This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/3130332e35392e34342e302f32332d3234203d3e20313338383831.roa File: 3130332e35392e34342e302f32332d3234203d3e20313338383831.roa (raw, json) Hash identifier: EatVj16JfZN1a07xrK0h6xf7Rv2ZAzoXpej8eOLlKjQ= Subject key identifier: 58:E6:98:3D:2A:5A:08:14:61:27:2C:50:9E:10:DF:67:BA:90:78:47 Certificate issuer: /CN=9A5A8760ADE68BFD3428CC06FE6DAC982728AE95 Certificate serial: 1D1640E7DB796FD4A778811A189B73DF2281616F Authority key identifier: 9A:5A:87:60:AD:E6:8B:FD:34:28:CC:06:FE:6D:AC:98:27:28:AE:95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/3130332e35392e34342e302f32332d3234203d3e20313338383831.roa Signing time: Fri 05 Dec 2025 04:00:01 +0000 ROA not before: Fri 05 Dec 2025 03:55:01 +0000 ROA not after: Fri 04 Dec 2026 04:00:01 +0000 asID: 138881 IP address blocks: 103.59.44.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 13:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:16:40:e7:db:79:6f:d4:a7:78:81:1a:18:9b:73:df:22:81:61:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A5A8760ADE68BFD3428CC06FE6DAC982728AE95 Validity Not Before: Dec 5 03:55:01 2025 GMT Not After : Dec 4 04:00:01 2026 GMT Subject: CN=58E6983D2A5A081461272C509E10DF67BA907847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:34:ab:a3:83:c7:d7:8e:54:59:86:2d:5e:ef: c7:47:54:52:c3:98:cc:5d:a4:98:2a:47:a7:95:11: 8b:87:63:b8:15:65:a7:2c:d1:b6:5f:4a:bc:17:25: b9:b2:fa:2f:b7:e4:85:66:f3:4a:35:b3:e3:29:f5: 0d:52:c2:e3:a2:41:e8:11:c9:25:51:b1:19:a3:68: b1:d9:3f:94:0a:88:3f:10:b9:ba:5b:49:75:2e:83: e1:ff:64:6a:39:7c:d7:76:27:c4:99:34:44:b8:e4: 87:bb:ba:1f:c4:ba:b6:db:f0:d4:dd:e6:89:9b:3a: 35:ee:44:30:54:a2:0a:e7:03:16:c0:4f:2e:3a:7b: 23:61:ce:8c:19:f7:2a:1c:b5:09:2f:20:57:4b:f4: dd:1e:5c:2f:76:c4:27:6d:3f:a7:1f:68:53:4f:15: 00:9a:2a:4f:28:2a:60:1e:b6:87:ec:0c:e9:ed:78: c0:80:6f:45:7f:9f:85:dc:11:88:6e:3b:5e:2e:e7: 46:94:75:8d:ad:a9:fd:21:be:e8:d0:39:c1:22:71: bc:22:7a:30:c8:01:9a:94:60:c5:b5:23:67:5f:8d: 11:d8:c6:61:dd:f5:27:cf:26:71:fb:8a:89:a2:3d: 54:0f:24:5c:27:5d:55:45:82:14:f4:29:f7:63:46: 2f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E6:98:3D:2A:5A:08:14:61:27:2C:50:9E:10:DF:67:BA:90:78:47 X509v3 Authority Key Identifier: keyid:9A:5A:87:60:AD:E6:8B:FD:34:28:CC:06:FE:6D:AC:98:27:28:AE:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/3130332e35392e34342e302f32332d3234203d3e20313338383831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.59.44.0/23 Signature Algorithm: sha256WithRSAEncryption 