This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/3130332e3134302e3138382e302f32332d3234203d3e20313338383831.roa File: 3130332e3134302e3138382e302f32332d3234203d3e20313338383831.roa (raw, json) Hash identifier: 1AWd4OZCytjnMLGGQ3mn/VpwNeJ1KA7954S/Uarlfug= Subject key identifier: 1C:A2:C8:16:BE:D7:59:57:B0:7F:E7:BF:C5:DC:1A:DC:54:6E:0C:A4 Certificate issuer: /CN=02AC8DC3B003059A7040EDCFC881D9C93B064C18 Certificate serial: 4137E9B0564EE1C28EB760550011A26A8E31996D Authority key identifier: 02:AC:8D:C3:B0:03:05:9A:70:40:ED:CF:C8:81:D9:C9:3B:06:4C:18 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer Subject info access: rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/3130332e3134302e3138382e302f32332d3234203d3e20313338383831.roa Signing time: Fri 05 Dec 2025 05:02:09 +0000 ROA not before: Fri 05 Dec 2025 04:57:09 +0000 ROA not after: Fri 04 Dec 2026 05:02:09 +0000 asID: 138881 IP address blocks: 103.140.188.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 12:59:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:37:e9:b0:56:4e:e1:c2:8e:b7:60:55:00:11:a2:6a:8e:31:99:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02AC8DC3B003059A7040EDCFC881D9C93B064C18 Validity Not Before: Dec 5 04:57:09 2025 GMT Not After : Dec 4 05:02:09 2026 GMT Subject: CN=1CA2C816BED75957B07FE7BFC5DC1ADC546E0CA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:43:e4:9f:9a:5b:65:e2:17:e6:fa:55:73:b3: 74:a9:35:07:a7:ad:bc:50:b2:d4:e7:ef:b1:1f:4c: 0f:8c:74:d2:1e:ae:59:ef:92:40:4d:df:e7:fd:b2: eb:9a:0c:c7:d8:c1:07:a1:ad:d6:da:23:b6:7e:ef: a5:c8:fe:c4:b8:ad:3c:e5:36:1a:77:30:80:81:d2: f3:1f:7f:91:ea:26:ce:96:39:75:51:3d:dc:c8:01: c5:40:83:f3:8a:59:8e:d2:3f:da:df:26:02:5c:3a: 1b:b5:95:c8:91:65:87:ff:86:cb:1a:06:3e:20:8f: fe:62:09:44:5e:dc:b9:75:11:01:62:1f:e2:f8:67: 6c:f9:f5:e9:94:cf:92:75:86:c8:47:e3:3c:d6:06: 38:44:31:b1:f5:cb:bc:a2:4b:61:e8:4d:40:62:a0: f3:c0:98:9d:b7:f6:4b:e2:1f:69:d1:44:7f:30:9b: 52:a8:14:f2:8e:5a:d7:15:c2:86:99:48:57:b3:d9: 4f:a4:a5:fc:20:47:36:7e:cd:ec:95:af:d6:95:e6: 9e:74:d5:be:a0:39:c8:41:96:48:3c:31:fb:7b:cc: ae:14:84:6d:78:7f:71:27:42:91:36:fe:f2:7b:8c: e6:0e:d7:66:e0:ad:62:3f:d0:d3:59:a6:81:b0:3a: 98:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A2:C8:16:BE:D7:59:57:B0:7F:E7:BF:C5:DC:1A:DC:54:6E:0C:A4 X509v3 Authority Key Identifier: keyid:02:AC:8D:C3:B0:03:05:9A:70:40:ED:CF:C8:81:D9:C9:3B:06:4C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/3130332e3134302e3138382e302f32332d3234203d3e20313338383831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.140.188.0/23 Signature Algorithm: sha256WithRSAEncryption