This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3130332e39382e3131382e302f32342d3234203d3e20313336383230.roa File: 3130332e39382e3131382e302f32342d3234203d3e20313336383230.roa (raw, json) Hash identifier: VpjDP2oZ/B1yei8Hfwo7pH5vGmOKYQBwxJOGVD0RFQE= Subject key identifier: 47:0A:9F:4A:D3:7C:75:F9:5E:B4:27:A0:2A:BC:60:AD:8C:80:1A:0B Certificate issuer: /CN=3E2173CCE67F75D29F1CAAA739E6CC6727D6E088 Certificate serial: 5920CB4585D770C450A49D3BB5B60290B1EC3FD8 Authority key identifier: 3E:21:73:CC:E6:7F:75:D2:9F:1C:AA:A7:39:E6:CC:67:27:D6:E0:88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3130332e39382e3131382e302f32342d3234203d3e20313336383230.roa Signing time: Sat 17 May 2025 12:00:01 +0000 ROA not before: Sat 17 May 2025 11:55:01 +0000 ROA not after: Sat 16 May 2026 12:00:01 +0000 asID: 136820 IP address blocks: 103.98.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:20:cb:45:85:d7:70:c4:50:a4:9d:3b:b5:b6:02:90:b1:ec:3f:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E2173CCE67F75D29F1CAAA739E6CC6727D6E088 Validity Not Before: May 17 11:55:01 2025 GMT Not After : May 16 12:00:01 2026 GMT Subject: CN=470A9F4AD37C75F95EB427A02ABC60AD8C801A0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cb:ec:c9:32:f0:e2:08:7f:30:db:c1:82:ac: af:7e:4e:38:c5:00:92:ef:1d:36:42:9a:6a:f5:8d: b6:0e:1d:fd:6c:9f:16:64:36:98:c8:bc:f6:a5:2b: 1c:0f:f1:6e:b1:af:58:28:ee:60:39:e2:af:86:30: ba:c0:6e:bd:49:ad:35:ba:b1:10:58:cb:f3:60:cb: 69:7c:37:b8:4e:55:b5:a4:34:10:7f:07:77:19:0b: 1d:e3:96:48:27:64:c6:b6:c7:e7:ec:02:25:51:b4: 56:4d:46:00:d1:fd:46:d0:af:29:fb:09:05:13:19: f1:89:4e:2c:c7:9a:68:92:b1:fb:04:d9:ee:ce:db: 20:ff:59:29:7e:2f:33:37:a4:e8:48:16:2d:d5:6f: 22:9f:c2:c3:55:ed:27:8e:0e:2e:91:e4:51:7a:58: c3:af:20:d5:ec:6d:f2:a0:f4:88:c7:10:84:0c:53: 07:6a:0c:e8:27:13:d3:fb:eb:56:62:d7:84:c8:ee: 51:29:19:91:88:7b:46:21:d6:62:25:eb:2c:08:86: 43:68:a3:8c:24:20:7d:8a:fb:0b:ac:df:3e:9a:29: 31:5e:2c:19:1c:91:4d:2c:a5:3b:ed:5c:41:ac:69: 90:00:87:3d:25:51:bd:ff:21:7a:69:70:03:39:bb: 89:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:0A:9F:4A:D3:7C:75:F9:5E:B4:27:A0:2A:BC:60:AD:8C:80:1A:0B X509v3 Authority Key Identifier: keyid:3E:21:73:CC:E6:7F:75:D2:9F:1C:AA:A7:39:E6:CC:67:27:D6:E0:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3130332e39382e3131382e302f32342d3234203d3e20313336383230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.98.118.