This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/3130332e3136362e3233342e302f32342d3234203d3e20313430343037.roa File: 3130332e3136362e3233342e302f32342d3234203d3e20313430343037.roa (raw, json) Hash identifier: 2lTJuwgktOu4lo9SNeOCA4rDFu8XBUgqcawUv+9j6hA= Subject key identifier: 26:87:93:05:0E:7A:D4:84:B9:F7:37:30:6C:E1:58:4C:2B:36:BD:07 Certificate issuer: /CN=DF19949CE17DC116E7B7C2248C933405B7A1AEF2 Certificate serial: 5C181B70FCA687E894F391E737843A091815DFEE Authority key identifier: DF:19:94:9C:E1:7D:C1:16:E7:B7:C2:24:8C:93:34:05:B7:A1:AE:F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/3130332e3136362e3233342e302f32342d3234203d3e20313430343037.roa Signing time: Thu 04 Dec 2025 06:01:32 +0000 ROA not before: Thu 04 Dec 2025 05:56:32 +0000 ROA not after: Thu 03 Dec 2026 06:01:32 +0000 asID: 140407 IP address blocks: 103.166.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.crl rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:18:1b:70:fc:a6:87:e8:94:f3:91:e7:37:84:3a:09:18:15:df:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF19949CE17DC116E7B7C2248C933405B7A1AEF2 Validity Not Before: Dec 4 05:56:32 2025 GMT Not After : Dec 3 06:01:32 2026 GMT Subject: CN=268793050E7AD484B9F737306CE1584C2B36BD07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e3:02:6f:ec:3e:01:b7:e5:63:32:1a:51:34: 7a:17:67:53:86:38:09:b8:b4:71:fc:1b:0d:1f:9d: 27:ef:2b:b8:1f:00:40:c8:d0:5e:1b:53:de:33:b3: 22:ec:de:15:8f:8d:74:6c:cd:08:c2:1b:f4:36:36: 34:1d:d0:30:13:4f:64:d4:ea:fb:90:f6:7e:1e:a1: 43:0b:dd:b4:4b:73:a5:73:dd:68:c0:8f:77:e5:30: 0b:da:7e:9a:9b:44:e2:e3:5d:2e:73:cc:7a:51:31: 18:9e:7f:69:dc:88:89:5d:02:33:14:2b:4d:8d:7e: 4f:0f:39:81:fa:30:20:31:d1:a5:43:bd:4e:f5:b5: 94:52:a4:c4:ff:09:4e:bd:c5:87:a2:a8:1e:9d:66: dd:46:da:14:e7:b6:7f:5e:db:ec:0f:e3:70:06:de: 6b:91:53:f0:02:e0:71:58:99:2a:7e:16:70:5f:82: 3e:4b:53:72:3e:af:c2:6a:76:59:00:ec:ba:92:ad: f0:ed:28:f6:66:13:ee:24:5a:37:68:a1:19:65:22: 0c:db:bf:77:5b:00:b6:cc:a9:7e:5a:79:25:97:6a: 40:f4:3c:cb:f6:30:f5:eb:e3:28:ce:46:a4:97:ed: d8:76:55:1d:61:2e:95:77:63:d9:9e:96:ad:77:b9: c2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:87:93:05:0E:7A:D4:84:B9:F7:37:30:6C:E1:58:4C:2B:36:BD:07 X509v3 Authority Key Identifier: keyid:DF:19:94:9C:E1:7D:C1:16:E7:B7:C2:24:8C:93:34:05:B7:A1:AE:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/3130332e3136362e3233342e302f32342d3234203d3e20313430343037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.234.0/24 Signature Algorithm: sha256WithRSAEncryption 23:a9:79:b9:c9:f1:cb:d6:60:d1:79:5b:9d:c3:e7:3e:dd:6d: 