This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/3130332e34322e3132302e302f32342d3234203d3e203234353334.roa File: 3130332e34322e3132302e302f32342d3234203d3e203234353334.roa (raw, json) Hash identifier: wWYceKo3HVUOMgRcN2/P197TAtHkoSlPkbBqfdmOb58= Subject key identifier: 9C:27:40:30:ED:F4:FF:79:DB:29:AC:C5:25:A2:28:F9:9F:9D:E7:68 Certificate issuer: /CN=DD29F5E4CE561760A0212F0448987AFBE75263D7 Certificate serial: 67427E3611A4BD0057468EE0A2832E9F96EC0B04 Authority key identifier: DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/3130332e34322e3132302e302f32342d3234203d3e203234353334.roa Signing time: Thu 06 Nov 2025 11:00:00 +0000 ROA not before: Thu 06 Nov 2025 10:55:00 +0000 ROA not after: Thu 05 Nov 2026 11:00:00 +0000 asID: 24534 IP address blocks: 103.42.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 15:36:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:42:7e:36:11:a4:bd:00:57:46:8e:e0:a2:83:2e:9f:96:ec:0b:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD29F5E4CE561760A0212F0448987AFBE75263D7 Validity Not Before: Nov 6 10:55:00 2025 GMT Not After : Nov 5 11:00:00 2026 GMT Subject: CN=9C274030EDF4FF79DB29ACC525A228F99F9DE768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:91:fb:51:70:6a:d1:2c:14:55:d7:b8:6d:ea: 15:0c:a8:30:30:67:ec:af:ab:19:f7:12:df:6e:2a: d1:03:4a:5e:88:b3:b2:e4:53:0f:3a:4c:b2:99:b3: 04:9d:9b:33:74:34:7c:50:7d:52:43:8a:ad:a3:a8: 7d:c9:06:4b:91:58:90:9d:48:d8:6d:36:85:8c:ce: 52:ec:f9:41:df:50:37:77:4d:6a:49:4c:96:25:d4: 7e:c4:78:88:b8:62:7c:82:64:1e:62:3b:94:ab:3d: be:c1:2c:56:38:0a:9b:d6:4f:52:e0:01:3d:10:88: c0:8f:ff:ad:ab:99:db:4f:0f:84:74:e5:e7:ea:c0: 4a:a1:a0:19:67:d9:b5:f7:49:46:ba:d3:c3:30:17: d3:80:65:46:ba:94:7c:79:58:9e:35:2e:98:6c:20: 11:93:4b:c5:ef:7f:dc:e0:6d:ce:d5:44:72:25:98: c5:a4:d4:7d:f3:77:f3:eb:b8:af:2c:7a:9b:98:d3: d0:40:9d:d8:93:9e:dd:e1:d3:a3:41:77:04:24:f4: c2:8e:be:55:0b:1c:46:af:ba:70:39:b1:f2:aa:b8: b5:70:9b:09:93:17:35:bb:32:53:6e:0e:4c:26:a0: a3:93:91:1b:6a:7e:28:c1:59:9e:21:ab:1a:ee:93: df:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:27:40:30:ED:F4:FF:79:DB:29:AC:C5:25:A2:28:F9:9F:9D:E7:68 X509v3 Authority Key Identifier: keyid:DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/3130332e34322e3132302e302f32342d3234203d3e203234353334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.42.120.0/24 Signature Algorithm: sha256WithRSAEncryption 11:39:72:72:fd:86:b1:15:39:f0:f7:3d:f4:56:9c:ec:1a:a9: 