This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/3130332e3134372e38302e302f32342d3234203d3e20323135373237.roa File: 3130332e3134372e38302e302f32342d3234203d3e20323135373237.roa (raw, json) Hash identifier: OYS8ELzbytajd0ilVDQZgP9NBUy3Oh9sGjo4E0+GTlo= Subject key identifier: 42:A5:DD:17:B3:64:BE:21:63:3B:EE:8B:B7:03:F4:BD:43:34:6B:BF Certificate issuer: /CN=A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246 Certificate serial: 720294E64C889AE160A7EE2EC6C415EAFBDAD4EA Authority key identifier: A3:EF:DD:DA:D5:26:EF:A3:F2:82:1E:9E:6E:C6:E7:47:BB:5B:12:46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/3130332e3134372e38302e302f32342d3234203d3e20323135373237.roa Signing time: Mon 17 Nov 2025 23:12:56 +0000 ROA not before: Mon 17 Nov 2025 23:07:56 +0000 ROA not after: Mon 16 Nov 2026 23:12:56 +0000 asID: 215727 IP address blocks: 103.147.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 14:44:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:02:94:e6:4c:88:9a:e1:60:a7:ee:2e:c6:c4:15:ea:fb:da:d4:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246 Validity Not Before: Nov 17 23:07:56 2025 GMT Not After : Nov 16 23:12:56 2026 GMT Subject: CN=42A5DD17B364BE21633BEE8BB703F4BD43346BBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5d:76:32:75:6b:c5:64:1d:67:d1:a2:98:f1: 0a:19:0f:17:63:2d:8b:b8:6a:04:29:e5:5c:0c:17: e5:df:72:7b:20:32:8c:da:33:f6:2f:41:37:2e:b5: 44:22:83:a6:a9:89:2a:2d:e0:32:e4:02:98:d8:dd: 2f:c1:dc:7f:2c:97:66:62:1b:c6:0b:1d:83:03:b0: c8:4b:75:83:5b:7f:07:b8:e7:06:00:a2:39:e0:e8: e0:04:21:87:0e:5c:7d:77:2b:39:9e:8c:72:db:f0: b4:f8:88:78:e0:0c:ee:5a:f7:f2:cf:2e:c2:76:fe: ce:6c:56:d2:a7:9b:e4:5c:3d:51:58:95:fd:97:fd: 34:2a:a6:79:df:e1:f8:6c:e5:60:46:15:31:03:69: e4:e6:30:f1:73:8a:11:2a:c7:4d:8c:69:9d:a7:00: 71:29:97:db:19:17:2f:b3:18:4c:ad:0a:e4:db:76: 38:48:5e:8f:bb:39:7b:f7:cb:df:83:af:f6:ef:0e: bf:db:1c:c6:b5:57:8c:6e:17:33:45:38:98:0a:47: f7:ba:f2:49:6a:89:dd:2e:f7:2d:dd:45:14:28:0d: d3:99:eb:5c:11:01:ac:44:ed:16:f4:d4:d6:50:b5: f6:61:04:eb:dc:f4:50:1d:0a:97:00:8a:c0:9f:fc: 68:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A5:DD:17:B3:64:BE:21:63:3B:EE:8B:B7:03:F4:BD:43:34:6B:BF X509v3 Authority Key Identifier: keyid:A3:EF:DD:DA:D5:26:EF:A3:F2:82:1E:9E:6E:C6:E7:47:BB:5B:12:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/3130332e3134372e38302e302f32342d3234203d3e20323135373237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.80.0/24 Signature Algorithm: sha256WithRSAEncryption 