This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/3130332e3135372e3139322e302f32332d3233203d3e20313431313232.roa File: 3130332e3135372e3139322e302f32332d3233203d3e20313431313232.roa (raw, json) Hash identifier: gBUWYn2rSz2KJJuB905tTSt6/9g+/R4WY7xwSYhk9n0= Subject key identifier: F2:D2:B2:5A:35:77:D4:2D:46:EA:00:F3:B0:72:EB:BD:25:46:82:CD Certificate issuer: /CN=035AD6A9B712C4FA76B7E823A79F6410B449136D Certificate serial: 13EE6515032478C6F96879D325DEB61364A13C82 Authority key identifier: 03:5A:D6:A9:B7:12:C4:FA:76:B7:E8:23:A7:9F:64:10:B4:49:13:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/035AD6A9B712C4FA76B7E823A79F6410B449136D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/3130332e3135372e3139322e302f32332d3233203d3e20313431313232.roa Signing time: Thu 27 Nov 2025 17:00:02 +0000 ROA not before: Thu 27 Nov 2025 16:55:02 +0000 ROA not after: Thu 26 Nov 2026 17:00:02 +0000 asID: 141122 IP address blocks: 103.157.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.crl rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/035AD6A9B712C4FA76B7E823A79F6410B449136D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:17:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:ee:65:15:03:24:78:c6:f9:68:79:d3:25:de:b6:13:64:a1:3c:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=035AD6A9B712C4FA76B7E823A79F6410B449136D Validity Not Before: Nov 27 16:55:02 2025 GMT Not After : Nov 26 17:00:02 2026 GMT Subject: CN=F2D2B25A3577D42D46EA00F3B072EBBD254682CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2d:87:54:a0:60:43:40:76:51:1e:87:fd:eb: 53:2e:f3:2a:40:1e:23:cf:eb:d1:6e:30:26:31:3f: d0:b3:d2:36:7b:5f:01:e8:05:ec:ab:84:ae:96:89: 8b:86:c6:69:ed:48:8c:85:66:09:6a:46:5a:bb:7f: bc:b1:3c:0f:e0:fa:8f:50:6f:9f:2a:f1:0f:4c:d8: a1:60:28:59:00:3c:03:01:a2:7a:91:0d:06:75:5f: 65:7b:5d:ce:af:9a:6d:09:d5:f5:e2:a1:f2:11:3a: 10:0b:3a:84:74:b1:14:39:cd:3d:11:08:0f:53:af: bb:c4:95:f7:13:f7:43:b2:32:94:67:36:3c:a0:5c: bb:31:d6:37:2b:87:30:35:e3:74:05:95:4f:a7:dc: 9d:65:79:78:b0:4e:d4:f5:73:0a:43:39:ae:bc:6f: 7c:04:fe:05:f4:1b:37:22:2e:f1:bf:21:0b:25:56: 09:eb:40:3a:ae:19:cb:36:ac:06:d6:ef:d7:00:9f: 9d:9f:9c:1e:e9:68:d9:24:59:9b:67:2a:82:31:e1: 20:c9:90:18:9e:f3:c3:03:26:b5:6f:77:d3:0a:f9: a4:f3:56:51:bc:2e:48:2a:1e:89:05:fd:2e:06:55: 77:81:d6:13:d1:b3:20:e1:e3:37:4b:7e:84:00:3e: 99:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:D2:B2:5A:35:77:D4:2D:46:EA:00:F3:B0:72:EB:BD:25:46:82:CD X509v3 Authority Key Identifier: keyid:03:5A:D6:A9:B7:12:C4:FA:76:B7:E8:23:A7:9F:64:10:B4:49:13:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/035AD6A9B712C4FA76B7E823A79F6410B449136D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/3130332e3135372e3139322e302f32332d3233203d3e20313431313232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.157.192.0/23 