This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/3130332e3136362e3135382e302f32332d3233203d3e20313431393535.roa File: 3130332e3136362e3135382e302f32332d3233203d3e20313431393535.roa (raw, json) Hash identifier: 7dKSNEM+R7mVlaRlryOrYIy/UF51jWYewiOClTImGdg= Subject key identifier: EE:F5:54:CB:74:A4:DB:D9:02:D4:51:31:CB:19:6B:80:30:D1:91:69 Certificate issuer: /CN=8A54C81A444D07051A24AACF743F01863F8129AB Certificate serial: 0E65E942D43AAB25F1A9257F9D1997DB559191EE Authority key identifier: 8A:54:C8:1A:44:4D:07:05:1A:24:AA:CF:74:3F:01:86:3F:81:29:AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/3130332e3136362e3135382e302f32332d3233203d3e20313431393535.roa Signing time: Wed 03 Dec 2025 17:00:03 +0000 ROA not before: Wed 03 Dec 2025 16:55:03 +0000 ROA not after: Wed 02 Dec 2026 17:00:03 +0000 asID: 141955 IP address blocks: 103.166.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.crl rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:65:e9:42:d4:3a:ab:25:f1:a9:25:7f:9d:19:97:db:55:91:91:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A54C81A444D07051A24AACF743F01863F8129AB Validity Not Before: Dec 3 16:55:03 2025 GMT Not After : Dec 2 17:00:03 2026 GMT Subject: CN=EEF554CB74A4DBD902D45131CB196B8030D19169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:51:9d:04:f1:92:6c:3d:2c:96:05:14:f9:59: 5f:d7:71:43:b6:d1:db:9c:8d:b5:a1:c4:f9:a2:a9: 3c:29:0f:c4:34:0d:5c:93:cb:7c:8f:ac:51:2e:48: 39:58:86:80:39:11:e0:c2:c1:81:68:b8:c0:4a:67: c5:6e:f1:81:6d:ac:bb:33:1c:b4:7b:8b:c7:67:82: 2e:46:ce:89:88:a5:5f:af:7d:2b:da:c6:cb:b6:90: 71:a2:a7:d5:08:ff:15:0b:4b:94:e5:c7:ea:5f:dd: 40:15:87:6f:76:aa:1e:86:36:2e:1f:57:e9:70:82: b0:91:8f:9a:9e:c9:25:24:73:f9:39:09:ef:8d:71: ab:99:79:eb:7d:8f:ce:f6:63:9a:54:c7:21:8e:11: 38:51:db:cf:a7:9f:ea:2f:3e:0b:8e:48:5c:a1:47: eb:a5:bd:8f:01:d8:11:50:03:2b:39:22:b5:cf:59: b3:f4:07:ff:0e:c2:16:a2:31:24:53:dc:ed:8a:f7: d4:d3:75:57:13:d2:d6:12:5c:fd:a1:a5:5e:26:a1: a8:58:53:a9:bc:81:26:ae:fe:b4:3b:39:dc:54:82: 66:59:bd:63:d2:19:64:68:35:15:b8:be:65:3a:00: 75:72:77:db:a0:fe:ad:5b:db:60:70:b3:c1:c8:9e: 6b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:F5:54:CB:74:A4:DB:D9:02:D4:51:31:CB:19:6B:80:30:D1:91:69 X509v3 Authority Key Identifier: keyid:8A:54:C8:1A:44:4D:07:05:1A:24:AA:CF:74:3F:01:86:3F:81:29:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/3130332e3136362e3135382e302f32332d3233203d3e20313431393535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.158.0/23 Signature Algorithm: sha256WithRSAEncryption 