This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/3130332e3232302e3131342e302f32332d3234203d3e20313335343436.roa File: 3130332e3232302e3131342e302f32332d3234203d3e20313335343436.roa (raw, json) Hash identifier: iOecriuLYOaY71DNd88M3kxYp9C78ZPc3k0drPavCOg= Subject key identifier: E2:85:5B:45:D5:E6:A3:33:71:15:BF:7D:DE:B2:4A:F5:F9:0C:1B:E0 Certificate issuer: /CN=1072AD17A8EDB1513AED95A258088F480ADA492B Certificate serial: 5DEA2EB02E1E2DDAAC2E478115A405EC1882EC8D Authority key identifier: 10:72:AD:17:A8:ED:B1:51:3A:ED:95:A2:58:08:8F:48:0A:DA:49:2B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1072AD17A8EDB1513AED95A258088F480ADA492B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/3130332e3232302e3131342e302f32332d3234203d3e20313335343436.roa Signing time: Fri 05 Dec 2025 03:00:00 +0000 ROA not before: Fri 05 Dec 2025 02:55:00 +0000 ROA not after: Fri 04 Dec 2026 03:00:00 +0000 asID: 135446 IP address blocks: 103.220.114.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.crl rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1072AD17A8EDB1513AED95A258088F480ADA492B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 12:48:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:ea:2e:b0:2e:1e:2d:da:ac:2e:47:81:15:a4:05:ec:18:82:ec:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1072AD17A8EDB1513AED95A258088F480ADA492B Validity Not Before: Dec 5 02:55:00 2025 GMT Not After : Dec 4 03:00:00 2026 GMT Subject: CN=E2855B45D5E6A3337115BF7DDEB24AF5F90C1BE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:31:9a:95:47:f7:40:24:5b:e1:de:c2:4a:d5: 82:33:fa:63:82:fa:4d:49:33:65:13:ca:4b:8c:ba: e8:e6:5e:0c:b1:ed:86:f9:d3:5d:1e:63:5b:11:00: 0a:45:23:65:e0:87:bd:85:da:73:6f:40:f1:fe:51: 69:e2:ec:4a:bb:79:ec:b5:22:5a:f7:60:f4:6f:2c: f1:01:14:ab:f2:67:0d:ee:94:6a:1f:bd:ca:14:c1: eb:77:24:40:5c:e2:3a:a7:0a:bf:8a:ee:48:81:66: 4e:6f:1f:00:62:b9:5b:55:93:cd:85:4d:e7:e1:36: 8a:a1:8f:41:be:b0:76:32:7c:06:17:58:46:69:e7: e1:b8:af:9b:16:9c:0b:a2:3a:85:f4:d0:7c:b1:5d: 40:4f:6c:df:82:46:a7:35:0e:a0:cd:44:8c:b4:b7: 02:97:0f:4a:a9:65:62:8b:6c:0d:f5:89:f9:04:e4: b6:1a:3f:34:22:43:c6:dc:40:1f:45:df:3a:6b:15: aa:68:0e:f9:82:c0:b6:a5:17:e0:c9:aa:02:6d:d9: d3:d5:d0:51:86:25:81:7a:30:1c:ae:54:58:ae:6e: 90:a9:82:92:af:5b:ed:e7:84:b4:6b:95:19:45:8b: ad:d7:94:ce:7b:2e:64:00:75:be:d9:5a:7f:fa:e4: 52:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:85:5B:45:D5:E6:A3:33:71:15:BF:7D:DE:B2:4A:F5:F9:0C:1B:E0 X509v3 Authority Key Identifier: keyid:10:72:AD:17:A8:ED:B1:51:3A:ED:95:A2:58:08:8F:48:0A:DA:49:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1072AD17A8EDB1513AED95A258088F480ADA492B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/3130332e3232302e3131342e302f32332d3234203d3e20313335343436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.220.114.0/23 