This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/3130332e3138372e38382e302f32332d3233203d3e20313439393439.roa File: 3130332e3138372e38382e302f32332d3233203d3e20313439393439.roa (raw, json) Hash identifier: z3n/tIXZwtPYvBaaNLrRacxN7HfPUi9J+DnSjLm+L1k= Subject key identifier: 63:39:E7:21:A5:31:C9:7C:0D:DE:C3:8A:BB:6F:4D:9B:B1:7A:5F:48 Certificate issuer: /CN=322B7BBC7BE2A84D8D644A6B68333963517CAFFA Certificate serial: 7287ADCAC0EE33179A3BC5D7970B5F19C0DB3711 Authority key identifier: 32:2B:7B:BC:7B:E2:A8:4D:8D:64:4A:6B:68:33:39:63:51:7C:AF:FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/3130332e3138372e38382e302f32332d3233203d3e20313439393439.roa Signing time: Wed 05 Nov 2025 15:00:00 +0000 ROA not before: Wed 05 Nov 2025 14:55:00 +0000 ROA not after: Wed 04 Nov 2026 15:00:00 +0000 asID: 149949 IP address blocks: 103.187.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:87:ad:ca:c0:ee:33:17:9a:3b:c5:d7:97:0b:5f:19:c0:db:37:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=322B7BBC7BE2A84D8D644A6B68333963517CAFFA Validity Not Before: Nov 5 14:55:00 2025 GMT Not After : Nov 4 15:00:00 2026 GMT Subject: CN=6339E721A531C97C0DDEC38ABB6F4D9BB17A5F48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:81:c2:48:de:13:3e:67:17:05:9f:86:17:3b: c8:e3:e8:51:c7:5f:47:df:87:e7:e5:4e:48:17:2d: a2:0d:b1:b6:01:0a:93:c7:6e:cc:a0:13:0a:17:5f: e2:a7:9d:4c:94:5d:21:e7:75:e4:51:ad:8c:93:da: 7d:b1:e6:a8:6b:69:78:f6:3b:e1:af:88:6b:e0:bd: 45:53:6c:d6:04:41:11:a8:9c:20:25:65:ef:d0:4a: ef:b2:e0:1e:a7:31:da:3c:4e:22:b1:c4:dc:a2:05: c0:0b:4b:49:87:7f:81:97:c7:0c:e5:91:0d:b3:6f: 69:82:e1:d7:e0:ae:a9:0d:6d:63:79:2b:4f:18:9b: 06:d7:e0:a4:e0:f9:83:8a:dc:5b:a4:9c:fd:21:2c: 35:f2:a9:9e:57:72:b8:61:9b:d6:40:cd:88:fc:a3: 4c:e6:02:b8:a8:18:73:25:25:0b:14:6a:1e:9d:a3: 11:44:8c:60:57:13:6d:2a:c5:f3:42:82:32:b1:d5: 96:62:20:37:1e:af:89:1c:dc:be:d2:4e:25:47:d2: e4:4b:04:5b:57:4e:32:c5:2f:c8:8c:8d:2a:96:77: 91:be:ca:82:ca:34:a1:41:13:5a:6b:32:98:7a:a6: ca:61:bd:b3:9f:ab:e5:3c:f4:cf:25:32:54:73:ce: c1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:39:E7:21:A5:31:C9:7C:0D:DE:C3:8A:BB:6F:4D:9B:B1:7A:5F:48 X509v3 Authority Key Identifier: keyid:32:2B:7B:BC:7B:E2:A8:4D:8D:64:4A:6B:68:33:39:63:51:7C:AF:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/3130332e3138372e38382e302f32332d3233203d3e20313439393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.187.88.0/23 Signature Algorithm: sha256WithRSAEncryption 