09:aa:e4:45:c0:d5:3a:b0:22:7c:b9:83:7f:8b:6d:2b:3c:a5: dc:b5:9c:94:c6:86:42:04:83:99:0f:97:39:ec:d5:87:01:a8: 49:7f:d9:5a:5e:78:8c:f8:bf:a2:13:b2:70:2d:c4:78:7e:aa: 61:80:b9:62:ad:de:44:10:c7:97:b8:c2:e6:3a:58:7c:bf:c7: 0c:c4:cf:3b:99:b8:62:ab:28:4c:4b:b9:d6:0e:fa:68:28:f8: 66:aa:18:05:68:5c:19:37:69:7e:a5:d6:44:28:64:ad:17:77: ef:7d:cf:91:11:5f:43:78:5d:03:6c:cd:cb:45:b6:24:28:fb: 49:94:34:b7:7b:c0:a1:71:c1:0c:0e:28:99:2f:f1:0d:bb:ae: 56:98:f9:0b:8c:c7:28:d8:1a:64:74:50:6b:20:a5:dc:5f:a5: 52:d7:ae:58:be:12:c5:f7:2f:30:91:6a:73:86:8b:74:d0:66: 4f:a6:9b:d9:76:10:92:cb:97:c8:a1:cd:49:70:88:0c:14:5a: df:6e:fa:d1:0c:ad:c0:c1:80:db:81:55:eb:cc:b1:bc:cc:a0: b8:18:bb:c4:0c:21:4b:18:67:39:31:85:ff:31:9d:ee:61:99: 3c:18:47:a4 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUXBgbcPymh+iU85HnN4Q6CRgV3+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYxOTk0OUNFMTdEQzExNkU3QjdDMjI0OEM5MzM0MDVC N0ExQUVGMjAeFw0yNTEyMDQwNTU2MzJaFw0yNjEyMDMwNjAxMzJaMDMxMTAvBgNV BAMTKDI2ODc5MzA1MEU3QUQ0ODRCOUY3MzczMDZDRTE1ODRDMkIzNkJEMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK4wJv7D4Bt+VjMhpRNHoXZ1OG OAm4tHH8Gw0fnSfvK7gfAEDI0F4bU94zsyLs3hWPjXRszQjCG/Q2NjQd0DATT2TU 6vuQ9n4eoUML3bRLc6Vz3WjAj3flMAvafpqbROLjXS5zzHpRMRief2nciIldAjMU K02Nfk8POYH6MCAx0aVDvU71tZRSpMT/CU69xYeiqB6dZt1G2hTntn9e2+wP43AG 3muRU/AC4HFYmSp+FnBfgj5LU3I+r8JqdlkA7LqSrfDtKPZmE+4kWjdooRllIgzb v3dbALbMqX5aeSWXakD0PMv2MPXr4yjORqSX7dh2VR1hLpV3Y9melq13ucJJAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUJoeTBQ561IS59zcwbOFYTCs2vQcwHwYDVR0j BBgwFoAU3xmUnOF9wRbnt8IkjJM0BbehrvIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWVmNzg2Yi02MjI2LTQ0YWYtODUyZC0xZmIwNDVjNGRlYjMvMC9ERjE5OTQ5Q0Ux N0RDMTE2RTdCN0MyMjQ4QzkzMzQwNUI3QTFBRUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYxOTk0OUNFMTdEQzExNkU3QjdDMjI0OEM5MzM0MDVCN0Ex QUVGMi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhZWY3ODZiLTYyMjYtNDRhZi04 NTJkLTFmYjA0NWM0ZGViMy8wLzMxMzAzMzJlMzEzNjM2MmUzMjMzMzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzNDMwMzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnpuowDQYJ KoZIhvcNAQELBQADggEBACOpebnJ8cvWYNF5W53D5z7dbQmq5EXA1TqwIny5g3+L bSs8pdy1nJTGhkIEg5kPlzns1YcBqEl/2VpeeIz4v6ITsnAtxHh+qmGAuWKt3kQQ x5e4wuY6WHy/xwzEzzuZuGKrKExLudYO+mgo+GaqGAVoXBk3aX6l1kQoZK0Xd+99 z5ERX0N4XQNszctFtiQo+0mUNLd7wKFxwQwOKJkv8Q27rlaY+QuMxyjYGmR0UGsg pdxfpVLXrli+EsX3LzCRanOGi3TQZk+mm9l2EJLLl8ihzUlwiAwUWt9u+tEMrcDB gNuBVevMsbzMoLgYu8QMIUsYZzkxhf8xne5hmTwYR6Q= -----END CERTIFICATE-----Generated at Sun Dec 7 03:56:01 2025 by rpki-client