This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/3130332e3134372e38302e302f32332d3233203d3e20323135373237.roa File: 3130332e3134372e38302e302f32332d3233203d3e20323135373237.roa (raw, json) Hash identifier: YkSgIj60/WrfXjkzTsvNmSBHnWYo3l/r2aakVLlTHlI= Subject key identifier: 4A:AB:1F:88:4E:72:2E:A7:CC:19:9A:A2:E0:93:A3:20:AF:FB:4E:43 Certificate issuer: /CN=A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246 Certificate serial: 3DAD819C7EEBCE373071080744328EEDE318939F Authority key identifier: A3:EF:DD:DA:D5:26:EF:A3:F2:82:1E:9E:6E:C6:E7:47:BB:5B:12:46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/3130332e3134372e38302e302f32332d3233203d3e20323135373237.roa Signing time: Mon 17 Nov 2025 23:12:42 +0000 ROA not before: Mon 17 Nov 2025 23:07:42 +0000 ROA not after: Mon 16 Nov 2026 23:12:42 +0000 asID: 215727 IP address blocks: 103.147.80.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 14:44:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:ad:81:9c:7e:eb:ce:37:30:71:08:07:44:32:8e:ed:e3:18:93:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246 Validity Not Before: Nov 17 23:07:42 2025 GMT Not After : Nov 16 23:12:42 2026 GMT Subject: CN=4AAB1F884E722EA7CC199AA2E093A320AFFB4E43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0d:8f:f8:23:0e:f6:ad:58:48:2b:a4:43:73: 9a:6b:be:aa:0b:a4:61:40:94:df:b3:c9:22:74:68: 07:04:2b:96:29:02:ba:6a:da:44:b2:08:be:92:bd: 60:c6:12:67:3f:42:4d:1d:3b:a2:18:d6:dd:1f:a5: 8d:57:ba:20:04:e5:6c:29:b8:a8:26:9f:4d:37:3d: a6:7b:48:0b:1d:aa:32:7e:ab:43:40:11:df:b5:27: 35:51:11:8f:9c:f6:a7:d0:1d:17:33:64:7f:a2:35: ae:d6:b9:94:af:ca:87:3d:99:92:73:ed:60:6f:31: cf:ad:16:43:a7:c6:9f:41:e2:97:96:cf:b2:1d:4b: a2:96:0c:68:2d:79:52:d8:d2:a3:9f:f2:25:cb:7b: d4:c7:da:e3:bc:21:3c:90:d6:ad:a9:ef:67:4c:13: b0:a1:9c:92:5a:2f:01:70:4d:98:a6:93:13:c3:a2: b8:11:3b:60:63:a1:9d:e6:c1:5e:5b:81:ee:dd:b7: b0:68:6d:65:bb:7c:d0:57:4b:e8:1f:45:c8:20:a9: 95:7e:16:4d:d7:a2:3f:a9:a1:46:d0:e4:3b:a5:60: b7:4d:24:f5:b2:3d:d9:30:56:fd:cb:0d:be:96:0f: 26:87:36:94:3c:ea:bc:8e:24:1e:92:53:2c:d4:2e: 2d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:AB:1F:88:4E:72:2E:A7:CC:19:9A:A2:E0:93:A3:20:AF:FB:4E:43 X509v3 Authority Key Identifier: keyid:A3:EF:DD:DA:D5:26:EF:A3:F2:82:1E:9E:6E:C6:E7:47:BB:5B:12:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/3130332e3134372e38302e302f32332d3233203d3e20323135373237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.80.0/23 Signature Algorithm: sha256WithRSAEncryption 