0d:14:c2:10:13:57:6e:a3:81:c1:8d:f2:6d:b2:e4:84:52:c4: ea:19:db:7e:99:64:18:f6:89:cc:6a:0e:ea:80:49:88:be:b7: fd:bb:f8:28:eb:15:b7:cc:d0:15:e5:16:3d:67:ce:6b:ea:0c: 29:02:0c:42:74:ce:5d:e9:e0:85:90:4a:c2:59:76:c3:d3:e1: fc:2e:4b:9e:4f:f6:ff:87:5c:2f:be:65:b2:14:af:74:44:2a: b3:44:e6:de:d1:4c:8f:e2:fc:ee:d5:a5:8e:21:fc:26:cc:66: 53:53:34:f6:37:52:a2:9f:32:8a:8b:18:8e:a5:7a:ba:1b:4a: 3a:25:1e:88:1f:75:0c:89:08:d5:c1:86:6b:4f:4b:61:57:ca: 99:d4:0e:86:81:d3:07:2d:36:4c:73:fa:55:82:ac:6b:d9:30: 6c:02:48:46:74:c2:57:42:f4:6d:4e:76:b6:df:db:c5:95:a3: fd:79:05:31:c4:f6:6c:49:85:cb:36:7d:2c:d9:46:64:be:76: 82:0e:3e:dd:75:68:81:0b:2f:9f:c7:35:25:01:fa:e0:8a:54: 3d:b3:e9:5d:ca:1f:fc:3b:37:e0:b1:75:ca:d9:4d:02:bb:eb: f6:ce:d1:d8:6a:ea:68:24:17:c8:68:7f:7b:44:7f:ad:9c:1d: 48:26:c2:84 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUcoetysDuMxeaO8XXlwtfGcDbNxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5NjM1 MTdDQUZGQTAeFw0yNTExMDUxNDU1MDBaFw0yNjExMDQxNTAwMDBaMDMxMTAvBgNV BAMTKDYzMzlFNzIxQTUzMUM5N0MwRERFQzM4QUJCNkY0RDlCQjE3QTVGNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmgcJI3hM+ZxcFn4YXO8jj6FHH X0ffh+flTkgXLaINsbYBCpPHbsygEwoXX+KnnUyUXSHndeRRrYyT2n2x5qhraXj2 O+GviGvgvUVTbNYEQRGonCAlZe/QSu+y4B6nMdo8TiKxxNyiBcALS0mHf4GXxwzl kQ2zb2mC4dfgrqkNbWN5K08YmwbX4KTg+YOK3FuknP0hLDXyqZ5Xcrhhm9ZAzYj8 o0zmArioGHMlJQsUah6doxFEjGBXE20qxfNCgjKx1ZZiIDcer4kc3L7STiVH0uRL BFtXTjLFL8iMjSqWd5G+yoLKNKFBE1prMph6psphvbOfq+U89M8lMlRzzsFjAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUYznnIaUxyXwN3sOKu29Nm7F6X0gwHwYDVR0j BBgwFoAUMit7vHviqE2NZEpraDM5Y1F8r/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDUwZjBmNS1iODgzLTRiMjQtOTc5Mi03ZTk1N2FmODhiZjgvMC8zMjJCN0JCQzdC RTJBODREOEQ2NDRBNkI2ODMzMzk2MzUxN0NBRkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5NjM1MTdD QUZGQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA0NTBmMGY1LWI4ODMtNGIyNC05 NzkyLTdlOTU3YWY4OGJmOC8wLzMxMzAzMzJlMzEzODM3MmUzODM4MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNDM5MzkzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7tYMA0GCSqG SIb3DQEBCwUAA4IBAQANFMIQE1duo4HBjfJtsuSEUsTqGdt+mWQY9onMag7qgEmI vrf9u/go6xW3zNAV5RY9Z85r6gwpAgxCdM5d6eCFkErCWXbD0+H8LkueT/b/h1wv vmWyFK90RCqzRObe0UyP4vzu1aWOIfwmzGZTUzT2N1KinzKKixiOpXq6G0o6JR6I H3UMiQjVwYZrT0thV8qZ1A6GgdMHLTZMc/pVgqxr2TBsAkhGdMJXQvRtTna239vF laP9eQUxxPZsSYXLNn0s2UZkvnaCDj7ddWiBCy+fxzUlAfrgilQ9s+ldyh/8Ozfg sXXK2U0Cu+v2ztHYaupoJBfIaH97RH+tnB1IJsKE -----END CERTIFICATE-----Generated at Sun Dec 7 12:13:50 2025 by rpki-client