This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/3130332e3139312e3135322e302f32342d3234203d3e203338353234.roa File: 3130332e3139312e3135322e302f32342d3234203d3e203338353234.roa (raw, json) Hash identifier: mUWK0YKe3566Wh5cI0OkdARZoIJpWF4UZkK4KY+Au0I= Subject key identifier: 63:1C:C4:A4:E8:46:1D:F6:A7:31:5E:44:86:C1:1C:9F:0E:09:F1:CB Certificate issuer: /CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47 Certificate serial: 23A00250CAE6DD59323BC8A4B134E5B10304F2CD Authority key identifier: 28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/3130332e3139312e3135322e302f32342d3234203d3e203338353234.roa Signing time: Tue 09 Dec 2025 16:38:37 +0000 ROA not before: Tue 09 Dec 2025 16:33:37 +0000 ROA not after: Tue 08 Dec 2026 16:38:37 +0000 asID: 38524 IP address blocks: 103.191.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 13:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:a0:02:50:ca:e6:dd:59:32:3b:c8:a4:b1:34:e5:b1:03:04:f2:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47 Validity Not Before: Dec 9 16:33:37 2025 GMT Not After : Dec 8 16:38:37 2026 GMT Subject: CN=631CC4A4E8461DF6A7315E4486C11C9F0E09F1CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c8:f3:96:af:6e:66:d5:e3:04:01:2e:cf:96: 17:5a:4e:60:69:c0:58:2d:00:09:95:f2:a5:7f:3c: 7a:9a:bb:c9:8b:43:c9:7f:b1:44:61:eb:8a:d7:e0: 8f:3b:d4:a5:e2:3a:e8:13:7a:6e:62:13:56:49:e7: ce:8a:85:79:db:cb:39:01:f4:21:7e:30:20:7e:79: 0c:bd:24:aa:48:39:84:66:52:21:e5:9b:21:3a:fb: 5e:48:c5:e7:66:1e:ad:db:7d:54:eb:13:31:b2:9a: 92:7f:a2:1b:e5:bb:fe:c8:83:2d:c6:f1:01:90:0e: e2:49:30:69:7a:6d:3a:75:bc:d6:44:48:26:f5:63: bf:e7:ae:86:7d:a8:72:1d:e6:76:43:5e:dc:d1:5b: bb:ca:e6:be:2b:3b:a9:60:64:8a:64:3a:60:27:cb: 18:86:02:1f:d8:63:db:31:66:75:44:8e:5c:4b:58: b6:5c:ca:d4:dd:c9:9c:cc:83:49:d9:5d:fb:86:f6: f6:17:d3:c4:5f:a5:5f:51:b8:68:5a:06:3f:2d:29: 53:14:06:a9:44:4b:25:7f:9b:7c:d4:3c:75:e6:5c: 0f:d7:8d:30:83:97:fd:3d:ff:d0:0c:ae:b6:1e:23: 78:eb:77:41:3d:98:41:fe:44:e9:c9:4b:38:65:e8: 0c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:1C:C4:A4:E8:46:1D:F6:A7:31:5E:44:86:C1:1C:9F:0E:09:F1:CB X509v3 Authority Key Identifier: keyid:28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/3130332e3139312e3135322e302f32342d3234203d3e203338353234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.152.0/24 Signature Algorithm: sha256WithRSAEncryption b0:29:62:2a:d2:38:f0:8b:79:ce:36:e5:f3:af:f6:44:ed:8f: d0:df:5b:c2:8d:84:c1:81:b7:5c:b6:57:98:52:ca:b0:d9:fa: e3:07:c5:10:2c:6d:9c:69:34:b4:ad:90:19:d2:78:96:6c:b5: 6f:af:4e:8c:1e:f6:21:10:ad:4b:ad:5f:2e:5a:2c:37:32:ee: 27:6a:0b:f0:c3:fd:41:48:d5:de:98:d3:65:cb:81:69:c4:d0: dd:2a:5b:04:cd:57:d7:05:98:db:b4:77:27:e7:7c:c5:2a:c3: fc:97:b2:24:e9:9e:80:21:db:3f:cc:d6:f0:e2:25:b4:f9:9d: b8:6b:74:e7:63:f4:7b:ab:1f:77:3a:84:65:54:6f:a6:8c:1a: 2f:a8:05:70:92:cf:b9:80:1d:3f:c1:c8:35:e9:5c:c1:c2:67: 3b:e5:d6:48:8b:ce:25:0c:a8:82:20:e1:c9:41:af:90:12:a7: b9:af:99:f2:e6:9a:c4:e5:d5:a0:54:0a:a9:0f:7e:e5:16:eb: 9f:09:95:a1:54:b4:ce:e2:44:8b:92:fe:7f:18:1a:fd:c2:76: fa:ca:a6:72:b7:b5:e8:7e:99:93:3d:dc:57:b5:e6:da:3e:fc: 12:12:5c:52:51:35:ee:ab:e4:24:28:b8:c1:6e:0e:36:d3:d4: 7a:17:23:f8 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUI6ACUMrm3VkyO8iksTTlsQME8s0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNFNTA0 MzFGMEY0NzAeFw0yNTEyMDkxNjMzMzdaFw0yNjEyMDgxNjM4MzdaMDMxMTAvBgNV BAMTKDYzMUNDNEE0RTg0NjFERjZBNzMxNUU0NDg2QzExQzlGMEUwOUYxQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGyPOWr25m1eMEAS7PlhdaTmBp wFgtAAmV8qV/PHqau8mLQ8l/sURh64rX4I871KXiOugTem5iE1ZJ586KhXnbyzkB 9CF+MCB+eQy9JKpIOYRmUiHlmyE6+15IxedmHq3bfVTrEzGympJ/ohvlu/7Igy3G 8QGQDuJJMGl6bTp1vNZESCb1Y7/nroZ9qHId5nZDXtzRW7vK5r4rO6lgZIpkOmAn yxiGAh/YY9sxZnVEjlxLWLZcytTdyZzMg0nZXfuG9vYX08RfpV9RuGhaBj8tKVMU BqlESyV/m3zUPHXmXA/XjTCDl/09/9AMrrYeI3jrd0E9mEH+ROnJSzhl6AzXAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUYxzEpOhGHfanMV5EhsEcnw4J8cswHwYDVR0j BBgwFoAUKKv4UipDz3zHJXkFpbo+UEMfD0cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NmE2Y2ExMi1iMjg3LTRhYzctODdiOC02Y2Q3MzM1M2U2N2YvMC8yOEFCRjg1MjJB NDNDRjdDQzcyNTc5MDVBNUJBM0U1MDQzMUYwRjQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNFNTA0MzFG MEY0Ny5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI2YTZjYTEyLWIyODctNGFjNy04 N2I4LTZjZDczMzUzZTY3Zi8wLzMxMzAzMzJlMzEzOTMxMmUzMTM1MzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzUzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7+YMA0GCSqG SIb3DQEBCwUAA4IBAQCwKWIq0jjwi3nONuXzr/ZE7Y/Q31vCjYTBgbdctleYUsqw 2frjB8UQLG2caTS0rZAZ0niWbLVvr06MHvYhEK1LrV8uWiw3Mu4nagvww/1BSNXe mNNly4FpxNDdKlsEzVfXBZjbtHcn53zFKsP8l7Ik6Z6AIds/zNbw4iW0+Z24a3Tn Y/R7qx93OoRlVG+mjBovqAVwks+5gB0/wcg16VzBwmc75dZIi84lDKiCIOHJQa+Q Eqe5r5ny5prE5dWgVAqpD37lFuufCZWhVLTO4kSLkv5/GBr9wnb6yqZyt7XofpmT PdxXtebaPvwSElxSUTXuq+QkKLjBbg4209R6FyP4 -----END CERTIFICATE-----Generated at Thu Dec 18 14:21:25 2025 by rpki-client