This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/3130332e3231332e3233342e302f32342d3234203d3e20313336383733.roa File: 3130332e3231332e3233342e302f32342d3234203d3e20313336383733.roa (raw, json) Hash identifier: SVn/IknycpzSOwxi7uz3uMCs0oz5ucYpmEXX6TOqW1w= Subject key identifier: FA:B0:64:95:E0:C7:B8:46:9C:DA:34:56:63:B7:C1:E4:24:5E:F1:AF Certificate issuer: /CN=846D8A4B978C6F595D44EACDB8259295CD43C499 Certificate serial: 0BF4B0AB4AA1139A35339C5E2CC7760FDC6BD48B Authority key identifier: 84:6D:8A:4B:97:8C:6F:59:5D:44:EA:CD:B8:25:92:95:CD:43:C4:99 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/3130332e3231332e3233342e302f32342d3234203d3e20313336383733.roa Signing time: Wed 26 Nov 2025 11:34:57 +0000 ROA not before: Wed 26 Nov 2025 11:29:57 +0000 ROA not after: Wed 25 Nov 2026 11:34:57 +0000 asID: 136873 IP address blocks: 103.213.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.crl rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 15:58:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:f4:b0:ab:4a:a1:13:9a:35:33:9c:5e:2c:c7:76:0f:dc:6b:d4:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=846D8A4B978C6F595D44EACDB8259295CD43C499 Validity Not Before: Nov 26 11:29:57 2025 GMT Not After : Nov 25 11:34:57 2026 GMT Subject: CN=FAB06495E0C7B8469CDA345663B7C1E4245EF1AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:30:61:c0:8c:1e:45:73:8b:61:3d:a1:fc:1f: b5:31:55:5f:d8:b5:e9:f4:fe:a6:5f:8b:26:11:4e: 22:5d:3a:04:5a:be:92:eb:20:f1:5a:94:30:73:23: 99:d8:1e:19:ec:02:68:ed:6e:b9:67:43:4f:80:12: 17:53:50:e5:ee:3b:88:08:a0:a3:c3:e8:64:96:ca: 48:a3:8d:b8:49:0c:93:0c:e1:4b:50:a7:32:ab:90: 08:8a:8c:20:71:d9:91:b0:97:46:91:98:ae:b1:76: 66:22:35:81:63:9b:b2:cb:2a:55:46:10:b3:0c:5d: c1:cf:c2:7c:d7:e9:60:fe:a6:f3:44:c4:f0:00:6e: 52:2b:94:7e:33:1a:90:49:b1:6c:9b:ca:ef:1e:09: b7:5a:f7:37:1d:6d:1c:91:5d:e3:3f:e5:a4:54:d0: 0e:cf:49:c4:06:e6:81:f2:27:11:eb:e1:64:ec:70: d0:41:e1:47:23:18:16:9b:99:9e:21:8a:ee:9a:4b: d0:dc:56:0f:68:c0:38:e1:75:c4:9b:62:c7:c4:b0: 2b:cc:8a:ac:6b:14:ab:ad:16:5b:03:3f:56:1f:44: 8e:ba:6b:26:7e:bf:ea:24:1b:f4:18:87:d8:37:83: f5:50:b0:6e:4c:9a:08:1b:34:b5:50:f2:9c:28:c2: 42:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B0:64:95:E0:C7:B8:46:9C:DA:34:56:63:B7:C1:E4:24:5E:F1:AF X509v3 Authority Key Identifier: keyid:84:6D:8A:4B:97:8C:6F:59:5D:44:EA:CD:B8:25:92:95:CD:43:C4:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/3130332e3231332e3233342e302f32342d3234203d3e20313336383733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.213.234.0/24 Signature Algorithm: sha256WithRSAEncryption 