This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/3130332e3234372e3234322e302f32332d3234203d3e20313531353337.roa File: 3130332e3234372e3234322e302f32332d3234203d3e20313531353337.roa (raw, json) Hash identifier: /KC3HC1ev3eUia/MbScpps/zMZoYFTTbRVMV+spgfEs= Subject key identifier: 68:31:82:47:1D:DF:44:05:98:6E:FE:D4:8A:E9:E4:CD:DC:46:A4:CC Certificate issuer: /CN=111A56FF0468DAC0FFF41B82D23F21DD4139F00F Certificate serial: 5D113456A3442630EFECD2001831180CDF88BD8B Authority key identifier: 11:1A:56:FF:04:68:DA:C0:FF:F4:1B:82:D2:3F:21:DD:41:39:F0:0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/3130332e3234372e3234322e302f32332d3234203d3e20313531353337.roa Signing time: Mon 01 Dec 2025 08:45:42 +0000 ROA not before: Mon 01 Dec 2025 08:40:42 +0000 ROA not after: Mon 30 Nov 2026 08:45:42 +0000 asID: 151537 IP address blocks: 103.247.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.crl rsync://repo-rpki.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:11:34:56:a3:44:26:30:ef:ec:d2:00:18:31:18:0c:df:88:bd:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111A56FF0468DAC0FFF41B82D23F21DD4139F00F Validity Not Before: Dec 1 08:40:42 2025 GMT Not After : Nov 30 08:45:42 2026 GMT Subject: CN=683182471DDF4405986EFED48AE9E4CDDC46A4CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:83:d0:1a:e9:72:34:a5:28:d7:a1:93:08:96: 6f:6e:2e:03:73:22:dc:78:dc:63:9a:00:8e:c1:81: ad:8c:ba:c9:ad:00:7d:59:42:08:d3:c7:a5:c5:55: f1:d3:8b:ea:ff:d4:95:3c:b5:bc:1d:1f:0f:51:79: 13:57:b7:c8:7a:57:e4:db:9e:f8:67:37:31:5b:ff: a6:94:b2:da:6e:af:5f:bf:e6:d7:ea:b4:41:a6:c1: 48:fd:22:9a:a8:c3:62:14:bb:0d:73:a2:41:f3:4b: 14:52:64:f3:f8:f7:07:17:22:54:67:2b:03:81:aa: 57:36:ea:ba:d5:8b:79:11:3a:be:9f:b3:c9:16:68: a5:32:5b:b5:b1:57:6f:d8:ad:04:a1:88:45:72:d8: d3:aa:3f:66:81:bb:b6:bb:18:56:d0:ed:d9:35:0e: e3:30:a9:34:4c:e6:21:b2:af:5a:a5:d7:07:02:05: 04:ba:8a:0a:ee:5b:ef:89:cb:3d:1d:b8:dd:3f:6f: 73:cb:51:0b:6f:74:66:bd:e2:7f:cd:83:df:37:b3: a4:e4:e6:74:29:e5:54:87:0d:3d:c5:9d:08:bd:92: 39:d7:78:01:2f:2a:fe:ed:91:71:ab:36:96:1a:22: 93:93:be:3e:cd:b4:5d:4e:f1:ed:4a:01:a4:3b:52: e3:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:31:82:47:1D:DF:44:05:98:6E:FE:D4:8A:E9:E4:CD:DC:46:A4:CC X509v3 Authority Key Identifier: keyid:11:1A:56:FF:04:68:DA:C0:FF:F4:1B:82:D2:3F:21:DD:41:39:F0:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/3130332e3234372e3234322e302f32332d3234203d3e20313531353337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.247.242.