a8:ca:41:1d:f6:69:fc:52:22:fd:59:29:7b:27:c8:9d:a5:5f: 99:7c:63:44:63:8e:b8:fc:94:fc:b4:9d:84:15:61:ad:09:2b: 26:74:a4:a1:7f:1b:70:0f:df:4f:c6:74:26:53:77:24:1a:65: dc:42:90:d3:62:1b:5f:0e:86:7e:60:50:95:48:a5:bb:b2:35: 7a:69:28:65:86:91:06:8e:ce:e5:5a:95:6e:4c:2f:2f:54:78: af:9d:99:6c:fe:4b:34:62:3e:0f:f0:f0:18:5b:a8:16:b2:74: 5b:38:04:0a:65:12:ae:58:89:56:fc:51:e4:96:3d:2b:3c:b5: d1:5a:1f:06:64:7a:1c:b4:86:92:7a:8a:cb:87:21:25:97:a4: cf:0a:89:93:a3:3b:51:08:a2:4c:93:66:09:81:23:35:bc:34: 0b:39:4f:02:40:3f:87:47:f8:1f:25:f3:17:8a:c3:c6:66:d8: a9:b7:bd:95:2e:6d:c6:94:37:88:a5:ac:cc:cd:61:e3:5a:15: 9b:9c:8c:b8:fc:f7:52:ee:fa:d6:17:af:34:39:f2:b6:cb:58: b4:62:3a:c0:cc:98:ec:da:39:ea:ad:27:14:48:0b:88:15:c8: 36:c0:04:93:52:8f:17:15:7f:69:cb:db:9a:65:70:e1:e6:17: 04:33:6a:95 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUQTfpsFZO4cKOt2BVABGiao4xmW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJBQzhEQzNCMDAzMDU5QTcwNDBFRENGQzg4MUQ5Qzkz QjA2NEMxODAeFw0yNTEyMDUwNDU3MDlaFw0yNjEyMDQwNTAyMDlaMDMxMTAvBgNV BAMTKDFDQTJDODE2QkVENzU5NTdCMDdGRTdCRkM1REMxQURDNTQ2RTBDQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKQ+Sfmltl4hfm+lVzs3SpNQen rbxQstTn77EfTA+MdNIerlnvkkBN3+f9suuaDMfYwQehrdbaI7Z+76XI/sS4rTzl Nhp3MICB0vMff5HqJs6WOXVRPdzIAcVAg/OKWY7SP9rfJgJcOhu1lciRZYf/hssa Bj4gj/5iCURe3Ll1EQFiH+L4Z2z59emUz5J1hshH4zzWBjhEMbH1y7yiS2HoTUBi oPPAmJ239kviH2nRRH8wm1KoFPKOWtcVwoaZSFez2U+kpfwgRzZ+zeyVr9aV5p50 1b6gOchBlkg8Mft7zK4UhG14f3EnQpE2/vJ7jOYO12bgrWI/0NNZpoGwOphBAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUHKLIFr7XWVewf+e/xdwa3FRuDKQwHwYDVR0j BBgwFoAUAqyNw7ADBZpwQO3PyIHZyTsGTBgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MmNiMGIzYS02OTJkLTQ0MmUtOTMwOC05MDNjMDJkNTcxOGYvMC8wMkFDOERDM0Iw MDMwNTlBNzA0MEVEQ0ZDODgxRDlDOTNCMDY0QzE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDJBQzhEQzNCMDAzMDU5QTcwNDBFRENGQzg4MUQ5QzkzQjA2 NEMxOC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAyY2IwYjNhLTY5MmQtNDQyZS05 MzA4LTkwM2MwMmQ1NzE4Zi8wLzMxMzAzMzJlMzEzNDMwMmUzMTM4MzgyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzgzODM4MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnjLwwDQYJ KoZIhvcNAQELBQADggEBAKjKQR32afxSIv1ZKXsnyJ2lX5l8Y0Rjjrj8lPy0nYQV Ya0JKyZ0pKF/G3AP30/GdCZTdyQaZdxCkNNiG18Ohn5gUJVIpbuyNXppKGWGkQaO zuValW5MLy9UeK+dmWz+SzRiPg/w8BhbqBaydFs4BAplEq5YiVb8UeSWPSs8tdFa HwZkehy0hpJ6isuHISWXpM8KiZOjO1EIokyTZgmBIzW8NAs5TwJAP4dH+B8l8xeK w8Zm2Km3vZUubcaUN4ilrMzNYeNaFZucjLj891Lu+tYXrzQ58rbLWLRiOsDMmOza OeqtJxRIC4gVyDbABJNSjxcVf2nL25plcOHmFwQzapU= -----END CERTIFICATE-----Generated at Sun Dec 7 07:47:21 2025 by rpki-client