This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/3130332e3134382e3139382e302f32342d3234203d3e203233393437.roa File: 3130332e3134382e3139382e302f32342d3234203d3e203233393437.roa (raw, json) Hash identifier: awWbA7ZeNcCHztQ1ZAubpOQkFHc4cuFUkQrm1dRk6W0= Subject key identifier: 86:F4:30:05:92:BA:26:AD:A7:E2:96:48:07:5D:95:EA:E3:75:F4:C9 Certificate issuer: /CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43 Certificate serial: 78D70C2566683991785102579E34EDAFB22AE264 Authority key identifier: 08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/3130332e3134382e3139382e302f32342d3234203d3e203233393437.roa Signing time: Mon 17 Nov 2025 05:00:02 +0000 ROA not before: Mon 17 Nov 2025 04:55:02 +0000 ROA not after: Mon 16 Nov 2026 05:00:02 +0000 asID: 23947 IP address blocks: 103.148.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 16:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:d7:0c:25:66:68:39:91:78:51:02:57:9e:34:ed:af:b2:2a:e2:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43 Validity Not Before: Nov 17 04:55:02 2025 GMT Not After : Nov 16 05:00:02 2026 GMT Subject: CN=86F4300592BA26ADA7E29648075D95EAE375F4C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f5:9b:e6:6b:56:d1:f5:b1:ad:a4:37:64:91: 87:6d:f9:5b:48:0e:5e:76:45:02:7e:3d:58:0e:80: d7:01:8b:9a:00:13:ae:43:ec:ad:84:67:99:e7:db: 81:97:c3:9b:84:5a:72:b5:e8:80:89:9a:6c:1c:27: e8:ef:ef:d1:10:30:16:b5:5f:4e:7f:24:fa:78:bf: 89:57:cf:2b:52:3f:a5:4c:5c:7a:19:3f:18:d8:37: 4f:db:41:8b:7f:f5:b2:b9:9a:99:1d:e2:9a:0b:33: 16:cc:b3:d5:e3:d3:ba:83:18:c4:fa:59:c4:f8:21: 0a:8b:e3:11:c2:85:e3:86:29:ae:47:2d:80:a6:b2: 39:88:ca:3b:1c:6b:1d:9a:f7:fa:54:2e:9c:21:2c: 8c:4a:27:d8:a6:6d:53:87:52:22:16:82:7d:c3:01: 83:cc:44:b3:19:cb:05:11:31:c0:6e:26:b6:a6:58: 8b:3f:a6:77:cd:ca:99:31:1b:52:de:91:49:3f:d2: a5:fe:b1:7e:66:a6:a9:4f:8f:45:5f:3a:56:d5:ab: 6a:db:f8:57:9d:3d:ae:13:ef:e6:4d:b8:fa:6a:25: bf:1a:4f:7a:4d:1f:7c:9a:e7:f8:86:a4:17:3e:f8: 1c:64:d3:86:09:9f:7b:5b:26:18:05:c6:ec:1c:08: 55:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F4:30:05:92:BA:26:AD:A7:E2:96:48:07:5D:95:EA:E3:75:F4:C9 X509v3 Authority Key Identifier: keyid:08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/3130332e3134382e3139382e302f32342d3234203d3e203233393437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.198.