This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/3130332e3136312e3131342e302f32332d3234203d3e20313431363132.roa File: 3130332e3136312e3131342e302f32332d3234203d3e20313431363132.roa (raw, json) Hash identifier: dQEw2/q0jb+KQe+GF06aed8m+MpEA25/2ivEEFSNjyQ= Subject key identifier: BE:F3:58:5B:B3:B0:AF:3D:2D:72:38:80:03:E0:70:D9:21:06:F7:41 Certificate issuer: /CN=9705995FB5C87DC40E50B1256B8809A101D17047 Certificate serial: 03AB46C22563F284F771C29C4508755B92F4949A Authority key identifier: 97:05:99:5F:B5:C8:7D:C4:0E:50:B1:25:6B:88:09:A1:01:D1:70:47 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/3130332e3136312e3131342e302f32332d3234203d3e20313431363132.roa Signing time: Thu 18 Dec 2025 17:00:01 +0000 ROA not before: Thu 18 Dec 2025 16:55:01 +0000 ROA not after: Thu 17 Dec 2026 17:00:01 +0000 asID: 141612 IP address blocks: 103.161.114.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.crl rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 13:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:ab:46:c2:25:63:f2:84:f7:71:c2:9c:45:08:75:5b:92:f4:94:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9705995FB5C87DC40E50B1256B8809A101D17047 Validity Not Before: Dec 18 16:55:01 2025 GMT Not After : Dec 17 17:00:01 2026 GMT Subject: CN=BEF3585BB3B0AF3D2D72388003E070D92106F741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:67:e8:fa:b1:1c:14:7c:62:54:81:eb:b4:db: 39:76:3c:d4:6d:83:43:04:1c:f0:81:8b:7f:ba:da: 64:2d:6a:2c:0d:0b:92:4f:34:da:63:28:8c:b7:08: cf:2e:26:a4:29:86:89:e8:35:d1:b8:3d:cc:c5:60: f5:2f:1f:ce:5b:ab:a6:7c:1a:3f:c1:d3:a3:35:2c: 9a:30:6c:73:02:b2:ad:7b:cf:69:52:fa:79:e5:24: 37:83:12:a5:4c:b1:27:e1:99:36:83:b2:0a:88:e4: 2f:84:74:1b:7a:ba:74:8c:77:29:e3:c2:4b:ad:0f: 4f:bd:be:0f:f2:97:88:82:e0:9f:00:e3:aa:9c:90: 5f:41:03:49:1c:f6:04:6b:03:27:52:34:aa:16:5a: 23:e0:b6:7a:c7:87:b1:50:0e:a1:94:77:64:30:c2: 98:c2:47:38:35:2a:37:c1:66:96:15:df:a9:ee:51: fc:d0:21:60:01:39:7b:6d:2a:ac:4e:e5:57:e6:06: fe:6d:1a:8a:88:94:08:82:3b:a5:fc:62:b6:2c:04: aa:d4:24:cf:c7:fa:e8:e7:cd:1e:20:55:1b:79:af: 2b:49:5e:61:b5:eb:9c:b6:25:5d:5e:73:57:97:9e: da:e7:c7:81:6e:9e:dc:ed:ca:42:92:da:21:15:fb: cb:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:F3:58:5B:B3:B0:AF:3D:2D:72:38:80:03:E0:70:D9:21:06:F7:41 X509v3 Authority Key Identifier: keyid:97:05:99:5F:B5:C8:7D:C4:0E:50:B1:25:6B:88:09:A1:01:D1:70:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/3130332e3136312e3131342e302f32332d3234203d3e20313431363132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.114.0/23 Signature Algorithm: sha256WithRSAEncryption 