This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/3130332e3132312e3130322e302f32332d3234203d3e20313335343738.roa File: 3130332e3132312e3130322e302f32332d3234203d3e20313335343738.roa (raw, json) Hash identifier: xlKKXnljJ3PSbbQl/T6kQz4TyDiPxS/om+wNRGRU4B8= Subject key identifier: 90:C0:3A:27:5D:58:7A:2F:29:A4:3B:60:BB:32:4F:BF:25:FA:00:28 Certificate issuer: /CN=EA364B048B6B5A81F887F07FDB60499024CE8C94 Certificate serial: 7B56E02D4FC6640F9A390BF2B03B0FDB4552BC42 Authority key identifier: EA:36:4B:04:8B:6B:5A:81:F8:87:F0:7F:DB:60:49:90:24:CE:8C:94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA364B048B6B5A81F887F07FDB60499024CE8C94.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/3130332e3132312e3130322e302f32332d3234203d3e20313335343738.roa Signing time: Wed 05 Nov 2025 06:00:01 +0000 ROA not before: Wed 05 Nov 2025 05:55:01 +0000 ROA not after: Wed 04 Nov 2026 06:00:01 +0000 asID: 135478 IP address blocks: 103.121.102.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/EA364B048B6B5A81F887F07FDB60499024CE8C94.crl rsync://repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/EA364B048B6B5A81F887F07FDB60499024CE8C94.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA364B048B6B5A81F887F07FDB60499024CE8C94.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 01:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:56:e0:2d:4f:c6:64:0f:9a:39:0b:f2:b0:3b:0f:db:45:52:bc:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA364B048B6B5A81F887F07FDB60499024CE8C94 Validity Not Before: Nov 5 05:55:01 2025 GMT Not After : Nov 4 06:00:01 2026 GMT Subject: CN=90C03A275D587A2F29A43B60BB324FBF25FA0028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:49:c6:b9:eb:cc:4e:f1:84:49:d1:6a:7c:a3: 22:1a:64:dc:5d:66:14:01:c2:28:fd:f8:85:13:76: f9:b1:83:e0:37:87:f8:53:b6:27:bb:90:be:86:ad: 37:b0:1a:51:09:ef:c0:fe:60:51:39:1b:87:f9:6b: 46:1a:4b:0a:ba:c0:4b:93:e5:a3:3a:50:9a:67:89: 00:67:72:cc:ea:48:ee:9d:05:0a:12:a8:40:d7:8e: 01:8f:61:63:63:76:00:73:41:3d:ab:75:b0:ae:34: 82:eb:61:ad:d9:f7:af:bf:51:31:71:42:ff:67:2d: e9:aa:b6:f3:b9:5a:7a:13:21:3f:30:65:dc:cb:e1: e6:10:31:6a:c2:65:13:de:38:de:4a:ba:19:ca:be: f3:10:59:c9:59:61:fa:57:98:9a:e7:70:01:0a:e9: bb:26:5f:ec:ae:b8:15:5e:65:2b:57:12:05:48:8c: 07:9c:01:2f:fb:1d:3e:0b:9f:00:6f:f6:b6:f6:39: 8e:55:0f:da:4e:42:08:d8:8f:d6:a3:a8:cb:3e:d7: 08:28:9d:b2:cd:da:ca:be:9d:bf:9f:f1:a3:38:cf: 0f:56:de:d1:ea:aa:d3:80:df:ef:bd:c5:32:78:ff: 5f:c3:32:62:e1:29:95:e9:52:29:18:0a:c9:8a:b4: 8c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C0:3A:27:5D:58:7A:2F:29:A4:3B:60:BB:32:4F:BF:25:FA:00:28 X509v3 Authority Key Identifier: keyid:EA:36:4B:04:8B:6B:5A:81:F8:87:F0:7F:DB:60:49:90:24:CE:8C:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/EA364B048B6B5A81F887F07FDB60499024CE8C94.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA364B048B6B5A81F887F07FDB60499024CE8C94.