This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/3130332e35362e3230342e302f32342d3234203d3e203538343737.roa File: 3130332e35362e3230342e302f32342d3234203d3e203538343737.roa (raw, json) Hash identifier: E6oSwKyWxejOo/v5HHitngqUwJ84vi0WR9s9o+kQ4qc= Subject key identifier: 5E:DC:7F:A0:AD:04:57:6C:C3:35:8A:16:F3:36:3C:F4:0D:79:AE:57 Certificate issuer: /CN=BD809D8A065DB595DC069383736A1A9C4A96B267 Certificate serial: 45FEE0A99DD49055747502368A960EAC3D47D066 Authority key identifier: BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/3130332e35362e3230342e302f32342d3234203d3e203538343737.roa Signing time: Wed 19 Nov 2025 08:00:36 +0000 ROA not before: Wed 19 Nov 2025 07:55:36 +0000 ROA not after: Wed 18 Nov 2026 08:00:36 +0000 asID: 58477 IP address blocks: 103.56.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.crl rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 23:18:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:fe:e0:a9:9d:d4:90:55:74:75:02:36:8a:96:0e:ac:3d:47:d0:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD809D8A065DB595DC069383736A1A9C4A96B267 Validity Not Before: Nov 19 07:55:36 2025 GMT Not After : Nov 18 08:00:36 2026 GMT Subject: CN=5EDC7FA0AD04576CC3358A16F3363CF40D79AE57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:29:aa:e1:0f:ef:43:9f:2d:36:a8:e1:1f:0b: ac:ba:20:40:bd:08:f7:5b:be:84:75:9a:0c:7e:3c: 5a:1c:31:5e:06:ce:bf:de:ed:05:88:5a:6b:d8:82: 7e:51:2d:3e:fc:c3:9a:0d:d9:95:9e:16:dd:95:3b: cf:26:70:61:38:49:be:14:f4:32:94:ad:18:71:cc: b0:3f:95:65:db:b3:c3:be:2a:51:1d:a8:11:cf:9a: a2:d5:9b:ab:45:f2:ca:b3:8e:22:e0:85:aa:04:65: 29:d3:6e:c8:37:a3:bd:f5:a9:a3:4f:57:6f:d0:45: 0a:ac:2f:53:33:e3:45:95:69:4e:d8:d5:93:b3:a6: a9:b0:dd:45:bc:1b:bc:0f:96:d0:a8:f0:45:3f:82: 0d:39:13:22:0b:34:4f:da:ba:ad:98:53:d0:96:eb: 87:88:64:80:cd:74:48:78:75:3b:ed:de:d6:03:b5: 71:b2:70:28:88:90:77:15:51:2a:46:e3:cb:70:f3: 3b:a7:da:db:6c:7e:75:f9:08:a0:38:a1:32:7b:a7: f3:3c:c2:c5:a3:b8:1d:2b:a9:07:b4:7e:17:1f:4b: 8f:78:a3:f6:be:b3:99:36:ff:0c:7b:70:10:ec:bc: d5:db:01:e5:73:41:7a:01:a6:24:e1:8d:f9:1f:f4: b0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:DC:7F:A0:AD:04:57:6C:C3:35:8A:16:F3:36:3C:F4:0D:79:AE:57 X509v3 Authority Key Identifier: keyid:BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/3130332e35362e3230342e302f32342d3234203d3e203538343737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.56.204.0/24 Signature Algorithm: sha256WithRSAEncryption b9:6b:91:1a:8e:f9:92:99:af:b3:2c:5e:fc:c4:be:50:73:35: 