This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/3130332e3139332e3136372e302f32342d3234203d3e20313530313835.roa File: 3130332e3139332e3136372e302f32342d3234203d3e20313530313835.roa (raw, json) Hash identifier: cqOcJAZKbrP9HYe2ShHrvgf1/zKk7TB83EYec3+QDIo= Subject key identifier: 83:7F:7A:EC:61:F9:17:CC:04:8C:5E:5A:27:D0:41:B8:7C:65:33:EE Certificate issuer: /CN=210BE7BD512F122FD63FE9057A7F1522DC9B81A7 Certificate serial: 60FA5F05D03AE44D55AF2E68F3D41270EBE8FE7E Authority key identifier: 21:0B:E7:BD:51:2F:12:2F:D6:3F:E9:05:7A:7F:15:22:DC:9B:81:A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/3130332e3139332e3136372e302f32342d3234203d3e20313530313835.roa Signing time: Fri 12 Dec 2025 11:02:28 +0000 ROA not before: Fri 12 Dec 2025 10:57:28 +0000 ROA not after: Fri 11 Dec 2026 11:02:28 +0000 asID: 150185 IP address blocks: 103.193.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.crl rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 04:12:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:fa:5f:05:d0:3a:e4:4d:55:af:2e:68:f3:d4:12:70:eb:e8:fe:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=210BE7BD512F122FD63FE9057A7F1522DC9B81A7 Validity Not Before: Dec 12 10:57:28 2025 GMT Not After : Dec 11 11:02:28 2026 GMT Subject: CN=837F7AEC61F917CC048C5E5A27D041B87C6533EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ff:84:96:f7:f6:3f:fb:d2:b5:b1:fd:25:be: 25:e2:33:f7:e5:34:85:a0:c6:8a:98:8a:ee:a0:11: 19:26:b8:07:bc:6e:60:f5:4b:1f:c3:b7:7f:1a:83: 84:d1:50:38:7c:74:77:91:74:b5:08:fd:5a:1d:f3: 34:9d:4d:a8:43:49:af:4f:b2:74:59:f1:f4:ad:65: b4:9f:9f:7a:85:a4:62:5d:f3:3e:97:86:55:8e:33: a9:93:07:45:64:f7:3b:b1:ed:32:33:6c:f4:45:0e: 1a:6f:3f:26:eb:b9:cf:d0:a5:e2:cf:74:13:2c:2e: a8:8e:2f:9a:c8:60:56:e7:7f:df:d3:f2:48:0c:9b: ed:96:48:b6:7a:c9:be:f6:98:d7:1a:e8:0b:d6:16: ec:4e:e8:83:5c:29:54:ab:e8:64:ce:d7:2e:f2:01: d0:19:12:93:42:b4:9d:b1:74:c5:0f:df:3a:28:d6: 79:fc:1e:98:1b:ba:6f:18:3a:af:36:51:f4:d0:de: 89:8e:f1:6b:5e:1a:d1:ac:b1:f2:fa:30:7c:d2:3d: b4:a5:5e:72:49:e1:a8:1f:9c:88:d9:a6:85:ef:3a: 60:f2:7f:54:47:c8:92:13:b1:cf:92:ce:7a:27:10: ed:65:98:f4:42:30:16:d3:25:5f:da:56:15:ce:22: 36:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:7F:7A:EC:61:F9:17:CC:04:8C:5E:5A:27:D0:41:B8:7C:65:33:EE X509v3 Authority Key Identifier: keyid:21:0B:E7:BD:51:2F:12:2F:D6:3F:E9:05:7A:7F:15:22:DC:9B:81:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/3130332e3139332e3136372e302f32342d3234203d3e20313530313835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.193.167.0/24 Signature Algorithm: sha256WithRSAEncryption 