93:27:a1:f9:fc:99:bd:d7:58:a9:73:9e:f3:03:a0:3c:66:8b: d7:ed:f3:56:05:3f:df:9b:02:85:d5:2d:12:1d:09:18:ca:1e: 04:78:9d:65:ee:cf:67:70:a3:12:de:76:95:6e:60:6a:c8:9c: e2:61:ed:d9:38:86:5c:64:24:92:c2:31:98:17:6b:4b:fa:d7: 6d:2a:d2:51:09:d5:40:07:83:2e:2a:aa:a8:b7:a3:f5:2f:dd: a6:20:50:fd:03:f5:b2:7a:55:3d:dd:02:24:fb:89:8a:ea:ae: 09:c4:3a:58:49:26:c8:5e:ba:5f:eb:14:69:db:51:cc:06:15: 81:5b:6f:f7:4d:ba:86:c4:3d:e0:6e:76:0b:84:e2:0d:a5:ce: 97:5c:32:fc:83:c9:58:ca:0c:f1:f9:e5:8d:4b:0e:b2:c1:10: 89:70:a1:21:81:04:44:27:8d:47:5f:90:f8:71:1f:af:46:47: 79:04:74:50:c5:4c:47:be:37:70:48:84:3f:e1:5f:49:45:fa: 9a:a1:4c:f3:d8:49:57:aa:db:72:ce:c6:1b:3a:00:8b:ac:b9: d9:a9:7b:a0:31:c5:56:9b:bd:01:41:68:db:dd:e1:c2:9f:44: 35:13:77:ce:4a:6e:ab:73:9c:c7:ed:d2:8f:df:9d:94:42:8f: e0:7f:16:ea -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUHRZA59t5b9SneIEaGJtz3yKBYW8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFDOTgy NzI4QUU5NTAeFw0yNTEyMDUwMzU1MDFaFw0yNjEyMDQwNDAwMDFaMDMxMTAvBgNV BAMTKDU4RTY5ODNEMkE1QTA4MTQ2MTI3MkM1MDlFMTBERjY3QkE5MDc4NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/NKujg8fXjlRZhi1e78dHVFLD mMxdpJgqR6eVEYuHY7gVZacs0bZfSrwXJbmy+i+35IVm80o1s+Mp9Q1SwuOiQegR ySVRsRmjaLHZP5QKiD8QubpbSXUug+H/ZGo5fNd2J8SZNES45Ie7uh/Eurbb8NTd 5ombOjXuRDBUogrnAxbATy46eyNhzowZ9yoctQkvIFdL9N0eXC92xCdtP6cfaFNP FQCaKk8oKmAetofsDOnteMCAb0V/n4XcEYhuO14u50aUdY2tqf0hvujQOcEicbwi ejDIAZqUYMW1I2dfjRHYxmHd9SfPJnH7iomiPVQPJFwnXVVFghT0KfdjRi+fAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUWOaYPSpaCBRhJyxQnhDfZ7qQeEcwHwYDVR0j BBgwFoAUmlqHYK3mi/00KMwG/m2smCcorpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTc1OThlNC0yMDY0LTRlY2ItOThmNi1iMjU5YTc0OTk2YTEvMC85QTVBODc2MEFE RTY4QkZEMzQyOENDMDZGRTZEQUM5ODI3MjhBRTk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFDOTgyNzI4 QUU5NS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ExNzU5OGU0LTIwNjQtNGVjYi05 OGY2LWIyNTlhNzQ5OTZhMS8wLzMxMzAzMzJlMzUzOTJlMzQzNDJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMxMzMzODM4MzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWc7LDANBgkqhkiG 9w0BAQsFAAOCAQEAkyeh+fyZvddYqXOe8wOgPGaL1+3zVgU/35sChdUtEh0JGMoe BHidZe7PZ3CjEt52lW5gasic4mHt2TiGXGQkksIxmBdrS/rXbSrSUQnVQAeDLiqq qLej9S/dpiBQ/QP1snpVPd0CJPuJiuquCcQ6WEkmyF66X+sUadtRzAYVgVtv9026 hsQ94G52C4TiDaXOl1wy/IPJWMoM8fnljUsOssEQiXChIYEERCeNR1+Q+HEfr0ZH eQR0UMVMR743cEiEP+FfSUX6mqFM89hJV6rbcs7GGzoAi6y52al7oDHFVpu9AUFo 293hwp9ENRN3zkpuq3Ocx+3Sj9+dlEKP4H8W6g== -----END CERTIFICATE-----Generated at Sun Dec 7 04:56:03 2025 by rpki-client