Signature Algorithm: sha256WithRSAEncryption 33:46:ee:4f:2f:0c:51:45:10:15:da:a7:d7:a9:c2:44:f2:41: aa:b3:05:4f:1e:b7:c8:31:d6:28:b1:ad:cb:9d:e4:0e:74:43: 8e:88:43:31:10:eb:82:38:9a:0d:9d:29:fc:3d:7e:a9:07:50: a3:87:5f:20:95:34:06:52:ce:8b:9f:25:32:ac:5d:c7:98:88: e5:fd:8d:0b:9a:8a:0d:55:28:76:86:e4:3b:f1:01:33:0f:92: 75:37:19:8b:d5:b2:b6:34:ef:99:47:fe:e8:95:a3:63:72:2a: 0c:21:be:ce:d3:dc:34:2a:3d:19:6b:b7:4f:e4:2c:01:28:f4: 49:0d:7f:5e:6d:ee:8b:b3:9c:47:2f:e3:5e:44:6c:dc:9c:f9: 06:67:49:e7:ce:22:aa:67:05:4c:34:ea:40:4f:54:2e:d6:5a: 5b:89:5d:bb:2c:4a:07:60:af:5f:9b:c1:e5:08:aa:25:51:13: 35:b4:44:8b:a3:a0:2b:77:72:3b:18:fb:64:db:0d:ec:78:ba: 7d:e8:b2:86:7a:55:9f:ee:2c:86:59:29:ab:2d:b4:f2:6c:37: d6:1c:03:9e:a0:03:03:81:76:b6:d8:36:68:38:8b:91:6c:ee: 81:42:13:c3:b9:05:11:36:0b:83:61:86:4a:b8:85:29:9d:99: 28:3c:e8:1e -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUE+5lFQMkeMb5aHnTJd62E2ShPIIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM1QUQ2QTlCNzEyQzRGQTc2QjdFODIzQTc5RjY0MTBC NDQ5MTM2RDAeFw0yNTExMjcxNjU1MDJaFw0yNjExMjYxNzAwMDJaMDMxMTAvBgNV BAMTKEYyRDJCMjVBMzU3N0Q0MkQ0NkVBMDBGM0IwNzJFQkJEMjU0NjgyQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRLYdUoGBDQHZRHof961Mu8ypA HiPP69FuMCYxP9Cz0jZ7XwHoBeyrhK6WiYuGxmntSIyFZglqRlq7f7yxPA/g+o9Q b58q8Q9M2KFgKFkAPAMBonqRDQZ1X2V7Xc6vmm0J1fXiofIROhALOoR0sRQ5zT0R CA9Tr7vElfcT90OyMpRnNjygXLsx1jcrhzA143QFlU+n3J1leXiwTtT1cwpDOa68 b3wE/gX0GzciLvG/IQslVgnrQDquGcs2rAbW79cAn52fnB7paNkkWZtnKoIx4SDJ kBie88MDJrVvd9MK+aTzVlG8LkgqHokF/S4GVXeB1hPRsyDh4zdLfoQAPpk/AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU8tKyWjV31C1G6gDzsHLrvSVGgs0wHwYDVR0j BBgwFoAUA1rWqbcSxPp2t+gjp59kELRJE20wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTZmNWNlNy1iMzZiLTQ3M2QtYTViZS05YzAzNTBkMWYzODIvMC8wMzVBRDZBOUI3 MTJDNEZBNzZCN0U4MjNBNzlGNjQxMEI0NDkxMzZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM1QUQ2QTlCNzEyQzRGQTc2QjdFODIzQTc5RjY0MTBCNDQ5 MTM2RC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RlNmY1Y2U3LWIzNmItNDczZC1h NWJlLTljMDM1MGQxZjM4Mi8wLzMxMzAzMzJlMzEzNTM3MmUzMTM5MzIyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzEzMTMyMzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnncAwDQYJ KoZIhvcNAQELBQADggEBADNG7k8vDFFFEBXap9epwkTyQaqzBU8et8gx1iixrcud 5A50Q46IQzEQ64I4mg2dKfw9fqkHUKOHXyCVNAZSzoufJTKsXceYiOX9jQuaig1V KHaG5DvxATMPknU3GYvVsrY075lH/uiVo2NyKgwhvs7T3DQqPRlrt0/kLAEo9EkN f15t7ouznEcv415EbNyc+QZnSefOIqpnBUw06kBPVC7WWluJXbssSgdgr1+bweUI qiVREzW0RIujoCt3cjsY+2TbDex4un3osoZ6VZ/uLIZZKasttPJsN9YcA56gAwOB drbYNmg4i5Fs7oFCE8O5BRE2C4Nhhkq4hSmdmSg86B4= -----END CERTIFICATE-----Generated at Sun Dec 7 04:51:42 2025 by rpki-client