This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/AS38496.roa File: AS38496.roa (raw, json) Hash identifier: NoTu4uTVv76+CbUMhzog8IYBnzZtHyJJiJKWizpeK8M= Subject key identifier: D2:8F:11:C6:E2:D2:1E:6F:9F:68:23:67:87:89:6F:2D:57:4E:DF:03 Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Certificate serial: 564F9EE04081AA72AA47538D715189D3CFB68542 Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/AS38496.roa Signing time: Mon 08 Dec 2025 03:49:09 +0000 ROA not before: Mon 08 Dec 2025 03:44:09 +0000 ROA not after: Mon 07 Dec 2026 03:49:09 +0000 asID: 38496 IP address blocks: 103.31.156.0/22 maxlen: 24 112.78.96.0/21 maxlen: 24 114.31.240.0/24 maxlen: 24 114.31.241.0/24 maxlen: 24 114.31.242.0/24 maxlen: 24 114.31.243.0/24 maxlen: 24 114.31.244.0/24 maxlen: 24 114.31.245.0/24 maxlen: 24 114.31.246.0/24 maxlen: 24 114.31.247.0/24 maxlen: 24 114.110.40.0/21 maxlen: 24 114.134.72.0/21 maxlen: 24 115.178.120.0/24 maxlen: 24 115.178.121.0/24 maxlen: 24 115.178.122.0/24 maxlen: 24 116.66.200.0/21 maxlen: 21 116.66.200.0/23 maxlen: 23 116.66.200.0/24 maxlen: 24 116.66.201.0/24 maxlen: 24 116.66.202.0/23 maxlen: 24 116.66.202.0/24 maxlen: 24 116.66.203.0/24 maxlen: 24 116.66.204.0/24 maxlen: 24 116.66.206.0/23 maxlen: 23 116.66.206.0/24 maxlen: 24 116.66.207.0/24 maxlen: 24 116.254.120.0/21 maxlen: 24 117.103.8.0/24 maxlen: 24 117.103.9.0/24 maxlen: 24 117.103.10.0/24 maxlen: 24 117.103.11.0/24 maxlen: 24 117.103.12.0/24 maxlen: 24 117.103.13.0/24 maxlen: 24 117.103.14.0/24 maxlen: 24 117.103.15.0/24 maxlen: 24 182.23.160.0/24 maxlen: 24 182.23.161.0/24 maxlen: 24 182.23.163.0/24 maxlen: 24 182.23.164.0/24 maxlen: 24 182.23.165.0/24 maxlen: 24 182.23.166.0/24 maxlen: 24 182.23.167.0/24 maxlen: 24 182.23.168.0/24 maxlen: 24 182.23.169.0/24 maxlen: 24 182.23.172.0/24 maxlen: 24 182.23.173.0/24 maxlen: 24 182.23.174.0/24 maxlen: 24 202.87.176.0/24 maxlen: 24 202.87.184.0/24 maxlen: 24 202.87.188.0/24 maxlen: 24 203.191.40.0/24 maxlen: 24 203.191.41.0/24 maxlen: 24 203.191.42.0/24 maxlen: 24 203.191.43.0/24 maxlen: 24 223.27.144.0/24 maxlen: 24 223.27.145.0/24 maxlen: 24 223.27.146.0/24 maxlen: 24 223.27.148.0/24 maxlen: 24 223.27.149.0/24 maxlen: 24 223.27.150.0/23 maxlen: 24 223.27.150.0/24 maxlen: 24 223.27.151.0/24 maxlen: 24 223.27.152.0/24 maxlen: 24 