66:dc:78:58:ed:d6:04:af:e2:f8:ed:81:f0:01:a7:56:38:c5: b1:3c:be:62:9b:f6:c1:61:a6:4b:95:75:fa:af:84:39:bf:b0: 8b:f9:fc:39:e1:7e:e5:71:76:41:06:44:c1:23:14:e6:91:75: 29:01:58:c0:91:6c:43:cc:dc:4f:16:7e:29:6c:03:87:19:7b: 19:ec:31:d2:9b:aa:2a:ed:72:74:65:94:61:cf:6b:9d:ca:1a: a5:68:4e:23:ca:78:de:fc:d8:02:a8:c5:b0:25:9c:46:98:c8: 4a:16:ac:ac:91:7c:52:d9:84:b7:7d:37:bc:6d:82:26:dd:f2: 2f:94:01:9f:f3:cd:be:44:79:68:87:a4:61:52:d4:7b:f0:46: d9:d8:c3:1b:b1:b7:32:5f:ac:ad:81:f9:40:50:a5:85:db:6e: 41:a8:a2:15:fb:ee:b0:16:52:33:af:ea:3d:11:b3:d1:44:50: 0b:bb:65:c6:c5:f9:bc:53:a9:3b:bc:e0:e4:18:bd:93:74:4a: 7e:df:d6:44:22:33:17:6e:1b:65:e5:f3:d3:27:28:c8:d1:0c: 04:fe:1c:24:c2:e1:4f:7a:73:60:0d:81:e3:8c:90:0f:5f:62: 17:cc:45:39:71:ba:1b:93:d9:3f:a0:c2:ec:81:70:6d:87:e0: fd:ae:a4:41 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUPa2BnH7rzjcwcQgHRDKO7eMYk58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3NDdC QjVCMTI0NjAeFw0yNTExMTcyMzA3NDJaFw0yNjExMTYyMzEyNDJaMDMxMTAvBgNV BAMTKDRBQUIxRjg4NEU3MjJFQTdDQzE5OUFBMkUwOTNBMzIwQUZGQjRFNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLDY/4Iw72rVhIK6RDc5prvqoL pGFAlN+zySJ0aAcEK5YpArpq2kSyCL6SvWDGEmc/Qk0dO6IY1t0fpY1XuiAE5Wwp uKgmn003PaZ7SAsdqjJ+q0NAEd+1JzVREY+c9qfQHRczZH+iNa7WuZSvyoc9mZJz 7WBvMc+tFkOnxp9B4peWz7IdS6KWDGgteVLY0qOf8iXLe9TH2uO8ITyQ1q2p72dM E7ChnJJaLwFwTZimkxPDorgRO2BjoZ3mwV5bge7dt7BobWW7fNBXS+gfRcggqZV+ Fk3Xoj+poUbQ5DulYLdNJPWyPdkwVv3LDb6WDyaHNpQ86ryOJB6SUyzULi2FAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUSqsfiE5yLqfMGZqi4JOjIK/7TkMwHwYDVR0j BBgwFoAUo+/d2tUm76Pygh6ebsbnR7tbEkYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NmM1NzBlZi02ZWZkLTRmOTctYmYzMS05NjgxMjZhYjU3YzAvMC9BM0VGREREQUQ1 MjZFRkEzRjI4MjFFOUU2RUM2RTc0N0JCNUIxMjQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3NDdCQjVC MTI0Ni5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M2YzU3MGVmLTZlZmQtNGY5Ny1i ZjMxLTk2ODEyNmFiNTdjMC8wLzMxMzAzMzJlMzEzNDM3MmUzODMwMmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzIzMTM1MzczMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5NQMA0GCSqG SIb3DQEBCwUAA4IBAQBm3HhY7dYEr+L47YHwAadWOMWxPL5im/bBYaZLlXX6r4Q5 v7CL+fw54X7lcXZBBkTBIxTmkXUpAVjAkWxDzNxPFn4pbAOHGXsZ7DHSm6oq7XJ0 ZZRhz2udyhqlaE4jynje/NgCqMWwJZxGmMhKFqyskXxS2YS3fTe8bYIm3fIvlAGf 882+RHloh6RhUtR78EbZ2MMbsbcyX6ytgflAUKWF225BqKIV++6wFlIzr+o9EbPR RFALu2XGxfm8U6k7vODkGL2TdEp+39ZEIjMXbhtl5fPTJyjI0QwE/hwkwuFPenNg DYHjjJAPX2IXzEU5cbobk9k/oMLsgXBth+D9rqRB -----END CERTIFICATE-----Generated at Wed Dec 3 14:54:49 2025 by rpki-client