This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/3130332e3137322e32332e302f32342d3234203d3e20313437313237.roa File: 3130332e3137322e32332e302f32342d3234203d3e20313437313237.roa (raw, json) Hash identifier: ZUhqRkopz2aAEIpLVfRWO4+f532BAakRUcbL26qkTI0= Subject key identifier: C7:81:25:6E:4C:36:AF:4F:13:66:04:13:C2:B1:E2:1A:1F:50:AF:5D Certificate issuer: /CN=AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6 Certificate serial: 53DA09BFAF7823B37737E184601437D84EB28C03 Authority key identifier: AF:95:8D:E0:EC:E8:30:B2:C0:7C:1A:58:CE:91:5F:DB:82:C3:C2:F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/3130332e3137322e32332e302f32342d3234203d3e20313437313237.roa Signing time: Fri 26 Sep 2025 11:00:01 +0000 ROA not before: Fri 26 Sep 2025 10:55:01 +0000 ROA not after: Fri 25 Sep 2026 11:00:01 +0000 asID: 147127 IP address blocks: 103.172.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 20:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:da:09:bf:af:78:23:b3:77:37:e1:84:60:14:37:d8:4e:b2:8c:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6 Validity Not Before: Sep 26 10:55:01 2025 GMT Not After : Sep 25 11:00:01 2026 GMT Subject: CN=C781256E4C36AF4F13660413C2B1E21A1F50AF5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:9b:18:af:ce:4a:eb:8c:8a:27:57:5c:6f:71: f9:25:f2:07:38:66:39:f3:4f:0b:c6:18:5d:24:6f: 6e:0c:0a:b1:f2:6a:c5:a7:c7:a8:cf:38:2c:ec:23: 66:b9:0c:b2:b3:3d:f8:19:88:ba:d8:16:de:89:50: 5a:8e:4e:39:33:83:8e:34:58:d0:48:49:cc:2c:84: 1e:ad:3d:61:06:51:c1:d3:0e:1a:19:39:d1:59:4e: f6:95:75:31:4e:3a:e1:f1:ba:05:9a:66:ef:c6:5c: b3:a0:f4:f8:c2:e6:5a:eb:78:f7:1f:85:54:d6:98: 35:c5:00:92:18:ab:44:df:00:26:19:95:b1:0e:3f: e2:1e:a0:b1:a8:c2:20:f3:7b:41:c7:c6:67:bd:5d: 0d:ce:f8:44:0b:3a:00:7d:d5:d8:33:e5:bb:13:be: 72:5c:61:58:b2:ba:d6:ea:10:70:d4:b7:94:f2:55: 06:80:e1:58:d2:79:b6:c9:e3:b1:60:15:de:95:ac: cf:84:4b:95:13:71:47:26:b8:8a:41:cc:18:38:28: b3:43:39:02:20:33:92:4a:0e:29:23:b0:eb:1b:be: fb:e5:cd:bf:1e:54:16:84:f1:49:17:90:06:7f:a0: ec:0f:09:96:22:05:de:db:87:38:18:de:5b:d7:af: ab:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:81:25:6E:4C:36:AF:4F:13:66:04:13:C2:B1:E2:1A:1F:50:AF:5D X509v3 Authority Key Identifier: keyid:AF:95:8D:E0:EC:E8:30:B2:C0:7C:1A:58:CE:91:5F:DB:82:C3:C2:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/3130332e3137322e32332e302f32342d3234203d3e20313437313237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.23.0/24 Signature Algorithm: sha256WithRSAEncryption 