This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/3130332e39342e3234382e302f32332d3234203d3e203633383738.roa File: 3130332e39342e3234382e302f32332d3234203d3e203633383738.roa (raw, json) Hash identifier: zydaV7vXOljio1PbDe3DJntWYJjt5+nwPN1xl5NBaKY= Subject key identifier: 58:E1:D7:CD:25:DE:75:67:71:FA:60:B7:2D:F8:4D:54:B0:44:B5:31 Certificate issuer: /CN=C629ACA160F978E31BC564E62FF22DBA802D0E87 Certificate serial: 6C625F67483318027FADACDEF69EEF3DE0CB982E Authority key identifier: C6:29:AC:A1:60:F9:78:E3:1B:C5:64:E6:2F:F2:2D:BA:80:2D:0E:87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/3130332e39342e3234382e302f32332d3234203d3e203633383738.roa Signing time: Thu 11 Dec 2025 05:00:02 +0000 ROA not before: Thu 11 Dec 2025 04:55:02 +0000 ROA not after: Thu 10 Dec 2026 05:00:02 +0000 asID: 63878 IP address blocks: 103.94.248.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.crl rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 03:27:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:62:5f:67:48:33:18:02:7f:ad:ac:de:f6:9e:ef:3d:e0:cb:98:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C629ACA160F978E31BC564E62FF22DBA802D0E87 Validity Not Before: Dec 11 04:55:02 2025 GMT Not After : Dec 10 05:00:02 2026 GMT Subject: CN=58E1D7CD25DE756771FA60B72DF84D54B044B531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:11:95:e9:0d:c9:2d:02:46:77:ac:55:8a:b9: c5:9b:48:61:02:04:8a:a5:5a:2c:7e:97:b6:2e:91: c5:50:23:fe:df:bd:21:15:f4:c0:a6:c8:00:30:66: d4:3b:0c:5b:5a:80:d6:dc:a7:57:b1:13:dd:92:ab: 8f:71:95:17:18:f2:b9:fd:06:82:ce:54:b3:2a:55: 16:fd:1b:c5:b3:99:e2:f3:18:5d:65:59:d4:90:56: cb:41:d1:c3:61:83:43:8e:3b:a0:fe:a6:cc:e1:af: fa:88:e3:93:60:6d:7d:49:49:e9:85:cb:70:9f:a4: f0:c3:18:26:78:c2:3e:86:05:1e:77:6f:23:0b:1f: 43:2f:e5:a3:4b:2b:7b:b8:e9:bf:18:bd:27:c1:18: 31:90:17:85:54:48:5d:0a:ba:2c:f1:e8:c1:be:68: 9d:f4:29:eb:b6:b2:64:90:85:2c:73:84:07:8f:68: c9:2a:bd:e4:b5:6e:47:30:78:c5:d7:54:4d:6f:95: 10:eb:1f:3b:01:0c:3d:7e:c1:48:07:9e:fc:72:51: 4a:e8:a0:95:4b:14:0d:cb:09:f9:ed:c1:b2:47:7c: e4:c4:5f:4c:6b:60:f2:c8:b8:40:12:ce:7e:79:17: 74:f9:80:50:b9:a4:8a:c0:5e:da:ce:86:5b:8e:8a: a9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E1:D7:CD:25:DE:75:67:71:FA:60:B7:2D:F8:4D:54:B0:44:B5:31 X509v3 Authority Key Identifier: keyid:C6:29:AC:A1:60:F9:78:E3:1B:C5:64:E6:2F:F2:2D:BA:80:2D:0E:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/3130332e39342e3234382e302f32332d3234203d3e203633383738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.94.248.0/23 Signature Algorithm: