This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/3130332e31362e34382e302f32332d3234203d3e20313332363334.roa File: 3130332e31362e34382e302f32332d3234203d3e20313332363334.roa (raw, json) Hash identifier: GkgIUj3iLnoDBgSLwsXcxjcRmy20+p6SRzqI9r3pCJc= Subject key identifier: 4E:F8:23:BE:A3:EB:4D:A8:1B:82:6C:6B:12:AA:A6:02:4E:AE:4E:B0 Certificate issuer: /CN=0B47BFC94FDCEC084CD7B35536C8510E41F55130 Certificate serial: 6EBF14E3F9A9AE52DE8E231F21D98D9341D183BA Authority key identifier: 0B:47:BF:C9:4F:DC:EC:08:4C:D7:B3:55:36:C8:51:0E:41:F5:51:30 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/3130332e31362e34382e302f32332d3234203d3e20313332363334.roa Signing time: Sat 15 Nov 2025 04:00:02 +0000 ROA not before: Sat 15 Nov 2025 03:55:02 +0000 ROA not after: Sat 14 Nov 2026 04:00:02 +0000 asID: 132634 IP address blocks: 103.16.48.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.crl rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 15:16:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:bf:14:e3:f9:a9:ae:52:de:8e:23:1f:21:d9:8d:93:41:d1:83:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B47BFC94FDCEC084CD7B35536C8510E41F55130 Validity Not Before: Nov 15 03:55:02 2025 GMT Not After : Nov 14 04:00:02 2026 GMT Subject: CN=4EF823BEA3EB4DA81B826C6B12AAA6024EAE4EB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:36:8d:20:02:59:75:32:c5:db:5f:d6:cf:5d: 58:58:16:bc:b9:24:7a:16:3c:05:d3:03:ed:78:22: 79:b4:24:1d:f2:6e:b6:62:b9:6d:26:e4:b1:3f:28: 34:28:f3:24:15:40:f7:eb:5f:74:f0:1f:96:5b:c0: 79:0e:7d:fd:79:3d:bf:0e:78:63:a3:f6:e8:07:f3: eb:0f:46:12:48:f8:26:45:f0:14:75:d9:78:4d:32: 4c:50:89:64:1c:ff:81:e2:49:78:f6:1d:34:d1:a9: 90:d4:64:dd:ab:0f:f8:56:d6:68:5e:77:ba:74:e7: 12:18:05:16:7c:de:67:da:93:62:d3:ec:46:90:e3: 53:62:fd:d1:54:71:63:a7:d3:dd:54:b9:50:cf:2a: d1:83:ea:29:f5:dd:11:56:0e:28:86:ab:2c:3d:3f: d8:42:a6:34:50:7a:cb:ee:b0:ae:15:17:ae:7f:79: db:04:5b:cb:d2:fd:cd:1e:d6:57:36:9b:68:7c:56: f7:47:eb:7a:f6:88:31:e8:0d:8e:b8:e3:02:a2:39: 5f:9b:0e:29:c3:a3:ad:00:9a:ae:81:67:1d:7d:d0: 27:ca:72:7c:71:23:42:a4:f4:05:4b:95:33:6e:67: 56:57:8d:4e:c2:7e:73:62:4e:81:f2:86:c1:14:f8: ae:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:F8:23:BE:A3:EB:4D:A8:1B:82:6C:6B:12:AA:A6:02:4E:AE:4E:B0 X509v3 Authority Key Identifier: keyid:0B:47:BF:C9:4F:DC:EC:08:4C:D7:B3:55:36:C8:51:0E:41:F5:51:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/3130332e31362e34382e302f32332d3234203d3e20313332363334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.16.48.0/23 Signature Algorithm: sha256WithRSAEncryption 