09:f9:40:3f:0a:50:f4:9c:c1:78:72:40:05:25:cd:38:3c:8b: e6:d8:7a:c7:3f:ba:4e:5f:bd:3c:cc:e0:3a:7e:b5:0f:2f:ef: 73:09:28:09:66:7d:a2:11:bc:f9:53:d5:21:b5:84:9f:f6:38: cb:6f:48:1e:62:69:db:87:30:71:60:98:23:46:b0:fd:50:d6: 6e:69:3e:fa:62:bc:1b:b9:d7:e6:73:3e:cd:f2:d8:3b:0d:02: 22:52:c9:4c:88:a6:6b:44:dc:92:3f:67:52:bb:a0:7c:6f:84: d7:b0:bf:e7:72:98:d8:c5:8c:9c:84:8f:e5:7c:90:46:96:0f: b7:7b:4f:79:ca:b1:62:fc:f0:79:c6:de:7d:f6:bf:23:64:89: 36:c4:1d:ad:c6:67:44:e0:a5:1f:92:04:3f:42:d3:82:08:dd: bc:6d:3a:aa:da:46:4f:7c:1f:09:2c:57:40:a7:2a:2a:4e:f1: b1:0b:ca:87:0b:c4:85:22:f8:3f:d9:39:7e:3e:b9:29:ca:0e: 48:ac:2c:e7:37:b6:1a:4f:7b:03:6e:fb:7f:82:1f:a2:5f:34: 98:5a:9d:8b:72:ae:0e:f9:d2:98:9b:03:96:04:f6:16:d4:65: 12:3a:fd:58 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUZ0J+NhGkvQBXRo7gooMun5bsCwQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdBRkJF NzUyNjNENzAeFw0yNTExMDYxMDU1MDBaFw0yNjExMDUxMTAwMDBaMDMxMTAvBgNV BAMTKDlDMjc0MDMwRURGNEZGNzlEQjI5QUNDNTI1QTIyOEY5OUY5REU3NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFkftRcGrRLBRV17ht6hUMqDAw Z+yvqxn3Et9uKtEDSl6Is7LkUw86TLKZswSdmzN0NHxQfVJDiq2jqH3JBkuRWJCd SNhtNoWMzlLs+UHfUDd3TWpJTJYl1H7EeIi4YnyCZB5iO5SrPb7BLFY4CpvWT1Lg AT0QiMCP/62rmdtPD4R05efqwEqhoBln2bX3SUa608MwF9OAZUa6lHx5WJ41Lphs IBGTS8Xvf9zgbc7VRHIlmMWk1H3zd/PruK8sepuY09BAndiTnt3h06NBdwQk9MKO vlULHEavunA5sfKquLVwmwmTFzW7MlNuDkwmoKOTkRtqfijBWZ4hqxruk9+9AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUnCdAMO30/3nbKazFJaIo+Z+d52gwHwYDVR0j BBgwFoAU3Sn15M5WF2CgIS8ESJh6++dSY9cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjI0MDUyZS0yMjA1LTQ4ZjMtYTNjYi1jZThiMzI2YjhmNzEvMC9ERDI5RjVFNENF NTYxNzYwQTAyMTJGMDQ0ODk4N0FGQkU3NTI2M0Q3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdBRkJFNzUy NjNENy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA2MjQwNTJlLTIyMDUtNDhmMy1h M2NiLWNlOGIzMjZiOGY3MS8wLzMxMzAzMzJlMzQzMjJlMzEzMjMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzNDM1MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcqeDANBgkqhkiG 9w0BAQsFAAOCAQEAETlycv2GsRU58Pc99Fac7BqpCflAPwpQ9JzBeHJABSXNODyL 5th6xz+6Tl+9PMzgOn61Dy/vcwkoCWZ9ohG8+VPVIbWEn/Y4y29IHmJp24cwcWCY I0aw/VDWbmk++mK8G7nX5nM+zfLYOw0CIlLJTIima0Tckj9nUrugfG+E17C/53KY 2MWMnISP5XyQRpYPt3tPecqxYvzwecbeffa/I2SJNsQdrcZnROClH5IEP0LTggjd vG06qtpGT3wfCSxXQKcqKk7xsQvKhwvEhSL4P9k5fj65KcoOSKws5ze2Gk97A277 f4Ifol80mFqdi3KuDvnSmJsDlgT2FtRlEjr9WA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:46:19 2025 by rpki-client