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:53:ea:e7:f0:41:3f:88:79:ff:c2:d6:19:bb:d5:ce:ee:ed: 89:e9:f0:80:8c:e2:37:8d:bb:7d:cb:c6:13:1a:30:6b:05:8f: 2c:57:f3:5b:b6:83:97:2e:31:5d:cb:b3:65:6c:03:5f:e1:e6: 04:ff:a9:34:e5:7b:bf:67:74:2e:39:dc:a6:46:c2:2d:1f:9a: 71:31:95:67:26:94:57:b9:43:fa:65:be:8e:48:dc:15:cc:fb: ec:44:1c:50:1f:5d:8f:6a:dd:bf:51:af:d2:d4:b8:ed:fe:ff: a6:ec:6a:56:7a:8c:71:9e:17:fe:a3:24:5d:60:aa:7c:49:ce: 12:95:ed:33:05:58:30:69:4c:8f:ca:fe:c1:4d:5a:98:93:da: bb:9b:45:63:25:6a:31:19:7a:fc:ca:10:19:e3:85:11:90:15: 13:1b:96:06:c5:2e:be:9b:ee:d5:f0:da:26:5a:bd:81:61:74: e8:16:a4:9f:59:bc:1b:ec:f8:48:f7:91:dc:43:93:4e:c8:86: 93:c7:4f:64:8b:f4:75:0c:41:f4:6a:c7:df:74:c7:9c:64:f3: 7e:a0:93:a7:1f:95:3d:81:b9:55:4e:dd:5a:a2:5d:f3:92:74: 81:76:e0:10:ce:a8:d0:fd:90:58:d0:db:30:02:14:97:99:8f: 44:88:92:ee -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUeNcMJWZoOZF4UQJXnjTtr7Iq4mQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3 RjFBQkY0MzAeFw0yNTExMTcwNDU1MDJaFw0yNjExMTYwNTAwMDJaMDMxMTAvBgNV BAMTKDg2RjQzMDA1OTJCQTI2QURBN0UyOTY0ODA3NUQ5NUVBRTM3NUY0QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB9Zvma1bR9bGtpDdkkYdt+VtI Dl52RQJ+PVgOgNcBi5oAE65D7K2EZ5nn24GXw5uEWnK16ICJmmwcJ+jv79EQMBa1 X05/JPp4v4lXzytSP6VMXHoZPxjYN0/bQYt/9bK5mpkd4poLMxbMs9Xj07qDGMT6 WcT4IQqL4xHCheOGKa5HLYCmsjmIyjscax2a9/pULpwhLIxKJ9imbVOHUiIWgn3D AYPMRLMZywURMcBuJramWIs/pnfNypkxG1LekUk/0qX+sX5mpqlPj0VfOlbVq2rb +FedPa4T7+ZNuPpqJb8aT3pNH3ya5/iGpBc++Bxk04YJn3tbJhgFxuwcCFVZAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUhvQwBZK6Jq2n4pZIB12V6uN19MkwHwYDVR0j BBgwFoAUCNB/AQ2igRKpTogAwxe4338av0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGMyYTEzYi0xZjQwLTRjMDMtYmMzNS1mNjk2MTUxNmQ0ZDkvMC8wOEQwN0YwMTBE QTI4MTEyQTk0RTg4MDBDMzE3QjhERjdGMUFCRjQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3RjFB QkY0My5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzcwYzJhMTNiLTFmNDAtNGMwMy1i YzM1LWY2OTYxNTE2ZDRkOS8wLzMxMzAzMzJlMzEzNDM4MmUzMTM5MzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMjMzMzkzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5TGMA0GCSqG SIb3DQEBCwUAA4IBAQAdU+rn8EE/iHn/wtYZu9XO7u2J6fCAjOI3jbt9y8YTGjBr BY8sV/NbtoOXLjFdy7NlbANf4eYE/6k05Xu/Z3QuOdymRsItH5pxMZVnJpRXuUP6 Zb6OSNwVzPvsRBxQH12Pat2/Ua/S1Ljt/v+m7GpWeoxxnhf+oyRdYKp8Sc4Sle0z BVgwaUyPyv7BTVqYk9q7m0VjJWoxGXr8yhAZ44URkBUTG5YGxS6+m+7V8NomWr2B YXToFqSfWbwb7PhI95HcQ5NOyIaTx09ki/R1DEH0asffdMecZPN+oJOnH5U9gblV Tt1aol3zknSBduAQzqjQ/ZBY0NswAhSXmY9EiJLu -----END CERTIFICATE-----Generated at Sun Dec 7 01:09:41 2025 by rpki-client