43:76:91:5f:4a:94:ab:69:42:15:be:aa:03:b3:83:eb:9e:72: 6c:c1:c5:d2:4f:4c:93:d7:57:60:5f:b5:b0:de:b7:db:75:4b: ff:72:55:be:ef:42:fb:08:20:44:fc:57:14:97:7f:52:b1:c9: cf:34:15:0d:18:67:9a:30:83:ee:71:7b:0e:2f:cb:d4:d1:4a: 13:3c:21:88:6d:7e:20:12:0e:fb:e9:35:3f:95:49:87:8a:bc: 85:b1:f6:e6:52:96:42:79:e7:77:f8:82:86:23:e0:41:a9:22: 07:24:c0:a8:fd:f9:8a:1e:46:1a:a7:9e:c6:97:69:20:34:c5: 20:1c:6e:2a:00:70:95:60:3f:c4:03:1e:e2:ca:aa:24:aa:07: 07:72:48:92:d4:42:f6:0d:ad:cc:9d:cd:e9:0f:bb:f6:5c:d3: 40:40:dd:77:ee:f6:08:9e:42:cf:8e:7a:a8:6d:4c:88:d5:56: e4:42:3f:ba:75:ea:a1:14:79:e1:70:cb:43:e5:41:2d:98:9d: 82:ce:99:52:69:f0:1d:8f:df:1f:13:ec:5c:ed:d6:26:86:98: 87:fc:e6:d8:ed:90:d0:75:4d:64:97:d2:12:1a:a8:3a:57:38: 3a:8c:8a:65:51:07:34:a0:e2:26:95:f9:e4:e5:95:9d:6e:58: 23:0d:3d:f2 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUbr8U4/mprlLejiMfIdmNk0HRg7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI0N0JGQzk0RkRDRUMwODRDRDdCMzU1MzZDODUxMEU0 MUY1NTEzMDAeFw0yNTExMTUwMzU1MDJaFw0yNjExMTQwNDAwMDJaMDMxMTAvBgNV BAMTKDRFRjgyM0JFQTNFQjREQTgxQjgyNkM2QjEyQUFBNjAyNEVBRTRFQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSNo0gAll1MsXbX9bPXVhYFry5 JHoWPAXTA+14Inm0JB3ybrZiuW0m5LE/KDQo8yQVQPfrX3TwH5ZbwHkOff15Pb8O eGOj9ugH8+sPRhJI+CZF8BR12XhNMkxQiWQc/4HiSXj2HTTRqZDUZN2rD/hW1mhe d7p05xIYBRZ83mfak2LT7EaQ41Ni/dFUcWOn091UuVDPKtGD6in13RFWDiiGqyw9 P9hCpjRQesvusK4VF65/edsEW8vS/c0e1lc2m2h8VvdH63r2iDHoDY644wKiOV+b DinDo60Amq6BZx190CfKcnxxI0Kk9AVLlTNuZ1ZXjU7CfnNiToHyhsEU+K6TAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUTvgjvqPrTagbgmxrEqqmAk6uTrAwHwYDVR0j BBgwFoAUC0e/yU/c7AhM17NVNshRDkH1UTAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGY3YmUwNi05NjcyLTQ2NDEtOTdiZC05YmZkZjk1NWRlMTcvMC8wQjQ3QkZDOTRG RENFQzA4NENEN0IzNTUzNkM4NTEwRTQxRjU1MTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEI0N0JGQzk0RkRDRUMwODRDRDdCMzU1MzZDODUxMEU0MUY1 NTEzMC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwZjdiZTA2LTk2NzItNDY0MS05 N2JkLTliZmRmOTU1ZGUxNy8wLzMxMzAzMzJlMzEzNjJlMzQzODJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMxMzMzMjM2MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWcQMDANBgkqhkiG 9w0BAQsFAAOCAQEAQ3aRX0qUq2lCFb6qA7OD655ybMHF0k9Mk9dXYF+1sN6323VL /3JVvu9C+wggRPxXFJd/UrHJzzQVDRhnmjCD7nF7Di/L1NFKEzwhiG1+IBIO++k1 P5VJh4q8hbH25lKWQnnnd/iChiPgQakiByTAqP35ih5GGqeexpdpIDTFIBxuKgBw lWA/xAMe4sqqJKoHB3JIktRC9g2tzJ3N6Q+79lzTQEDdd+72CJ5Cz456qG1MiNVW 5EI/unXqoRR54XDLQ+VBLZidgs6ZUmnwHY/fHxPsXO3WJoaYh/zm2O2Q0HVNZJfS EhqoOlc4OoyKZVEHNKDiJpX55OWVnW5YIw098g== -----END CERTIFICATE-----Generated at Sun Dec 7 02:12:11 2025 by rpki-client