73:67:d6:4a:65:fb:48:d5:81:27:76:b5:45:36:49:16:3f:e9: 8c:5b:a5:a1:c7:5d:a8:0e:e1:2f:d2:22:50:86:aa:a7:de:7a: b4:8a:00:e4:c7:a3:48:85:34:ad:86:53:56:cf:fb:6b:ab:27: 60:51:e7:d1:81:2b:19:3b:c1:99:62:c5:a4:27:cf:33:5b:a0: fa:93:6c:d4:a5:02:1d:a0:98:07:2a:94:c7:bc:eb:39:20:e3: f1:40:9d:b0:a9:ff:04:74:72:b8:db:0a:a0:f8:f0:99:5f:bd: 19:bc:4b:d5:68:d0:29:0d:ef:ef:fb:55:62:86:42:8c:e9:75: 87:a8:22:6d:a2:fb:01:12:35:d5:f5:b0:42:1b:a5:1b:57:ee: 15:a7:9d:bd:d7:8b:bc:3b:c6:63:33:bd:e5:07:55:0c:ac:5a: 7f:ea:4f:23:cb:9b:41:d4:3e:c0:8d:83:16:91:ea:9f:40:d2: 8e:26:f0:56:66:bc:3d:e7:1a:fa:b1:59:31:ce:02:ba:41:fe: 56:1b:7c:8b:34:6b:50:6c:e2:fc:01:08:0c:df:fe:03:69:47: 04:6c:c8:ab:a6:d4:95:6c:62:88:b5:a1:38:5e:8f:0c:45:46: 34:d8:94:f4:26:08:56:eb:f8:42:ff:2d:db:ff:0e:2b:d4:27: a2:4e:b4:32 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUU9oJv694I7N3N+GEYBQ32E6yjAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVGREI4 MkMzQzJGNjAeFw0yNTA5MjYxMDU1MDFaFw0yNjA5MjUxMTAwMDFaMDMxMTAvBgNV BAMTKEM3ODEyNTZFNEMzNkFGNEYxMzY2MDQxM0MyQjFFMjFBMUY1MEFGNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3mxivzkrrjIonV1xvcfkl8gc4 ZjnzTwvGGF0kb24MCrHyasWnx6jPOCzsI2a5DLKzPfgZiLrYFt6JUFqOTjkzg440 WNBIScwshB6tPWEGUcHTDhoZOdFZTvaVdTFOOuHxugWaZu/GXLOg9PjC5lrrePcf hVTWmDXFAJIYq0TfACYZlbEOP+IeoLGowiDze0HHxme9XQ3O+EQLOgB91dgz5bsT vnJcYViyutbqEHDUt5TyVQaA4VjSebbJ47FgFd6VrM+ES5UTcUcmuIpBzBg4KLND OQIgM5JKDikjsOsbvvvlzb8eVBaE8UkXkAZ/oOwPCZYiBd7bhzgY3lvXr6v7AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUx4Elbkw2r08TZgQTwrHiGh9Qr10wHwYDVR0j BBgwFoAUr5WN4OzoMLLAfBpYzpFf24LDwvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWRlMGMzOS04NGQ1LTQ0MDUtOTU0ZC00ZDNkNzEyNjkzY2UvMC9BRjk1OERFMEVD RTgzMEIyQzA3QzFBNThDRTkxNUZEQjgyQzNDMkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVGREI4MkMz QzJGNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M5ZGUwYzM5LTg0ZDUtNDQwNS05 NTRkLTRkM2Q3MTI2OTNjZS8wLzMxMzAzMzJlMzEzNzMyMmUzMjMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDM3MzEzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6wXMA0GCSqG SIb3DQEBCwUAA4IBAQBzZ9ZKZftI1YEndrVFNkkWP+mMW6Whx12oDuEv0iJQhqqn 3nq0igDkx6NIhTSthlNWz/trqydgUefRgSsZO8GZYsWkJ88zW6D6k2zUpQIdoJgH KpTHvOs5IOPxQJ2wqf8EdHK42wqg+PCZX70ZvEvVaNApDe/v+1VihkKM6XWHqCJt ovsBEjXV9bBCG6UbV+4Vp52914u8O8ZjM73lB1UMrFp/6k8jy5tB1D7AjYMWkeqf QNKOJvBWZrw95xr6sVkxzgK6Qf5WG3yLNGtQbOL8AQgM3/4DaUcEbMirptSVbGKI taE4Xo8MRUY02JT0JghW6/hC/y3b/w4r1CeiTrQy -----END CERTIFICATE-----Generated at Wed Dec 3 16:40:18 2025 by rpki-client