sha256WithRSAEncryption a1:bd:9f:30:f2:ac:06:27:f5:87:4f:54:4d:63:ad:9b:ca:5f: 5e:f1:e4:0f:18:cd:d9:77:b8:cc:c0:9c:eb:a4:c8:d6:f0:2d: 83:75:05:71:3e:9f:d6:97:15:5f:0c:81:4d:58:e4:e6:de:bc: 5d:21:6e:09:b6:16:74:50:1c:54:82:5c:af:a4:ff:0e:53:3c: 59:b7:9e:73:ce:fe:e7:e7:4e:cc:81:5b:44:00:4c:34:39:f8: 37:ca:83:ff:1e:9a:51:33:d5:09:08:2a:27:c0:e4:da:57:7b: 2d:75:43:44:bd:ad:eb:63:56:da:7f:87:19:6d:f1:fe:01:14: 6d:0a:4e:3c:a3:42:3f:6d:89:e6:fc:db:00:a3:a5:1f:1b:fa: 29:7b:ab:33:fd:b3:74:37:4d:4a:90:2f:1a:d3:36:e7:aa:1a: 49:be:e8:12:75:0c:b5:3f:24:5c:9f:83:fc:1f:64:09:d2:b1: d4:da:67:f6:30:97:07:9f:bc:e4:f7:d5:57:59:26:a5:4f:e6: 4f:1f:3a:ba:7a:6a:ab:0b:03:90:2e:5b:c0:83:49:cb:a8:c0: 1b:2c:5d:74:fc:8a:19:af:58:f5:91:56:fa:df:2a:38:80:4d: 46:9f:9c:9b:23:81:df:59:dd:f6:bb:cc:7e:25:9c:56:23:da: 74:d0:66:cb -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUbGJfZ0gzGAJ/raze9p7vPeDLmC4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJEQkE4 MDJEMEU4NzAeFw0yNTEyMTEwNDU1MDJaFw0yNjEyMTAwNTAwMDJaMDMxMTAvBgNV BAMTKDU4RTFEN0NEMjVERTc1Njc3MUZBNjBCNzJERjg0RDU0QjA0NEI1MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoEZXpDcktAkZ3rFWKucWbSGEC BIqlWix+l7YukcVQI/7fvSEV9MCmyAAwZtQ7DFtagNbcp1exE92Sq49xlRcY8rn9 BoLOVLMqVRb9G8WzmeLzGF1lWdSQVstB0cNhg0OOO6D+pszhr/qI45NgbX1JSemF y3CfpPDDGCZ4wj6GBR53byMLH0Mv5aNLK3u46b8YvSfBGDGQF4VUSF0Kuizx6MG+ aJ30Keu2smSQhSxzhAePaMkqveS1bkcweMXXVE1vlRDrHzsBDD1+wUgHnvxyUUro oJVLFA3LCfntwbJHfOTEX0xrYPLIuEASzn55F3T5gFC5pIrAXtrOhluOiqndAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUWOHXzSXedWdx+mC3LfhNVLBEtTEwHwYDVR0j BBgwFoAUximsoWD5eOMbxWTmL/ItuoAtDocwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGQ2Y2E5Yi01ODRmLTQwZjEtYmQ2MS0xODU4ZTdlYmEzZWEvMC9DNjI5QUNBMTYw Rjk3OEUzMUJDNTY0RTYyRkYyMkRCQTgwMkQwRTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJEQkE4MDJE MEU4Ny5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI4ZDZjYTliLTU4NGYtNDBmMS1i ZDYxLTE4NThlN2ViYTNlYS8wLzMxMzAzMzJlMzkzNDJlMzIzNDM4MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzYzMzM4MzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWde+DANBgkqhkiG 9w0BAQsFAAOCAQEAob2fMPKsBif1h09UTWOtm8pfXvHkDxjN2Xe4zMCc66TI1vAt g3UFcT6f1pcVXwyBTVjk5t68XSFuCbYWdFAcVIJcr6T/DlM8Wbeec87+5+dOzIFb RABMNDn4N8qD/x6aUTPVCQgqJ8Dk2ld7LXVDRL2t62NW2n+HGW3x/gEUbQpOPKNC P22J5vzbAKOlHxv6KXurM/2zdDdNSpAvGtM256oaSb7oEnUMtT8kXJ+D/B9kCdKx 1Npn9jCXB5+85PfVV1kmpU/mTx86unpqqwsDkC5bwINJy6jAGyxddPyKGa9Y9ZFW +t8qOIBNRp+cmyOB31nd9rvMfiWcViPadNBmyw== -----END CERTIFICATE-----Generated at Fri Dec 19 13:34:55 2025 by rpki-client