This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/3130332e3137342e3132312e302f32342d3234203d3e20313437303937.roa File: 3130332e3137342e3132312e302f32342d3234203d3e20313437303937.roa (raw, json) Hash identifier: 28RcdR62e/0q0exyVrMmIGMIyDeFlL8Q29Mx92Z7M14= Subject key identifier: 15:60:17:98:83:9B:7E:ED:A3:DD:B0:EC:8C:F7:49:B6:D2:8D:57:75 Certificate issuer: /CN=A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B Certificate serial: 7E5C2CD63BC9BF07518CEEC555BE3E61817AC041 Authority key identifier: A0:B5:1B:C5:AC:7C:95:73:7A:24:BD:6A:28:D8:24:9E:7A:80:CF:4B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/3130332e3137342e3132312e302f32342d3234203d3e20313437303937.roa Signing time: Wed 17 Dec 2025 08:03:04 +0000 ROA not before: Wed 17 Dec 2025 07:58:04 +0000 ROA not after: Wed 16 Dec 2026 08:03:04 +0000 asID: 147097 IP address blocks: 103.174.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 13:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:5c:2c:d6:3b:c9:bf:07:51:8c:ee:c5:55:be:3e:61:81:7a:c0:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B Validity Not Before: Dec 17 07:58:04 2025 GMT Not After : Dec 16 08:03:04 2026 GMT Subject: CN=15601798839B7EEDA3DDB0EC8CF749B6D28D5775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b1:c2:35:bf:ef:27:45:87:b7:7c:44:2a:d5: 33:0a:7e:5d:21:51:be:45:0a:3d:9e:0a:0f:f9:95: 37:71:cb:77:72:f8:87:7a:f9:1f:b3:4c:1e:82:0d: 36:47:e7:91:f3:aa:c3:11:88:51:df:7a:44:2f:fc: f0:4d:78:57:7c:3f:b5:51:0a:0b:29:66:a3:ae:a0: e5:3b:95:94:34:53:d0:39:5c:05:e4:3e:15:03:d6: 59:11:de:dc:3f:5b:20:45:8c:41:8d:5a:1d:4f:94: 21:26:53:e8:9a:a9:98:0f:d4:21:b4:15:a6:be:ae: 47:61:e8:10:31:a2:a2:09:14:2e:f9:a3:3f:a1:6e: a8:75:d2:81:90:94:82:3d:5c:90:e2:62:2a:c0:d4: a5:2b:79:20:fb:3a:6e:43:64:cc:a8:f1:59:c9:a1: a9:c4:3a:0e:e4:18:63:5a:2e:eb:7c:49:f6:1f:e5: f9:39:1a:14:e8:db:f7:77:6b:ce:5a:dd:80:90:42: 14:58:d6:dd:dc:cb:44:8c:bd:37:56:40:18:a0:5d: db:c1:a8:cc:28:1a:05:9d:51:3c:27:88:f8:ec:2e: 51:4e:79:75:d2:9a:06:c3:f9:5f:33:55:a2:7e:fe: 61:15:69:da:ea:72:8f:a1:d2:27:ab:b5:08:64:45: 4c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:60:17:98:83:9B:7E:ED:A3:DD:B0:EC:8C:F7:49:B6:D2:8D:57:75 X509v3 Authority Key Identifier: keyid:A0:B5:1B:C5:AC:7C:95:73:7A:24:BD:6A:28:D8:24:9E:7A:80:CF:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/3130332e3137342e3132312e302f32342d3234203d3e20313437303937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.174.121.