This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/3130332e3235332e36382e302f32332d3233203d3e20313332363434.roa File: 3130332e3235332e36382e302f32332d3233203d3e20313332363434.roa (raw, json) Hash identifier: 5LnPe1qqPi1/xX5VnvEUwwekWCcAbF1I2gMcXgA6ERo= Subject key identifier: 8C:4D:EE:8C:31:30:AE:31:BE:76:1B:F3:AA:40:67:09:08:40:4C:C2 Certificate issuer: /CN=FFD09495181408CBE83FD333EACEF29FBCDAD633 Certificate serial: 5C1284100FEE75EFECC217067A6C73C9E8B46628 Authority key identifier: FF:D0:94:95:18:14:08:CB:E8:3F:D3:33:EA:CE:F2:9F:BC:DA:D6:33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFD09495181408CBE83FD333EACEF29FBCDAD633.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/3130332e3235332e36382e302f32332d3233203d3e20313332363434.roa Signing time: Fri 28 Nov 2025 07:45:45 +0000 ROA not before: Fri 28 Nov 2025 07:40:45 +0000 ROA not after: Fri 27 Nov 2026 07:45:45 +0000 asID: 132644 IP address blocks: 103.253.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/FFD09495181408CBE83FD333EACEF29FBCDAD633.crl rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/FFD09495181408CBE83FD333EACEF29FBCDAD633.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFD09495181408CBE83FD333EACEF29FBCDAD633.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 01:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:12:84:10:0f:ee:75:ef:ec:c2:17:06:7a:6c:73:c9:e8:b4:66:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFD09495181408CBE83FD333EACEF29FBCDAD633 Validity Not Before: Nov 28 07:40:45 2025 GMT Not After : Nov 27 07:45:45 2026 GMT Subject: CN=8C4DEE8C3130AE31BE761BF3AA40670908404CC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f7:1f:d2:13:c2:e1:c6:03:56:1f:e3:b7:37: 1e:3a:3c:fc:48:44:bc:8a:ac:2a:07:6e:db:71:3d: a9:0a:7a:fe:c8:23:f0:1d:49:3b:0c:28:bb:98:99: c8:dc:b4:ba:56:0e:3f:fa:17:58:9c:bd:37:b9:59: 86:f5:70:3e:71:ed:cc:57:1c:f9:70:62:12:4d:a4: ee:82:86:11:44:51:39:c5:18:83:76:8b:b7:33:a0: 49:a6:da:35:76:1c:95:cb:e3:e7:94:d7:de:8c:20: 8d:10:2d:2b:c3:b5:db:5a:1c:6f:37:ec:d3:33:66: 2f:7c:88:44:db:4d:2a:8a:a7:ef:09:05:38:6f:12: e0:50:db:c7:f0:21:d4:67:29:e0:cf:18:0f:b6:bf: 06:ec:2b:f5:19:13:08:7b:14:70:df:67:27:38:a8: 3d:c2:a7:03:62:7c:0a:c9:8a:ea:61:b4:c2:3f:06: 4b:0f:f2:57:cc:41:57:54:06:ce:7b:30:69:fd:76: 44:d1:28:89:fd:1b:66:65:00:a8:c7:0b:16:bd:9a: 13:99:00:f8:03:6d:a0:4e:4c:65:41:98:23:1a:29: 15:2b:53:7b:45:35:d7:8b:43:e0:b3:b0:32:00:5a: 1e:85:af:8f:dd:65:30:2b:00:bc:e7:97:d8:fa:49: 9e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:4D:EE:8C:31:30:AE:31:BE:76:1B:F3:AA:40:67:09:08:40:4C:C2 X509v3 Authority Key Identifier: keyid:FF:D0:94:95:18:14:08:CB:E8:3F:D3:33:EA:CE:F2:9F:BC:DA:D6:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/FFD09495181408CBE83FD333EACEF29FBCDAD633.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFD09495181408CBE83FD333EACEF29FBCDAD633.