This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/3130332e3132312e3138322e302f32332d3234203d3e20313335343738.roa File: 3130332e3132312e3138322e302f32332d3234203d3e20313335343738.roa (raw, json) Hash identifier: x8NZlNlUyvGMlN8hhsJWtoHxl7LoXb2c6+KaZM2DY1Y= Subject key identifier: FA:BF:47:A0:E7:28:FC:A5:A9:48:7E:0F:E5:E1:D0:7E:81:AA:99:ED Certificate issuer: /CN=AE7B61A9C16793784CC25CEC0295516C69FF5E20 Certificate serial: 02F8BE61597C816CE71865FBB2B5D46F92AF3913 Authority key identifier: AE:7B:61:A9:C1:67:93:78:4C:C2:5C:EC:02:95:51:6C:69:FF:5E:20 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE7B61A9C16793784CC25CEC0295516C69FF5E20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/3130332e3132312e3138322e302f32332d3234203d3e20313335343738.roa Signing time: Wed 05 Nov 2025 10:03:00 +0000 ROA not before: Wed 05 Nov 2025 09:58:00 +0000 ROA not after: Wed 04 Nov 2026 10:03:00 +0000 asID: 135478 IP address blocks: 103.121.182.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.crl rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE7B61A9C16793784CC25CEC0295516C69FF5E20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 23:32:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:f8:be:61:59:7c:81:6c:e7:18:65:fb:b2:b5:d4:6f:92:af:39:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE7B61A9C16793784CC25CEC0295516C69FF5E20 Validity Not Before: Nov 5 09:58:00 2025 GMT Not After : Nov 4 10:03:00 2026 GMT Subject: CN=FABF47A0E728FCA5A9487E0FE5E1D07E81AA99ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bf:e5:0b:d4:e0:03:47:71:c0:13:62:7e:70: 0c:76:20:ad:77:e5:15:85:1f:bb:4a:89:26:04:0a: e2:01:53:28:18:7d:f3:02:59:ae:bc:1b:86:c1:5a: d7:4a:28:21:ef:db:d1:7b:21:cb:30:d9:6e:03:06: 2a:81:47:ba:e8:20:34:d0:21:68:12:9e:8c:d9:0b: 6b:a3:e1:bf:ab:8c:40:76:8c:cf:f7:ba:54:63:0a: 05:3c:1f:35:bf:5f:1f:ab:c5:01:0f:e6:3f:d0:8c: 98:04:fe:55:dc:ce:f1:25:6e:c2:ad:84:ae:54:ad: 9a:65:99:14:bc:8c:39:9f:dd:44:81:94:3d:2c:e1: 61:95:c5:9a:0f:33:32:36:b4:6a:25:51:50:14:fa: d0:9f:7e:ec:0b:92:81:1d:e1:54:56:e8:8c:99:8a: 2a:69:2b:b8:45:e8:2a:97:23:e8:9e:2d:d5:bb:e4: 5a:a3:bc:d5:ae:9c:26:ea:b0:4d:05:1f:fa:76:2f: 2f:49:bf:52:ff:28:a4:dc:4e:37:75:20:8d:09:ec: 93:7a:55:d0:e2:c0:4c:28:ce:96:0f:96:5e:cd:dd: b4:19:ae:8f:d1:2f:e7:75:ff:7d:ce:77:9e:f2:d3: b0:e7:ca:11:48:b6:9e:d8:af:fb:87:10:e8:b4:9f: 95:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BF:47:A0:E7:28:FC:A5:A9:48:7E:0F:E5:E1:D0:7E:81:AA:99:ED X509v3 Authority Key Identifier: keyid:AE:7B:61:A9:C1:67:93:78:4C:C2:5C:EC:02:95:51:6C:69:FF:5E:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE7B61A9C16793784CC25CEC0295516C69FF5E20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/3130332e3132312e3138322e302f32332d3234203d3e20313335343738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.121.182.0/23 