This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/3130332e3135362e31342e302f32332d3234203d3e203538383231.roa File: 3130332e3135362e31342e302f32332d3234203d3e203538383231.roa (raw, json) Hash identifier: lbqLm4gtIn2PpfyD5NIDm37sX2MwPhaC2Wn66mlRkRA= Subject key identifier: 6B:6A:D4:C1:CB:1A:E2:80:0C:BE:FF:0D:8C:53:A9:9C:EB:D4:37:D8 Certificate issuer: /CN=1D8D9CBC52934EF02BCD1D478AEBA6A368F80419 Certificate serial: 696E39E3ECBEB532ED7B7D865D0669944A37E713 Authority key identifier: 1D:8D:9C:BC:52:93:4E:F0:2B:CD:1D:47:8A:EB:A6:A3:68:F8:04:19 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/3130332e3135362e31342e302f32332d3234203d3e203538383231.roa Signing time: Sat 22 Nov 2025 08:00:00 +0000 ROA not before: Sat 22 Nov 2025 07:55:00 +0000 ROA not after: Sat 21 Nov 2026 08:00:00 +0000 asID: 58821 IP address blocks: 103.156.14.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.crl rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 05:36:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:6e:39:e3:ec:be:b5:32:ed:7b:7d:86:5d:06:69:94:4a:37:e7:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D8D9CBC52934EF02BCD1D478AEBA6A368F80419 Validity Not Before: Nov 22 07:55:00 2025 GMT Not After : Nov 21 08:00:00 2026 GMT Subject: CN=6B6AD4C1CB1AE2800CBEFF0D8C53A99CEBD437D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:1b:83:e1:35:af:7f:66:f8:f8:a0:78:2b:e8: 5c:2a:ad:74:13:eb:80:0a:9d:b7:14:26:b8:85:40: 1d:d3:0b:50:83:bc:26:8a:43:01:b2:9d:ef:30:24: 20:b0:2c:c5:4f:3d:fd:04:c1:1c:0e:6d:e4:c5:91: 7b:1d:61:e9:00:f6:d7:50:f8:5d:45:f1:b7:70:fa: 63:93:ab:d3:a3:ca:bb:99:f7:5e:dd:5b:1b:6d:93: 9b:84:d3:36:f1:0e:4c:6d:b4:01:8a:ab:a4:8e:d8: 74:c9:35:72:ee:93:d2:f9:9a:f6:ab:91:2d:ea:7a: 76:52:67:ab:9f:78:95:79:fb:c6:40:31:87:9a:13: 4d:a0:77:ed:31:dd:9b:09:16:2c:bc:96:05:53:16: c4:95:f6:0c:68:dd:9d:17:79:05:bd:12:e8:b5:93: 68:f8:e1:3b:07:6c:89:ed:29:65:72:df:76:fb:39: 57:f6:cb:fd:9b:93:8c:c4:1d:a0:83:b8:c3:ae:67: 97:14:4c:40:bc:b2:de:8f:6f:16:42:fb:46:1d:70: 3e:43:36:7e:fe:55:e3:ba:1a:8b:68:68:0e:59:f6: d4:b7:c3:07:8c:da:e7:84:a4:5e:84:6e:55:51:50: 4e:88:f6:ec:aa:5e:67:36:6e:38:c5:fb:cf:3b:ad: 5e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:6A:D4:C1:CB:1A:E2:80:0C:BE:FF:0D:8C:53:A9:9C:EB:D4:37:D8 X509v3 Authority Key Identifier: keyid:1D:8D:9C:BC:52:93:4E:F0:2B:CD:1D:47:8A:EB:A6:A3:68:F8:04:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/3130332e3135362e31342e302f32332d3234203d3e203538383231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.14.0/23 Signature Algorithm: sha256WithRSAEncryption 