This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/3130332e3137302e3138362e302f32332d3234203d3e20313432333635.roa File: 3130332e3137302e3138362e302f32332d3234203d3e20313432333635.roa (raw, json) Hash identifier: H+FNrGTWOm2rEbzW4c22NCPKDmaY/bFliACB6RDfaOU= Subject key identifier: 03:21:1D:FA:43:84:64:62:6B:F4:CF:E8:9D:04:D8:63:C0:2C:BE:51 Certificate issuer: /CN=D4DD8244BC2EB2B187B4181226714505DF8F4452 Certificate serial: 4C9737FA635E123A1792CF088F08D1242A5D04D7 Authority key identifier: D4:DD:82:44:BC:2E:B2:B1:87:B4:18:12:26:71:45:05:DF:8F:44:52 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4DD8244BC2EB2B187B4181226714505DF8F4452.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/3130332e3137302e3138362e302f32332d3234203d3e20313432333635.roa Signing time: Mon 03 Nov 2025 00:00:01 +0000 ROA not before: Sun 02 Nov 2025 23:55:01 +0000 ROA not after: Mon 02 Nov 2026 00:00:01 +0000 asID: 142365 IP address blocks: 103.170.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.crl rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4DD8244BC2EB2B187B4181226714505DF8F4452.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 18:06:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:97:37:fa:63:5e:12:3a:17:92:cf:08:8f:08:d1:24:2a:5d:04:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4DD8244BC2EB2B187B4181226714505DF8F4452 Validity Not Before: Nov 2 23:55:01 2025 GMT Not After : Nov 2 00:00:01 2026 GMT Subject: CN=03211DFA438464626BF4CFE89D04D863C02CBE51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f5:3c:80:0f:d4:48:67:4a:f6:32:93:39:f1: 11:46:4b:58:78:a3:2d:4c:a7:9b:73:27:c6:c6:63: 68:f2:76:b0:fb:08:e7:bc:2a:3d:91:3c:8d:6a:69: 87:16:29:ce:75:dc:fd:8a:5b:2f:5b:95:80:05:e8: 25:6c:b4:86:f5:12:05:f4:49:e2:0f:cd:d4:72:12: f3:05:3f:6e:c3:19:b6:b6:6c:12:60:4a:03:6b:8d: 56:a7:80:8e:d1:1d:78:b1:12:c5:84:c8:a0:e3:44: a6:66:63:ab:d1:f7:f5:b5:b5:34:7e:a5:c6:2e:80: ae:ea:bd:f8:4d:8a:a5:ed:2d:b5:28:85:06:ba:d6: 34:b0:eb:83:85:e8:6b:64:e3:a7:f2:9a:2d:f3:27: 2a:6d:13:50:94:dd:b1:b2:08:27:96:d3:e0:82:3f: 87:2f:10:93:51:de:0b:87:9c:75:68:be:24:f4:1c: cd:16:55:d4:72:26:04:3b:3b:0c:d0:4f:94:b6:4d: 30:1b:ee:b9:f7:86:95:88:64:fe:aa:a6:76:fb:89: f2:2e:36:76:62:60:f8:de:c1:bf:ff:4e:68:e4:60: d9:8d:5d:b5:bf:be:6e:0f:e4:4a:a6:86:14:00:9b: da:38:18:b8:63:90:2c:4d:b7:f3:70:a2:47:1a:46: 5a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:21:1D:FA:43:84:64:62:6B:F4:CF:E8:9D:04:D8:63:C0:2C:BE:51 X509v3 Authority Key Identifier: keyid:D4:DD:82:44:BC:2E:B2:B1:87:B4:18:12:26:71:45:05:DF:8F:44:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4DD8244BC2EB2B187B4181226714505DF8F4452.