39:c3:f4:db:fd:fa:43:41:78:d8:f7:09:61:ac:4e:76:f0:1f: d5:ef:ae:de:b2:ef:74:1d:b5:1c:5f:85:84:c0:26:2c:92:85: 8e:a9:c8:2d:3e:3c:b8:67:9e:de:d8:b7:1d:a6:33:c4:4e:62: 7e:bc:d7:f7:9e:ed:87:08:c5:2d:2a:0f:24:47:dc:41:e0:78: 78:8a:f3:13:ca:cd:45:c9:fd:72:79:00:52:9f:d7:87:c5:00: 4f:39:12:9b:a5:b5:14:a1:42:1d:84:fe:bb:c8:02:e1:7b:48: 9c:eb:3a:ae:aa:23:bf:88:d1:a4:04:ff:b8:b0:25:25:29:d8: cf:3e:54:5c:e3:9e:82:5a:2c:4c:87:37:dc:fe:1e:f5:c1:c9: dc:1d:69:17:d4:2a:58:e7:75:13:e5:76:90:52:dd:7d:34:48: c1:5c:e2:e9:81:bc:05:93:95:80:a6:1e:fa:a8:fa:b3:97:9f: ef:28:0e:b5:3f:ec:e4:9e:ac:f3:42:5c:03:12:af:f5:88:70: cd:63:0c:1c:a3:f6:62:15:18:b3:89:f8:cc:3a:0c:05:f3:ed: 21:9f:19:3e:a7:55:ed:34:b5:6a:7d:05:a3:74:06:f3:52:9d: c1:e1:ef:d9:e5:f5:95:80:5e:32:d3:37:eb:0c:40:9c:a5:52: 05:9f:a5:79 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUcgKU5kyImuFgp+4uxsQV6vva1OowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3NDdC QjVCMTI0NjAeFw0yNTExMTcyMzA3NTZaFw0yNjExMTYyMzEyNTZaMDMxMTAvBgNV BAMTKDQyQTVERDE3QjM2NEJFMjE2MzNCRUU4QkI3MDNGNEJENDMzNDZCQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkXXYydWvFZB1n0aKY8QoZDxdj LYu4agQp5VwMF+XfcnsgMozaM/YvQTcutUQig6apiSot4DLkApjY3S/B3H8sl2Zi G8YLHYMDsMhLdYNbfwe45wYAojng6OAEIYcOXH13KzmejHLb8LT4iHjgDO5a9/LP LsJ2/s5sVtKnm+RcPVFYlf2X/TQqpnnf4fhs5WBGFTEDaeTmMPFzihEqx02MaZ2n AHEpl9sZFy+zGEytCuTbdjhIXo+7OXv3y9+Dr/bvDr/bHMa1V4xuFzNFOJgKR/e6 8klqid0u9y3dRRQoDdOZ61wRAaxE7Rb01NZQtfZhBOvc9FAdCpcAisCf/GhrAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUQqXdF7NkviFjO+6LtwP0vUM0a78wHwYDVR0j BBgwFoAUo+/d2tUm76Pygh6ebsbnR7tbEkYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NmM1NzBlZi02ZWZkLTRmOTctYmYzMS05NjgxMjZhYjU3YzAvMC9BM0VGREREQUQ1 MjZFRkEzRjI4MjFFOUU2RUM2RTc0N0JCNUIxMjQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3NDdCQjVC MTI0Ni5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M2YzU3MGVmLTZlZmQtNGY5Ny1i ZjMxLTk2ODEyNmFiNTdjMC8wLzMxMzAzMzJlMzEzNDM3MmUzODMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzMTM1MzczMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5NQMA0GCSqG SIb3DQEBCwUAA4IBAQA5w/Tb/fpDQXjY9wlhrE528B/V767esu90HbUcX4WEwCYs koWOqcgtPjy4Z57e2LcdpjPETmJ+vNf3nu2HCMUtKg8kR9xB4Hh4ivMTys1Fyf1y eQBSn9eHxQBPORKbpbUUoUIdhP67yALhe0ic6zquqiO/iNGkBP+4sCUlKdjPPlRc 456CWixMhzfc/h71wcncHWkX1CpY53UT5XaQUt19NEjBXOLpgbwFk5WAph76qPqz l5/vKA61P+zknqzzQlwDEq/1iHDNYwwco/ZiFRizifjMOgwF8+0hnxk+p1XtNLVq fQWjdAbzUp3B4e/Z5fWVgF4y0zfrDECcpVIFn6V5 -----END CERTIFICATE-----Generated at Wed Dec 3 14:54:48 2025 by rpki-client