69:96:61:5f:b2:1b:f8:d9:8a:81:4e:e3:f1:9d:d9:78:8b:88: 62:66:7e:8e:22:9e:53:b3:22:b0:78:12:5e:74:1b:9b:15:25: d3:bc:ec:4d:e2:66:36:e7:47:19:f3:3e:2d:87:e4:73:01:01: 16:cc:5c:39:39:05:dd:bd:a6:8a:a5:9f:a7:28:03:44:b6:78: 07:76:64:e2:dd:8a:41:7b:21:d5:f7:db:43:c2:b4:c8:57:74: 54:a0:66:f6:90:51:9d:da:8d:24:3b:24:27:43:3f:bf:df:e6: 45:74:85:d0:3f:a0:36:97:a3:57:9c:64:7f:b7:99:7b:b2:6a: df:ff:c8:31:fa:a4:c5:ac:84:3a:84:64:20:81:23:40:33:48: a2:17:e9:81:65:59:00:f7:66:e4:ff:f2:39:5a:0d:d9:f7:c9: 18:94:d5:a7:27:26:d5:d1:31:97:01:e8:52:9c:6a:d8:40:65: 90:e6:29:5b:ec:f7:d3:2a:00:a9:61:2d:4c:e3:bb:36:b0:ff: 9e:18:be:22:1b:7c:09:f9:13:ab:5a:51:da:e4:91:0a:24:b5: 27:12:77:94:96:ad:72:0e:39:32:ca:dd:78:50:bb:3b:ce:34: 74:9d:9e:62:a2:34:1c:5e:59:fe:cb:9d:e7:ba:53:da:d9:9e: 4d:9f:27:94 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUaW454+y+tTLte32GXQZplEo35xMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ4RDlDQkM1MjkzNEVGMDJCQ0QxRDQ3OEFFQkE2QTM2 OEY4MDQxOTAeFw0yNTExMjIwNzU1MDBaFw0yNjExMjEwODAwMDBaMDMxMTAvBgNV BAMTKDZCNkFENEMxQ0IxQUUyODAwQ0JFRkYwRDhDNTNBOTlDRUJENDM3RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5G4PhNa9/Zvj4oHgr6FwqrXQT 64AKnbcUJriFQB3TC1CDvCaKQwGyne8wJCCwLMVPPf0EwRwObeTFkXsdYekA9tdQ +F1F8bdw+mOTq9OjyruZ917dWxttk5uE0zbxDkxttAGKq6SO2HTJNXLuk9L5mvar kS3qenZSZ6ufeJV5+8ZAMYeaE02gd+0x3ZsJFiy8lgVTFsSV9gxo3Z0XeQW9Eui1 k2j44TsHbIntKWVy33b7OVf2y/2bk4zEHaCDuMOuZ5cUTEC8st6PbxZC+0YdcD5D Nn7+VeO6GotoaA5Z9tS3wweM2ueEpF6EblVRUE6I9uyqXmc2bjjF+887rV5HAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUa2rUwcsa4oAMvv8NjFOpnOvUN9gwHwYDVR0j BBgwFoAUHY2cvFKTTvArzR1Hiuumo2j4BBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTFlYTUxMy1hYzZlLTRhNWYtYjNlYi1kNTM1MmNhZjQ4NmIvMC8xRDhEOUNCQzUy OTM0RUYwMkJDRDFENDc4QUVCQTZBMzY4RjgwNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ4RDlDQkM1MjkzNEVGMDJCQ0QxRDQ3OEFFQkE2QTM2OEY4 MDQxOS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NlMWVhNTEzLWFjNmUtNGE1Zi1i M2ViLWQ1MzUyY2FmNDg2Yi8wLzMxMzAzMzJlMzEzNTM2MmUzMTM0MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzUzODM4MzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWecDjANBgkqhkiG 9w0BAQsFAAOCAQEAaZZhX7Ib+NmKgU7j8Z3ZeIuIYmZ+jiKeU7MisHgSXnQbmxUl 07zsTeJmNudHGfM+LYfkcwEBFsxcOTkF3b2miqWfpygDRLZ4B3Zk4t2KQXsh1ffb Q8K0yFd0VKBm9pBRndqNJDskJ0M/v9/mRXSF0D+gNpejV5xkf7eZe7Jq3//IMfqk xayEOoRkIIEjQDNIohfpgWVZAPdm5P/yOVoN2ffJGJTVpycm1dExlwHoUpxq2EBl kOYpW+z30yoAqWEtTOO7NrD/nhi+Iht8CfkTq1pR2uSRCiS1JxJ3lJatcg45Msrd eFC7O840dJ2eYqI0HF5Z/sud57pT2tmeTZ8nlA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:42:06 2025 by rpki-client