This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37322e302f32322d3234203d3e203436303236.roa File: 3130332e3133352e37322e302f32322d3234203d3e203436303236.roa (raw, json) Hash identifier: HhAj5FXKG+WPBMJHSmfCQ5YyDXmhJH0Hqke8PTIqGvE= Subject key identifier: 27:B4:56:BB:DF:E9:4A:03:18:61:86:8A:CC:C7:3D:D6:3A:4A:40:C3 Certificate issuer: /CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17 Certificate serial: 5DBB9500FF017A1F4088831AC9078FCBEDA4C4BB Authority key identifier: F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37322e302f32322d3234203d3e203436303236.roa Signing time: Mon 17 Nov 2025 03:00:00 +0000 ROA not before: Mon 17 Nov 2025 02:55:00 +0000 ROA not after: Mon 16 Nov 2026 03:00:00 +0000 asID: 46026 IP address blocks: 103.135.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 17:43:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:bb:95:00:ff:01:7a:1f:40:88:83:1a:c9:07:8f:cb:ed:a4:c4:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17 Validity Not Before: Nov 17 02:55:00 2025 GMT Not After : Nov 16 03:00:00 2026 GMT Subject: CN=27B456BBDFE94A031861868ACCC73DD63A4A40C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b6:34:9f:cb:64:b7:98:6a:4f:2e:c4:b5:8f: 52:05:1f:09:87:dd:0c:31:c6:34:7b:db:b4:a6:c0: d5:62:6b:9d:14:79:23:19:a8:c6:93:a5:f8:9a:83: 45:43:fb:0f:3b:03:ec:20:11:50:68:5f:5e:7a:d0: f0:10:a1:85:cc:b3:5b:5c:b4:92:5e:6d:f5:e1:9a: f6:18:cf:ff:35:6e:f6:19:8d:a4:61:8f:ea:74:84: 6e:c2:4b:1a:4e:54:95:09:2e:ca:52:bb:89:29:47: 73:84:68:1b:43:06:e9:11:8b:83:34:b1:4f:61:0c: 5c:35:c2:b5:ae:76:c1:79:40:fa:11:b9:94:07:0b: d3:55:85:3d:46:78:0d:a8:ee:9a:ef:c1:89:a7:b4: fb:1e:91:44:c7:82:34:15:be:72:c8:b1:d1:80:41: fa:05:bd:ae:a4:25:ec:b5:13:26:d0:dd:2d:41:2a: 37:5d:d2:6e:a4:21:5e:30:43:d0:61:03:e1:70:45: 24:8b:d8:9c:2d:17:7b:a7:a4:55:0b:1c:93:66:d2: d4:7c:20:27:fc:55:da:2e:5f:bd:42:74:df:7c:7c: c5:66:b6:13:fd:ea:76:35:07:65:f6:2f:f5:c0:76: 2a:61:7a:0b:f9:5c:3a:82:1f:4e:87:e0:26:42:2c: 2b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:B4:56:BB:DF:E9:4A:03:18:61:86:8A:CC:C7:3D:D6:3A:4A:40:C3 X509v3 Authority Key Identifier: keyid:F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37322e302f32322d3234203d3e203436303236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.135.72.0/22 Signature Algorithm: sha256WithRSAEncryption 90:23:2f:24:43:d1:f5:2c:d9:d4:7e:ff:79:70:4e:18:46:39: 76:93:28:81:2d:4c:19:97:e6:eb:a9:a8:ff:5c:6b:26:1d:4a: 