This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/3130332e39382e3233392e302f32342d3234203d3e20313336383339.roa File: 3130332e39382e3233392e302f32342d3234203d3e20313336383339.roa (raw, json) Hash identifier: t33hGK2tWrXOFyyr6frOa0APXlIHVzP4IgSNamcMq50= Subject key identifier: F4:D7:6A:39:FA:6F:63:4F:CF:73:95:9F:BC:1C:A0:BF:CD:E0:F7:18 Certificate issuer: /CN=D1C35136280415655DEC1D442C7C982FD36A5B86 Certificate serial: 5AB6F82C51C8F38B07B15A3E35C02308AE600DCA Authority key identifier: D1:C3:51:36:28:04:15:65:5D:EC:1D:44:2C:7C:98:2F:D3:6A:5B:86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/3130332e39382e3233392e302f32342d3234203d3e20313336383339.roa Signing time: Fri 21 Nov 2025 09:00:01 +0000 ROA not before: Fri 21 Nov 2025 08:55:01 +0000 ROA not after: Fri 20 Nov 2026 09:00:01 +0000 asID: 136839 IP address blocks: 103.98.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.crl rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 18:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:b6:f8:2c:51:c8:f3:8b:07:b1:5a:3e:35:c0:23:08:ae:60:0d:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1C35136280415655DEC1D442C7C982FD36A5B86 Validity Not Before: Nov 21 08:55:01 2025 GMT Not After : Nov 20 09:00:01 2026 GMT Subject: CN=F4D76A39FA6F634FCF73959FBC1CA0BFCDE0F718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7d:12:1c:5a:bf:0c:5a:cd:ce:26:72:49:ba: 6d:95:ee:1e:76:52:6b:f3:d4:d1:44:96:82:b5:fe: 57:4e:f9:14:42:e2:99:d4:12:e3:50:91:8b:0e:f5: 93:d5:c2:03:62:85:9c:aa:c6:6a:bd:62:71:74:11: 8b:c3:87:b0:64:bf:08:48:c0:16:41:fc:16:bf:6d: c5:97:06:d3:5a:93:f2:41:53:76:68:26:45:3a:bd: eb:c1:f3:f9:22:f2:85:13:e4:bf:f0:54:f3:fa:11: fa:e6:53:d5:96:cb:02:53:ca:2f:69:09:6a:0a:59: 06:7c:79:ec:31:6f:9b:c2:f0:a5:95:5f:f5:3e:0a: a3:13:dd:07:a9:42:85:7f:08:e8:96:c3:54:b7:16: a5:c6:0f:1e:19:29:bb:e7:7a:ba:31:5e:ac:df:70: c3:ef:88:24:85:79:8f:fe:5c:fe:87:81:09:d4:cf: c5:0f:90:f4:7b:87:ac:08:5d:bc:53:e4:1d:49:2a: b9:12:f6:f1:d4:e1:92:0e:db:ff:8e:de:3a:37:15: b7:53:d8:bf:b9:37:d8:67:1a:b2:69:ad:03:bf:60: 28:97:17:95:11:1a:e4:d1:d5:88:fa:25:17:b8:9e: 21:4b:a7:92:d4:41:46:45:11:25:cb:d4:bf:6e:fc: 06:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D7:6A:39:FA:6F:63:4F:CF:73:95:9F:BC:1C:A0:BF:CD:E0:F7:18 X509v3 Authority Key Identifier: keyid:D1:C3:51:36:28:04:15:65:5D:EC:1D:44:2C:7C:98:2F:D3:6A:5B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/3130332e39382e3233392e302f32342d3234203d3e20313336383339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.98.239.0/24 Signature Algorithm: sha256WithRSAEncryption