0c:a9:a6:7c:64:5b:25:15:aa:16:66:e5:8b:c5:8f:fc:61:c6: e3:d1:bd:5b:12:6c:60:8e:0b:8a:68:e7:ba:99:97:ad:a8:43: ca:64:2e:5a:7f:c1:95:e6:03:66:02:11:b2:8a:46:9b:9a:59: 62:c7:92:8c:af:bd:fb:21:f0:d0:e1:b0:b6:73:c3:64:6c:24: 65:ba:c6:03:76:f0:26:fa:32:61:07:ee:07:6e:a5:ea:a3:31: 79:f2:ac:40:67:a9:80:29:b3:40:38:c5:76:0e:64:6f:a1:99: fa:bf:29:bc:ff:a9:4d:29:f4:9f:5b:f3:68:4d:da:e4:8f:6a: 13:9a:9c:23:e1:b7:f4:c0:52:40:3e:ec:3f:a7:9c:9c:58:73: 4a:b7:aa:7f:28:29:a3:b9:83:d4:78:00:46:eb:4c:24:a3:08: 0d:37:c8:48:90:53:e6:c1:cc:d0:89:03:0b:02:a4:7a:24:8b: e9:9c:72:c5:5c:3f:fb:26:91:0f:46:ea:9a:e4:a4:c3:06:c3: a0:9c:63:60:9e:0c:30:58:86:2c:c1:1d:a1:c4:e7:3e:b7:cf: da:ac:72:7e:16:d5:d9:cb:96:68:cc:09:66:7d:d4:7f:39:ab: 0b:ce:bf:f4:83:ec:32:79:b1:35:09:00:28:d3:73:3d:5d:50: 19:f6:d1:b1 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUA6tGwiVj8oT3ccKcRQh1W5L0lJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTcwNTk5NUZCNUM4N0RDNDBFNTBCMTI1NkI4ODA5QTEw MUQxNzA0NzAeFw0yNTEyMTgxNjU1MDFaFw0yNjEyMTcxNzAwMDFaMDMxMTAvBgNV BAMTKEJFRjM1ODVCQjNCMEFGM0QyRDcyMzg4MDAzRTA3MEQ5MjEwNkY3NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmZ+j6sRwUfGJUgeu02zl2PNRt g0MEHPCBi3+62mQtaiwNC5JPNNpjKIy3CM8uJqQphonoNdG4PczFYPUvH85bq6Z8 Gj/B06M1LJowbHMCsq17z2lS+nnlJDeDEqVMsSfhmTaDsgqI5C+EdBt6unSMdynj wkutD0+9vg/yl4iC4J8A46qckF9BA0kc9gRrAydSNKoWWiPgtnrHh7FQDqGUd2Qw wpjCRzg1KjfBZpYV36nuUfzQIWABOXttKqxO5VfmBv5tGoqIlAiCO6X8YrYsBKrU JM/H+ujnzR4gVRt5rytJXmG165y2JV1ec1eXntrnx4FuntztykKS2iEV+8uDAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUvvNYW7Owrz0tcjiAA+Bw2SEG90EwHwYDVR0j BBgwFoAUlwWZX7XIfcQOULEla4gJoQHRcEcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Nzk1YTM3OC1kNjllLTQ1MmUtYWM2Ny0zYjc0OTAzOWE4YzgvMC85NzA1OTk1RkI1 Qzg3REM0MEU1MEIxMjU2Qjg4MDlBMTAxRDE3MDQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTcwNTk5NUZCNUM4N0RDNDBFNTBCMTI1NkI4ODA5QTEwMUQx NzA0Ny5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk3OTVhMzc4LWQ2OWUtNDUyZS1h YzY3LTNiNzQ5MDM5YThjOC8wLzMxMzAzMzJlMzEzNjMxMmUzMTMxMzQyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzEzNjMxMzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnoXIwDQYJ KoZIhvcNAQELBQADggEBAAyppnxkWyUVqhZm5YvFj/xhxuPRvVsSbGCOC4po57qZ l62oQ8pkLlp/wZXmA2YCEbKKRpuaWWLHkoyvvfsh8NDhsLZzw2RsJGW6xgN28Cb6 MmEH7gdupeqjMXnyrEBnqYAps0A4xXYOZG+hmfq/Kbz/qU0p9J9b82hN2uSPahOa nCPht/TAUkA+7D+nnJxYc0q3qn8oKaO5g9R4AEbrTCSjCA03yEiQU+bBzNCJAwsC pHoki+mccsVcP/smkQ9G6prkpMMGw6CcY2CeDDBYhizBHaHE5z63z9qscn4W1dnL lmjMCWZ91H85qwvOv/SD7DJ5sTUJACjTcz1dUBn20bE= -----END CERTIFICATE-----Generated at Thu Dec 18 23:16:31 2025 by rpki-client