This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/3130332e32382e3231382e302f32342d3234203d3e203538333835.roa File: 3130332e32382e3231382e302f32342d3234203d3e203538333835.roa (raw, json) Hash identifier: LRVa/+g9Phm4DS1KM+ftjtti7KXy6ccI0ROhTKpj7KU= Subject key identifier: 4A:91:29:97:AC:7C:03:9F:30:21:71:2E:31:FB:A4:DC:50:76:03:7D Certificate issuer: /CN=B891A45840F824B9F116CBEAA3574A68343F5538 Certificate serial: 1DAF558284952CF1DE71403A5F2074287E7C7060 Authority key identifier: B8:91:A4:58:40:F8:24:B9:F1:16:CB:EA:A3:57:4A:68:34:3F:55:38 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B891A45840F824B9F116CBEAA3574A68343F5538.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/3130332e32382e3231382e302f32342d3234203d3e203538333835.roa Signing time: Mon 24 Nov 2025 18:00:03 +0000 ROA not before: Mon 24 Nov 2025 17:55:03 +0000 ROA not after: Mon 23 Nov 2026 18:00:03 +0000 asID: 58385 IP address blocks: 103.28.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.crl rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B891A45840F824B9F116CBEAA3574A68343F5538.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 10:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:af:55:82:84:95:2c:f1:de:71:40:3a:5f:20:74:28:7e:7c:70:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B891A45840F824B9F116CBEAA3574A68343F5538 Validity Not Before: Nov 24 17:55:03 2025 GMT Not After : Nov 23 18:00:03 2026 GMT Subject: CN=4A912997AC7C039F3021712E31FBA4DC5076037D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4a:13:45:6a:80:c7:f9:d8:82:04:02:40:fb: 9e:72:d4:ed:7f:a8:ba:54:13:b7:54:e8:fc:98:73: d7:52:eb:b1:c6:99:71:e8:d9:b7:ee:77:7e:3e:6d: 1c:f8:fd:2a:e8:c3:0f:cc:7b:a9:4a:43:7b:c9:5a: 10:46:b5:8b:03:14:6c:a4:70:f2:69:62:e0:7b:b6: 1d:50:79:b7:f5:62:5c:0c:57:2d:9a:9b:74:0f:f9: 8a:1a:74:3a:91:76:8e:60:f5:5d:33:eb:72:8c:ef: 44:65:df:d9:90:11:ef:ec:96:5b:32:4c:da:55:93: 58:a0:12:65:c3:b2:68:95:4e:c4:e7:63:74:19:07: 15:09:c6:99:1c:51:aa:a7:fc:77:e4:f0:7b:c9:5d: 5f:aa:06:52:aa:ff:ab:05:9a:06:a8:fa:c9:a3:c9: 11:93:d3:ed:80:d8:54:31:6c:6a:0d:e5:c1:4e:5d: 1c:57:04:5a:2b:3b:74:0b:cc:bb:39:b8:60:15:94: 33:6a:ce:7a:71:2f:a2:12:40:d4:fe:2a:e0:0e:c8: be:16:65:6d:5f:1d:f5:c0:49:0b:11:d7:6b:29:6c: 73:48:5d:ca:82:41:8a:d5:63:08:5d:33:f3:5e:83: 31:88:ac:e7:da:f6:ea:a7:0c:05:60:b9:f7:72:0b: b1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:91:29:97:AC:7C:03:9F:30:21:71:2E:31:FB:A4:DC:50:76:03:7D X509v3 Authority Key Identifier: keyid:B8:91:A4:58:40:F8:24:B9:F1:16:CB:EA:A3:57:4A:68:34:3F:55:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B891A45840F824B9F116CBEAA3574A68343F5538.