This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/3130332e3234352e3232362e302f32342d3234203d3e203233363739.roa File: 3130332e3234352e3232362e302f32342d3234203d3e203233363739.roa (raw, json) Hash identifier: qKtc40b4lQF3hAURWdkBNRY70djjte8YqcsMlRaaEzM= Subject key identifier: 11:DD:57:A8:66:D7:47:FF:4E:A3:FE:3F:DB:7E:5B:64:7B:CD:E4:C3 Certificate issuer: /CN=215123CDB8D789B3519CFF4175FFDD832853F5BE Certificate serial: 12A35EAAC4CCE73D266A34C9C86BEEABEB370B72 Authority key identifier: 21:51:23:CD:B8:D7:89:B3:51:9C:FF:41:75:FF:DD:83:28:53:F5:BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/3130332e3234352e3232362e302f32342d3234203d3e203233363739.roa Signing time: Fri 28 Nov 2025 04:02:51 +0000 ROA not before: Fri 28 Nov 2025 03:57:51 +0000 ROA not after: Fri 27 Nov 2026 04:02:51 +0000 asID: 23679 IP address blocks: 103.245.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.crl rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 10:14:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:a3:5e:aa:c4:cc:e7:3d:26:6a:34:c9:c8:6b:ee:ab:eb:37:0b:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=215123CDB8D789B3519CFF4175FFDD832853F5BE Validity Not Before: Nov 28 03:57:51 2025 GMT Not After : Nov 27 04:02:51 2026 GMT Subject: CN=11DD57A866D747FF4EA3FE3FDB7E5B647BCDE4C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e4:72:c3:8c:12:31:b6:fc:25:48:5c:8e:29: 4f:f7:10:9c:8d:fe:cc:c7:56:34:7e:bf:60:15:4c: 26:9f:b7:03:46:a7:9c:11:8b:88:fe:f5:14:43:c2: 96:90:c1:a3:3f:4c:34:89:6b:bb:03:06:04:6f:0a: 62:82:0d:91:bc:ff:48:c3:73:45:cb:db:b4:db:d6: 33:09:91:39:fb:93:ae:c3:20:9e:54:0d:24:e2:9d: ca:01:81:ea:5a:27:aa:aa:c9:51:14:2e:ea:37:0e: e2:43:14:22:53:3a:fa:28:e8:31:93:3e:5a:34:cb: 83:f5:45:33:07:8a:8c:d3:9c:e7:5a:de:6e:2a:65: 8e:dd:27:db:bb:0c:37:a1:fe:71:bb:ca:34:6a:ec: 0d:87:fc:12:56:37:ea:aa:73:4c:f8:95:b1:4c:1d: 1c:e8:68:b2:01:c0:02:d6:a1:b5:2f:a9:41:29:51: f6:88:87:ae:cb:7b:aa:f8:0c:fe:a0:1c:e8:01:63: f7:e7:71:5a:fd:a8:f0:4b:3d:d8:d6:10:d8:fe:98: 8b:8e:c4:8f:4a:b1:5f:f8:69:64:b7:10:f3:e7:1a: 62:c7:e1:e7:23:24:e1:31:af:cf:92:ed:37:fc:4c: 1f:26:b0:0f:d4:58:c4:61:64:2e:c4:64:4a:ac:de: 86:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:DD:57:A8:66:D7:47:FF:4E:A3:FE:3F:DB:7E:5B:64:7B:CD:E4:C3 X509v3 Authority Key Identifier: keyid:21:51:23:CD:B8:D7:89:B3:51:9C:FF:41:75:FF:DD:83:28:53:F5:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/3130332e3234352e3232362e302f32342d3234203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.245.226.0/24 Signature Algorithm: sha256WithRSAEncryption 