This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/3130332e33382e3131312e302f32342d3234203d3e20313531353639.roa File: 3130332e33382e3131312e302f32342d3234203d3e20313531353639.roa (raw, json) Hash identifier: dbxrQTgZv3GXn+UMmlKIl7zz9zo4NUqYuZDIWrYrKEU= Subject key identifier: 19:0C:99:C8:0D:4F:09:00:5D:51:4D:7F:3A:F1:FF:19:49:71:54:F2 Certificate issuer: /CN=8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80 Certificate serial: 32A6FF72C13E0F796D9E66C229D4247A0BC55ED6 Authority key identifier: 8A:F2:4B:A6:BB:2F:67:CD:54:8B:D0:8B:64:D9:7B:9A:24:68:ED:80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/3130332e33382e3131312e302f32342d3234203d3e20313531353639.roa Signing time: Thu 06 Nov 2025 08:15:24 +0000 ROA not before: Thu 06 Nov 2025 08:10:24 +0000 ROA not after: Thu 05 Nov 2026 08:15:24 +0000 asID: 151569 IP address blocks: 103.38.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.crl rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 10:13:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:a6:ff:72:c1:3e:0f:79:6d:9e:66:c2:29:d4:24:7a:0b:c5:5e:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80 Validity Not Before: Nov 6 08:10:24 2025 GMT Not After : Nov 5 08:15:24 2026 GMT Subject: CN=190C99C80D4F09005D514D7F3AF1FF19497154F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ae:e8:40:8d:6f:80:ba:36:86:72:0a:6a:e9: 30:e7:8e:8f:de:5e:f2:e9:6f:69:77:7e:1c:51:51: 2f:21:2c:eb:f6:b5:14:af:71:12:ff:61:64:b6:55: e4:81:56:38:99:b3:d7:24:39:c3:eb:92:71:2e:05: 47:85:20:67:ef:3d:c7:b7:21:c9:e4:08:82:d8:21: fd:a8:db:57:15:4f:54:8b:46:fa:16:e6:33:05:6f: 55:7a:97:f6:92:ae:10:ec:b8:7e:b1:b6:82:1c:4f: 76:15:92:20:e0:c6:6b:4a:6e:26:59:24:a7:a1:2f: 15:fe:ad:8b:37:a9:c9:ce:3e:d4:36:33:35:01:2f: d0:80:1b:60:b8:eb:a7:07:0a:4a:f0:bc:c7:5e:b9: fc:29:9c:4d:be:12:0b:cd:56:dc:1c:fa:06:de:a2: 18:9e:76:56:dc:83:0d:2d:9c:33:8c:bf:c1:d0:55: 1f:f2:f3:75:c7:9d:34:d0:cf:f2:de:ec:c5:f5:be: c6:f9:a7:bb:37:cb:f8:9f:2b:ff:d4:a1:9a:3a:5d: 87:3b:7d:55:79:60:a8:46:9f:53:c5:13:13:10:44: c3:66:9e:94:8e:dd:ac:92:e1:74:65:1f:e0:a4:ee: 9e:33:bd:f1:4a:f3:4d:d7:f1:b0:0c:09:4c:a5:8b: ab:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:0C:99:C8:0D:4F:09:00:5D:51:4D:7F:3A:F1:FF:19:49:71:54:F2 X509v3 Authority Key Identifier: keyid:8A:F2:4B:A6:BB:2F:67:CD:54:8B:D0:8B:64:D9:7B:9A:24:68:ED:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/3130332e33382e3131312e302f32342d3234203d3e20313531353639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.38.111.