This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/3130332e31312e39362e302f32342d3234203d3e203535363533.roa File: 3130332e31312e39362e302f32342d3234203d3e203535363533.roa (raw, json) Hash identifier: H4PttalZLNptjPsZ0cni/wefIj1b5DtDJUp4pLmDsx8= Subject key identifier: 85:38:83:A9:99:FE:D3:ED:90:6C:86:4E:79:D0:67:BF:81:F7:91:AE Certificate issuer: /CN=FC646066A689B77054AF95653FA324395357E6A3 Certificate serial: 4C0AFC97512BEABF9FED959D8D25BEDEED7194B5 Authority key identifier: FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/3130332e31312e39362e302f32342d3234203d3e203535363533.roa Signing time: Sat 08 Nov 2025 10:22:19 +0000 ROA not before: Sat 08 Nov 2025 10:17:19 +0000 ROA not after: Sat 07 Nov 2026 10:22:19 +0000 asID: 55653 IP address blocks: 103.11.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 00:25:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:0a:fc:97:51:2b:ea:bf:9f:ed:95:9d:8d:25:be:de:ed:71:94:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC646066A689B77054AF95653FA324395357E6A3 Validity Not Before: Nov 8 10:17:19 2025 GMT Not After : Nov 7 10:22:19 2026 GMT Subject: CN=853883A999FED3ED906C864E79D067BF81F791AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:eb:2a:7c:80:9f:80:d7:ee:92:1a:f2:f2:e7: b5:66:33:78:c6:02:13:02:f6:7d:07:9c:59:83:18: 60:97:26:1b:fe:cd:84:92:e6:58:b1:33:ca:bb:fd: 2a:ed:84:18:45:95:9c:7c:58:4a:9a:85:b5:42:18: 8b:5c:40:95:03:2c:40:8d:7b:4e:e6:e4:71:c7:ee: 60:f8:78:57:82:be:0a:1e:23:61:23:36:13:64:ec: 46:c4:d1:aa:f1:ac:ea:c5:95:d5:12:5e:f2:54:ee: fc:8b:22:84:07:4a:3e:80:80:34:8e:ed:58:12:f4: d1:14:68:49:73:15:21:77:32:2d:72:c4:51:6e:9b: 0b:df:e6:2e:56:9c:96:a6:6c:0f:f9:7e:69:c8:d5: b3:e0:43:d4:0e:b5:6d:1c:6f:7f:54:55:46:d3:63: cf:f3:0e:f6:bc:a8:60:4e:52:ff:db:65:3e:aa:07: 8a:10:b2:da:a1:85:e8:2c:37:7a:ab:24:b8:50:40: 54:95:65:eb:7a:6b:61:9b:01:1e:37:a4:c9:c2:0d: 0b:b3:3d:11:2f:af:09:e9:0f:45:03:7f:06:8a:02: ea:51:02:c2:c5:23:67:95:1d:4b:21:90:10:53:cf: d2:98:ca:1f:33:3d:10:49:63:48:8f:9a:ef:db:43: b8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:38:83:A9:99:FE:D3:ED:90:6C:86:4E:79:D0:67:BF:81:F7:91:AE X509v3 Authority Key Identifier: keyid:FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/3130332e31312e39362e302f32342d3234203d3e203535363533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.11.96.0/24 Signature Algorithm: sha256WithRSAEncryption c2:64:da:61:34:ed:fa:69:7d:f1:db:5e:9e:ff:71:1b:2f:a2: 60:a9:ea:1f:2c:32:a0:42:51:44:d3:15:e5:e1:5f:d7:f3:e6: 