/Tn0R/7AmbaVXZ3siYEL wF3xdrvVRpL1yheMXrjZwyJZB41fS+YYPVKBhgHXo2T29KKy4dShqUNsyuAK/McC Wyj7WwFkycCzxr2xdICegqI4ARaLDogJRL61CtKeY9gtDHU22CiW3nUn1zkMkAk7 1jpat5rgZml8KamCsGUfXcpcVJft6FC2GTLdnHwtwJxFezmEDPjvxHsbHSlM0QI/ 53AEl6zfScrEyM513t4rS3nm0pWGa3b6Dmjvzse21busReY49cljlsR4I+cCAwEA AaOCAjQwggIwMB0GA1UdDgQWBBQrJpHXUnNOD4r83RuB3wgfSF7NpjAfBgNVHSME GDAWgBTjXaB7EUvUKQH3wduOaE6ZXi5EMzAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Fh YWJiNTc4LWI5ZGItNGE0Ny04ZDdlLTExYTYzNDI4OTAxOC8wL0UzNURBMDdCMTE0 QkQ0MjkwMUY3QzFEQjhFNjg0RTk5NUUyRTQ0MzMuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi9FMzVEQTA3QjExNEJENDI5MDFGN0MxREI4RTY4NEU5OTVFMkU0 NDMzLmNlcjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUFBzALhoGEcnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFhYmI1NzgtYjlkYi00YTQ3LThk N2UtMTFhNjM0Mjg5MDE4LzAvMzEzMDMzMmUzMTM3MzMyZTMxMzQzMTJlMzAyZjMy MzQyZDMyMzQyMDNkM2UyMDM1MzgzNDM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnrY0wDQYJKoZI hvcNAQELBQADggEBAGNWnyGL8RXoxt7GIRB+uH4hV/ZpyR/SWvGQ0/dcIfHxEtX8 YrGYV1c3W8b9xgAPpOJZprxxWcQ+68j3zjK+k3Th35swQLZ0Qy4ynf3CXKdAHBwq jQdYT2GmUwSF5Ibd+TdOq9v423HaVujxba725Y5I9VNeAvy69j+IjMTxLTA4cXb0 0OcHI+/xPXgQfV9pT3Sh53PHXtoKKKMYj1dGB8wLzKPZw876bgBKTk7j4ah9feZQ IB79XvHn1KNIKQ00QEvVxWIfkGWIyFPODAhp0oACWAcvoxWRLabCG0G8Cnd+H3rX RDiyUub3adijE6W3FnRzTTq+pLjrL7BA4yG1evM= -----END CERTIFICATE-----Generated at Wed Dec 3 15:28:51 2025 by rpki-client