This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/3130332e3138392e3133382e302f32342d3234203d3e20313439373532.roa File: 3130332e3138392e3133382e302f32342d3234203d3e20313439373532.roa (raw, json) Hash identifier: 11KNXlbV6XDV6e1jADYaW+1r6VvI4ginelDqZNH0poo= Subject key identifier: 4D:91:F2:F7:97:6F:39:44:73:36:B1:4B:92:DA:E2:A8:F2:CF:65:D4 Certificate issuer: /CN=27575AEBC443417C31FDF4A1DDFE016557A835F4 Certificate serial: 5B6CD55A4274F25460DC8076F529EB520201A7DB Authority key identifier: 27:57:5A:EB:C4:43:41:7C:31:FD:F4:A1:DD:FE:01:65:57:A8:35:F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/3130332e3138392e3133382e302f32342d3234203d3e20313439373532.roa Signing time: Thu 11 Sep 2025 13:00:00 +0000 ROA not before: Thu 11 Sep 2025 12:55:00 +0000 ROA not after: Thu 10 Sep 2026 13:00:00 +0000 asID: 149752 IP address blocks: 103.189.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.crl rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 19:27:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:6c:d5:5a:42:74:f2:54:60:dc:80:76:f5:29:eb:52:02:01:a7:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27575AEBC443417C31FDF4A1DDFE016557A835F4 Validity Not Before: Sep 11 12:55:00 2025 GMT Not After : Sep 10 13:00:00 2026 GMT Subject: CN=4D91F2F7976F39447336B14B92DAE2A8F2CF65D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:78:fb:39:43:d7:2b:4d:21:f8:79:f4:c3:82: 66:6f:87:85:c8:9d:7f:cf:d6:27:dd:94:c7:c5:a7: dc:fb:25:63:a9:71:c5:6c:1a:67:43:71:68:a6:b3: 3c:2e:81:ad:79:6f:94:4e:e6:8a:c1:72:3f:dc:a7: 97:1f:aa:72:00:36:3b:ce:93:80:27:01:ee:47:9c: c1:cd:8e:6c:50:95:fe:71:f1:11:75:5a:c5:17:c8: 94:fc:e1:54:d2:1e:df:d7:8a:14:06:bd:cf:a3:8c: a0:c5:b5:57:69:3d:6d:43:6a:f4:dc:5f:8f:85:9a: 9f:25:df:8c:1f:c1:ef:6a:60:18:4b:b9:5e:44:dc: 49:55:5c:19:15:73:91:a5:3e:b3:a5:16:ac:e9:56: 6e:2c:74:40:11:fb:81:76:a1:54:f7:74:7b:bc:72: 5c:92:90:12:04:3e:36:f5:dd:1f:92:1e:76:f3:cd: 69:0d:b1:68:ee:89:dc:9f:45:86:4f:6e:67:21:c3: c6:28:70:e6:ff:b9:60:6a:23:71:51:76:af:7a:37: 5d:61:7d:0a:90:cc:7f:21:f9:2b:0a:b5:f5:cf:56: 38:df:5b:63:b1:da:39:0a:ed:c6:b4:fe:0c:4a:bd: 82:ea:ca:09:08:de:7d:8b:9b:b9:cf:9f:05:51:42: 91:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:91:F2:F7:97:6F:39:44:73:36:B1:4B:92:DA:E2:A8:F2:CF:65:D4 X509v3 Authority Key Identifier: keyid:27:57:5A:EB:C4:43:41:7C:31:FD:F4:A1:DD:FE:01:65:57:A8:35:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/3130332e3138392e3133382e302f32342d3234203d3e20313439373532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.138.0/24 Signature