This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/3130332e32342e31322e302f32332d3233203d3e20313332363434.roa File: 3130332e32342e31322e302f32332d3233203d3e20313332363434.roa (raw, json) Hash identifier: /NCGV+SwtDLnV3TMTVLORuZVELyx2f18pHCo9yoVgIU= Subject key identifier: 3E:CB:5C:BB:3E:20:A5:98:01:D8:9E:9D:6B:78:F3:D2:91:70:BF:C1 Certificate issuer: /CN=FFD09495181408CBE83FD333EACEF29FBCDAD633 Certificate serial: 34C3F594023A49819D78D2CE95979D330983FE85 Authority key identifier: FF:D0:94:95:18:14:08:CB:E8:3F:D3:33:EA:CE:F2:9F:BC:DA:D6:33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFD09495181408CBE83FD333EACEF29FBCDAD633.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/3130332e32342e31322e302f32332d3233203d3e20313332363434.roa Signing time: Fri 28 Nov 2025 07:45:25 +0000 ROA not before: Fri 28 Nov 2025 07:40:25 +0000 ROA not after: Fri 27 Nov 2026 07:45:25 +0000 asID: 132644 IP address blocks: 103.24.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/FFD09495181408CBE83FD333EACEF29FBCDAD633.crl rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/FFD09495181408CBE83FD333EACEF29FBCDAD633.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFD09495181408CBE83FD333EACEF29FBCDAD633.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 01:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:c3:f5:94:02:3a:49:81:9d:78:d2:ce:95:97:9d:33:09:83:fe:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFD09495181408CBE83FD333EACEF29FBCDAD633 Validity Not Before: Nov 28 07:40:25 2025 GMT Not After : Nov 27 07:45:25 2026 GMT Subject: CN=3ECB5CBB3E20A59801D89E9D6B78F3D29170BFC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c1:59:3e:fa:ba:e3:fb:f7:24:23:2e:2d:70: d1:37:2b:43:88:8f:7a:ac:a3:66:6f:72:8e:5c:e8: 7a:04:6a:07:74:e2:b8:1c:a7:c9:6d:b3:ea:d4:e3: e0:99:2d:3e:4a:80:92:06:a4:01:5e:1d:cd:ca:5d: cf:07:26:76:c4:4f:99:54:cc:e5:4f:2c:4f:a9:e2: da:7f:ce:d1:7c:ac:d0:28:33:29:99:04:1b:19:99: d2:0a:c4:c5:87:a4:cf:dd:60:28:54:c9:33:c0:41: 1c:3b:82:3c:28:0c:35:fd:88:70:e8:02:1b:74:d7: bb:54:f6:6d:0d:ed:33:b2:97:98:99:ac:68:9f:07: cb:ed:14:77:29:a0:c2:73:54:25:36:79:23:c1:09: d2:db:68:fc:99:86:34:e6:15:2c:ad:6b:05:d7:1a: d5:90:3a:a8:a5:5b:32:9a:f4:65:f1:b5:e8:c8:d0: 8b:fb:f6:6a:20:ab:c8:f6:33:10:fc:88:60:49:0f: ba:49:15:7c:40:a2:0e:0a:40:1b:0d:dd:ac:95:51: 58:0e:61:dd:ef:94:4f:fa:bd:5f:52:70:f1:fc:ce: 6c:52:3d:9b:d7:a1:ac:d5:33:9a:06:f2:a2:24:a4: 74:aa:06:8a:b6:bb:11:60:e7:01:ae:de:dc:83:0e: e4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:CB:5C:BB:3E:20:A5:98:01:D8:9E:9D:6B:78:F3:D2:91:70:BF:C1 X509v3 Authority Key Identifier: keyid:FF:D0:94:95:18:14:08:CB:E8:3F:D3:33:EA:CE:F2:9F:BC:DA:D6:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/FFD09495181408CBE83FD333EACEF29FBCDAD633.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFD09495181408CBE83FD333EACEF29FBCDAD633.