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/3130332e3137302e3138362e302f32332d3234203d3e20313432333635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.170.186.0/23 Signature Algorithm: sha256WithRSAEncryption 13:6d:72:83:15:0f:20:93:94:c0:ad:99:c8:2d:72:d1:ab:f9: 9a:a2:86:1f:f8:f1:b9:26:5c:d3:f2:30:20:a8:b8:28:b1:35: 8c:4e:de:79:99:df:69:f6:25:b2:0c:7c:f7:fd:ca:51:22:36: 17:e3:53:20:f5:e3:03:64:14:05:f2:1e:c3:09:3d:b6:29:5a: 55:1c:84:0b:c2:fb:e9:be:dd:6f:74:d3:84:ba:59:1f:c2:fc: d1:7e:e9:c3:31:5c:15:35:53:a0:93:11:23:a3:af:eb:de:b9: ee:70:7c:71:a1:6e:f8:d8:99:46:f3:71:61:5f:db:e8:cb:42: 03:c9:c5:d9:36:db:aa:55:33:70:47:b2:c8:05:59:79:56:fc: 63:da:2e:92:e1:51:ea:75:ae:fc:ce:5e:9e:b0:3c:1a:55:9c: a3:7d:62:36:79:40:43:19:5d:14:eb:2e:78:7a:ab:46:59:85: b5:c7:d9:bf:f6:fa:1e:61:88:52:1b:24:50:92:82:72:35:cf: 93:87:5d:bd:4f:45:fa:2c:f3:9e:89:8c:d7:7f:45:48:af:fa: 9b:1b:aa:d5:c6:3f:43:7c:0f:46:3f:b2:fc:d1:7d:9f:b9:64: f2:59:1a:6a:cf:bb:87:1f:54:ae:9d:6a:8a:8a:e1:05:25:08: 17:26:c5:6b -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUTJc3+mNeEjoXks8IjwjRJCpdBNcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRERDgyNDRCQzJFQjJCMTg3QjQxODEyMjY3MTQ1MDVE RjhGNDQ1MjAeFw0yNTExMDIyMzU1MDFaFw0yNjExMDIwMDAwMDFaMDMxMTAvBgNV BAMTKDAzMjExREZBNDM4NDY0NjI2QkY0Q0ZFODlEMDREODYzQzAyQ0JFNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV9TyAD9RIZ0r2MpM58RFGS1h4 oy1Mp5tzJ8bGY2jydrD7COe8Kj2RPI1qaYcWKc513P2KWy9blYAF6CVstIb1EgX0 SeIPzdRyEvMFP27DGba2bBJgSgNrjVangI7RHXixEsWEyKDjRKZmY6vR9/W1tTR+ pcYugK7qvfhNiqXtLbUohQa61jSw64OF6Gtk46fymi3zJyptE1CU3bGyCCeW0+CC P4cvEJNR3guHnHVoviT0HM0WVdRyJgQ7OwzQT5S2TTAb7rn3hpWIZP6qpnb7ifIu NnZiYPjewb//TmjkYNmNXbW/vm4P5EqmhhQAm9o4GLhjkCxNt/NwokcaRloPAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUAyEd+kOEZGJr9M/onQTYY8AsvlEwHwYDVR0j BBgwFoAU1N2CRLwusrGHtBgSJnFFBd+PRFIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YWYwZjQyMy0zYmVkLTQ5MzgtOWY4OS0xNWU2MjY5YmRkY2EvMC9ENEREODI0NEJD MkVCMkIxODdCNDE4MTIyNjcxNDUwNURGOEY0NDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDRERDgyNDRCQzJFQjJCMTg3QjQxODEyMjY3MTQ1MDVERjhG NDQ1Mi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhZjBmNDIzLTNiZWQtNDkzOC05 Zjg5LTE1ZTYyNjliZGRjYS8wLzMxMzAzMzJlMzEzNzMwMmUzMTM4MzYyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM2MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnqrowDQYJ KoZIhvcNAQELBQADggEBABNtcoMVDyCTlMCtmcgtctGr+Zqihh/48bkmXNPyMCCo uCixNYxO3nmZ32n2JbIMfPf9ylEiNhfjUyD14wNkFAXyHsMJPbYpWlUchAvC++m+ 3W9004S6WR/C/NF+6cMxXBU1U6CTESOjr+veue5wfHGhbvjYmUbzcWFf2+jLQgPJ xdk226pVM3BHssgFWXlW/GPaLpLhUep1rvzOXp6wPBpVnKN9YjZ5QEMZXRTrLnh6 q0ZZhbXH2b/2+h5hiFIbJFCSgnI1z5OHXb1PRfos856JjNd/RUiv+psbqtXGP0N8 D0Y/svzRfZ+5ZPJZGmrPu4cfVK6daoqK4QUlCBcmxWs= -----END CERTIFICATE-----Generated at Wed Dec 3 16:15:35 2025 by rpki-client