223.27.153.0/24 maxlen: 24 223.27.154.0/23 maxlen: 24 223.27.154.0/24 maxlen: 24 223.27.156.0/24 maxlen: 24 223.27.157.0/24 maxlen: 24 223.27.158.0/24 maxlen: 24 223.27.159.0/24 maxlen: 24 2401:2400::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 09:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:4f:9e:e0:40:81:aa:72:aa:47:53:8d:71:51:89:d3:cf:b6:85:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Validity Not Before: Dec 8 03:44:09 2025 GMT Not After : Dec 7 03:49:09 2026 GMT Subject: CN=D28F11C6E2D21E6F9F68236787896F2D574EDF03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:69:9b:6f:22:e1:7b:f4:24:0c:e9:44:a7:b0: 4c:a1:74:91:47:c0:c7:c7:d7:09:ee:79:10:33:a9: a1:b6:b3:bd:e5:b6:61:3a:e7:32:14:47:7f:cc:55: b5:82:85:13:15:00:e8:ec:24:9f:2b:23:f7:e6:1a: b3:b1:9d:2e:2a:bf:3a:d0:07:32:3d:20:e7:6b:e9: 96:26:a6:ee:85:3f:89:16:75:27:2a:8e:e5:18:78: 63:09:36:41:09:d2:a9:30:a7:ad:d1:a3:8b:fd:04: 5b:49:8e:26:d4:5f:30:f8:94:fe:db:c3:25:f8:e5: e9:35:cd:60:51:90:73:39:58:5a:35:82:fe:75:1d: e7:84:af:1f:4f:a3:d8:d0:79:ec:38:88:2e:df:87: 64:90:28:6b:75:d9:32:33:aa:e7:6e:10:f5:c8:c3: 33:33:cf:c7:02:93:98:5e:20:96:91:03:60:bb:0d: 82:7d:d2:85:28:f6:ca:bc:5c:df:74:aa:bd:3d:ed: 6f:71:5c:b4:a3:20:be:a6:4d:c6:5d:4d:60:bb:3f: e8:23:9b:55:82:1a:be:70:99:a2:71:f5:30:cf:72: c1:94:fd:ce:eb:fd:cf:4e:b8:69:e4:fd:03:a8:1c: 29:2d:b4:e0:6e:d2:4a:94:ca:1f:b0:b1:99:1c:43: 98:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:8F:11:C6:E2:D2:1E:6F:9F:68:23:67:87:89:6F:2D:57:4E:DF:03 X509v3 Authority Key Identifier: keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/AS38496.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.31.156.0/22 112.78.96.0/21 114.31.240.0/21 114.110.40.0/21 114.134.72.0/21 115.178.120.0-115.178.122.255 116.66.200.0/21 116.254.120.0/21 117.103.8.0/21 182.23.160.0/23 182.23.163.0-182.23.169.255 182.23.172.0-182.23.174.255 202.87.176.0/24 202.87.184.0/24 202.87.188.0/24 203.191.40.0/22 223.27.144.0-223.27.146.255 223.27.148.0-223.27.159.255 IPv6: 2401:2400::/32 Signature Algorithm: sha256WithRSAEncryption 22:23:87:ff:bd:8b:95:bd:9e:20:bc:8c:77:4d:1a:91:f9:f5: 24:95:af:35:df:7d:d4:2f:da:fe:aa:bc:7a:cb:35:03:fa:15: ce:e6:f4:a3:1e:39:61:d4:81:12:4e:fb:8a:a0:9b:e3:86:57: 84:46:a4:83:ec:65:93:aa:10:e4:98:83:a8:55:cf:84:40:79: