This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/3130332e3135362e31362e302f32332d3233203d3e20313431303737.roa File: 3130332e3135362e31362e302f32332d3233203d3e20313431303737.roa (raw, json) Hash identifier: u3SbbNuX76ouLAbh2avANQTDQ1dz0YKRwMgpyt5FWwk= Subject key identifier: DD:1F:9E:EE:F2:1B:A8:18:61:04:F5:87:44:AB:90:F7:4C:B2:94:C2 Certificate issuer: /CN=C25D5056A69CE0D0685BAD8E48F33A4A62A5C582 Certificate serial: 14E3127B69D95BB8A57430231261F9B34DE43B18 Authority key identifier: C2:5D:50:56:A6:9C:E0:D0:68:5B:AD:8E:48:F3:3A:4A:62:A5:C5:82 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/3130332e3135362e31362e302f32332d3233203d3e20313431303737.roa Signing time: Wed 19 Nov 2025 20:20:18 +0000 ROA not before: Wed 19 Nov 2025 20:15:18 +0000 ROA not after: Wed 18 Nov 2026 20:20:18 +0000 asID: 141077 IP address blocks: 103.156.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 18:55:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:e3:12:7b:69:d9:5b:b8:a5:74:30:23:12:61:f9:b3:4d:e4:3b:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C25D5056A69CE0D0685BAD8E48F33A4A62A5C582 Validity Not Before: Nov 19 20:15:18 2025 GMT Not After : Nov 18 20:20:18 2026 GMT Subject: CN=DD1F9EEEF21BA8186104F58744AB90F74CB294C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:89:ce:c3:a2:a3:8a:ff:5b:9f:6a:c2:c8:a6: 35:dc:7b:3b:e3:58:c5:03:55:34:89:e1:5b:86:9e: fa:cb:08:26:bf:3e:40:95:3d:8f:1a:f3:60:21:d8: 05:70:ec:90:b9:b2:49:39:05:94:92:a6:90:ac:b9: 47:32:eb:ef:0a:09:cc:15:54:23:72:cd:c0:d2:3d: 4b:fc:c5:d4:1d:c6:35:32:6c:2a:23:3c:d2:6d:3a: d9:d2:3d:f4:fa:71:49:60:51:da:4b:84:43:1f:e2: f3:84:02:71:19:46:be:9b:f2:00:31:9e:63:08:9d: 03:2a:dc:98:ba:90:c2:82:31:23:0c:3c:ee:ec:49: af:d6:de:48:a3:41:9f:ac:db:47:52:ae:52:60:a7: ef:5f:92:65:e7:02:60:be:f6:8d:f0:7f:b7:b7:76: 8b:fc:42:76:26:7d:84:b2:c6:f1:ee:33:27:a7:41: 0b:e4:40:be:18:51:fa:84:70:29:d1:f6:a5:95:63: 9a:ab:d6:44:b1:b3:d1:80:b6:6a:96:76:a3:f5:de: d0:0b:c0:e7:e2:20:69:e2:ca:36:9f:49:c0:55:44: 77:c4:3d:9a:30:6a:3b:2d:b4:a6:68:cc:47:ac:a8: b4:fc:ca:64:db:d1:ef:15:8a:a9:9e:95:f8:b7:72: 29:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:1F:9E:EE:F2:1B:A8:18:61:04:F5:87:44:AB:90:F7:4C:B2:94:C2 X509v3 Authority Key Identifier: keyid:C2:5D:50:56:A6:9C:E0:D0:68:5B:AD:8E:48:F3:3A:4A:62:A5:C5:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/3130332e3135362e31362e302f32332d3233203d3e20313431303737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.16.