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:7e:64:93:2f:6c:f1:38:6f:0e:c4:d2:d0:a0:a3:ef:1a:79: 28:69:f0:a8:e5:47:bd:4d:c4:9d:28:15:e8:11:fd:a1:f6:c8: ad:88:91:88:87:b9:be:2e:d1:df:9a:7f:4d:92:1b:57:56:f6: f6:a5:b4:f4:74:4e:7e:48:54:ea:b1:c6:49:7d:7f:e2:10:8a: 13:7f:52:68:2a:83:ff:35:ec:d1:18:de:77:19:5c:60:cd:93: 7c:9c:b4:dd:12:0e:91:1b:21:89:6f:04:45:cd:3d:76:30:46: 77:e0:87:8f:4a:22:a0:bd:07:3a:09:23:39:31:f1:9a:c4:78: 3c:7d:82:64:a9:a5:1e:27:fe:b9:fb:34:84:b5:8a:17:52:2f: 99:dc:f8:e1:1d:d0:80:4b:15:1a:af:23:33:44:7d:02:99:da: 29:c9:e3:35:e8:fb:96:be:ab:4f:ec:63:ad:c8:f5:64:de:0a: 7f:88:70:37:0d:07:0b:a8:06:82:c7:5d:d9:f4:c5:57:8f:87: 21:35:0d:90:31:d4:36:a2:51:77:d3:93:85:40:ba:58:eb:08: b3:46:12:d1:0c:8a:a0:6d:62:80:a2:d8:76:ee:a1:8b:d4:71: 97:0f:c0:21:51:44:93:42:36:6f:d2:f0:28:9e:3f:69:ff:b0: bb:20:d4:c1 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUflws1jvJvwdRjO7FVb4+YYF6wEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBCNTFCQzVBQzdDOTU3MzdBMjRCRDZBMjhEODI0OUU3 QTgwQ0Y0QjAeFw0yNTEyMTcwNzU4MDRaFw0yNjEyMTYwODAzMDRaMDMxMTAvBgNV BAMTKDE1NjAxNzk4ODM5QjdFRURBM0REQjBFQzhDRjc0OUI2RDI4RDU3NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4scI1v+8nRYe3fEQq1TMKfl0h Ub5FCj2eCg/5lTdxy3dy+Id6+R+zTB6CDTZH55HzqsMRiFHfekQv/PBNeFd8P7VR CgspZqOuoOU7lZQ0U9A5XAXkPhUD1lkR3tw/WyBFjEGNWh1PlCEmU+iaqZgP1CG0 Faa+rkdh6BAxoqIJFC75oz+hbqh10oGQlII9XJDiYirA1KUreSD7Om5DZMyo8VnJ oanEOg7kGGNaLut8SfYf5fk5GhTo2/d3a85a3YCQQhRY1t3cy0SMvTdWQBigXdvB qMwoGgWdUTwniPjsLlFOeXXSmgbD+V8zVaJ+/mEVadrqco+h0iertQhkRUxTAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUFWAXmIObfu2j3bDsjPdJttKNV3UwHwYDVR0j BBgwFoAUoLUbxax8lXN6JL1qKNgknnqAz0swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmIyMDUxNS04ZDdjLTQ0NWMtYmZmNy1iYWJkNTI2NTc4MGYvMC9BMEI1MUJDNUFD N0M5NTczN0EyNEJENkEyOEQ4MjQ5RTdBODBDRjRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBCNTFCQzVBQzdDOTU3MzdBMjRCRDZBMjhEODI0OUU3QTgw Q0Y0Qi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg2YjIwNTE1LThkN2MtNDQ1Yy1i ZmY3LWJhYmQ1MjY1NzgwZi8wLzMxMzAzMzJlMzEzNzM0MmUzMTMyMzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzczMDM5Mzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnrnkwDQYJ KoZIhvcNAQELBQADggEBAJt+ZJMvbPE4bw7E0tCgo+8aeShp8KjlR71NxJ0oFegR /aH2yK2IkYiHub4u0d+af02SG1dW9valtPR0Tn5IVOqxxkl9f+IQihN/Umgqg/81 7NEY3ncZXGDNk3yctN0SDpEbIYlvBEXNPXYwRnfgh49KIqC9BzoJIzkx8ZrEeDx9 gmSppR4n/rn7NIS1ihdSL5nc+OEd0IBLFRqvIzNEfQKZ2inJ4zXo+5a+q0/sY63I 9WTeCn+IcDcNBwuoBoLHXdn0xVePhyE1DZAx1DaiUXfTk4VAuljrCLNGEtEMiqBt YoCi2HbuoYvUcZcPwCFRRJNCNm/S8CieP2n/sLsg1ME= -----END CERTIFICATE-----Generated at Thu Dec 18 23:17:02 2025 by rpki-client