2a:cc:91:59:6b:a0:f6:93:a1:5b:38:6d:e9:2a:08:b8:8b:bb: a6:09:3e:fe:5b:55:78:6c:9f:f3:fd:4d:68:c1:c0:10:2e:47: c5:76:ee:58:6d:5e:8c:f3:e2:c5:a9:a3:f4:85:93:2d:2d:81: f0:65:9e:0c:b9:64:6d:e8:32:67:43:f8:5f:c8:e9:1c:cc:07: 58:c2:31:5a:df:d6:39:06:a3:81:9c:1c:ec:64:af:90:9b:bb: f7:6b:9a:d4:20:70:3c:a1:ed:12:e5:f0:00:83:aa:33:e6:08: a7:66:8f:42:61:43:4f:f0:a4:83:8b:47:0c:f3:f8:6a:90:72: ee:c6:1c:bc:89:c1:a1:e2:f9:5f:1a:80:cd:4b:19:5e:54:43: 54:c3:57:40:50:3d:a5:98:ce:a2:77:13:31:f1:96:a4:0a:23: 49:19:63:e3:5d:0a:4e:88:2a:90:84:ea:77:34:99:ef:f9:ac: c2:c7:96:6f:56:16:35:79:55:74:bf:9e:7c:78:f9:92:72:51: c0:a7:b4:0d:b8:ef:bc:2a:6b:da:63:b6:46:62:1c:44:5a:79: 25:a5:6d:89:3a:35:89:f8:c7:00:3e:4f:57:a1:ea:70:73:2c: 29:90:06:cb -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIURf7gqZ3UkFV0dQI2ipYOrD1H0GYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFBOUM0 QTk2QjI2NzAeFw0yNTExMTkwNzU1MzZaFw0yNjExMTgwODAwMzZaMDMxMTAvBgNV BAMTKDVFREM3RkEwQUQwNDU3NkNDMzM1OEExNkYzMzYzQ0Y0MEQ3OUFFNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzKarhD+9Dny02qOEfC6y6IEC9 CPdbvoR1mgx+PFocMV4Gzr/e7QWIWmvYgn5RLT78w5oN2ZWeFt2VO88mcGE4Sb4U 9DKUrRhxzLA/lWXbs8O+KlEdqBHPmqLVm6tF8sqzjiLghaoEZSnTbsg3o731qaNP V2/QRQqsL1Mz40WVaU7Y1ZOzpqmw3UW8G7wPltCo8EU/gg05EyILNE/auq2YU9CW 64eIZIDNdEh4dTvt3tYDtXGycCiIkHcVUSpG48tw8zun2ttsfnX5CKA4oTJ7p/M8 wsWjuB0rqQe0fhcfS494o/a+s5k2/wx7cBDsvNXbAeVzQXoBpiThjfkf9LArAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUXtx/oK0EV2zDNYoW8zY89A15rlcwHwYDVR0j BBgwFoAUvYCdigZdtZXcBpODc2oanEqWsmcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2Y4ZjU1Yy05ZTM1LTRjZTItODkwZi0wZGUzZTI0MDQ2MTEvMC9CRDgwOUQ4QTA2 NURCNTk1REMwNjkzODM3MzZBMUE5QzRBOTZCMjY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFBOUM0QTk2 QjI2Ny5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QzZjhmNTVjLTllMzUtNGNlMi04 OTBmLTBkZTNlMjQwNDYxMS8wLzMxMzAzMzJlMzUzNjJlMzIzMDM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM0MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGc4zDANBgkqhkiG 9w0BAQsFAAOCAQEAuWuRGo75kpmvsyxe/MS+UHM1KsyRWWug9pOhWzht6SoIuIu7 pgk+/ltVeGyf8/1NaMHAEC5HxXbuWG1ejPPixamj9IWTLS2B8GWeDLlkbegyZ0P4 X8jpHMwHWMIxWt/WOQajgZwc7GSvkJu792ua1CBwPKHtEuXwAIOqM+YIp2aPQmFD T/Ckg4tHDPP4apBy7sYcvInBoeL5XxqAzUsZXlRDVMNXQFA9pZjOoncTMfGWpAoj SRlj410KTogqkITqdzSZ7/mswseWb1YWNXlVdL+efHj5knJRwKe0DbjvvCpr2mO2 RmIcRFp5JaVtiTo1ifjHAD5PV6HqcHMsKZAGyw== -----END CERTIFICATE-----Generated at Wed Dec 3 14:55:19 2025 by rpki-client