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:d1:56:c8:6d:f2:44:7f:d0:01:a7:0b:07:26:5d:e1:2b:72: 2f:36:59:3c:13:28:60:18:c0:36:4d:6c:53:fa:cf:1f:62:43: 3b:e1:5d:1f:8d:96:b5:71:18:e7:97:49:8f:6c:2e:28:56:04: b3:7b:1b:07:be:e2:77:bb:88:f9:90:ca:c3:2a:98:83:25:df: a4:e0:2b:e9:16:1e:1d:56:75:45:67:c6:e5:2f:02:27:54:97: e1:97:da:cd:b3:7c:e2:32:93:7f:f1:cf:73:b4:30:9f:99:34: 9e:82:f9:74:e9:6b:38:82:4d:16:9c:29:e3:34:e2:36:d0:75: 9d:e4:94:41:28:05:d6:9c:da:b2:8e:5c:a3:d6:2e:0f:5f:73: 93:0b:d3:2f:15:ac:ac:ad:ad:c5:6a:96:51:ea:96:f5:b1:fa: 5b:33:28:65:59:c3:1c:3d:35:f0:85:41:10:29:ac:58:54:b1: c3:7c:0e:5a:82:79:74:29:9a:4e:92:38:4f:16:2e:3b:3f:a0: 54:c6:ac:e8:dd:d1:e2:61:e1:2f:96:7c:73:34:41:c4:30:a5: 4e:c0:b2:d5:69:aa:9c:c3:68:8d:93:f5:06:13:7a:da:dd:86: 5e:c4:ef:20:0d:fd:52:1e:c7:bc:e0:37:69:f8:2d:0a:5f:9a: 47:2c:b6:85 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUXRE0VqNEJjDv7NIAGDEYDN+IvYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTExQTU2RkYwNDY4REFDMEZGRjQxQjgyRDIzRjIxREQ0 MTM5RjAwRjAeFw0yNTEyMDEwODQwNDJaFw0yNjExMzAwODQ1NDJaMDMxMTAvBgNV BAMTKDY4MzE4MjQ3MURERjQ0MDU5ODZFRkVENDhBRTlFNENEREM0NkE0Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDig9Aa6XI0pSjXoZMIlm9uLgNz Itx43GOaAI7Bga2MusmtAH1ZQgjTx6XFVfHTi+r/1JU8tbwdHw9ReRNXt8h6V+Tb nvhnNzFb/6aUstpur1+/5tfqtEGmwUj9Ipqow2IUuw1zokHzSxRSZPP49wcXIlRn KwOBqlc26rrVi3kROr6fs8kWaKUyW7WxV2/YrQShiEVy2NOqP2aBu7a7GFbQ7dk1 DuMwqTRM5iGyr1ql1wcCBQS6igruW++Jyz0duN0/b3PLUQtvdGa94n/Ng983s6Tk 5nQp5VSHDT3FnQi9kjnXeAEvKv7tkXGrNpYaIpOTvj7NtF1O8e1KAaQ7UuOxAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUaDGCRx3fRAWYbv7UiunkzdxGpMwwHwYDVR0j BBgwFoAUERpW/wRo2sD/9BuC0j8h3UE58A8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m N2VmMjhhZi1hOWFlLTRjMzMtOGM5OC01MTIwOWZiMjNkYmEvMC8xMTFBNTZGRjA0 NjhEQUMwRkZGNDFCODJEMjNGMjFERDQxMzlGMDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTExQTU2RkYwNDY4REFDMEZGRjQxQjgyRDIzRjIxREQ0MTM5 RjAwRi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y3ZWYyOGFmLWE5YWUtNGMzMy04 Yzk4LTUxMjA5ZmIyM2RiYS8wLzMxMzAzMzJlMzIzNDM3MmUzMjM0MzIyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM1MzEzNTMzMzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn9/IwDQYJ KoZIhvcNAQELBQADggEBAE3RVsht8kR/0AGnCwcmXeErci82WTwTKGAYwDZNbFP6 zx9iQzvhXR+NlrVxGOeXSY9sLihWBLN7Gwe+4ne7iPmQysMqmIMl36TgK+kWHh1W dUVnxuUvAidUl+GX2s2zfOIyk3/xz3O0MJ+ZNJ6C+XTpaziCTRacKeM04jbQdZ3k lEEoBdac2rKOXKPWLg9fc5ML0y8VrKytrcVqllHqlvWx+lszKGVZwxw9NfCFQRAp rFhUscN8DlqCeXQpmk6SOE8WLjs/oFTGrOjd0eJh4S+WfHM0QcQwpU7AstVpqpzD aI2T9QYTetrdhl7E7yAN/VIex7zgN2n4LQpfmkcstoU= -----END CERTIFICATE-----Generated at Wed Dec 3 14:54:11 2025 by rpki-client