This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/3130332e3134372e38312e302f32342d3234203d3e20323135373237.roa File: 3130332e3134372e38312e302f32342d3234203d3e20323135373237.roa (raw, json) Hash identifier: kN+ITRJB9Y4U/xn0VPZsd1TVeghOlD4cfCGOQ2XBRrQ= Subject key identifier: 58:0E:07:4C:CD:CE:8D:9A:31:23:70:7E:19:85:09:8A:10:66:C5:E4 Certificate issuer: /CN=A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246 Certificate serial: 3E62167AAE0012720FCCA159038466930C6B19C9 Authority key identifier: A3:EF:DD:DA:D5:26:EF:A3:F2:82:1E:9E:6E:C6:E7:47:BB:5B:12:46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/3130332e3134372e38312e302f32342d3234203d3e20323135373237.roa Signing time: Mon 17 Nov 2025 23:13:09 +0000 ROA not before: Mon 17 Nov 2025 23:08:09 +0000 ROA not after: Mon 16 Nov 2026 23:13:09 +0000 asID: 215727 IP address blocks: 103.147.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 14:44:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:62:16:7a:ae:00:12:72:0f:cc:a1:59:03:84:66:93:0c:6b:19:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246 Validity Not Before: Nov 17 23:08:09 2025 GMT Not After : Nov 16 23:13:09 2026 GMT Subject: CN=580E074CCDCE8D9A3123707E1985098A1066C5E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c8:5b:a6:49:86:e7:cf:1f:d9:f7:46:81:0a: fd:e9:98:3e:95:e8:96:4f:a4:21:15:cf:74:94:1f: 1d:8d:68:fa:5c:0e:54:cc:07:84:8c:41:d7:ae:7c: 6f:1b:f5:3b:9e:ca:36:d2:1d:4b:a0:76:8e:fa:dc: 3b:c0:9b:25:9c:d8:4c:91:33:03:37:fc:b7:f7:7c: ec:0c:98:2f:df:e9:ad:59:3c:b7:c8:4e:cb:f7:32: 72:a0:22:de:e7:01:9a:1c:e5:4c:12:47:62:af:d3: 59:6f:66:76:ae:d2:02:86:88:8b:08:a7:e5:dd:59: 15:ac:0f:f4:f1:8e:e1:1b:01:cb:6b:d2:7c:02:31: 9b:06:9d:11:2c:8d:b3:3d:23:92:91:f7:d9:9b:b3: 75:30:1c:f7:97:d1:8f:aa:7f:b6:82:ad:d8:95:2f: 6f:17:b8:23:da:46:91:20:45:e0:df:5e:0d:7f:05: 64:15:31:b9:d8:99:05:d6:88:5f:51:25:70:e1:92: d5:5a:10:87:fc:2d:7b:e8:0d:c6:06:db:a3:4d:99: 1d:7f:b5:ba:10:46:88:48:2d:75:ff:88:3f:20:2c: 74:d7:22:ad:ba:50:fe:af:18:9d:91:0b:fe:3c:e9: a2:cd:d5:29:0c:14:13:23:e5:0b:5d:e5:7f:4b:a4: 5b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:0E:07:4C:CD:CE:8D:9A:31:23:70:7E:19:85:09:8A:10:66:C5:E4 X509v3 Authority Key Identifier: keyid:A3:EF:DD:DA:D5:26:EF:A3:F2:82:1E:9E:6E:C6:E7:47:BB:5B:12:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/3130332e3134372e38312e302f32342d3234203d3e20323135373237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.81.0/24 Signature Algorithm: sha256WithRSAEncryption 