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/3130332e3235332e36382e302f32332d3233203d3e20313332363434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.253.68.0/23 Signature Algorithm: sha256WithRSAEncryption 44:7a:44:5b:9c:bc:7d:6f:23:fd:55:84:5c:85:92:a9:85:6c: 4b:31:c2:f8:eb:7f:07:08:df:69:84:f7:2c:ec:14:5a:9c:ae: 1d:61:7a:c3:ad:2a:e8:1b:9b:c3:42:f8:ad:67:36:30:44:3f: 56:19:97:ff:51:29:e3:89:e8:0e:38:ff:c1:8e:cd:32:cf:fa: f3:16:97:af:41:f7:64:88:ae:46:0c:cb:df:60:f1:c5:6d:6e: e1:24:d9:f6:74:d7:47:48:77:c1:d1:61:5f:6b:06:94:fa:1a: c2:75:32:55:f9:b3:42:dc:f2:ac:54:4b:79:56:21:a0:32:31: 89:e1:a5:32:30:3b:66:87:fa:3e:56:e6:bb:b3:da:9d:8c:4f: 82:41:c7:28:28:ec:59:e2:6c:5c:a5:1c:73:0f:fa:88:d7:cf: 35:8d:15:c8:69:8a:31:d2:ea:16:81:89:a8:00:73:91:8c:2c: c5:f4:45:35:25:6d:5c:aa:86:85:67:60:12:a9:a2:3b:61:0b: 63:7c:20:69:03:ce:79:8d:59:5e:d0:36:9d:dc:65:be:0c:8c: a3:7e:2a:70:f6:af:f8:e1:09:8b:de:e2:c9:1b:99:c6:4e:24: 4e:cf:f9:0f:23:bc:98:b3:43:bf:6a:71:b7:82:59:28:df:99: 99:6f:77:c7 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUXBKEEA/ude/swhcGemxzyei0ZigwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZEMDk0OTUxODE0MDhDQkU4M0ZEMzMzRUFDRUYyOUZC Q0RBRDYzMzAeFw0yNTExMjgwNzQwNDVaFw0yNjExMjcwNzQ1NDVaMDMxMTAvBgNV BAMTKDhDNERFRThDMzEzMEFFMzFCRTc2MUJGM0FBNDA2NzA5MDg0MDRDQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw9x/SE8LhxgNWH+O3Nx46PPxI RLyKrCoHbttxPakKev7II/AdSTsMKLuYmcjctLpWDj/6F1icvTe5WYb1cD5x7cxX HPlwYhJNpO6ChhFEUTnFGIN2i7czoEmm2jV2HJXL4+eU196MII0QLSvDtdtaHG83 7NMzZi98iETbTSqKp+8JBThvEuBQ28fwIdRnKeDPGA+2vwbsK/UZEwh7FHDfZyc4 qD3CpwNifArJiuphtMI/BksP8lfMQVdUBs57MGn9dkTRKIn9G2ZlAKjHCxa9mhOZ APgDbaBOTGVBmCMaKRUrU3tFNdeLQ+CzsDIAWh6Fr4/dZTArALznl9j6SZ4lAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUjE3ujDEwrjG+dhvzqkBnCQhATMIwHwYDVR0j BBgwFoAU/9CUlRgUCMvoP9Mz6s7yn7za1jMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MTM5YWMxZi0zOGUyLTQ1YWEtOTdkYy05OTI3OTY0MTFjYzEvMC9GRkQwOTQ5NTE4 MTQwOENCRTgzRkQzMzNFQUNFRjI5RkJDREFENjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkZEMDk0OTUxODE0MDhDQkU4M0ZEMzMzRUFDRUYyOUZCQ0RB RDYzMy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UxMzlhYzFmLTM4ZTItNDVhYS05 N2RjLTk5Mjc5NjQxMWNjMS8wLzMxMzAzMzJlMzIzNTMzMmUzNjM4MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzMzMyMzYzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ/1EMA0GCSqG SIb3DQEBCwUAA4IBAQBEekRbnLx9byP9VYRchZKphWxLMcL4638HCN9phPcs7BRa nK4dYXrDrSroG5vDQvitZzYwRD9WGZf/USnjiegOOP/Bjs0yz/rzFpevQfdkiK5G DMvfYPHFbW7hJNn2dNdHSHfB0WFfawaU+hrCdTJV+bNC3PKsVEt5ViGgMjGJ4aUy MDtmh/o+Vua7s9qdjE+CQccoKOxZ4mxcpRxzD/qI1881jRXIaYox0uoWgYmoAHOR jCzF9EU1JW1cqoaFZ2ASqaI7YQtjfCBpA855jVle0Dad3GW+DIyjfipw9q/44QmL 3uLJG5nGTiROz/kPI7yYs0O/anG3glko35mZb3fH -----END CERTIFICATE-----Generated at Wed Dec 3 14:52:23 2025 by rpki-client