11:a2:b9:36:78:e7:e6:09:e3:f6:2e:05:c1:b4:be:62:59:14: 59:24:5a:a7:ea:bf:3c:53:2c:d1:08:02:78:78:a2:e4:12:91: 85:f4:8c:65:e3:67:48:ed:fe:86:48:ab:73:20:3a:29:e9:ef: 45:4b:e3:04:2c:4a:86:1a:d3:9f:f4:65:e4:f1:4a:b3:93:85: 9d:57:7e:37:05:cb:1e:3c:55:01:9e:91:55:e7:5d:df:cc:5b: 0d:83:b3:67:d1:c8:17:13:d7:43:8a:34:0f:35:4b:42:b8:d0: c1:32:c1:ea:da:15:d3:3c:c8:7a:81:39:c0:55:bc:fc:14:95: 3f:f8:2c:14:f2:a9:ad:56:4e:37:b2:7c:df:f3:e5:91:31:1e: 1c:22:9f:dd:2b:88:e2:90:7f:07:f6:82:21:21:ad:db:b1:b4: bb:d0:2c:52:08:48:5d:97:d7:c8:38:28:40:35:d1:5a:1f:77: b1:7e:dd:5f:8a:c7:0f:3d:1b:3f:e9:99:6b:a2:cd:4d:57:f8: 34:87:17:f1:13:54:07:35:d9:fe:3f:0f:0e:58:fa:75:14:49: 6e:bd:82:fb -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUTAr8l1Er6r+f7ZWdjSW+3u1xlLUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM2NDYwNjZBNjg5Qjc3MDU0QUY5NTY1M0ZBMzI0Mzk1 MzU3RTZBMzAeFw0yNTExMDgxMDE3MTlaFw0yNjExMDcxMDIyMTlaMDMxMTAvBgNV BAMTKDg1Mzg4M0E5OTlGRUQzRUQ5MDZDODY0RTc5RDA2N0JGODFGNzkxQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh6yp8gJ+A1+6SGvLy57VmM3jG AhMC9n0HnFmDGGCXJhv+zYSS5lixM8q7/SrthBhFlZx8WEqahbVCGItcQJUDLECN e07m5HHH7mD4eFeCvgoeI2EjNhNk7EbE0arxrOrFldUSXvJU7vyLIoQHSj6AgDSO 7VgS9NEUaElzFSF3Mi1yxFFumwvf5i5WnJambA/5fmnI1bPgQ9QOtW0cb39UVUbT Y8/zDva8qGBOUv/bZT6qB4oQstqhhegsN3qrJLhQQFSVZet6a2GbAR43pMnCDQuz PREvrwnpD0UDfwaKAupRAsLFI2eVHUshkBBTz9KYyh8zPRBJY0iPmu/bQ7iBAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUhTiDqZn+0+2QbIZOedBnv4H3ka4wHwYDVR0j BBgwFoAU/GRgZqaJt3BUr5VlP6MkOVNX5qMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTc0NjVlMy03OGEwLTQ5NjUtYWUxNC1lNGNiNGQwZmMxODUvMC9GQzY0NjA2NkE2 ODlCNzcwNTRBRjk1NjUzRkEzMjQzOTUzNTdFNkEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkM2NDYwNjZBNjg5Qjc3MDU0QUY5NTY1M0ZBMzI0Mzk1MzU3 RTZBMy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M5NzQ2NWUzLTc4YTAtNDk2NS1h ZTE0LWU0Y2I0ZDBmYzE4NS8wLzMxMzAzMzJlMzEzMTJlMzkzNjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM1MzUzNjM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnC2AwDQYJKoZIhvcN AQELBQADggEBAMJk2mE07fppffHbXp7/cRsvomCp6h8sMqBCUUTTFeXhX9fz5hGi uTZ45+YJ4/YuBcG0vmJZFFkkWqfqvzxTLNEIAnh4ouQSkYX0jGXjZ0jt/oZIq3Mg Oinp70VL4wQsSoYa05/0ZeTxSrOThZ1XfjcFyx48VQGekVXnXd/MWw2Ds2fRyBcT 10OKNA81S0K40MEyweraFdM8yHqBOcBVvPwUlT/4LBTyqa1WTjeyfN/z5ZExHhwi n90riOKQfwf2giEhrduxtLvQLFIISF2X18g4KEA10Vofd7F+3V+Kxw89Gz/pmWui zU1X+DSHF/ETVAc12f4/Dw5Y+nUUSW69gvs= -----END CERTIFICATE-----Generated at Wed Dec 3 16:49:16 2025 by rpki-client