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/3130332e32342e31322e302f32332d3233203d3e20313332363434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.24.12.0/23 Signature Algorithm: sha256WithRSAEncryption 55:c9:fc:85:ae:93:b9:81:31:51:4d:e8:05:7d:ea:30:b6:c7: ea:03:61:31:9e:b6:b1:a4:3f:ae:47:e3:27:d2:9a:8e:63:04: 11:53:5d:f8:4b:29:14:60:dd:fa:d1:69:d6:50:ab:23:23:a3: 8a:1c:73:a0:2c:f6:bf:78:32:da:7c:82:9b:23:94:a0:d3:b7: d4:0f:f5:bd:f1:a9:ab:9d:95:4d:7e:07:9c:d4:c4:b8:27:8f: 0d:45:dc:e9:4e:10:13:c4:f6:6c:16:73:36:98:16:0a:34:37: 8d:44:fd:31:b0:56:67:3b:7c:10:44:3e:74:0f:c4:6c:e4:09: f9:0d:ba:6f:ee:90:99:09:e9:35:9e:c5:cf:28:7a:eb:3e:8e: 18:51:81:10:c4:22:07:12:e9:26:cf:92:d3:cd:e3:ab:d9:16: 55:bf:7a:d5:c2:a8:ef:05:15:3d:d1:95:d8:9a:34:63:50:04: 77:ed:43:63:6e:e0:74:92:99:44:29:09:46:5b:e6:72:43:05: 07:93:db:01:80:62:e9:3e:f5:84:98:1a:19:e0:a0:f5:36:9b: d5:ed:5f:53:bd:8a:09:5c:e4:53:c3:1a:b4:6c:b7:12:1a:78: 11:62:ae:dd:78:d1:b7:7f:9a:d3:ff:9b:66:32:c3:a5:9e:80: 33:61:82:ff -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUNMP1lAI6SYGdeNLOlZedMwmD/oUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZEMDk0OTUxODE0MDhDQkU4M0ZEMzMzRUFDRUYyOUZC Q0RBRDYzMzAeFw0yNTExMjgwNzQwMjVaFw0yNjExMjcwNzQ1MjVaMDMxMTAvBgNV BAMTKDNFQ0I1Q0JCM0UyMEE1OTgwMUQ4OUU5RDZCNzhGM0QyOTE3MEJGQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxwVk++rrj+/ckIy4tcNE3K0OI j3qso2Zvco5c6HoEagd04rgcp8lts+rU4+CZLT5KgJIGpAFeHc3KXc8HJnbET5lU zOVPLE+p4tp/ztF8rNAoMymZBBsZmdIKxMWHpM/dYChUyTPAQRw7gjwoDDX9iHDo Aht017tU9m0N7TOyl5iZrGifB8vtFHcpoMJzVCU2eSPBCdLbaPyZhjTmFSytawXX GtWQOqilWzKa9GXxtejI0Iv79mogq8j2MxD8iGBJD7pJFXxAog4KQBsN3ayVUVgO Yd3vlE/6vV9ScPH8zmxSPZvXoazVM5oG8qIkpHSqBoq2uxFg5wGu3tyDDuRjAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUPstcuz4gpZgB2J6da3jz0pFwv8EwHwYDVR0j BBgwFoAU/9CUlRgUCMvoP9Mz6s7yn7za1jMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MTM5YWMxZi0zOGUyLTQ1YWEtOTdkYy05OTI3OTY0MTFjYzEvMC9GRkQwOTQ5NTE4 MTQwOENCRTgzRkQzMzNFQUNFRjI5RkJDREFENjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkZEMDk0OTUxODE0MDhDQkU4M0ZEMzMzRUFDRUYyOUZCQ0RB RDYzMy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UxMzlhYzFmLTM4ZTItNDVhYS05 N2RjLTk5Mjc5NjQxMWNjMS8wLzMxMzAzMzJlMzIzNDJlMzEzMjJlMzAyZjMyMzMy ZDMyMzMyMDNkM2UyMDMxMzMzMjM2MzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWcYDDANBgkqhkiG 9w0BAQsFAAOCAQEAVcn8ha6TuYExUU3oBX3qMLbH6gNhMZ62saQ/rkfjJ9KajmME EVNd+EspFGDd+tFp1lCrIyOjihxzoCz2v3gy2nyCmyOUoNO31A/1vfGpq52VTX4H nNTEuCePDUXc6U4QE8T2bBZzNpgWCjQ3jUT9MbBWZzt8EEQ+dA/EbOQJ+Q26b+6Q mQnpNZ7Fzyh66z6OGFGBEMQiBxLpJs+S083jq9kWVb961cKo7wUVPdGV2Jo0Y1AE d+1DY27gdJKZRCkJRlvmckMFB5PbAYBi6T71hJgaGeCg9Tab1e1fU72KCVzkU8Ma tGy3Ehp4EWKu3XjRt3+a0/+bZjLDpZ6AM2GC/w== -----END CERTIFICATE-----Generated at Wed Dec 3 14:54:08 2025 by rpki-client