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:2d:93:99:96:f4:c0:8b:a5:a0:d6:c8:43:f2:ee:33:36:47: a9:98:8c:75:3f:de:62:c1:03:5f:21:3c:83:30:76:3e:d0:30: 63:d6:f9:1b:c9:03:3f:9a:e0:3e:36:be:66:c7:a8:ff:d8:b7: db:a9:f0:a4:f0:fc:e8:af:40:cd:f1:98:c3:6e:95:be:36:a7: 1f:84:c0:8f:22:c7:7d:9c:49:6b:ba:cd:20:3c:04:e6:13:2f: d3:6a:c1:5c:20:96:f0:96:11:27:8d:60:b5:f0:f4:92:57:3e: d2:46:10:dd:0b:18:72:55:b0:38:10:b7:8e:e8:d9:99:c7:09: 1d:8a:92:3e:fb:36:e0:c6:a4:5b:51:6a:6a:c4:2b:ab:df:be: 26:b6:c6:42:13:d7:05:0f:bb:10:a0:24:1e:90:e8:71:06:62: 68:67:42:15:72:29:ba:52:56:51:ef:9e:7d:87:20:73:00:b2: 7f:4a:82:2d:f3:76:0c:fd:ac:04:47:01:60:86:b4:5c:76:ff: 63:bf:82:45:72:c8:2c:e2:af:88:70:14:f7:4f:5d:fc:6c:d8: d8:50:89:b3:6a:72:4c:1e:22:7d:43:e5:ea:56:7b:de:b8:55: 26:34:b4:c7:fd:26:b6:c9:d0:b9:10:88:7f:86:18:27:8d:d9: 3c:b3:13:47 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUMqb/csE+D3ltnmbCKdQkegvFXtYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFGMjRCQTZCQjJGNjdDRDU0OEJEMDhCNjREOTdCOUEy NDY4RUQ4MDAeFw0yNTExMDYwODEwMjRaFw0yNjExMDUwODE1MjRaMDMxMTAvBgNV BAMTKDE5MEM5OUM4MEQ0RjA5MDA1RDUxNEQ3RjNBRjFGRjE5NDk3MTU0RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsruhAjW+AujaGcgpq6TDnjo/e XvLpb2l3fhxRUS8hLOv2tRSvcRL/YWS2VeSBVjiZs9ckOcPrknEuBUeFIGfvPce3 IcnkCILYIf2o21cVT1SLRvoW5jMFb1V6l/aSrhDsuH6xtoIcT3YVkiDgxmtKbiZZ JKehLxX+rYs3qcnOPtQ2MzUBL9CAG2C466cHCkrwvMdeufwpnE2+EgvNVtwc+gbe ohiedlbcgw0tnDOMv8HQVR/y83XHnTTQz/Le7MX1vsb5p7s3y/ifK//UoZo6XYc7 fVV5YKhGn1PFExMQRMNmnpSO3ayS4XRlH+Ck7p4zvfFK803X8bAMCUyli6szAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUGQyZyA1PCQBdUU1/OvH/GUlxVPIwHwYDVR0j BBgwFoAUivJLprsvZ81Ui9CLZNl7miRo7YAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWJlZWJjYy1hMjQ3LTRmZGUtYWE4Ni1jNjY2OWVhYmNkODIvMC84QUYyNEJBNkJC MkY2N0NENTQ4QkQwOEI2NEQ5N0I5QTI0NjhFRDgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFGMjRCQTZCQjJGNjdDRDU0OEJEMDhCNjREOTdCOUEyNDY4 RUQ4MC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NhYmVlYmNjLWEyNDctNGZkZS1h YTg2LWM2NjY5ZWFiY2Q4Mi8wLzMxMzAzMzJlMzMzODJlMzEzMTMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMxMzUzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZyZvMA0GCSqG SIb3DQEBCwUAA4IBAQAtLZOZlvTAi6Wg1shD8u4zNkepmIx1P95iwQNfITyDMHY+ 0DBj1vkbyQM/muA+Nr5mx6j/2LfbqfCk8Pzor0DN8ZjDbpW+NqcfhMCPIsd9nElr us0gPATmEy/TasFcIJbwlhEnjWC18PSSVz7SRhDdCxhyVbA4ELeO6NmZxwkdipI+ +zbgxqRbUWpqxCur374mtsZCE9cFD7sQoCQekOhxBmJoZ0IVcim6UlZR7559hyBz ALJ/SoIt83YM/awERwFghrRcdv9jv4JFcsgs4q+IcBT3T138bNjYUImzanJMHiJ9 Q+XqVnveuFUmNLTH/Sa2ydC5EIh/hhgnjdk8sxNH -----END CERTIFICATE-----Generated at Wed Dec 3 15:26:52 2025 by rpki-client