67:ee:86:83:50:94:b2:97:3e:d3:d3:93:ee:5f:a8:1d:27:55: cd:ed:6a:6f:cc:18:ef:49:a4:e0:21:c7:1a:6f:35:b2:cd:93: e7:c4:36:96:c7:19:60:6c:31:f1:34:79:b7:f1:85:f7:20:17: 3f:1f:a7:05:4b:31:ee:cd:6e:fc:f6:da:37:6a:fc:74:70:78: 8a:7c:b6:78:39:0c:1e:df:7e:68:c6:63:c7:b3:18:88:6e:fb: b6:38:ad:c5:7f:d2:a0:1d:07:a2:af:15:17:44:12:6d:83:30: fb:81:a7:8b:9d:29:7e:b5:c8:a2:99:74:4f:18:13:14:4c:94: 78:1e:57:d2:1e:cb:d4:79:23:c6:3e:32:bb:0f:9e:76:1c:60: 9c:78:31:73:f5:86:a6:5d:94:02:a4:e0:34:df:49:1e:f3:c4: 44:b7:fa:71:ec:90:0e:b8:1f:47:6b:ad:5e:f8:2a:96:cd:d3: 8f:9e:78:d4:f0:5b:a9:77:d1:69:c8:dd:3f:8b:80:5a:44:c7: fd:1c:6a:20:91:c8:1a:eb:11:8a:f7:a6:86:eb:81:7d:8d:5b: 07:64:eb:fa:d8:b8:d6:c0:85:ba:c1:9d:8f:59:87:08:60:1d: 3b:12:fd:2f:e9:9a:d2:12:0f:2f:2e:80:bf:a1:d3:80:09:55: 0a:26:7b:55 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUPmIWeq4AEnIPzKFZA4RmkwxrGckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3NDdC QjVCMTI0NjAeFw0yNTExMTcyMzA4MDlaFw0yNjExMTYyMzEzMDlaMDMxMTAvBgNV BAMTKDU4MEUwNzRDQ0RDRThEOUEzMTIzNzA3RTE5ODUwOThBMTA2NkM1RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoyFumSYbnzx/Z90aBCv3pmD6V 6JZPpCEVz3SUHx2NaPpcDlTMB4SMQdeufG8b9TueyjbSHUugdo763DvAmyWc2EyR MwM3/Lf3fOwMmC/f6a1ZPLfITsv3MnKgIt7nAZoc5UwSR2Kv01lvZnau0gKGiIsI p+XdWRWsD/TxjuEbActr0nwCMZsGnREsjbM9I5KR99mbs3UwHPeX0Y+qf7aCrdiV L28XuCPaRpEgReDfXg1/BWQVMbnYmQXWiF9RJXDhktVaEIf8LXvoDcYG26NNmR1/ tboQRohILXX/iD8gLHTXIq26UP6vGJ2RC/486aLN1SkMFBMj5Qtd5X9LpFvfAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUWA4HTM3OjZoxI3B+GYUJihBmxeQwHwYDVR0j BBgwFoAUo+/d2tUm76Pygh6ebsbnR7tbEkYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NmM1NzBlZi02ZWZkLTRmOTctYmYzMS05NjgxMjZhYjU3YzAvMC9BM0VGREREQUQ1 MjZFRkEzRjI4MjFFOUU2RUM2RTc0N0JCNUIxMjQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3NDdCQjVC MTI0Ni5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M2YzU3MGVmLTZlZmQtNGY5Ny1i ZjMxLTk2ODEyNmFiNTdjMC8wLzMxMzAzMzJlMzEzNDM3MmUzODMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzMTM1MzczMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5NRMA0GCSqG SIb3DQEBCwUAA4IBAQBn7oaDUJSylz7T05PuX6gdJ1XN7WpvzBjvSaTgIccabzWy zZPnxDaWxxlgbDHxNHm38YX3IBc/H6cFSzHuzW789to3avx0cHiKfLZ4OQwe335o xmPHsxiIbvu2OK3Ff9KgHQeirxUXRBJtgzD7gaeLnSl+tciimXRPGBMUTJR4HlfS HsvUeSPGPjK7D552HGCceDFz9YamXZQCpOA030ke88REt/px7JAOuB9Ha61e+CqW zdOPnnjU8Fupd9FpyN0/i4BaRMf9HGogkcga6xGK96aG64F9jVsHZOv62LjWwIW6 wZ2PWYcIYB07Ev0v6ZrSEg8vLoC/odOACVUKJntV -----END CERTIFICATE-----Generated at Wed Dec 3 14:54:48 2025 by rpki-client