61:9a:ed:96:80:38:c1:9d:42:47:84:29:78:c7:23:da:64:d6: 92:2e:f6:ca:24:7a:b5:69:49:f7:5f:8d:ae:95:a0:a7:fc:1d: 3f:8d:4a:fd:f8:f1:0c:83:5b:47:13:f0:f6:11:54:3f:ff:db: 6b:90:8c:e0:9d:c4:64:b0:e1:ab:22:1f:d3:89:57:81:cb:a0: 88:89:2c:53:10:5e:66:85:46:f4:bf:e9:39:30:08:2a:75:26: 1a:19:d1:65:bf:aa:bf:6e:ec:d8:b0:7b:28:e4:2d:56:b7:fa: ed:f9:dd:34:26:2f:d8:e8:32:3e:bf:5a:9e:f2:e4:3f:e4:26: ef:a9:07:b2:df:3a:47:a4:b5:b7:25:71:de:a8:12:de:16:49: ea:db:cd:25:20:0d:64:f7:6e:59:4c:04:b9:8d:55:ac:3d:56: 21:55:bb:75:7b:b5:96:fe:16:9f:cc:79:c8:53:f8:24:87:cd: da:d4:e7:05:95:9b:dc:ce:b7:d3:f2:f0:f6:7b:b3:9d:b7:bc: f9:7b:e9:ac:73:00:35:50:96:a5:86:6b:f1:d0:64:f1:5d:bc: bc:31:59:e6:69:91:34:b6:1f:17:a7:40:36:33:b5:60:18:20: 88:ff:09:3d:e1:3c:0a:60:1d:96:ad:6a:30:13:c6:c0:06:9e: 62:9d:45:1b -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUYPpfBdA65E1Vry5o89QScOvo/n4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjEwQkU3QkQ1MTJGMTIyRkQ2M0ZFOTA1N0E3RjE1MjJE QzlCODFBNzAeFw0yNTEyMTIxMDU3MjhaFw0yNjEyMTExMTAyMjhaMDMxMTAvBgNV BAMTKDgzN0Y3QUVDNjFGOTE3Q0MwNDhDNUU1QTI3RDA0MUI4N0M2NTMzRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD/4SW9/Y/+9K1sf0lviXiM/fl NIWgxoqYiu6gERkmuAe8bmD1Sx/Dt38ag4TRUDh8dHeRdLUI/Vod8zSdTahDSa9P snRZ8fStZbSfn3qFpGJd8z6XhlWOM6mTB0Vk9zux7TIzbPRFDhpvPybruc/QpeLP dBMsLqiOL5rIYFbnf9/T8kgMm+2WSLZ6yb72mNca6AvWFuxO6INcKVSr6GTO1y7y AdAZEpNCtJ2xdMUP3zoo1nn8Hpgbum8YOq82UfTQ3omO8WteGtGssfL6MHzSPbSl XnJJ4agfnIjZpoXvOmDyf1RHyJITsc+SznonEO1lmPRCMBbTJV/aVhXOIjZNAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUg3967GH5F8wEjF5aJ9BBuHxlM+4wHwYDVR0j BBgwFoAUIQvnvVEvEi/WP+kFen8VItybgacwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NzAzNjk3NC04MTMxLTQ1YWYtOTRjZS1mNDliNDgxMWMxNzMvMC8yMTBCRTdCRDUx MkYxMjJGRDYzRkU5MDU3QTdGMTUyMkRDOUI4MUE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjEwQkU3QkQ1MTJGMTIyRkQ2M0ZFOTA1N0E3RjE1MjJEQzlC ODFBNy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I3MDM2OTc0LTgxMzEtNDVhZi05 NGNlLWY0OWI0ODExYzE3My8wLzMxMzAzMzJlMzEzOTMzMmUzMTM2MzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzAzMTM4MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnwacwDQYJ KoZIhvcNAQELBQADggEBAGGa7ZaAOMGdQkeEKXjHI9pk1pIu9sokerVpSfdfja6V oKf8HT+NSv348QyDW0cT8PYRVD//22uQjOCdxGSw4asiH9OJV4HLoIiJLFMQXmaF RvS/6TkwCCp1JhoZ0WW/qr9u7NiweyjkLVa3+u353TQmL9joMj6/Wp7y5D/kJu+p B7LfOkektbclcd6oEt4WSerbzSUgDWT3bllMBLmNVaw9ViFVu3V7tZb+Fp/MechT +CSHzdrU5wWVm9zOt9Py8PZ7s523vPl76axzADVQlqWGa/HQZPFdvLwxWeZpkTS2 HxenQDYztWAYIIj/CT3hPApgHZatajATxsAGnmKdRRs= -----END CERTIFICATE-----Generated at Fri Dec 19 10:39:37 2025 by rpki-client