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/3130332e3132312e3130322e302f32332d3234203d3e20313335343738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.121.102.0/23 Signature Algorithm: sha256WithRSAEncryption c6:fc:79:cb:d0:9c:c6:99:34:a2:5f:27:f7:b8:9a:b0:c2:4a: f2:3a:68:58:7c:94:f8:cb:62:33:28:28:0d:28:33:59:7a:38: 09:d6:c8:42:ce:98:81:ff:7a:a0:db:5a:fa:f9:23:37:b1:93: 9e:8f:b0:b2:41:32:7a:65:6b:ae:19:09:6c:6f:0e:6c:60:60: f5:a9:22:b8:19:cf:fe:2b:c2:69:8b:b4:f0:b6:74:4d:37:ad: d2:f5:25:98:f3:35:cf:c7:b1:34:be:9f:81:56:d5:05:95:bf: 55:2f:7e:f9:50:68:fd:d3:54:cf:5a:d3:c2:13:d9:13:e0:61: 39:7c:63:df:2e:f3:19:1d:c9:1c:3c:bc:b7:1d:c3:36:6a:ed: b7:e8:03:9a:db:c7:3c:74:19:4c:a1:01:d9:3f:6d:16:30:33: a4:07:4b:08:d7:b0:56:4a:7f:1f:74:c1:ac:8c:4e:19:5a:88: 29:fa:fe:d5:57:a4:e5:b6:3f:f1:e6:f2:0e:2f:89:4f:c7:48: 6d:0c:b5:b1:bb:4c:72:55:6a:7c:59:68:a3:8c:90:c2:9a:70: f9:3b:ab:04:a4:62:b7:3f:4e:30:f0:25:8d:92:62:64:de:4a: 18:21:07:70:66:1d:20:33:8d:fc:a9:af:d4:58:f4:9f:41:56: 59:43:c1:06 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUe1bgLU/GZA+aOQvysDsP20VSvEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUEzNjRCMDQ4QjZCNUE4MUY4ODdGMDdGREI2MDQ5OTAy NENFOEM5NDAeFw0yNTExMDUwNTU1MDFaFw0yNjExMDQwNjAwMDFaMDMxMTAvBgNV BAMTKDkwQzAzQTI3NUQ1ODdBMkYyOUE0M0I2MEJCMzI0RkJGMjVGQTAwMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjSca568xO8YRJ0Wp8oyIaZNxd ZhQBwij9+IUTdvmxg+A3h/hTtie7kL6GrTewGlEJ78D+YFE5G4f5a0YaSwq6wEuT 5aM6UJpniQBncszqSO6dBQoSqEDXjgGPYWNjdgBzQT2rdbCuNILrYa3Z96+/UTFx Qv9nLemqtvO5WnoTIT8wZdzL4eYQMWrCZRPeON5KuhnKvvMQWclZYfpXmJrncAEK 6bsmX+yuuBVeZStXEgVIjAecAS/7HT4LnwBv9rb2OY5VD9pOQgjYj9ajqMs+1wgo nbLN2sq+nb+f8aM4zw9W3tHqqtOA3++9xTJ4/1/DMmLhKZXpUikYCsmKtIwrAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUkMA6J11Yei8ppDtguzJPvyX6ACgwHwYDVR0j BBgwFoAU6jZLBItrWoH4h/B/22BJkCTOjJQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MTEzMjQ5Ny01OTYzLTQ3YWEtOWRlMS02Yzg0OTZhMzZlYjYvMC9FQTM2NEIwNDhC NkI1QTgxRjg4N0YwN0ZEQjYwNDk5MDI0Q0U4Qzk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUEzNjRCMDQ4QjZCNUE4MUY4ODdGMDdGREI2MDQ5OTAyNENF OEM5NC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UxMTMyNDk3LTU5NjMtNDdhYS05 ZGUxLTZjODQ5NmEzNmViNi8wLzMxMzAzMzJlMzEzMjMxMmUzMTMwMzIyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzUzNDM3Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFneWYwDQYJ KoZIhvcNAQELBQADggEBAMb8ecvQnMaZNKJfJ/e4mrDCSvI6aFh8lPjLYjMoKA0o M1l6OAnWyELOmIH/eqDbWvr5Izexk56PsLJBMnpla64ZCWxvDmxgYPWpIrgZz/4r wmmLtPC2dE03rdL1JZjzNc/HsTS+n4FW1QWVv1UvfvlQaP3TVM9a08IT2RPgYTl8 Y98u8xkdyRw8vLcdwzZq7bfoA5rbxzx0GUyhAdk/bRYwM6QHSwjXsFZKfx90wayM ThlaiCn6/tVXpOW2P/Hm8g4viU/HSG0MtbG7THJVanxZaKOMkMKacPk7qwSkYrc/ TjDwJY2SYmTeShghB3BmHSAzjfypr9RY9J9BVllDwQY= -----END CERTIFICATE-----Generated at Wed Dec 3 11:48:51 2025 by rpki-client