29:76:0b:bf:52:e8:34:e7:df:3b:56:d8:84:2f:a2:bf:2c:83: ce:28:2e:45:ce:3c:a0:1d:d0:20:93:51:ed:12:82:0c:91:e8: c4:7d:25:c2:4c:b4:e6:d1:c5:89:b3:d3:17:f3:e6:40:60:26: da:0f:ca:99:a9:c3:97:5c:c2:c8:81:5c:65:1d:e8:c7:99:98: eb:65:88:14:0f:2c:aa:1d:ac:c2:f8:38:0a:5f:03:ed:56:16: 4d:87:84:f3:15:a2:bb:f5:9d:15:43:56:38:8a:a9:b8:e8:55: bb:ec:98:7e:2e:ce:fa:71:64:9a:df:47:bb:be:16:20:29:f1: 39:21:13:b0:12:79:72:0d:07:25:22:bc:2d:31:15:5b:ce:0a: 59:ff:2b:af:83:c7:d2:02:60:e5:81:ad:2e:53:ed:f9:08:5a: 63:85:b5:46:df:49:fb:ac:16:1b:f9:47:8a:72:69:ab:93:05: 09:8b:2a:7e:08:a7:b5:b3:28:30:d4:4a:6b:24:0d:f5:a9:20: cb:ba:9c:66:63:0d:4c:56:df:85:62:14:26:74:bb:87:ea:01: c2:48:87:66:16:9c:f9:b0:62:6a:8e:19:73:75:59:77:c1:97: 77:61:3c:c4:4e:cd:76:7a:68:8b:f8:0b:7e:24:3c:d9:77:a7: f4:13:70:9f -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUC/Swq0qhE5o1M5xeLMd2D9xr1IswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ2RDhBNEI5NzhDNkY1OTVENDRFQUNEQjgyNTkyOTVD RDQzQzQ5OTAeFw0yNTExMjYxMTI5NTdaFw0yNjExMjUxMTM0NTdaMDMxMTAvBgNV BAMTKEZBQjA2NDk1RTBDN0I4NDY5Q0RBMzQ1NjYzQjdDMUU0MjQ1RUYxQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2MGHAjB5Fc4thPaH8H7UxVV/Y ten0/qZfiyYRTiJdOgRavpLrIPFalDBzI5nYHhnsAmjtbrlnQ0+AEhdTUOXuO4gI oKPD6GSWykijjbhJDJMM4UtQpzKrkAiKjCBx2ZGwl0aRmK6xdmYiNYFjm7LLKlVG ELMMXcHPwnzX6WD+pvNExPAAblIrlH4zGpBJsWybyu8eCbda9zcdbRyRXeM/5aRU 0A7PScQG5oHyJxHr4WTscNBB4UcjGBabmZ4hiu6aS9DcVg9owDjhdcSbYsfEsCvM iqxrFKutFlsDP1YfRI66ayZ+v+okG/QYh9g3g/VQsG5MmggbNLVQ8pwowkIPAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU+rBkleDHuEac2jRWY7fB5CRe8a8wHwYDVR0j BBgwFoAUhG2KS5eMb1ldROrNuCWSlc1DxJkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDdmYTIxMC01ZjI1LTRmMGItODlhNS03ZDAwYTM1NGE5MDcvMC84NDZEOEE0Qjk3 OEM2RjU5NUQ0NEVBQ0RCODI1OTI5NUNENDNDNDk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ2RDhBNEI5NzhDNkY1OTVENDRFQUNEQjgyNTkyOTVDRDQz QzQ5OS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JkN2ZhMjEwLTVmMjUtNGYwYi04 OWE1LTdkMDBhMzU0YTkwNy8wLzMxMzAzMzJlMzIzMTMzMmUzMjMzMzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzODM3MzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn1eowDQYJ KoZIhvcNAQELBQADggEBACl2C79S6DTn3ztW2IQvor8sg84oLkXOPKAd0CCTUe0S ggyR6MR9JcJMtObRxYmz0xfz5kBgJtoPypmpw5dcwsiBXGUd6MeZmOtliBQPLKod rML4OApfA+1WFk2HhPMVorv1nRVDVjiKqbjoVbvsmH4uzvpxZJrfR7u+FiAp8Tkh E7ASeXINByUivC0xFVvOCln/K6+Dx9ICYOWBrS5T7fkIWmOFtUbfSfusFhv5R4py aauTBQmLKn4Ip7WzKDDUSmskDfWpIMu6nGZjDUxW34ViFCZ0u4fqAcJIh2YWnPmw YmqOGXN1WXfBl3dhPMROzXZ6aIv4C34kPNl3p/QTcJ8= -----END CERTIFICATE-----Generated at Wed Dec 3 14:54:49 2025 by rpki-client