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:0d:7d:44:4d:29:81:83:ad:14:6c:6a:92:6a:b5:54:4f:df: bf:9f:cf:72:9c:57:96:b8:d5:29:cb:ce:0a:e6:95:61:af:50: 66:47:1e:9d:da:40:e5:86:4f:ff:e2:85:12:5e:0c:87:b6:9f: 2c:df:06:54:27:19:ea:73:f8:00:a2:d7:c2:ff:b1:c1:ad:24: 9f:58:c0:79:81:3f:65:01:a1:03:27:20:e4:e1:18:d5:58:7c: 0e:ee:1c:b7:35:1d:f3:0d:57:5a:b2:0c:a9:ef:a3:14:d8:35: 0a:9a:34:c0:7e:ed:d3:62:b2:7e:2a:3f:46:c2:5e:b2:58:41: d7:0e:7d:85:f5:db:99:6b:35:09:5f:fb:24:f1:07:70:6b:36: 38:e7:f2:d0:49:15:10:e2:b5:bc:13:49:40:0c:76:30:a9:03: ab:9c:b8:3d:e6:f7:9e:fd:93:f2:79:8b:81:07:cf:9a:d9:52: 2e:f0:05:ec:a8:ab:e1:9b:29:47:44:30:ab:47:04:69:60:e6: 22:34:f3:de:25:7a:d8:0c:ce:31:94:0d:2e:c9:2a:49:3c:5d: 15:e8:be:30:ae:48:80:99:e7:27:e8:2e:92:61:7d:b2:d2:63: f7:30:75:0c:52:d1:40:7f:2e:68:9a:5c:5c:be:07:5f:6c:88: 34:d5:2a:d4 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUFOMSe2nZW7ildDAjEmH5s03kOxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI1RDUwNTZBNjlDRTBEMDY4NUJBRDhFNDhGMzNBNEE2 MkE1QzU4MjAeFw0yNTExMTkyMDE1MThaFw0yNjExMTgyMDIwMThaMDMxMTAvBgNV BAMTKEREMUY5RUVFRjIxQkE4MTg2MTA0RjU4NzQ0QUI5MEY3NENCMjk0QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ic7DoqOK/1ufasLIpjXcezvj WMUDVTSJ4VuGnvrLCCa/PkCVPY8a82Ah2AVw7JC5skk5BZSSppCsuUcy6+8KCcwV VCNyzcDSPUv8xdQdxjUybCojPNJtOtnSPfT6cUlgUdpLhEMf4vOEAnEZRr6b8gAx nmMInQMq3Ji6kMKCMSMMPO7sSa/W3kijQZ+s20dSrlJgp+9fkmXnAmC+9o3wf7e3 dov8QnYmfYSyxvHuMyenQQvkQL4YUfqEcCnR9qWVY5qr1kSxs9GAtmqWdqP13tAL wOfiIGniyjafScBVRHfEPZowajsttKZozEesqLT8ymTb0e8Viqmelfi3ciktAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU3R+e7vIbqBhhBPWHRKuQ90yylMIwHwYDVR0j BBgwFoAUwl1QVqac4NBoW62OSPM6SmKlxYIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OTY0MDFlMy05ZjYyLTRiM2MtYmZmYi03ODMzNTVhZTY3NzAvMC9DMjVENTA1NkE2 OUNFMEQwNjg1QkFEOEU0OEYzM0E0QTYyQTVDNTgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI1RDUwNTZBNjlDRTBEMDY4NUJBRDhFNDhGMzNBNEE2MkE1 QzU4Mi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y5NjQwMWUzLTlmNjItNGIzYy1i ZmZiLTc4MzM1NWFlNjc3MC8wLzMxMzAzMzJlMzEzNTM2MmUzMTM2MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNDMxMzAzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5wQMA0GCSqG SIb3DQEBCwUAA4IBAQAqDX1ETSmBg60UbGqSarVUT9+/n89ynFeWuNUpy84K5pVh r1BmRx6d2kDlhk//4oUSXgyHtp8s3wZUJxnqc/gAotfC/7HBrSSfWMB5gT9lAaED JyDk4RjVWHwO7hy3NR3zDVdasgyp76MU2DUKmjTAfu3TYrJ+Kj9Gwl6yWEHXDn2F 9duZazUJX/sk8QdwazY45/LQSRUQ4rW8E0lADHYwqQOrnLg95vee/ZPyeYuBB8+a 2VIu8AXsqKvhmylHRDCrRwRpYOYiNPPeJXrYDM4xlA0uySpJPF0V6L4wrkiAmecn 6C6SYX2y0mP3MHUMUtFAfy5omlxcvgdfbIg01SrU -----END CERTIFICATE-----Generated at Wed Dec 3 16:19:34 2025 by rpki-client