Algorithm: sha256WithRSAEncryption 17:36:ce:d2:44:46:bc:d8:49:d9:8a:5d:d0:1b:62:60:7a:40: 61:ab:5f:1c:2c:15:fd:56:77:7b:74:6a:c0:5e:b7:c5:8c:e9: e3:6c:c0:77:23:e5:4a:46:d3:ef:6a:9f:4d:8b:9c:bf:23:f9: 0c:ba:d9:7a:da:e0:2c:71:20:7c:1f:bb:e5:f6:0b:57:42:e3: 28:20:60:1f:42:75:2d:71:71:21:c8:2a:f2:14:61:4f:67:5c: a5:c3:69:f5:8f:1e:d2:47:fa:0e:2d:18:07:a1:f9:c8:6d:85: 58:be:df:41:df:ad:28:66:48:1a:ec:d8:5b:97:98:06:a4:ea: 86:f6:64:23:24:db:2a:14:05:bf:4a:f9:dd:85:b4:f3:6e:67: 1e:9f:ca:24:da:ab:c8:0e:73:a7:4b:01:a9:14:d7:4d:c2:79: 85:6c:81:95:3f:36:b0:41:14:e7:ff:7b:da:ee:53:c6:80:08: a8:3c:a2:64:82:6a:60:a2:0e:e4:66:58:cc:d5:c8:ef:6b:d9: d5:46:af:5b:6f:4b:c0:5d:57:27:48:b8:a9:a5:50:25:4c:c9: eb:00:7e:bf:dc:98:89:20:f0:c6:46:02:a1:00:f7:14:a3:fa: f2:d8:25:af:c1:80:8f:e6:d9:03:31:58:12:10:66:5f:a5:6c: 54:e5:3b:76 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUW2zVWkJ08lRg3IB29SnrUgIBp9swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAxNjU1 N0E4MzVGNDAeFw0yNTA5MTExMjU1MDBaFw0yNjA5MTAxMzAwMDBaMDMxMTAvBgNV BAMTKDREOTFGMkY3OTc2RjM5NDQ3MzM2QjE0QjkyREFFMkE4RjJDRjY1RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2ePs5Q9crTSH4efTDgmZvh4XI nX/P1ifdlMfFp9z7JWOpccVsGmdDcWimszwuga15b5RO5orBcj/cp5cfqnIANjvO k4AnAe5HnMHNjmxQlf5x8RF1WsUXyJT84VTSHt/XihQGvc+jjKDFtVdpPW1DavTc X4+Fmp8l34wfwe9qYBhLuV5E3ElVXBkVc5GlPrOlFqzpVm4sdEAR+4F2oVT3dHu8 clySkBIEPjb13R+SHnbzzWkNsWjuidyfRYZPbmchw8YocOb/uWBqI3FRdq96N11h fQqQzH8h+SsKtfXPVjjfW2Ox2jkK7ca0/gxKvYLqygkI3n2Lm7nPnwVRQpGfAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUTZHy95dvOURzNrFLktriqPLPZdQwHwYDVR0j BBgwFoAUJ1da68RDQXwx/fSh3f4BZVeoNfQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzZiNTk3Yy05NTQ3LTRjMWUtYWM4Ny0zYTQzNGEzMDBhNjcvMC8yNzU3NUFFQkM0 NDM0MTdDMzFGREY0QTFEREZFMDE2NTU3QTgzNUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAxNjU1N0E4 MzVGNC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VjNmI1OTdjLTk1NDctNGMxZS1h Yzg3LTNhNDM0YTMwMGE2Ny8wLzMxMzAzMzJlMzEzODM5MmUzMTMzMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzNzM1MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnvYowDQYJ KoZIhvcNAQELBQADggEBABc2ztJERrzYSdmKXdAbYmB6QGGrXxwsFf1Wd3t0asBe t8WM6eNswHcj5UpG0+9qn02LnL8j+Qy62Xra4CxxIHwfu+X2C1dC4yggYB9CdS1x cSHIKvIUYU9nXKXDafWPHtJH+g4tGAeh+chthVi+30HfrShmSBrs2FuXmAak6ob2 ZCMk2yoUBb9K+d2FtPNuZx6fyiTaq8gOc6dLAakU103CeYVsgZU/NrBBFOf/e9ru U8aACKg8omSCamCiDuRmWMzVyO9r2dVGr1tvS8BdVydIuKmlUCVMyesAfr/cmIkg 8MZGAqEA9xSj+vLYJa/BgI/m2QMxWBIQZl+lbFTlO3Y= -----END CERTIFICATE-----Generated at Wed Dec 3 16:52:39 2025 by rpki-client