c1:35:7b:ef:7e:9b:b9:e5:43:6f:ae:ad:23:d8:65:d4:77:fe: 20:1f:1f:75:95:ee:5b:2e:29:3e:74:e1:e6:70:71:15:2c:7f: e6:6e:6a:5a:5d:b2:95:70:97:eb:3e:81:da:3d:f2:6d:c7:5b: cb:3a:93:a7:0e:33:8b:2e:08:43:65:42:ed:3d:8d:6b:c0:24: db:ab:50:10:c0:d9:61:39:96:a1:8b:98:8b:00:c3:f6:19:98: 3e:ae:76:56:73:b8:dd:78:72:3e:9b:05:f4:15:cd:7d:34:77: c6:a6:6b:f8:ba:ef:2a:c9:2c:44:90:85:0f:02:db:3a:19:31: 86:4c:d1:8b:ce:07:1c:7c:a1:d6:0b:3b:1d:17:0a:43:ea:c2: db:26:b4:b2:fa:61:0f:a1:5e:07:9d:7d:8b:9f:26:64:4c:80: bc:66:da:94:6f:35:5c:88:84:7c:1f:03:93:48:63:64:08:58: a9:c2:8b:81:1f:4f:35:a5:ef:35:1f:31:56:ad:0d:39:c8:ae: 6c:e9:52:ca:f5:42:25:0d:46:df:fa:85:38:11:02:5d:bb:a2: 42:c5:2d:c9:a9:a7:f4:91:9c:b3:2e:a4:71:6e:ed:bd:15:9a: 05:4e:90:ea:8a:a0:59:8a:d0:f9:76:d9:32:57:06:ca:e8:00: ec:d9:97:8a -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUWrb4LFHI84sHsVo+NcAjCK5gDcowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFDMzUxMzYyODA0MTU2NTVERUMxRDQ0MkM3Qzk4MkZE MzZBNUI4NjAeFw0yNTExMjEwODU1MDFaFw0yNjExMjAwOTAwMDFaMDMxMTAvBgNV BAMTKEY0RDc2QTM5RkE2RjYzNEZDRjczOTU5RkJDMUNBMEJGQ0RFMEY3MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9fRIcWr8MWs3OJnJJum2V7h52 Umvz1NFEloK1/ldO+RRC4pnUEuNQkYsO9ZPVwgNihZyqxmq9YnF0EYvDh7BkvwhI wBZB/Ba/bcWXBtNak/JBU3ZoJkU6vevB8/ki8oUT5L/wVPP6EfrmU9WWywJTyi9p CWoKWQZ8eewxb5vC8KWVX/U+CqMT3QepQoV/COiWw1S3FqXGDx4ZKbvneroxXqzf cMPviCSFeY/+XP6HgQnUz8UPkPR7h6wIXbxT5B1JKrkS9vHU4ZIO2/+O3jo3FbdT 2L+5N9hnGrJprQO/YCiXF5URGuTR1Yj6JRe4niFLp5LUQUZFESXL1L9u/AY7AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU9NdqOfpvY0/Pc5WfvBygv83g9xgwHwYDVR0j BBgwFoAU0cNRNigEFWVd7B1ELHyYL9NqW4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjljMDI5YS1kYjUxLTRhMGUtOTIwMy02ZWUyMzMyZGY4M2YvMC9EMUMzNTEzNjI4 MDQxNTY1NURFQzFENDQyQzdDOTgyRkQzNkE1Qjg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFDMzUxMzYyODA0MTU2NTVERUMxRDQ0MkM3Qzk4MkZEMzZB NUI4Ni5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NmOWMwMjlhLWRiNTEtNGEwZS05 MjAzLTZlZTIzMzJkZjgzZi8wLzMxMzAzMzJlMzkzODJlMzIzMzM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzgzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2LvMA0GCSqG SIb3DQEBCwUAA4IBAQDBNXvvfpu55UNvrq0j2GXUd/4gHx91le5bLik+dOHmcHEV LH/mbmpaXbKVcJfrPoHaPfJtx1vLOpOnDjOLLghDZULtPY1rwCTbq1AQwNlhOZah i5iLAMP2GZg+rnZWc7jdeHI+mwX0Fc19NHfGpmv4uu8qySxEkIUPAts6GTGGTNGL zgccfKHWCzsdFwpD6sLbJrSy+mEPoV4HnX2LnyZkTIC8ZtqUbzVciIR8HwOTSGNk CFipwouBH081pe81HzFWrQ05yK5s6VLK9UIlDUbf+oU4EQJdu6JCxS3Jqaf0kZyz LqRxbu29FZoFTpDqiqBZitD5dtkyVwbK6ADs2ZeK -----END CERTIFICATE-----Generated at Wed Dec 3 14:57:37 2025 by rpki-client