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:dc:04:58:60:26:fd:aa:6a:ce:ab:a9:c0:05:69:f7:f2:74: 03:14:c9:e5:7f:10:be:c9:25:38:6d:47:81:4c:bb:6e:e4:47: b3:12:19:7f:c5:2e:17:24:c1:24:a7:94:16:77:09:45:9a:29: e2:71:30:5a:23:71:2a:97:fa:1d:15:cc:d5:5b:3b:ba:8c:0e: 19:c6:cc:fe:8d:53:40:c7:a8:c7:9d:b3:13:c5:da:74:2a:fb: 8b:9e:8a:bf:2a:b3:5b:1d:9b:14:45:9e:a6:62:75:42:d8:60: fe:04:56:b9:e8:a0:33:51:a6:c5:35:e4:b6:36:00:34:a4:65: a8:41:30:bc:f2:95:76:1c:7e:e2:16:e2:0a:ce:7e:11:df:37: 1f:a2:38:7c:03:d4:2c:35:2b:45:18:06:57:08:9d:ba:40:f8: e2:f0:29:0b:8f:3e:28:2b:c6:c8:0b:88:9c:2b:65:55:d1:f7: 48:fc:db:ef:eb:24:f5:65:03:41:b7:06:11:de:e9:2f:21:5e: 04:05:45:f6:57:93:14:b4:4e:34:a2:98:d9:f5:d8:b7:ff:4e: 61:e4:54:58:e5:0c:9e:95:99:bc:fe:31:6e:47:1f:13:ca:14: 2f:7b:98:9e:1b:bc:43:fa:05:b0:a6:d7:7e:59:91:fa:8f:a3: 14:f6:6c:94 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUWSDLRYXXcMRQpJ07tbYCkLHsP9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UyMTczQ0NFNjdGNzVEMjlGMUNBQUE3MzlFNkNDNjcy N0Q2RTA4ODAeFw0yNTA1MTcxMTU1MDFaFw0yNjA1MTYxMjAwMDFaMDMxMTAvBgNV BAMTKDQ3MEE5RjRBRDM3Qzc1Rjk1RUI0MjdBMDJBQkM2MEFEOEM4MDFBMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRy+zJMvDiCH8w28GCrK9+TjjF AJLvHTZCmmr1jbYOHf1snxZkNpjIvPalKxwP8W6xr1go7mA54q+GMLrAbr1JrTW6 sRBYy/Ngy2l8N7hOVbWkNBB/B3cZCx3jlkgnZMa2x+fsAiVRtFZNRgDR/UbQryn7 CQUTGfGJTizHmmiSsfsE2e7O2yD/WSl+LzM3pOhIFi3VbyKfwsNV7SeODi6R5FF6 WMOvINXsbfKg9IjHEIQMUwdqDOgnE9P761Zi14TI7lEpGZGIe0Yh1mIl6ywIhkNo o4wkIH2K+wus3z6aKTFeLBkckU0spTvtXEGsaZAAhz0lUb3/IXppcAM5u4kNAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQURwqfStN8dfletCegKrxgrYyAGgswHwYDVR0j BBgwFoAUPiFzzOZ/ddKfHKqnOebMZyfW4IgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2Q1Mzk0OC1kZGYzLTQ0OWEtYmYyYi1jZjNmN2FlMTc2ZDMvMC8zRTIxNzNDQ0U2 N0Y3NUQyOUYxQ0FBQTczOUU2Q0M2NzI3RDZFMDg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0UyMTczQ0NFNjdGNzVEMjlGMUNBQUE3MzlFNkNDNjcyN0Q2 RTA4OC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NjZDUzOTQ4LWRkZjMtNDQ5YS1i ZjJiLWNmM2Y3YWUxNzZkMy8wLzMxMzAzMzJlMzkzODJlMzEzMTM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzgzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2J2MA0GCSqG SIb3DQEBCwUAA4IBAQB/3ARYYCb9qmrOq6nABWn38nQDFMnlfxC+ySU4bUeBTLtu 5EezEhl/xS4XJMEkp5QWdwlFminicTBaI3Eql/odFczVWzu6jA4Zxsz+jVNAx6jH nbMTxdp0KvuLnoq/KrNbHZsURZ6mYnVC2GD+BFa56KAzUabFNeS2NgA0pGWoQTC8 8pV2HH7iFuIKzn4R3zcfojh8A9QsNStFGAZXCJ26QPji8CkLjz4oK8bIC4icK2VV 0fdI/Nvv6yT1ZQNBtwYR3ukvIV4EBUX2V5MUtE40opjZ9di3/05h5FRY5QyelZm8 /jFuRx8TyhQve5ieG7xD+gWwptd+WZH6j6MU9myU -----END CERTIFICATE-----Generated at Wed Dec 3 16:07:39 2025 by rpki-client