49:45:f4:8b:1f:93:cd:06:32:b8:de:b2:6e:da:16:c7:ee:02: c1:0a:6e:bd:5b:09:5b:76:64:6b:6f:b5:ee:4c:2c:d1:d5:2a: 58:5d:df:16:ab:56:6f:fe:fe:9c:91:db:72:d2:ec:19:28:df: fc:f2:5d:19:26:d4:b5:27:74:a2:ca:ab:99:a5:60:3c:35:01: 48:21:61:64:92:fe:1c:f6:b5:05:c6:f3:f6:0f:09:3b:6b:af: 47:42:fd:52:77:15:82:bb:c3:26:38:e6:d8:39:f2:f8:59:c6: 58:f9:24:84:cd:d7:9c:0a:72:98:ce:86:20:79:1b:72:03:28: 10:62:f5:c6:54:de:54:3b:19:14:d0:75:20:65:e0:4c:3b:d7: 43:5c:50:57:eb:91:b7:4c:f9:3b:4f:2c:95:f4:27:f2:1d:ca: 5e:fc:f3:47:a7:6d:68:14:90:3f:df:3e:dc:5a:45:b3:a9:8f: 6f:2e:39:43:9d:3b:3d:e9:56:30:84:10:55:63:f9:e7:b1:06: 00:6e:7d:75:ed:d7:19:ca:14:2d:58:6c:71:00:df:70:4f:bf: d1:6c:a3:bf:7e:c4:e1:8e:ba:11:60:34:03:f8:cb:3a:98:de: fb:97:9e:dc:c9:65:b7:be:26:9e:5b:dd:07:84:59:ff:48:b1: ef:4d:3c:c8 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUDmXpQtQ6qyXxqSV/nRmX21WRke4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAxODYz RjgxMjlBQjAeFw0yNTEyMDMxNjU1MDNaFw0yNjEyMDIxNzAwMDNaMDMxMTAvBgNV BAMTKEVFRjU1NENCNzRBNERCRDkwMkQ0NTEzMUNCMTk2QjgwMzBEMTkxNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeUZ0E8ZJsPSyWBRT5WV/XcUO2 0ducjbWhxPmiqTwpD8Q0DVyTy3yPrFEuSDlYhoA5EeDCwYFouMBKZ8Vu8YFtrLsz HLR7i8dngi5GzomIpV+vfSvaxsu2kHGip9UI/xULS5Tlx+pf3UAVh292qh6GNi4f V+lwgrCRj5qeySUkc/k5Ce+NcauZeet9j872Y5pUxyGOEThR28+nn+ovPguOSFyh R+ulvY8B2BFQAys5IrXPWbP0B/8OwhaiMSRT3O2K99TTdVcT0tYSXP2hpV4moahY U6m8gSau/rQ7OdxUgmZZvWPSGWRoNRW4vmU6AHVyd9ug/q1b22Bws8HInmuFAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU7vVUy3Sk29kC1FExyxlrgDDRkWkwHwYDVR0j BBgwFoAUilTIGkRNBwUaJKrPdD8Bhj+BKaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2ZmMDFkMC0yNmY5LTRiMjAtYTMxOC1jMzExYzI2N2YyYWYvMC84QTU0QzgxQTQ0 NEQwNzA1MUEyNEFBQ0Y3NDNGMDE4NjNGODEyOUFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAxODYzRjgx MjlBQi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q3ZmYwMWQwLTI2ZjktNGIyMC1h MzE4LWMzMTFjMjY3ZjJhZi8wLzMxMzAzMzJlMzEzNjM2MmUzMTM1MzgyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzEzOTM1MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnpp4wDQYJ KoZIhvcNAQELBQADggEBAElF9Isfk80GMrjesm7aFsfuAsEKbr1bCVt2ZGtvte5M LNHVKlhd3xarVm/+/pyR23LS7Bko3/zyXRkm1LUndKLKq5mlYDw1AUghYWSS/hz2 tQXG8/YPCTtrr0dC/VJ3FYK7wyY45tg58vhZxlj5JITN15wKcpjOhiB5G3IDKBBi 9cZU3lQ7GRTQdSBl4Ew710NcUFfrkbdM+TtPLJX0J/Idyl7880enbWgUkD/fPtxa RbOpj28uOUOdOz3pVjCEEFVj+eexBgBufXXt1xnKFC1YbHEA33BPv9Fso79+xOGO uhFgNAP4yzqY3vuXntzJZbe+Jp5b3QeEWf9Ise9NPMg= -----END CERTIFICATE-----Generated at Sun Dec 7 13:17:31 2025 by rpki-client