dd:1f:51:81:31:f0:67:11:5c:41:af:cb:72:6c:5a:dd:6e:ea: ec:45:9d:71:f1:f9:53:24:82:cd:d0:53:d1:d2:f5:88:74:3c: b0:18:34:98:0f:42:cb:6c:4c:bd:ed:3b:28:e5:1f:1f:7c:7a: 5d:83:c2:0f:19:ed:65:d7:d4:a3:4d:4d:dd:3a:9c:e7:69:48: 01:7d:1d:c0:89:12:d8:d5:f7:c9:24:aa:c2:e6:08:e5:e3:16: 60:bc:bf:8d:3e:0a:35:fa:90:bd:53:ea:d5:3b:e7:05:35:a3: 0a:52:41:e7:c3:fb:af:32:11:76:de:8a:59:f2:02:84:15:2c: d6:24:49:72:c3:2f:95:5b:93:c5:a6:d4:0b:c1:ca:d1:2b:ee: ee:12:cb:71:38:8c:cc:3d:ff:09:9e:56:59:a5:f2:77:69:57: fe:e9:38:dd:da:5c:09:a9:34:98:93:70:3c:fc:9d:bc:28:6a: 0f:00:94:2f -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgIUVk+e4ECBqnKqR1ONcVGJ08+2hUIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG OEZDMDZFQzAeFw0yNTEyMDgwMzQ0MDlaFw0yNjEyMDcwMzQ5MDlaMDMxMTAvBgNV BAMTKEQyOEYxMUM2RTJEMjFFNkY5RjY4MjM2Nzg3ODk2RjJENTc0RURGMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsaZtvIuF79CQM6USnsEyhdJFH wMfH1wnueRAzqaG2s73ltmE65zIUR3/MVbWChRMVAOjsJJ8rI/fmGrOxnS4qvzrQ BzI9IOdr6ZYmpu6FP4kWdScqjuUYeGMJNkEJ0qkwp63Ro4v9BFtJjibUXzD4lP7b wyX45ek1zWBRkHM5WFo1gv51HeeErx9Po9jQeew4iC7fh2SQKGt12TIzquduEPXI wzMzz8cCk5heIJaRA2C7DYJ90oUo9sq8XN90qr097W9xXLSjIL6mTcZdTWC7P+gj m1WCGr5wmaJx9TDPcsGU/c7r/c9OuGnk/QOoHCkttOBu0kqUyh+wsZkcQ5gBAgMB AAGjggKgMIICnDAdBgNVHQ4EFgQU0o8RxuLSHm+faCNnh4lvLVdO3wMwHwYDVR0j BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2 QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD MDZFQy5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jl cG8tcnBraS5pZG5pYy5uZXQvcmVwby9lODczNDlmYi00NjVlLTRlOGItYTk3NC05 MGU5MzliY2IwZmIvMC9BUzM4NDk2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMIHABggrBgEFBQcBBwEB/wSBsDCBrTCBmwQCAAEwgZQDBAJnH5wDBANwTmAD BANyH/ADBANybigDBANyhkgwDAMEA3OyeAMEAHOyegMEA3RCyAMEA3T+eAMEA3Vn CAMEAbYXoDAMAwQAthejAwQBtheoMAwDBAK2F6wDBAC2F64DBADKV7ADBADKV7gD BADKV7wDBALLvygwDAMEBN8bkAMEAN8bkjAMAwQC3xuUAwQF3xuAMA0EAgACMAcD BQAkASQAMA0GCSqGSIb3DQEBCwUAA4IBAQAiI4f/vYuVvZ4gvIx3TRqR+fUkla81 333UL9r+qrx6yzUD+hXO5vSjHjlh1IESTvuKoJvjhleERqSD7GWTqhDkmIOoVc+E QHndH1GBMfBnEVxBr8tybFrdbursRZ1x8flTJILN0FPR0vWIdDywGDSYD0LLbEy9 7Tso5R8ffHpdg8IPGe1l19SjTU3dOpznaUgBfR3AiRLY1ffJJKrC5gjl4xZgvL+N Pgo1+pC9U+rVO+cFNaMKUkHnw/uvMhF23opZ8gKEFSzWJElywy+VW5PFptQLwcrR K+7uEstxOIzMPf8JnlZZpfJ3aVf+6Tjd2lwJqTSYk3A8/J28KGoPAJQv -----END CERTIFICATE-----Generated at Sun Dec 14 08:37:23 2025 by rpki-client