Signature Algorithm: sha256WithRSAEncryption 23:10:9b:b8:34:3f:09:e3:f6:fe:b4:38:72:27:86:bd:03:c2: 6d:ce:d1:83:bf:ca:38:b2:84:95:1d:2d:c8:7a:9f:d0:44:41: a5:d7:ff:01:e2:9a:9e:d3:60:ef:eb:c6:a7:78:b7:18:a4:aa: ed:b2:88:68:73:51:3d:3b:d5:cc:1e:39:65:c2:d7:68:3e:00: 3a:f6:38:f8:02:10:ea:76:66:3d:99:b2:87:30:9d:eb:e3:52: 6b:36:41:63:52:10:db:e5:3c:e4:21:34:b4:a0:89:ba:b2:70: c8:44:c9:01:75:d6:2a:ff:ab:57:5a:31:32:f3:a0:d3:fc:a5: ab:54:e7:79:ae:9d:e8:bb:6d:2d:b9:d1:fb:ad:32:02:e1:98: 5f:af:36:60:b0:a5:ae:31:5e:75:8e:1c:4c:31:32:b6:67:af: fa:d5:b1:3e:48:07:94:d1:17:6d:1c:dd:88:41:53:fc:ae:79: 7d:36:8e:8a:6d:b2:ab:c5:2d:75:5e:c3:8d:5d:0e:8f:d9:f1: 77:e5:e9:b2:67:8c:50:c9:d6:92:6f:85:78:1a:ce:a9:88:3c: ec:4f:2c:97:f0:05:24:1b:fd:25:14:2a:19:ff:c4:e5:c4:0a: 81:1f:c5:3c:4c:9d:ce:ef:3e:b6:8f:34:9b:95:1f:a1:fd:18: 98:f6:a8:8b -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUAvi+YVl8gWznGGX7srXUb5KvORMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3QjYxQTlDMTY3OTM3ODRDQzI1Q0VDMDI5NTUxNkM2 OUZGNUUyMDAeFw0yNTExMDUwOTU4MDBaFw0yNjExMDQxMDAzMDBaMDMxMTAvBgNV BAMTKEZBQkY0N0EwRTcyOEZDQTVBOTQ4N0UwRkU1RTFEMDdFODFBQTk5RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJv+UL1OADR3HAE2J+cAx2IK13 5RWFH7tKiSYECuIBUygYffMCWa68G4bBWtdKKCHv29F7Icsw2W4DBiqBR7roIDTQ IWgSnozZC2uj4b+rjEB2jM/3ulRjCgU8HzW/Xx+rxQEP5j/QjJgE/lXczvElbsKt hK5UrZplmRS8jDmf3USBlD0s4WGVxZoPMzI2tGolUVAU+tCffuwLkoEd4VRW6IyZ iippK7hF6CqXI+ieLdW75FqjvNWunCbqsE0FH/p2Ly9Jv1L/KKTcTjd1II0J7JN6 VdDiwEwozpYPll7N3bQZro/RL+d1/33Od57y07DnyhFItp7Yr/uHEOi0n5WPAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU+r9HoOco/KWpSH4P5eHQfoGqme0wHwYDVR0j BBgwFoAUrnthqcFnk3hMwlzsApVRbGn/XiAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZTg5NWNlYi0yNzc3LTRhZDktOTJkYi00ODczZTQ4NWMxZjYvMC9BRTdCNjFBOUMx Njc5Mzc4NENDMjVDRUMwMjk1NTE2QzY5RkY1RTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUU3QjYxQTlDMTY3OTM3ODRDQzI1Q0VDMDI5NTUxNkM2OUZG NUUyMC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VlODk1Y2ViLTI3NzctNGFkOS05 MmRiLTQ4NzNlNDg1YzFmNi8wLzMxMzAzMzJlMzEzMjMxMmUzMTM4MzIyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzUzNDM3Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnebYwDQYJ KoZIhvcNAQELBQADggEBACMQm7g0Pwnj9v60OHInhr0Dwm3O0YO/yjiyhJUdLch6 n9BEQaXX/wHimp7TYO/rxqd4txikqu2yiGhzUT071cweOWXC12g+ADr2OPgCEOp2 Zj2ZsocwnevjUms2QWNSENvlPOQhNLSgibqycMhEyQF11ir/q1daMTLzoNP8patU 53munei7bS250futMgLhmF+vNmCwpa4xXnWOHEwxMrZnr/rVsT5IB5TRF20c3YhB U/yueX02joptsqvFLXVew41dDo/Z8Xfl6bJnjFDJ1pJvhXgazqmIPOxPLJfwBSQb /SUUKhn/xOXECoEfxTxMnc7vPraPNJuVH6H9GJj2qIs= -----END CERTIFICATE-----Generated at Wed Dec 3 11:48:38 2025 by rpki-client