Signature Algorithm: sha256WithRSAEncryption 41:da:d0:c7:cb:0c:66:a5:b0:22:9a:a1:87:82:50:7f:10:4c: e6:e5:cb:a9:cc:f3:0f:5a:54:e8:bc:c5:29:8f:b0:c5:5f:b2: fb:e1:75:23:5f:b3:34:17:d3:e6:3d:56:ff:42:92:07:f1:a8: ab:51:29:aa:6d:c1:fd:e9:3b:66:90:27:d6:16:88:9b:b7:64: 57:19:a4:f9:70:19:f9:66:38:c8:cb:3e:30:b0:ea:18:84:70: d5:26:1e:2b:11:d9:c2:b6:1f:86:f1:74:da:6a:e7:3a:2e:56: 95:7d:ab:d8:ca:11:0f:b5:03:2a:26:81:8f:4b:93:fc:6f:0d: 5c:9b:be:f7:d1:42:40:05:eb:54:31:0c:25:c4:c7:15:3b:55: cb:4a:37:84:44:1a:17:a2:5a:d9:f4:91:c6:80:9d:c8:61:31: 96:9c:9e:8c:df:7d:dd:20:aa:7d:b9:71:61:02:90:8b:19:79: 4d:77:9a:88:b0:4f:07:13:16:05:fe:e1:eb:16:7e:63:4d:74: 43:75:f6:10:0b:2e:8b:f6:5c:5e:71:24:89:a7:a9:d6:f3:95: 82:53:7f:64:c7:0a:25:6c:8c:63:8f:a9:ba:b3:65:2b:08:3e: 23:ea:78:fb:3d:ac:b6:85:2b:94:64:0d:fb:4e:75:13:21:ec: 7e:67:53:5f -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUXeousC4eLdqsLkeBFaQF7BiC7I0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA3MkFEMTdBOEVEQjE1MTNBRUQ5NUEyNTgwODhGNDgw QURBNDkyQjAeFw0yNTEyMDUwMjU1MDBaFw0yNjEyMDQwMzAwMDBaMDMxMTAvBgNV BAMTKEUyODU1QjQ1RDVFNkEzMzM3MTE1QkY3RERFQjI0QUY1RjkwQzFCRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuMZqVR/dAJFvh3sJK1YIz+mOC +k1JM2UTykuMuujmXgyx7Yb5010eY1sRAApFI2Xgh72F2nNvQPH+UWni7Eq7eey1 Ilr3YPRvLPEBFKvyZw3ulGofvcoUwet3JEBc4jqnCr+K7kiBZk5vHwBiuVtVk82F TefhNoqhj0G+sHYyfAYXWEZp5+G4r5sWnAuiOoX00HyxXUBPbN+CRqc1DqDNRIy0 twKXD0qpZWKLbA31ifkE5LYaPzQiQ8bcQB9F3zprFapoDvmCwLalF+DJqgJt2dPV 0FGGJYF6MByuVFiubpCpgpKvW+3nhLRrlRlFi63XlM57LmQAdb7ZWn/65FIhAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU4oVbRdXmozNxFb993rJK9fkMG+AwHwYDVR0j BBgwFoAUEHKtF6jtsVE67ZWiWAiPSAraSSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTRiOWQzMi0zYzVhLTQwZTItYjc4OC0wNjlkZTBjM2QyZGUvMC8xMDcyQUQxN0E4 RURCMTUxM0FFRDk1QTI1ODA4OEY0ODBBREE0OTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA3MkFEMTdBOEVEQjE1MTNBRUQ5NUEyNTgwODhGNDgwQURB NDkyQi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE1NGI5ZDMyLTNjNWEtNDBlMi1i Nzg4LTA2OWRlMGMzZDJkZS8wLzMxMzAzMzJlMzIzMjMwMmUzMTMxMzQyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzUzNDM0MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn3HIwDQYJ KoZIhvcNAQELBQADggEBAEHa0MfLDGalsCKaoYeCUH8QTObly6nM8w9aVOi8xSmP sMVfsvvhdSNfszQX0+Y9Vv9CkgfxqKtRKaptwf3pO2aQJ9YWiJu3ZFcZpPlwGflm OMjLPjCw6hiEcNUmHisR2cK2H4bxdNpq5zouVpV9q9jKEQ+1AyomgY9Lk/xvDVyb vvfRQkAF61QxDCXExxU7VctKN4REGheiWtn0kcaAnchhMZacnozffd0gqn25cWEC kIsZeU13moiwTwcTFgX+4esWfmNNdEN19hALLov2XF5xJImnqdbzlYJTf2THCiVs jGOPqbqzZSsIPiPqePs9rLaFK5RkDftOdRMh7H5nU18= -----END CERTIFICATE-----Generated at Sun Dec 7 02:55:27 2025 by rpki-client