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/3130332e32382e3231382e302f32342d3234203d3e203538333835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.28.218.0/24 Signature Algorithm: sha256WithRSAEncryption 13:62:b1:8a:cc:30:3f:6d:0a:76:13:ff:56:29:d5:0b:f7:ab: 02:4f:d8:80:77:c9:c7:52:8f:c2:14:49:ee:50:b6:b5:e0:c5: 9c:16:dc:a1:40:68:1d:65:29:85:98:08:86:06:38:c0:45:af: a8:42:4a:b7:43:33:02:6a:ca:00:45:88:b8:33:26:48:0e:8b: ea:97:1f:cd:6d:58:de:ff:aa:7f:10:31:42:fb:a8:22:11:fc: 67:a1:11:0e:8b:7a:56:b0:5a:2e:a3:7d:8d:c6:71:72:85:0b: 42:b3:44:96:eb:e5:d0:bd:83:0f:90:d7:9c:f2:93:d3:a2:ca: 93:84:79:8a:98:ca:70:3a:2d:54:42:f3:19:d7:ff:f5:e9:26: a6:f0:26:1d:cc:96:f5:65:06:c8:ee:a4:34:b8:a4:a8:ac:cd: f0:f9:17:0a:02:7e:5b:e1:85:f1:41:2a:59:33:35:fe:94:c5: 64:d0:0c:bf:75:ec:95:87:42:0f:4f:cd:62:bd:54:f6:18:cf: 90:1f:b6:22:21:90:e2:e9:11:a4:fc:9c:ec:29:f0:b6:1f:53: f1:e4:00:15:00:22:89:04:96:2d:8f:06:ff:ba:56:03:3b:a8: 7c:6b:b8:df:cb:d2:09:b6:df:be:42:0a:84:13:86:38:33:5c: 83:b3:93:f2 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUHa9VgoSVLPHecUA6XyB0KH58cGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg5MUE0NTg0MEY4MjRCOUYxMTZDQkVBQTM1NzRBNjgz NDNGNTUzODAeFw0yNTExMjQxNzU1MDNaFw0yNjExMjMxODAwMDNaMDMxMTAvBgNV BAMTKDRBOTEyOTk3QUM3QzAzOUYzMDIxNzEyRTMxRkJBNERDNTA3NjAzN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkShNFaoDH+diCBAJA+55y1O1/ qLpUE7dU6PyYc9dS67HGmXHo2bfud34+bRz4/Sroww/Me6lKQ3vJWhBGtYsDFGyk cPJpYuB7th1Qebf1YlwMVy2am3QP+YoadDqRdo5g9V0z63KM70Rl39mQEe/sllsy TNpVk1igEmXDsmiVTsTnY3QZBxUJxpkcUaqn/Hfk8HvJXV+qBlKq/6sFmgao+smj yRGT0+2A2FQxbGoN5cFOXRxXBForO3QLzLs5uGAVlDNqznpxL6ISQNT+KuAOyL4W ZW1fHfXASQsR12spbHNIXcqCQYrVYwhdM/NegzGIrOfa9uqnDAVgufdyC7GpAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUSpEpl6x8A58wIXEuMfuk3FB2A30wHwYDVR0j BBgwFoAUuJGkWED4JLnxFsvqo1dKaDQ/VTgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MzkyNTM4OC0zNWM2LTQxZDctOWRjNC1kYjRkMTE4ZDEzNWEvMC9CODkxQTQ1ODQw RjgyNEI5RjExNkNCRUFBMzU3NEE2ODM0M0Y1NTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg5MUE0NTg0MEY4MjRCOUYxMTZDQkVBQTM1NzRBNjgzNDNG NTUzOC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QzOTI1Mzg4LTM1YzYtNDFkNy05 ZGM0LWRiNGQxMThkMTM1YS8wLzMxMzAzMzJlMzIzODJlMzIzMTM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODMzMzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcc2jANBgkqhkiG 9w0BAQsFAAOCAQEAE2KxiswwP20KdhP/VinVC/erAk/YgHfJx1KPwhRJ7lC2teDF nBbcoUBoHWUphZgIhgY4wEWvqEJKt0MzAmrKAEWIuDMmSA6L6pcfzW1Y3v+qfxAx QvuoIhH8Z6ERDot6VrBaLqN9jcZxcoULQrNEluvl0L2DD5DXnPKT06LKk4R5ipjK cDotVELzGdf/9ekmpvAmHcyW9WUGyO6kNLikqKzN8PkXCgJ+W+GF8UEqWTM1/pTF ZNAMv3XslYdCD0/NYr1U9hjPkB+2IiGQ4ukRpPyc7Cnwth9T8eQAFQAiiQSWLY8G /7pWAzuofGu438vSCbbfvkIKhBOGODNcg7OT8g== -----END CERTIFICATE-----Generated at Sun Dec 7 05:17:13 2025 by rpki-client