0e:e3:97:52:8c:a6:d3:54:f4:12:4f:5d:18:9d:0e:b0:ef:63: 57:0c:d6:3a:13:c5:1b:6b:bf:4d:4d:c2:da:04:74:56:ff:f1: 16:e2:ff:7f:b5:ad:b4:a9:08:3f:ce:3b:65:1f:5e:66:42:a9: df:23:2c:d2:e6:12:7e:d0:78:32:92:1b:e5:c3:83:5d:3b:53: 72:42:72:62:81:0f:25:8a:12:46:6d:71:33:0b:c8:7e:c5:15: f5:8c:b5:57:3b:e9:d1:ef:35:60:c5:a6:53:9c:d4:f5:21:85: da:d5:9d:61:a7:40:21:8d:22:7e:86:2a:3b:2e:26:31:4e:e0: 50:8a:89:83:2a:31:44:f6:76:28:49:d6:ab:40:e9:3e:02:fe: 70:63:6d:2c:7a:8e:9f:29:4b:69:2f:5b:8c:12:fa:23:f1:77: e7:e5:09:f6:d4:a1:7b:d1:c2:b4:82:31:69:64:57:81:b2:b3: 3f:4c:9c:ee:b3:09:8e:06:09:a7:b7:75:6d:de:42:c3:2c:7f: 7f:02:de:12:6d:96:89:cb:84:8d:fd:ae:76:f4:94:54:c0:7d: bd:75:e1:89 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUXbuVAP8Beh9AiIMayQePy+2kxLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0MzU4 NDkwM0UxNzAeFw0yNTExMTcwMjU1MDBaFw0yNjExMTYwMzAwMDBaMDMxMTAvBgNV BAMTKDI3QjQ1NkJCREZFOTRBMDMxODYxODY4QUNDQzczREQ2M0E0QTQwQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/tjSfy2S3mGpPLsS1j1IFHwmH 3QwxxjR727SmwNVia50UeSMZqMaTpfiag0VD+w87A+wgEVBoX1560PAQoYXMs1tc tJJebfXhmvYYz/81bvYZjaRhj+p0hG7CSxpOVJUJLspSu4kpR3OEaBtDBukRi4M0 sU9hDFw1wrWudsF5QPoRuZQHC9NVhT1GeA2o7prvwYmntPsekUTHgjQVvnLIsdGA QfoFva6kJey1EybQ3S1BKjdd0m6kIV4wQ9BhA+FwRSSL2JwtF3unpFULHJNm0tR8 ICf8VdouX71CdN98fMVmthP96nY1B2X2L/XAdiphegv5XDqCH06H4CZCLCspAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUJ7RWu9/pSgMYYYaKzMc91jpKQMMwHwYDVR0j BBgwFoAU+MGaj4yw3chdHI5VY4+0NYSQPhcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmY0ZWJjZC0yOWNmLTRlZWMtYTkyYS1kMTEzNmY1Zjk5MzYvMC9GOEMxOUE4RjhD QjBEREM4NUQxQzhFNTU2MzhGQjQzNTg0OTAzRTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0MzU4NDkw M0UxNy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFmZjRlYmNkLTI5Y2YtNGVlYy1h OTJhLWQxMTM2ZjVmOTkzNi8wLzMxMzAzMzJlMzEzMzM1MmUzNzMyMmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzQzNjMwMzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmeHSDANBgkqhkiG 9w0BAQsFAAOCAQEAkCMvJEPR9SzZ1H7/eXBOGEY5dpMogS1MGZfm66mo/1xrJh1K DuOXUoym01T0Ek9dGJ0OsO9jVwzWOhPFG2u/TU3C2gR0Vv/xFuL/f7WttKkIP847 ZR9eZkKp3yMs0uYSftB4MpIb5cODXTtTckJyYoEPJYoSRm1xMwvIfsUV9Yy1Vzvp 0e81YMWmU5zU9SGF2tWdYadAIY0ifoYqOy4mMU7gUIqJgyoxRPZ2KEnWq0DpPgL+ cGNtLHqOnylLaS9bjBL6I/F35+UJ9tShe9HCtIIxaWRXgbKzP0yc7rMJjgYJp7d1 bd5Cwyx/fwLeEm2WicuEjf2udvSUVMB9vXXhiQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:01:42 2025 by rpki-client