This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa File: 3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa (raw, json) Hash identifier: p8Wpmus070CsJXDUA1KtLJSmqgm7fEGDDNW/LuX/AC4= Subject key identifier: 21:4B:64:F8:6E:43:26:6A:D4:4F:BF:25:79:C8:A6:87:DE:82:97:59 Certificate issuer: /CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58 Certificate serial: 5ED0A214018E65C40B733AB1857CA638AFC0701A Authority key identifier: 86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa Signing time: Tue 02 Dec 2025 16:00:00 +0000 ROA not before: Tue 02 Dec 2025 15:55:00 +0000 ROA not after: Tue 01 Dec 2026 16:00:00 +0000 asID: 150501 IP address blocks: 103.120.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 02:44:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:d0:a2:14:01:8e:65:c4:0b:73:3a:b1:85:7c:a6:38:af:c0:70:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58 Validity Not Before: Dec 2 15:55:00 2025 GMT Not After : Dec 1 16:00:00 2026 GMT Subject: CN=214B64F86E43266AD44FBF2579C8A687DE829759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2c:09:94:a0:4f:08:3a:5f:b2:2d:06:f1:c5: 49:0f:21:77:f5:34:3d:03:30:d7:92:84:1a:9c:9d: 2e:2d:12:12:60:ce:a3:a8:69:1a:bf:ed:4e:ea:9c: c8:29:d7:3a:9a:60:eb:ad:97:f7:a2:35:8c:2b:14: f6:a1:7f:66:ac:af:ff:57:34:55:71:1b:c0:c1:af: 9f:42:fd:bc:bf:9e:73:40:37:79:07:98:62:93:e6: 6c:dc:ce:72:8a:58:04:70:68:b4:14:c6:b2:05:9f: f3:77:78:2b:9f:0f:4b:a1:a3:97:37:63:f2:d6:30: e7:62:6f:59:84:44:46:76:96:5e:0b:5e:cf:9c:5b: d3:89:fa:24:d5:0d:69:11:d0:91:c4:35:00:93:49: 7f:5d:82:b7:6b:97:8c:d4:e1:72:a8:d0:6d:75:61: 49:7f:9f:64:41:74:dc:82:08:a0:f0:c1:2e:bd:6a: 61:29:36:1c:6c:72:ec:64:42:2b:64:1c:90:e9:43: 23:37:cb:a6:e8:57:eb:9e:1b:79:4d:ff:04:8b:aa: 0c:a1:37:fe:e5:52:f6:05:59:57:61:ef:90:56:21: 33:56:c7:41:c0:36:7f:c1:a5:43:b1:aa:27:13:7a: 74:08:a7:ed:87:ef:cc:4e:7d:26:56:0d:6f:91:9e: 45:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:4B:64:F8:6E:43:26:6A:D4:4F:BF:25:79:C8:A6:87:DE:82:97:59 X509v3 Authority Key Identifier: keyid:86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.120.76.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:e8:21:1a:78:77:6a:b0:3d:4f:8c:32:34:cd:ce:87:38:6c: 79:4b:b8:14:81:41:5a:8c:f6:d6:43:d7:ba:18:69:ff:e3:03: 3f:94:9d:6f:45:94:cc:dc:31:e3:a3:3d:53:db:20:dc:05:35: 4d:57:b4:80:f4:f5:02:5d:26:d5:fb:cb:b4:b2:f7:a8:dc:b2: 89:4d:24:53:22:a2:9a:47:e8:b2:9e:06:85:07:a1:c4:88:3a: 4f:d1:66:7f:38:fd:32:4c:e4:c4:2d:e6:da:67:23:82:d2:57: c8:76:dc:c5:ea:9b:97:24:5e:b5:4a:1c:80:5f:d7:19:b4:bb: 89:3d:89:17:ca:1a:79:29:7f:93:58:be:75:cc:f6:b9:35:37: e5:5d:74:49:68:cb:99:5c:35:f9:bb:cc:14:c9:d2:0f:38:48: b4:62:33:59:ba:50:5e:86:b3:17:a8:7a:99:02:03:4a:00:db: 4c:f1:b6:a9:58:6f:6d:90:27:0b:da:10:2f:b2:03:1f:7d:6f: 17:26:5a:1e:ec:ab:f3:cb:ab:3b:83:34:0c:d4:cb:8f:3c:84: af:7f:84:55:32:d3:be:ae:3e:80:a0:28:c6:8b:44:22:4f:ad: 42:c9:8e:79:ae:03:c9:b4:b5:f1:2c:b0:55:a0:5c:6a:eb:7c: ae:48:40:79 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUXtCiFAGOZcQLczqxhXymOK/AcBowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1 NjEzOEY1ODAeFw0yNTEyMDIxNTU1MDBaFw0yNjEyMDExNjAwMDBaMDMxMTAvBgNV BAMTKDIxNEI2NEY4NkU0MzI2NkFENDRGQkYyNTc5QzhBNjg3REU4Mjk3NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4LAmUoE8IOl+yLQbxxUkPIXf1 ND0DMNeShBqcnS4tEhJgzqOoaRq/7U7qnMgp1zqaYOutl/eiNYwrFPahf2asr/9X NFVxG8DBr59C/by/nnNAN3kHmGKT5mzcznKKWARwaLQUxrIFn/N3eCufD0uho5c3 Y/LWMOdib1mEREZ2ll4LXs+cW9OJ+iTVDWkR0JHENQCTSX9dgrdrl4zU4XKo0G11 YUl/n2RBdNyCCKDwwS69amEpNhxscuxkQitkHJDpQyM3y6boV+ueG3lN/wSLqgyh N/7lUvYFWVdh75BWITNWx0HANn/BpUOxqicTenQIp+2H78xOfSZWDW+RnkXlAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUIUtk+G5DJmrUT78lecimh96Cl1kwHwYDVR0j BBgwFoAUhsL00GoRuGus/w/T26R7+lYTj1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWRjNzY1YS1mZjhkLTRiMWYtYTU5YS0yNWZmN2JkNGY1OGEvMC84NkMyRjREMDZB MTFCODZCQUNGRjBGRDNEQkE0N0JGQTU2MTM4RjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1NjEz OEY1OC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzlhZGM3NjVhLWZmOGQtNGIxZi1h NTlhLTI1ZmY3YmQ0ZjU4YS8wLzMxMzAzMzJlMzEzMjMwMmUzNzM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzUzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3hMMA0GCSqG SIb3DQEBCwUAA4IBAQAL6CEaeHdqsD1PjDI0zc6HOGx5S7gUgUFajPbWQ9e6GGn/ 4wM/lJ1vRZTM3DHjoz1T2yDcBTVNV7SA9PUCXSbV+8u0sveo3LKJTSRTIqKaR+iy ngaFB6HEiDpP0WZ/OP0yTOTELebaZyOC0lfIdtzF6puXJF61ShyAX9cZtLuJPYkX yhp5KX+TWL51zPa5NTflXXRJaMuZXDX5u8wUydIPOEi0YjNZulBehrMXqHqZAgNK ANtM8bapWG9tkCcL2hAvsgMffW8XJloe7Kvzy6s7gzQM1MuPPISvf4RVMtO+rj6A oCjGi0QiT61CyY55rgPJtLXxLLBVoFxq63yuSEB5 -----END CERTIFICATE-----Generated at Sun Dec 7 03:13:25 2025 by rpki-client