64:1c:5e:71:a0:6a:9a:48:46:2e:be:98:1a:49:24:c0:b9:ae: c3:6e:ea:b0:33:aa:c6:20:e9:0f:df:a0:49:8d:da:fa:b4:e0: 67:dd:59:c0:43:2c:8f:dc:63:5f:a3:fe:3d:61:74:80:1f:cf: be:f2:3a:44:15:51:d0:cf:65:3f:d6:1c:5f:64:cf:7f:dc:c2: 25:c7:b0:0f:cb:37:b5:54:37:6e:97:0b:e0:1c:d2:95:3e:42: 5e:79:6d:fb:c1:4c:69:1e:06:84:cc:17:d4:2a:b0:de:9f:d3: 2f:38:20:eb:92:17:4b:e2:9c:1c:35:29:f1:6f:d1:2d:41:fc: 9f:cb:ba:53:f3:33:d2:16:be:f4:2e:21:92:9b:5d:37:24:47: c7:32:65:20:0c:f5:04:b3:01:d9:05:0c:7c:a3:b0:83:00:77: ab:c7:b5:2b:38:41:95:58:14:1a:63:86:8c:cc:8a:3a:a5:4a: d6:93:6f:a9:70:18:d9:97:37:8a:ff:5d:c6:48:1d:29:09:35: c6:4b:fa:cb:b7:b7:f3:a5:b2:d1:68:e7:df:34:58:65:61:8d: ca:28:75:12:69:62:2e:24:99:2d:3f:49:62:d9:a9:00:cc:9d: d6:ab:b1:0b:b8:f8:a1:dd:4f:8c:3f:2d:a2:3d:1e:cc:00:62: 30:fd:6f:7d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUEqNeqsTM5z0majTJyGvuq+s3C3IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE1MTIzQ0RCOEQ3ODlCMzUxOUNGRjQxNzVGRkREODMy ODUzRjVCRTAeFw0yNTExMjgwMzU3NTFaFw0yNjExMjcwNDAyNTFaMDMxMTAvBgNV BAMTKDExREQ1N0E4NjZENzQ3RkY0RUEzRkUzRkRCN0U1QjY0N0JDREU0QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF5HLDjBIxtvwlSFyOKU/3EJyN /szHVjR+v2AVTCaftwNGp5wRi4j+9RRDwpaQwaM/TDSJa7sDBgRvCmKCDZG8/0jD c0XL27Tb1jMJkTn7k67DIJ5UDSTincoBgepaJ6qqyVEULuo3DuJDFCJTOvoo6DGT Plo0y4P1RTMHiozTnOda3m4qZY7dJ9u7DDeh/nG7yjRq7A2H/BJWN+qqc0z4lbFM HRzoaLIBwALWobUvqUEpUfaIh67Le6r4DP6gHOgBY/fncVr9qPBLPdjWENj+mIuO xI9KsV/4aWS3EPPnGmLH4ecjJOExr8+S7Tf8TB8msA/UWMRhZC7EZEqs3oYFAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUEd1XqGbXR/9Oo/4/235bZHvN5MMwHwYDVR0j BBgwFoAUIVEjzbjXibNRnP9Bdf/dgyhT9b4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZmNkMmE0Mi05MmI5LTQwYTQtYTBiZi0wOWI2NWEzMThiNWUvMC8yMTUxMjNDREI4 RDc4OUIzNTE5Q0ZGNDE3NUZGREQ4MzI4NTNGNUJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE1MTIzQ0RCOEQ3ODlCMzUxOUNGRjQxNzVGRkREODMyODUz RjVCRS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNmY2QyYTQyLTkyYjktNDBhNC1h MGJmLTA5YjY1YTMxOGI1ZS8wLzMxMzAzMzJlMzIzNDM1MmUzMjMyMzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMjMzMzYzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ/XiMA0GCSqG SIb3DQEBCwUAA4IBAQBkHF5xoGqaSEYuvpgaSSTAua7DbuqwM6rGIOkP36BJjdr6 tOBn3VnAQyyP3GNfo/49YXSAH8++8jpEFVHQz2U/1hxfZM9/3MIlx7APyze1VDdu lwvgHNKVPkJeeW37wUxpHgaEzBfUKrDen9MvOCDrkhdL4pwcNSnxb9EtQfyfy7pT 8zPSFr70LiGSm103JEfHMmUgDPUEswHZBQx8o7CDAHerx7UrOEGVWBQaY4aMzIo6 pUrWk2+pcBjZlzeK/13GSB0pCTXGS/rLt7fzpbLRaOffNFhlYY3KKHUSaWIuJJkt P0li2akAzJ3Wq7ELuPih3U+MPy2iPR7MAGIw/W99 -----END CERTIFICATE-----Generated at Sat Dec 6 21:16:39 2025 by rpki-client